$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: 4hDkrHF1riIGJI/ygIlw/rgzX0qmxXhK6jNGu48KkQc= Subject key identifier: 6D:4C:1A:45:13:C2:3A:0B:52:4A:B5:34:7F:64:9B:74:35:5C:A4:50 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 09F2 Signing time: Tue 18 Aug 2026 20:08:16 +0000 Manifest this update: Tue 18 Aug 2026 20:08:15 +0000 Manifest next update: Tue 25 Aug 2026 20:08:15 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: qNWWK2MV7cbLN9AK6ei3jzQ7EI84QzSVeVNsPHQEVcg=) 2: F663B6DE3F1011F1A8E91BA6CD833773.roa (hash: x5T7NYkz+hUgY/tU53+Hwc/BUR2tGXVOEyssUILN0gU=) 3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Aug 18 20:08:15 2026 GMT Not After : Aug 25 20:08:15 2026 GMT Subject: CN=6a84bbaf-96fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:26:7a:45:c7:e4:60:10:1e:be:80:20:0e: 3a:2c:ef:3f:59:ff:b0:ff:ff:15:8b:c0:4d:9f:c1: 53:e1:8a:99:f0:46:56:e6:4b:7e:86:ff:b9:c4:ab: 51:c9:bb:ed:e6:f3:f1:17:58:62:c7:cf:84:50:12: d0:ce:c0:c3:c7:0b:b6:3b:33:54:9d:12:cd:51:c1: f8:b9:bf:20:47:50:a5:f7:ba:fd:94:66:e7:6a:72: 88:c7:b4:42:90:31:d7:8d:fc:8c:29:51:a1:8f:1e: 4a:bb:9e:f3:e7:d6:23:bc:e8:a2:98:61:c7:58:50: 38:20:b0:88:ac:f1:95:41:a2:9a:3b:ef:49:2f:21: 5d:03:bb:56:b2:4c:09:72:c4:a2:78:7e:0e:d0:81: e7:18:42:0e:e6:8b:d5:28:a8:33:a1:79:56:1b:31: e9:93:1d:fb:b5:71:c2:62:11:3d:2a:5a:05:3b:07: 03:54:9a:74:6e:af:49:ac:a5:1a:91:d3:9d:53:ed: 2e:3a:3c:fa:35:ce:92:7b:e6:91:b2:21:67:d0:f5: 1b:52:9a:e1:ae:4f:f7:8e:c5:b2:4f:af:5c:88:a5: 9f:80:a1:e2:59:78:6b:1b:7f:57:fb:a5:23:61:98: 37:51:d6:cc:8d:93:53:5c:16:be:56:75:be:fd:c6: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:1A:45:13:C2:3A:0B:52:4A:B5:34:7F:64:9B:74:35:5C:A4:50 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:61:82:6d:17:a6:8e:04:79:d9:5b:98:24:40:a4:94:13:09: 61:ce:ac:87:8b:72:30:04:ca:9e:a7:54:df:20:21:05:ff:3f: c5:b2:a5:73:21:a0:b8:5c:e5:f1:93:3e:a1:b1:74:14:6a:bb: d0:af:2c:e3:cd:88:94:bc:82:f0:43:95:c1:49:22:15:04:e5: 42:65:bd:22:ba:83:e7:89:24:cc:35:ae:d4:f9:0b:30:f9:6f: c3:93:e8:5b:2e:34:72:b8:70:62:56:94:5a:82:90:42:fe:ad: 77:c5:66:10:09:e8:e7:3a:76:1e:24:63:4f:de:14:75:03:f6: c6:68:7d:dc:0c:63:9e:87:00:b3:37:30:e9:44:66:9c:09:b9: 3e:db:84:37:b7:40:d4:76:e3:73:79:04:c8:ad:07:22:41:ca: da:ee:6d:20:90:c4:24:62:9e:df:bd:26:7f:80:de:aa:f3:ca: fb:0f:ad:b1:2f:84:e6:56:d8:84:48:7f:40:d2:5d:78:9e:56: 39:76:e9:75:33:33:c9:70:8e:fe:22:f4:35:f3:a1:46:fc:aa: bd:60:9c:64:13:14:b0:fb:7d:0c:30:22:75:9b:6c:9c:62:f9: 63:eb:b9:15:cd:54:30:1f:37:3d:01:eb:48:6a:e7:b7:bf:4e: 20:05:7b:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjYwODE4MjAwODE1WhcNMjYwODI1MjAwODE1WjAYMRYwFAYD VQQDEw02YTg0YmJhZi05NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iMmekXH5GAQHr6AIA46LO8/Wf+w//8Vi8BNn8FT4YqZ8EZW5kt+hv+5xKtR ybvt5vPxF1hix8+EUBLQzsDDxwu2OzNUnRLNUcH4ub8gR1Cl97r9lGbnanKIx7RC kDHXjfyMKVGhjx5Ku57z59YjvOiimGHHWFA4ILCIrPGVQaKaO+9JLyFdA7tWskwJ csSieH4O0IHnGEIO5ovVKKgzoXlWGzHpkx37tXHCYhE9KloFOwcDVJp0bq9JrKUa kdOdU+0uOjz6Nc6Se+aRsiFn0PUbUprhrk/3jsWyT69ciKWfgKHiWXhrG39X+6Uj YZg3UdbMjZNTXBa+VnW+/cZalwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1MGkUT wjoLUkq1NH9km3Q1XKRQMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACWGCbRemjgR52VuYJECklBMJYc6sh4tyMATKnqdU3yAhBf8/xbKlcyGguFzl 8ZM+obF0FGq70K8s482IlLyC8EOVwUkiFQTlQmW9IrqD54kkzDWu1PkLMPlvw5Po Wy40crhwYlaUWoKQQv6td8VmEAno5zp2HiRjT94UdQP2xmh93AxjnocAszcw6URm nAm5PtuEN7dA1Hbjc3kEyK0HIkHK2u5tIJDEJGKe370mf4DeqvPK+w+tsS+E5lbY hEh/QNJdeJ5WOXbpdTMzyXCO/iL0NfOhRvyqvWCcZBMUsPt9DDAidZtsnGL5Y+u5 Fc1UMB83PQHrSGrnt79OIAV7xw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:10 2026 by rpki-client