$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: uxGOi1nFsYcH5VxHm/AdxCyhJVhglCm5Zu0TbzKfssQ= Subject key identifier: 3A:E0:29:83:EF:3D:EB:E7:3C:C7:BE:CE:B0:67:D6:85:98:F0:4D:05 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 087A Signing time: Wed 26 Aug 2026 20:44:31 +0000 Manifest this update: Wed 26 Aug 2026 20:44:31 +0000 Manifest next update: Wed 02 Sep 2026 20:44:31 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: czNIJDlWqkN8SMZY/LfJpvg0lcsAROnb8imcNCLjOqk=) 2: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) 3: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 20:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Aug 26 20:44:31 2026 GMT Not After : Sep 2 20:44:31 2026 GMT Subject: CN=6a8f502f-bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:81:8f:5e:71:2a:7b:83:08:18:23:9a:bc:0c: e6:66:1d:54:eb:86:dc:d2:80:c1:30:90:20:95:d1: 31:9c:08:05:1f:85:c8:36:f6:90:14:89:7b:04:6a: 55:20:82:79:0f:87:7d:8a:46:0b:43:b8:20:7f:fd: 3c:16:92:80:a4:a3:e1:3d:5f:3e:28:38:cb:8c:43: 89:93:73:f2:7e:7e:ad:d1:dc:d0:a5:c5:30:30:81: e1:8e:d8:b1:3f:a7:13:a9:cf:0e:d0:2e:5c:78:0b: 96:d6:ee:51:92:a2:49:56:2e:b1:46:59:6e:65:84: 72:f9:f7:b6:07:2c:02:b9:fd:0a:8a:3b:18:91:33: c6:19:c1:34:b8:fb:3d:4e:ad:4f:01:ce:05:63:30: 04:7c:6c:0d:c3:57:68:fa:f2:fe:db:6f:59:48:71: 8b:ce:77:40:74:88:93:8d:72:90:10:74:61:e0:2f: 69:6d:8c:26:74:6b:8e:f5:d2:68:1b:be:37:b6:4f: aa:0d:76:ac:b6:bf:64:50:a4:66:3c:35:be:f4:b6: 2e:4d:80:8a:29:17:06:43:f3:d6:95:d5:7b:88:e5: f5:2a:61:cd:17:65:2d:23:c9:59:78:34:76:30:ba: 18:11:d8:50:65:2f:0c:d9:d3:0a:7d:9b:a5:a4:33: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:29:83:EF:3D:EB:E7:3C:C7:BE:CE:B0:67:D6:85:98:F0:4D:05 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:e4:25:da:2c:48:7d:4c:f8:74:eb:5d:16:0b:cb:32:55:22: b0:ca:fe:61:62:d9:7d:e8:46:f5:d8:d7:10:02:7b:42:91:7b: 8d:fb:3b:a6:17:f0:a0:cd:a5:f0:28:8f:af:86:c1:e1:0d:8b: 34:7c:4e:4d:38:10:f4:c2:9a:02:a3:5f:6a:e8:5a:ee:db:27: 14:22:02:78:ef:bb:25:a4:eb:ff:5a:9e:85:9b:8d:4e:61:af: ed:5f:b5:75:9e:4d:dd:a0:a8:05:18:f2:71:f9:02:6d:b0:3e: 83:b9:91:bb:b6:9c:6d:ce:f9:b9:81:bc:44:63:b6:1e:22:3d: 7a:25:5a:33:3a:4b:51:1f:06:87:ca:84:6e:ad:27:ce:ae:1c: db:e3:14:1e:12:2e:ec:55:71:84:ca:77:eb:46:d5:33:7c:0e: 85:5c:fc:6a:b9:27:20:aa:dd:92:55:e2:0b:87:fe:90:d2:d4: 7b:5d:e8:b0:85:46:db:01:69:e5:42:b4:53:f6:42:e7:f7:5c: 8b:09:f8:01:1b:07:52:53:5e:af:08:83:c9:0e:a3:48:66:b4: f5:c8:ce:ea:c4:2d:fc:bf:3e:c5:bb:b2:4d:13:43:97:9d:63: 43:72:ba:8e:93:a9:3e:97:d8:21:42:0a:4f:9a:5e:be:d7:35: d4:d5:6a:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwODI2MjA0NDMxWhcNMjYwOTAyMjA0NDMxWjAYMRYwFAYD VQQDEw02YThmNTAyZi1iZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IGPXnEqe4MIGCOavAzmZh1U64bc0oDBMJAgldExnAgFH4XINvaQFIl7BGpV IIJ5D4d9ikYLQ7ggf/08FpKApKPhPV8+KDjLjEOJk3Pyfn6t0dzQpcUwMIHhjtix P6cTqc8O0C5ceAuW1u5RkqJJVi6xRlluZYRy+fe2BywCuf0KijsYkTPGGcE0uPs9 Tq1PAc4FYzAEfGwNw1do+vL+229ZSHGLzndAdIiTjXKQEHRh4C9pbYwmdGuO9dJo G743tk+qDXastr9kUKRmPDW+9LYuTYCKKRcGQ/PWldV7iOX1KmHNF2UtI8lZeDR2 MLoYEdhQZS8M2dMKfZulpDOEPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrgKYPv PevnPMe+zrBn1oWY8E0FMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzuQl2ixIfUz4dOtdFgvLMlUisMr+YWLZfehG9djXEAJ7QpF7jfs7phfwoM2l 8CiPr4bB4Q2LNHxOTTgQ9MKaAqNfauha7tsnFCICeO+7JaTr/1qehZuNTmGv7V+1 dZ5N3aCoBRjycfkCbbA+g7mRu7acbc75uYG8RGO2HiI9eiVaMzpLUR8Gh8qEbq0n zq4c2+MUHhIu7FVxhMp360bVM3wOhVz8arknIKrdklXiC4f+kNLUe13osIVG2wFp 5UK0U/ZC5/dciwn4ARsHUlNerwiDyQ6jSGa09cjO6sQt/L8+xbuyTRNDl51jQ3K6 jpOpPpfYIUIKT5pevtc11NVqEw== -----END CERTIFICATE-----Generated at Thu Aug 27 04:03:44 2026 by rpki-client