$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: 3GsI0WSPWs31erjG+0zmYeHurnCZkuT13xZPkM11HE0= Subject key identifier: E2:08:AE:62:72:F7:7F:87:D0:93:7E:0C:EE:2F:2D:40:EA:17:F4:2A Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 08E1 Signing time: Tue 18 Aug 2026 20:44:17 +0000 Manifest this update: Tue 18 Aug 2026 20:44:16 +0000 Manifest next update: Tue 25 Aug 2026 20:44:16 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: nKSuzNWrgcGR8HMEGUiG4wbzSG8zZuwzK7kLozag85o=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: MUOkb6HBrIcJHM8GhoD7uMpA/Mn234hOvyhOtrfNkiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Aug 18 20:44:16 2026 GMT Not After : Aug 25 20:44:16 2026 GMT Subject: CN=6a84c420-a8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:c2:b7:fe:64:80:bc:82:0a:48:be:5f:ba: ea:b7:3c:8e:2d:37:f3:c5:e8:6f:e9:5b:be:79:53: 4e:f2:75:07:6d:b2:0f:b1:ea:77:f8:db:ab:f5:4e: b0:39:37:cc:b6:95:37:13:c4:21:a5:92:dd:1b:35: 3d:bc:f3:c4:52:83:12:e0:f0:28:02:fd:71:73:a8: 9d:c6:1c:64:c9:ab:72:5d:f8:61:5f:fc:10:96:a1: aa:4e:f6:88:d4:1f:41:1c:28:5f:78:78:2d:2d:2b: 34:0b:87:5b:c2:b2:e5:91:4d:96:85:35:55:88:f2: f6:eb:02:fe:95:10:ea:1b:8c:d2:98:6b:8e:94:eb: 27:ba:a7:cd:43:da:4b:a9:83:a4:9e:f9:24:6c:45: 04:1a:ca:88:87:64:21:31:a6:43:53:2b:14:cc:78: d6:ba:3d:a3:7e:0e:0e:2e:8d:6c:17:73:b6:f6:9b: be:70:3a:ce:58:31:f5:28:d1:83:25:5d:d0:d8:53: be:30:b9:73:ee:c9:f6:ee:a0:3b:5b:15:22:fb:fb: 10:e1:f0:83:54:b1:f8:53:0a:8e:ae:01:34:7e:9f: 68:e9:70:1d:a9:9f:4f:e7:48:78:07:72:06:c8:c0: 1f:c7:6d:84:45:d1:3f:38:8a:aa:4c:87:bc:fe:77: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:AE:62:72:F7:7F:87:D0:93:7E:0C:EE:2F:2D:40:EA:17:F4:2A X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:11:63:1c:fc:b1:66:bf:fa:9e:f7:72:52:63:57:fd:a1:a9: 39:44:d3:23:c8:55:2b:cf:e2:5e:fa:6f:fd:7f:1e:11:b1:1f: 64:e2:82:d4:d6:aa:1d:b3:d4:f1:ab:9c:da:30:6a:93:dd:47: 52:00:84:c7:e1:dc:e8:c4:c4:09:4a:af:ab:dd:d7:e1:95:3c: 52:ee:06:60:9b:58:da:49:9d:f5:c5:78:8c:be:fa:10:2f:a8: f9:d6:08:e4:f2:8b:54:9e:e7:45:3b:fa:d2:a4:c2:12:4f:08: ca:34:ab:94:70:bb:69:5a:f2:ae:fb:ff:a8:1f:49:84:50:e3: d8:04:8d:09:5a:bb:8c:4d:5b:0f:27:ab:55:59:6c:38:f6:5b: d4:a3:ca:42:e7:88:d8:64:08:d4:e6:b4:e8:10:c1:ac:54:66: 8d:a5:98:af:d1:50:aa:0d:cd:a4:23:65:a7:26:07:02:01:ee: 1b:7c:40:1c:67:dd:da:02:e3:5f:e8:fc:dd:d4:2a:db:59:c9: 70:fc:e6:84:02:c5:ea:6b:d2:25:9a:21:be:a0:5a:5a:50:76: 02:11:ff:8f:31:be:b4:1a:f9:a6:ca:57:83:92:73:79:e2:1e: 82:25:40:4c:1a:db:8f:77:68:6d:cc:6a:60:65:0c:87:f4:7a: 85:df:0d:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjYwODE4MjA0NDE2WhcNMjYwODI1MjA0NDE2WjAYMRYwFAYD VQQDEw02YTg0YzQyMC1hOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuObCt/5kgLyCCki+X7rqtzyOLTfzxehv6Vu+eVNO8nUHbbIPsep3+Nur9U6w OTfMtpU3E8QhpZLdGzU9vPPEUoMS4PAoAv1xc6idxhxkyatyXfhhX/wQlqGqTvaI 1B9BHChfeHgtLSs0C4dbwrLlkU2WhTVViPL26wL+lRDqG4zSmGuOlOsnuqfNQ9pL qYOknvkkbEUEGsqIh2QhMaZDUysUzHjWuj2jfg4OLo1sF3O29pu+cDrOWDH1KNGD JV3Q2FO+MLlz7sn27qA7WxUi+/sQ4fCDVLH4UwqOrgE0fp9o6XAdqZ9P50h4B3IG yMAfx22ERdE/OIqqTIe8/ncS1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIIrmJy 93+H0JN+DO4vLUDqF/QqMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5hFjHPyxZr/6nvdyUmNX/aGpOUTTI8hVK8/iXvpv/X8eEbEfZOKC1NaqHbPU 8auc2jBqk91HUgCEx+Hc6MTECUqvq93X4ZU8Uu4GYJtY2kmd9cV4jL76EC+o+dYI 5PKLVJ7nRTv60qTCEk8IyjSrlHC7aVryrvv/qB9JhFDj2ASNCVq7jE1bDyerVVls OPZb1KPKQueI2GQI1Oa06BDBrFRmjaWYr9FQqg3NpCNlpyYHAgHuG3xAHGfd2gLj X+j83dQq21nJcPzmhALF6mvSJZohvqBaWlB2AhH/jzG+tBr5pspXg5JzeeIegiVA TBrbj3dobcxqYGUMh/R6hd8N0Q== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:59 2026 by rpki-client