$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: XLUp82RZN7Xy0toyQhgrQ9y5+T3WVEqbf+M/RpHs+MI= Subject key identifier: 7D:5B:27:CC:E5:77:91:6B:14:85:80:DA:B3:EA:B9:97:51:B0:12:D0 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 021D Signing time: Sat 05 Sep 2026 02:46:36 +0000 Manifest this update: Sat 05 Sep 2026 02:46:36 +0000 Manifest next update: Sat 12 Sep 2026 02:46:36 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: Dmf+fCDqqpY5ANx7CBk3+v2hyiYLYMxCIzrEmle77jI=) 2: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: 9wThx/YsC4g2ZRPkZ1NZP6ysSeYk1+tTKZyloe+Ezic=) 3: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: ObuiXVUmDVsIfjaZ5h2LSS7KqAx0/euE3EgfxN0Szi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Sep 5 02:46:36 2026 GMT Not After : Sep 12 02:46:36 2026 GMT Subject: CN=6a9b828c-f54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:7f:93:51:6d:e4:0c:60:1f:95:11:b1:fe: 38:cd:a8:85:8e:b8:89:9f:86:67:e9:8d:18:70:25: af:52:31:a4:67:33:c3:6a:61:ed:69:fc:7b:ef:de: b4:98:f8:2e:6e:2e:4e:e5:ca:5f:f8:47:60:21:cd: b2:83:d9:ba:1f:f5:e3:55:da:15:9c:71:bb:1e:47: 5d:86:a9:ce:05:51:33:58:e2:86:63:a6:80:f3:be: 70:b7:d2:30:03:c9:2d:2b:6e:b1:6f:a8:31:d1:ca: 20:5c:6a:27:71:0d:fe:54:dd:98:9d:8b:cf:9a:fc: 6e:a3:34:f8:3d:f5:7a:f9:10:31:c6:7d:d2:b5:bc: 79:42:d1:95:02:79:11:83:f7:56:6a:c6:18:44:c7: 62:70:57:78:f3:31:c4:52:ce:40:2d:16:da:03:9f: 50:f9:a9:36:98:c4:03:2b:5a:d6:54:2c:74:b5:ed: 03:0c:8b:a0:c4:13:c2:61:43:d2:b3:f3:04:d7:31: 35:c1:5a:b4:e7:de:c6:83:75:e7:97:47:ee:a9:3d: c5:b7:74:5f:bd:e7:2b:aa:50:58:e0:07:dc:ac:3c: b2:3a:65:de:07:69:e3:3d:58:b7:75:83:fa:b6:78: e9:56:be:42:75:61:bc:1f:c7:2f:a4:db:68:4e:75: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:27:CC:E5:77:91:6B:14:85:80:DA:B3:EA:B9:97:51:B0:12:D0 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:57:f2:7d:13:55:48:9e:b0:ca:9c:a2:5d:8b:d9:58:de:8a: 99:bc:a4:cd:87:9f:c8:34:d3:cc:e2:4e:7b:06:e3:9f:bb:5c: 8f:fc:6d:79:9d:66:07:b6:81:41:4a:be:81:70:42:84:b4:8d: ca:06:e5:b9:e6:96:3d:fe:a8:f2:dc:a8:1b:60:48:08:fb:07: a4:d9:bf:f5:4a:c8:3a:f1:50:a5:8c:bb:8b:32:da:2e:a9:30: 4f:59:9e:35:fe:e9:9c:08:de:16:da:4b:fd:16:fa:26:28:d4: 71:b1:54:eb:db:f9:13:a3:11:5b:09:e1:6b:ac:cb:5a:c4:16: b9:0c:22:08:8b:16:17:4d:83:79:28:c7:e3:77:66:4b:40:2a: 00:f7:76:6a:c1:f8:78:46:31:7f:b1:f5:23:08:1f:f5:83:e7: a6:47:25:ba:37:d7:45:3a:df:e5:cd:e8:64:c4:06:79:a2:88: 42:1f:6b:b7:53:1e:13:66:5b:db:11:c8:fd:ed:42:8b:f8:f1: 69:89:8e:4d:c8:81:f5:67:1b:66:64:4d:70:35:a3:b1:7b:78: f3:63:f6:84:19:32:fa:0f:29:32:11:ee:a9:26:8d:31:71:81: 9d:7c:3e:d5:0d:91:d7:ad:e8:92:75:48:13:52:0a:fd:c1:ed: 56:6f:e5:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjYwOTA1MDI0NjM2WhcNMjYwOTEyMDI0NjM2WjAYMRYwFAYD VQQDEw02YTliODI4Yy1mNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Cp/k1Ft5AxgH5URsf44zaiFjriJn4Zn6Y0YcCWvUjGkZzPDamHtafx77960 mPgubi5O5cpf+EdgIc2yg9m6H/XjVdoVnHG7HkddhqnOBVEzWOKGY6aA875wt9Iw A8ktK26xb6gx0cogXGoncQ3+VN2YnYvPmvxuozT4PfV6+RAxxn3Stbx5QtGVAnkR g/dWasYYRMdicFd48zHEUs5ALRbaA59Q+ak2mMQDK1rWVCx0te0DDIugxBPCYUPS s/ME1zE1wVq0597Gg3Xnl0fuqT3Ft3RfvecrqlBY4AfcrDyyOmXeB2njPVi3dYP6 tnjpVr5CdWG8H8cvpNtoTnVOnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1bJ8zl d5FrFIWA2rPquZdRsBLQMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYlfyfRNVSJ6wypyiXYvZWN6KmbykzYefyDTTzOJOewbjn7tcj/xteZ1mB7aB QUq+gXBChLSNygblueaWPf6o8tyoG2BICPsHpNm/9UrIOvFQpYy7izLaLqkwT1me Nf7pnAjeFtpL/Rb6JijUcbFU69v5E6MRWwnha6zLWsQWuQwiCIsWF02DeSjH43dm S0AqAPd2asH4eEYxf7H1Iwgf9YPnpkclujfXRTrf5c3oZMQGeaKIQh9rt1MeE2Zb 2xHI/e1Ci/jxaYmOTciB9WcbZmRNcDWjsXt482P2hBky+g8pMhHuqSaNMXGBnXw+ 1Q2R163oknVIE1IK/cHtVm/lGw== -----END CERTIFICATE-----Generated at Sat Sep 5 07:12:36 2026 by rpki-client