$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: T32riGPIOv937shTzxxHwY3qTUrw/k5sfZ3eKhDl6Po= Subject key identifier: 01:07:ED:51:6A:F0:9C:34:F9:B8:20:28:0C:BF:58:A4:8C:E3:61:45 Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 0258 Signing time: Thu 27 Aug 2026 02:01:00 +0000 Manifest this update: Thu 27 Aug 2026 02:01:00 +0000 Manifest next update: Thu 03 Sep 2026 02:01:00 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: 6/IsFKHePTjaWWc+gpflRcv6Dz3cbj38wHjQnLijdfg=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=) 3: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=) 4: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Aug 27 02:01:00 2026 GMT Not After : Sep 3 02:01:00 2026 GMT Subject: CN=6a8f9a5c-1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:d6:23:f6:69:89:b7:6b:88:4b:5d:a6:5d: d3:a8:48:4e:2f:28:66:7c:49:03:af:7d:38:7f:d1: 2d:6b:f0:f4:85:94:b3:ec:26:79:61:82:d4:6e:df: 95:10:c7:f8:5a:92:01:8f:25:e9:6a:2f:d0:18:46: f0:22:0e:82:70:65:4f:08:db:f6:1f:81:90:f5:b8: ea:71:62:b4:43:63:1b:34:d9:92:dd:a3:1f:27:88: be:f0:13:b6:0d:20:dc:32:2c:87:ae:9b:fe:fd:51: 84:4c:f6:ac:32:e9:5b:5e:6e:57:f4:4a:3f:5f:37: 22:86:cf:a5:28:9c:b4:e0:ed:d0:e4:4a:ba:08:ba: 7d:06:db:b7:1f:5b:47:ad:b0:d0:d5:ef:86:88:bb: da:10:e6:b2:6c:e3:f9:df:6d:f0:a7:e8:56:df:ad: d0:f7:7c:80:fe:cf:aa:09:cf:84:25:d7:d1:61:8f: 23:04:1b:1b:75:0b:9a:6d:c2:49:b5:0d:85:3d:0b: 0a:2e:ef:56:be:b7:e1:a1:8f:01:68:82:a4:68:b9: a6:dd:d6:5c:40:d7:8e:59:e7:91:13:49:a3:25:62: 27:9f:9d:c9:9c:98:3c:9a:20:29:bd:73:a3:ef:9f: 2e:60:31:cd:41:50:56:9e:39:42:35:b6:1f:85:8d: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:ED:51:6A:F0:9C:34:F9:B8:20:28:0C:BF:58:A4:8C:E3:61:45 X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:39:67:81:e6:d2:90:67:d9:40:e5:6b:56:4d:79:29:4d:fb: 5e:1a:31:8b:49:2f:1d:f3:2a:f2:ee:94:c2:a0:32:cb:69:ce: b4:c1:c8:89:65:e7:78:22:7f:72:15:19:15:f7:e5:79:2c:ca: 74:4c:7d:2c:76:13:e5:13:dc:59:86:ab:f8:9b:0d:03:71:3f: 13:cb:17:4e:b4:e5:57:50:f9:c2:68:a4:87:1f:17:27:1c:55: cb:56:85:b9:e9:6a:07:88:5d:f3:7b:70:15:7e:f9:cb:c9:d2: 2d:a4:bb:9c:d0:94:38:d2:ce:d4:a6:08:34:ee:cd:21:d9:a9: 2f:e6:61:f7:05:37:9a:47:21:8f:15:74:e9:58:cd:18:99:12: fb:8e:db:d0:26:dc:36:65:42:89:b4:b2:cf:be:5b:82:2a:cf: 8e:fa:eb:07:c3:c7:a2:27:ed:f1:2e:10:fe:d5:a6:47:37:00: 24:ff:3c:d1:30:46:20:6d:f1:a0:c5:fe:bc:96:5b:22:15:4b: 9d:d6:2a:75:1f:ba:e4:de:83:f4:f4:7c:c5:cd:d0:f4:1f:ed: c7:ef:68:d8:f8:84:12:94:1f:b3:72:03:2c:3f:93:e6:c7:54: e1:c9:e7:7d:a0:5c:11:7c:d2:9d:09:2c:99:f0:f7:66:54:5f: 66:25:3b:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjYwODI3MDIwMTAwWhcNMjYwOTAzMDIwMTAwWjAYMRYwFAYD VQQDEw02YThmOWE1Yy0xYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkHWI/ZpibdriEtdpl3TqEhOLyhmfEkDr304f9Eta/D0hZSz7CZ5YYLUbt+V EMf4WpIBjyXpai/QGEbwIg6CcGVPCNv2H4GQ9bjqcWK0Q2MbNNmS3aMfJ4i+8BO2 DSDcMiyHrpv+/VGETPasMulbXm5X9Eo/Xzcihs+lKJy04O3Q5Eq6CLp9Btu3H1tH rbDQ1e+GiLvaEOaybOP5323wp+hW363Q93yA/s+qCc+EJdfRYY8jBBsbdQuabcJJ tQ2FPQsKLu9WvrfhoY8BaIKkaLmm3dZcQNeOWeeRE0mjJWInn53JnJg8miApvXOj 758uYDHNQVBWnjlCNbYfhY2GpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEH7VFq 8Jw0+bggKAy/WKSM42FFMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzTlngebSkGfZQOVrVk15KU37Xhoxi0kvHfMq8u6UwqAyy2nOtMHIiWXneCJ/ chUZFffleSzKdEx9LHYT5RPcWYar+JsNA3E/E8sXTrTlV1D5wmikhx8XJxxVy1aF uelqB4hd83twFX75y8nSLaS7nNCUONLO1KYINO7NIdmpL+Zh9wU3mkchjxV06VjN GJkS+47b0CbcNmVCibSyz75bgirPjvrrB8PHoift8S4Q/tWmRzcAJP880TBGIG3x oMX+vJZbIhVLndYqdR+65N6D9PR8xc3Q9B/tx+9o2PiEEpQfs3IDLD+T5sdU4cnn faBcEXzSnQksmfD3ZlRfZiU7ug== -----END CERTIFICATE-----Generated at Fri Aug 28 07:45:32 2026 by rpki-client