$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: eVLSZoz8qEU0YMer6LvOXNpXk2ph9fHiizn8noyRHGw= Subject key identifier: A3:8E:B0:37:B4:D4:F1:65:EF:22:5B:D2:77:9D:31:DA:E4:8C:95:B0 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 02D9 Signing time: Thu 27 Aug 2026 00:59:21 +0000 Manifest this update: Thu 27 Aug 2026 00:59:20 +0000 Manifest next update: Thu 03 Sep 2026 00:59:20 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: nZmoE6nEa6t02+NxjnR55cr3cGu9zGR2WprLkX573CE=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 07Vvv9BLMYQgb5Np9HOURXIhU/+tIYEclR6BOQmk2Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 00:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Aug 27 00:59:20 2026 GMT Not After : Sep 3 00:59:20 2026 GMT Subject: CN=6a8f8be9-33bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:21:e1:ad:2f:08:e2:aa:6d:fe:ac:c6:ab: 64:f7:e7:1a:7f:e3:2a:b1:b4:a4:03:17:8a:d5:91: 36:c5:1c:83:d1:7e:0e:32:da:58:35:9f:40:cb:a0: 80:b1:41:b0:aa:fc:16:1e:8d:27:8b:dd:fc:54:c0: 8a:58:2f:5c:76:30:5a:63:04:2c:e5:45:a2:43:d2: da:e0:5c:9d:f5:dc:2f:03:70:ec:95:98:1a:b3:00: 1c:2c:42:d7:7c:20:ca:4a:ef:5d:31:32:a3:78:4d: 05:7f:b1:de:42:53:17:03:cd:f4:1b:b5:fd:f7:0c: 76:79:a5:8a:2f:5e:da:48:95:bd:e2:d0:0e:bf:82: b7:46:03:55:4e:88:4d:a3:fe:cb:8d:bb:e4:8d:e1: ef:23:6f:b5:b2:76:27:3a:87:88:99:0b:96:42:23: b6:63:65:5d:4b:11:56:2b:93:1e:52:7a:53:2d:c7: 1f:93:58:69:50:10:65:db:98:df:bc:10:9c:d7:80: ff:98:d4:6e:e0:ba:98:aa:61:a9:f2:ec:07:e4:31: fc:b3:65:ec:3c:99:ba:6a:1f:7a:ad:73:76:06:79: 10:16:3d:fd:18:57:92:e8:af:38:36:34:a2:37:e2: 0b:28:de:33:f3:72:ee:be:31:60:50:99:b4:22:19: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:B0:37:B4:D4:F1:65:EF:22:5B:D2:77:9D:31:DA:E4:8C:95:B0 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a1:d3:8d:45:3c:f0:62:c4:64:9c:f1:17:43:4b:ea:ed:03: aa:93:8c:ec:be:a0:8e:d2:7c:b6:df:f4:cd:81:d4:bb:21:3f: 9b:10:6c:18:9d:f0:77:19:33:ab:56:6d:45:df:ba:d3:fd:c6: 69:54:b1:eb:da:3b:4e:d2:3e:1c:ca:df:61:7e:41:f7:ab:1a: 82:37:e8:36:ab:cb:77:cb:01:4a:f1:0d:5e:7d:a0:d9:5c:0c: 5e:35:3b:6a:38:b6:88:3d:a1:0b:93:f0:fc:c1:53:d4:f8:6e: 78:49:96:19:6c:fe:bd:ff:aa:1b:11:67:26:20:41:db:23:94: a9:fe:a7:84:ce:f5:67:92:8c:98:87:e1:17:ed:8f:30:e7:9f: f5:29:08:b4:ca:2a:30:61:40:7d:77:a2:fb:96:e0:d5:40:3b: 25:61:f2:f6:a3:64:33:46:a3:59:95:38:58:5f:17:43:6d:fe: 8e:94:ce:a4:40:63:af:a1:3f:75:e5:bc:84:4d:37:60:aa:f6: 56:6e:c0:da:d7:e9:f4:ad:41:d0:b9:f2:31:e9:b3:70:65:ad: 12:d6:ea:03:f1:12:71:64:13:c4:2a:01:d0:bb:94:35:a7:a1: ed:97:4b:35:e4:79:83:0b:90:c8:50:e5:6f:5a:62:87:7b:4e: 93:40:5d:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjYwODI3MDA1OTIwWhcNMjYwOTAzMDA1OTIwWjAYMRYwFAYD VQQDEw02YThmOGJlOS0zM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6Eh4a0vCOKqbf6sxqtk9+caf+MqsbSkAxeK1ZE2xRyD0X4OMtpYNZ9Ay6CA sUGwqvwWHo0ni938VMCKWC9cdjBaYwQs5UWiQ9La4Fyd9dwvA3DslZgaswAcLELX fCDKSu9dMTKjeE0Ff7HeQlMXA830G7X99wx2eaWKL17aSJW94tAOv4K3RgNVTohN o/7LjbvkjeHvI2+1snYnOoeImQuWQiO2Y2VdSxFWK5MeUnpTLccfk1hpUBBl25jf vBCc14D/mNRu4LqYqmGp8uwH5DH8s2XsPJm6ah96rXN2BnkQFj39GFeS6K84NjSi N+ILKN4z83LuvjFgUJm0IhkG8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOOsDe0 1PFl7yJb0nedMdrkjJWwMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKHTjUU88GLEZJzxF0NL6u0DqpOM7L6gjtJ8tt/0zYHUuyE/mxBsGJ3wdxkz q1ZtRd+60/3GaVSx69o7TtI+HMrfYX5B96sagjfoNqvLd8sBSvENXn2g2VwMXjU7 aji2iD2hC5Pw/MFT1PhueEmWGWz+vf+qGxFnJiBB2yOUqf6nhM71Z5KMmIfhF+2P MOef9SkItMoqMGFAfXei+5bg1UA7JWHy9qNkM0ajWZU4WF8XQ23+jpTOpEBjr6E/ deW8hE03YKr2Vm7A2tfp9K1B0LnyMemzcGWtEtbqA/EScWQTxCoB0LuUNaeh7ZdL NeR5gwuQyFDlb1pih3tOk0BdLg== -----END CERTIFICATE-----Generated at Thu Aug 27 08:45:56 2026 by rpki-client