$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: EoKSYybtHsD6UbgdRokwolWG+aUH7TKgRxCqbr5V3pU= Subject key identifier: 10:06:8E:2B:B9:BB:E1:DE:A4:92:85:39:3A:8C:30:0C:4E:83:6F:00 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2635 Signing time: Thu 10 Sep 2026 15:43:01 +0000 Manifest this update: Thu 10 Sep 2026 15:43:00 +0000 Manifest next update: Thu 17 Sep 2026 15:43:00 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: mnRHCwW+3OswoEebH0JPghWU63Ew3Si0Z2MSU/KGp/I=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg=) 4: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: PvlCjzRuVQS5z3Y7RAsjDxZGQj+lAI/1wkWEPf7utQs=) 5: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=) 6: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lOvYt+0/Xr6pgMpv/63iUFQ210NPhZzouXW57Pt++DQ=) 7: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: U+tT529Q+GHL3QD7YEYw7NjVcXz/pyFy7z7T6MnIels=) 8: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10098 (0x2772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Sep 10 15:43:00 2026 GMT Not After : Sep 17 15:43:00 2026 GMT Subject: CN=6aa2d005-ce30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:de:57:85:e1:e1:1b:7f:e7:6d:44:2c:ae: 83:a1:45:c3:dc:c6:3f:30:76:09:64:55:b2:7e:5b: a1:f4:3e:6c:bf:98:8b:ae:09:c0:cf:99:b2:9a:43: 9a:3a:cc:32:52:a4:19:69:10:38:c0:02:62:4f:ba: e0:7b:19:d2:b8:d7:42:fb:16:69:7d:a3:1d:61:87: 9e:22:ac:4f:33:74:14:c7:80:b4:19:d3:d6:11:9f: 6d:f5:93:dd:da:29:d3:06:65:5b:9d:b9:3d:4a:d8: 53:15:52:11:69:a4:37:9a:bd:bd:89:e0:cb:76:01: d1:2d:47:58:e3:2d:1a:a8:0b:cd:6c:8c:cd:b1:fc: 98:46:7f:7b:13:fd:57:93:5c:42:f8:0c:f2:4f:01: 4c:6c:ca:2a:1e:86:d6:3c:09:b7:ee:30:4c:33:ff: c2:e8:e7:6e:f7:03:b0:1b:64:78:b5:a6:67:2a:11: 17:07:9d:d1:e7:f2:cd:82:24:ce:36:21:18:2a:e4: 1e:b2:8c:4c:0d:0b:e3:f7:9a:1b:df:94:6f:24:ff: a7:9e:aa:25:0f:13:d1:2f:e5:63:15:43:62:62:97: 48:d6:c0:bf:be:4d:c7:d7:34:ba:21:ec:a7:0e:cd: 1b:f5:ab:ae:76:a9:96:dd:95:11:81:da:80:f0:ca: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:8E:2B:B9:BB:E1:DE:A4:92:85:39:3A:8C:30:0C:4E:83:6F:00 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:99:dc:81:c0:58:47:cb:f8:13:52:c9:a3:93:1e:46:21:fa: 06:7f:9d:a4:96:49:8d:94:85:86:14:23:0b:6d:4e:6b:38:d3: 62:05:ef:9e:a2:ee:e0:ef:f2:5f:c0:8b:db:ec:ae:08:8e:e8: 78:ef:6e:5c:08:66:c8:b3:d2:fc:4d:f5:91:a3:41:4d:6e:35: 1c:c8:ff:f2:8b:68:d0:e2:c0:a7:55:ad:7f:2b:8a:57:86:07: e5:9e:b7:5d:42:45:06:8c:a2:dd:e5:02:72:1c:8a:03:29:ab: 6a:15:8b:8d:39:c8:2c:63:f5:b5:27:da:34:fd:2b:d5:d6:ee: 37:3f:01:54:61:8e:4b:0c:89:84:f9:3f:d7:0f:5c:41:16:75: 8d:5f:52:a8:ef:ff:86:28:ed:d4:cd:7e:e6:c5:ed:0f:fa:69: d0:0a:d1:91:60:1d:71:ae:3a:aa:08:a5:e7:65:8d:8f:d4:47: 6b:b6:28:1c:b5:26:f7:64:2d:63:a3:86:fd:12:c5:0e:da:6c: b3:28:89:f6:be:09:44:2f:03:6a:f3:1b:a4:86:d4:ed:13:3a: 12:07:c2:68:5f:3a:c5:1e:36:c3:9e:48:07:ba:e8:bc:08:e9: c1:ba:fd:63:72:58:e2:ef:69:38:16:14:d2:f1:75:31:61:54: 0d:77:36:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwOTEwMTU0MzAwWhcNMjYwOTE3MTU0MzAwWjAYMRYwFAYD VQQDEw02YWEyZDAwNS1jZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYzeV4Xh4Rt/521ELK6DoUXD3MY/MHYJZFWyfluh9D5sv5iLrgnAz5mymkOa OswyUqQZaRA4wAJiT7rgexnSuNdC+xZpfaMdYYeeIqxPM3QUx4C0GdPWEZ9t9ZPd 2inTBmVbnbk9SthTFVIRaaQ3mr29ieDLdgHRLUdY4y0aqAvNbIzNsfyYRn97E/1X k1xC+AzyTwFMbMoqHobWPAm37jBMM//C6Odu9wOwG2R4taZnKhEXB53R5/LNgiTO NiEYKuQesoxMDQvj95ob35RvJP+nnqolDxPRL+VjFUNiYpdI1sC/vk3H1zS6Ieyn Ds0b9auudqmW3ZURgdqA8MquEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAGjiu5 u+HepJKFOTqMMAxOg28AMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfZncgcBYR8v4E1LJo5MeRiH6Bn+dpJZJjZSFhhQjC21OazjTYgXvnqLu4O/y X8CL2+yuCI7oeO9uXAhmyLPS/E31kaNBTW41HMj/8oto0OLAp1WtfyuKV4YH5Z63 XUJFBoyi3eUCchyKAymrahWLjTnILGP1tSfaNP0r1dbuNz8BVGGOSwyJhPk/1w9c QRZ1jV9SqO//hijt1M1+5sXtD/pp0ArRkWAdca46qgil52WNj9RHa7YoHLUm92Qt Y6OG/RLFDtpssyiJ9r4JRC8DavMbpIbU7RM6EgfCaF86xR42w55IB7rovAjpwbr9 Y3JY4u9pOBYU0vF1MWFUDXc2yw== -----END CERTIFICATE-----Generated at Fri Sep 11 11:29:09 2026 by rpki-client