$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: 8JVrgSu2WOsSWBIvK9NBB5NEeNxqlWtTQrZJBbe2sg0= Subject key identifier: D1:DE:D7:5E:E5:35:A3:75:DD:B6:B8:7E:FC:BF:92:5B:BB:80:5F:C4 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0E07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0DFE Signing time: Tue 18 Aug 2026 18:04:08 +0000 Manifest this update: Tue 18 Aug 2026 18:04:07 +0000 Manifest next update: Tue 25 Aug 2026 18:04:07 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: uWg2pnwe3HiSGuWMk0TWJXCzQ573CGuxssvpMAHKBNU=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3591 (0xe07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Aug 18 18:04:07 2026 GMT Not After : Aug 25 18:04:07 2026 GMT Subject: CN=6a849e98-155c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:12:79:83:18:46:a1:52:cd:dd:e9:b0:08: 9f:31:f8:a4:78:a8:f5:c6:c6:c0:c9:24:af:cf:3e: fe:e1:67:29:9e:24:bd:64:c8:85:5c:fd:3e:51:35: e2:12:9e:27:d7:f3:ed:d4:2d:78:9f:5d:96:d3:3d: e3:d3:e1:05:af:1f:a4:50:5f:56:a6:dc:3f:af:54: 77:a2:0e:61:17:ba:56:81:7a:ff:14:70:28:fc:6c: 56:8e:cb:c6:f8:97:5e:ad:a2:ca:8f:b6:fb:67:c1: 25:e4:2e:30:82:2d:31:ed:23:73:5d:f7:b4:aa:ac: db:ee:67:f0:aa:9a:dc:3b:40:b7:8c:f7:bf:cc:25: 57:e3:93:76:98:96:dd:a0:9b:f7:82:23:ac:20:d4: e2:c6:23:b5:5e:82:fc:ee:34:dd:a4:b5:02:d2:41: f7:b5:04:f1:64:06:41:cd:c7:fb:5d:12:17:be:14: 29:24:ad:51:ed:08:d7:f4:64:d7:fe:33:78:25:ba: 5d:97:f7:34:a2:8b:a0:76:a6:4e:4a:a1:49:1f:9b: d4:0c:8a:37:ae:9a:8a:a8:d4:3c:6b:78:2d:8a:37: b8:e9:79:18:4d:e0:64:8a:e1:84:ad:fa:cd:5c:31: 99:dc:1d:40:87:67:b8:ac:52:0d:8b:c2:35:ec:e5: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:D7:5E:E5:35:A3:75:DD:B6:B8:7E:FC:BF:92:5B:BB:80:5F:C4 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a0:45:ac:c7:93:15:2c:33:96:8e:69:74:5d:a3:10:7c:c5: 3b:80:9b:8a:a0:f6:a3:7b:a7:6c:94:4b:1d:a2:f9:16:93:59: 72:36:46:27:3f:7f:9f:a9:7d:d3:64:80:63:f8:7b:62:3e:15: e7:03:b9:b1:da:fc:f9:6a:4f:8d:76:c7:f2:fc:38:a7:e7:ef: 27:a2:6e:ea:f3:4d:5e:c3:37:5e:99:50:82:5e:c7:bc:e1:95: 41:b5:44:5a:4f:e2:5a:8c:43:c7:fb:b5:0e:da:df:0d:d3:d1: 0f:5c:32:68:47:b5:91:00:59:5a:90:28:a5:b3:40:11:ff:80: b7:4a:15:16:00:bb:7e:ff:ef:80:95:d5:de:62:e5:83:30:03: 81:4b:51:2f:68:bb:06:c7:1a:47:0c:38:2e:cc:5d:18:50:45: 9a:0b:6c:9b:34:ef:27:80:49:4d:52:0a:a7:4c:a3:0e:5e:c2: 3b:27:8e:0d:8d:84:e9:26:22:5e:87:f4:09:69:30:39:93:df: 7b:4c:51:51:c9:99:ab:33:28:35:25:e4:e3:ec:ed:8c:ea:24: 42:c3:79:51:f3:2e:c7:7d:e6:ac:c7:e5:54:72:9d:3f:15:91: 0d:a1:a5:b0:6f:74:ea:c6:b2:38:9a:3e:f4:21:8c:93:51:d8: a7:76:f4:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjYwODE4MTgwNDA3WhcNMjYwODI1MTgwNDA3WjAYMRYwFAYD VQQDEw02YTg0OWU5OC0xNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGQSeYMYRqFSzd3psAifMfikeKj1xsbAySSvzz7+4WcpniS9ZMiFXP0+UTXi Ep4n1/Pt1C14n12W0z3j0+EFrx+kUF9Wptw/r1R3og5hF7pWgXr/FHAo/GxWjsvG +JderaLKj7b7Z8El5C4wgi0x7SNzXfe0qqzb7mfwqprcO0C3jPe/zCVX45N2mJbd oJv3giOsINTixiO1XoL87jTdpLUC0kH3tQTxZAZBzcf7XRIXvhQpJK1R7QjX9GTX /jN4Jbpdl/c0oougdqZOSqFJH5vUDIo3rpqKqNQ8a3gtije46XkYTeBkiuGErfrN XDGZ3B1Ah2e4rFINi8I17OX9GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHe117l NaN13ba4fvy/klu7gF/EMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApKBFrMeTFSwzlo5pdF2jEHzFO4CbiqD2o3unbJRLHaL5FpNZcjZGJz9/n6l9 02SAY/h7Yj4V5wO5sdr8+WpPjXbH8vw4p+fvJ6Ju6vNNXsM3XplQgl7HvOGVQbVE Wk/iWoxDx/u1DtrfDdPRD1wyaEe1kQBZWpAopbNAEf+At0oVFgC7fv/vgJXV3mLl gzADgUtRL2i7BscaRww4LsxdGFBFmgtsmzTvJ4BJTVIKp0yjDl7COyeODY2E6SYi Xof0CWkwOZPfe0xRUcmZqzMoNSXk4+ztjOokQsN5UfMux33mrMflVHKdPxWRDaGl sG906sayOJo+9CGMk1HYp3b0uw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:06 2026 by rpki-client