$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft File: 08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json) Hash identifier: Er1wUJNQmW/RDtSNFDk9bp7/3RVzRxAOjNKw5+Nc1ac= Subject key identifier: 8B:5B:87:8E:74:2E:56:4A:EB:A9:87:38:1E:EB:C0:C4:35:E5:F4:6A Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6 Certificate issuer: /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft Manifest number: 014E Signing time: Wed 19 Aug 2026 05:52:54 +0000 Manifest this update: Wed 19 Aug 2026 05:52:54 +0000 Manifest next update: Wed 26 Aug 2026 05:52:54 +0000 Files and hashes: 1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: D6l/0OAqRAck6NbuTN1M668HhUYzHj48ivxNtGdUnAU=) 2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: XPN51TPloT0Sb6kUSDOMyNz4bBTH/IHqHYJPkeZz8vA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6 Validity Not Before: Aug 19 05:52:54 2026 GMT Not After : Aug 26 05:52:54 2026 GMT Subject: CN=6a8544b6-2558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:53:bc:ea:b6:df:1e:89:c3:a7:9d:02:d9: a2:c9:68:23:39:a6:10:64:6a:d3:2d:c7:fd:96:eb: e7:1d:f0:13:04:c4:f9:f2:44:e7:d3:1b:1a:ca:36: 23:75:b4:47:86:d6:8e:e8:51:26:20:9d:ba:f5:14: ca:e1:8b:1e:28:80:0b:e8:7b:f9:7b:f0:4d:b4:32: 78:55:52:6a:f4:42:f1:e4:1a:44:76:db:c5:a4:81: ee:16:23:0c:79:f9:d2:25:90:e0:00:09:e7:20:75: d2:f9:2a:d6:85:14:02:e6:85:30:8b:d6:ab:41:9c: 93:75:d1:2f:79:cc:28:8a:63:03:c5:d2:06:2c:36: 12:2b:e7:e3:25:e5:c5:b6:c1:84:ae:cd:ba:e8:df: b9:48:b6:27:9f:05:ad:53:0f:bd:0d:e6:44:15:4f: 21:1a:e2:f2:fc:79:be:72:70:f5:bb:a4:89:cc:bc: b9:db:50:91:75:4d:4e:8b:04:42:ec:7d:53:30:4e: 96:46:e1:c8:21:f8:21:cc:18:9c:33:56:27:57:dd: 4a:93:5c:80:04:c0:39:69:2c:bc:0b:ba:34:c8:92: 3a:be:dc:4e:e8:9f:d7:e0:ea:9f:63:52:b5:ab:c3: 00:a7:7e:a6:e8:62:c8:e3:ef:de:16:ad:04:bb:e2: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:87:8E:74:2E:56:4A:EB:A9:87:38:1E:EB:C0:C4:35:E5:F4:6A X509v3 Authority Key Identifier: keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4b:34:d5:7b:54:25:9e:5c:91:45:77:84:25:df:3d:a5:71: 5b:59:ac:25:08:b8:d8:9d:a7:6b:76:06:db:23:a9:03:3b:e3: 83:32:8e:a3:2f:46:1c:f5:53:b4:e5:e7:80:f0:c8:5f:e2:e8: 9d:a6:97:ff:ff:0d:43:72:69:4d:25:07:34:1a:ca:b3:43:c6: 99:01:6b:a6:b4:c3:15:1b:6a:37:3f:6c:3d:4e:18:d8:97:8c: 88:a9:61:4b:ca:f8:d4:c3:bf:16:69:f8:ee:76:c0:58:3f:5c: 3d:32:72:25:a5:5f:ac:fe:89:2e:45:1b:9a:9b:aa:ea:a2:21: ab:89:70:28:f3:77:17:36:d6:03:5f:fe:61:7c:61:5a:4e:93: c1:d2:c0:e3:55:9b:bb:95:59:47:66:ab:01:a3:c1:3d:2e:8e: a3:a9:f5:78:62:f0:03:57:fa:b1:ac:f3:f8:97:ce:72:45:2f: 64:25:b5:2a:e2:83:a1:fe:86:3e:ff:3a:58:c6:c6:ef:fd:54: 82:d3:9c:33:45:c9:f4:8f:c5:8d:78:b2:1a:a2:9c:80:90:97: 8f:7f:56:7a:05:0e:72:99:25:c0:57:0f:a5:a1:e8:27:06:b8: 7c:70:90:5d:29:65:d7:ac:1b:8b:06:5a:e1:c8:4c:e3:6c:1d: be:fc:41:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURFOEYxMTAvBgNVBAUTKEQzQzlEMkQ3NzlGNjY4NDMwOTcxMkJCMzBDRkExOTky OTBFMUI4RDYwHhcNMjYwODE5MDU1MjU0WhcNMjYwODI2MDU1MjU0WjAYMRYwFAYD VQQDEw02YTg1NDRiNi0yNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8lTvOq23x6Jw6edAtmiyWgjOaYQZGrTLcf9luvnHfATBMT58kTn0xsayjYj dbRHhtaO6FEmIJ269RTK4YseKIAL6Hv5e/BNtDJ4VVJq9ELx5BpEdtvFpIHuFiMM efnSJZDgAAnnIHXS+SrWhRQC5oUwi9arQZyTddEvecwoimMDxdIGLDYSK+fjJeXF tsGErs266N+5SLYnnwWtUw+9DeZEFU8hGuLy/Hm+cnD1u6SJzLy521CRdU1OiwRC 7H1TME6WRuHIIfghzBicM1YnV91Kk1yABMA5aSy8C7o0yJI6vtxO6J/X4OqfY1K1 q8MAp36m6GLI4+/eFq0Eu+JFfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItbh450 LlZK66mHOB7rwMQ15fRqMB8GA1UdIwQYMBaAFNPJ0td59mhDCXErswz6GZKQ4bjW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU4Ri8wQjU0M0IwQUEx NDYxMUVGQTEyQTZFMUZDNEY5QUUwMi8wOG5TMTNuMmFFTUpjU3V6RFBvWmtwRGh1 TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4blMxM24yYUVNSmNTdXpEUG9aa3BEaHVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REU4Ri8wQjU0M0IwQUExNDYxMUVGQTEyQTZFMUZDNEY5QUUwMi8wOG5TMTNuMmFF TUpjU3V6RFBvWmtwRGh1TlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmks01XtUJZ5ckUV3hCXfPaVxW1msJQi42J2na3YG2yOpAzvjgzKOoy9GHPVT tOXngPDIX+LonaaX//8NQ3JpTSUHNBrKs0PGmQFrprTDFRtqNz9sPU4Y2JeMiKlh S8r41MO/Fmn47nbAWD9cPTJyJaVfrP6JLkUbmpuq6qIhq4lwKPN3FzbWA1/+YXxh Wk6TwdLA41Wbu5VZR2arAaPBPS6Oo6n1eGLwA1f6sazz+JfOckUvZCW1KuKDof6G Pv86WMbG7/1UgtOcM0XJ9I/FjXiyGqKcgJCXj39WegUOcpklwFcPpaHoJwa4fHCQ XSll16wbiwZa4chM42wdvvxB0Q== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:53 2026 by rpki-client