$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: KGxJPilFRw0Y9Gk3ZUjU/VBI35ZU/iQ9KgrUZZMjB64= Subject key identifier: 4A:B5:57:E9:9A:97:56:A2:67:CC:BD:58:1D:0C:BA:B2:36:2C:B9:1D Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 08E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 08CF Signing time: Fri 04 Sep 2026 20:22:49 +0000 Manifest this update: Fri 04 Sep 2026 20:22:49 +0000 Manifest next update: Fri 11 Sep 2026 20:22:49 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: ak6nnxvKIyVnLg2gA12jV592HI9Uwh+WjlWIaRcN9mA=) 2: FC73A04E22D611F184630225C8833773.roa (hash: lirFwSfFP2XyhuyherlCKtjHYjqBn+tnL1KG1MSa/FQ=) 3: F43185921DF211F18E2EA673173D8C67.roa (hash: 7NFN5oMtgNPaVhWbz0nsBbRwBO/bYjYwDJggWSxO5PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Sep 4 20:22:49 2026 GMT Not After : Sep 11 20:22:49 2026 GMT Subject: CN=6a9b2899-b15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:92:5d:c3:24:7e:f4:50:e7:1c:7f:5e:ec:3c: cd:56:ec:f2:18:53:22:ae:d0:4e:fe:3e:a0:ac:e1: 3d:48:82:dd:17:65:b7:76:2d:5a:e3:9b:c0:d6:2f: 8b:31:fd:c8:84:55:a3:c3:0e:ec:50:6f:d7:c0:89: f9:ab:a6:be:b8:dd:97:8e:33:2b:e6:05:3a:69:49: 87:5c:c7:ff:6e:bc:db:bb:69:76:30:1d:64:56:1a: bb:03:b4:88:31:ef:0e:b8:ff:2f:36:31:c5:55:b9: b6:62:47:78:0f:7b:93:4e:38:34:6f:37:ac:ce:5f: 0e:7e:0f:3e:37:a7:3e:2e:17:c2:9b:af:03:f9:6a: 97:a5:29:d2:7c:cc:47:10:13:60:b4:7f:86:1e:4a: 3d:69:81:e0:f4:18:d7:09:5f:e0:c5:e2:99:55:e4: 6b:46:07:fe:87:31:f6:6c:92:99:bd:60:d1:a5:11: a5:a8:e3:c0:03:9f:aa:80:63:a5:a2:f3:f2:20:79: 71:ae:f6:ab:33:a8:55:74:33:b1:31:6e:2b:20:d8: 0c:c1:e2:ce:03:55:1d:ca:8d:8c:79:78:6a:00:43: a8:09:57:cb:ea:7f:b2:d0:ee:48:d5:b1:ab:ac:94: 7b:e7:9e:96:61:88:84:a8:03:a6:e7:13:cc:a2:ba: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:57:E9:9A:97:56:A2:67:CC:BD:58:1D:0C:BA:B2:36:2C:B9:1D X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b0:14:c8:f4:ec:1f:0a:15:e3:6b:1f:41:3d:6e:3c:36:47: 75:71:11:7b:7b:60:1c:23:d7:9b:13:79:1c:92:bc:20:58:b2: 42:50:7b:cc:43:c8:2e:db:cb:32:cb:4c:28:96:7a:3d:73:88: 3c:d3:75:0a:8f:4d:1e:e9:87:04:0e:65:f0:e5:8b:ab:65:16: 07:24:7d:c8:8a:ac:9d:59:a8:f7:f1:fd:d8:60:fd:09:ef:45: 10:10:34:12:58:da:1d:b5:0e:e7:46:d1:97:0c:a4:2e:63:bf: 59:2c:b8:f6:90:bc:61:4b:e2:2c:d2:5b:5e:32:bc:9d:de:d7: 39:85:65:5b:66:82:df:e6:32:a4:28:05:10:19:b1:f6:d3:31: 52:e1:05:88:1e:c8:91:c2:1d:ca:e8:a6:44:2d:cf:95:29:d1: d9:e4:3a:ea:83:70:ea:5d:c8:56:f3:64:67:8b:2a:54:b4:78: 30:de:16:ed:41:c8:43:53:7d:2c:85:d2:53:f9:36:bc:47:33: 7b:70:cb:59:d8:34:e6:f9:1d:ad:5b:5f:51:0d:c5:38:84:4b: 9c:93:39:89:93:0a:0d:be:3d:3f:60:95:c1:aa:21:11:5f:44: b7:8a:7f:e6:ef:42:a4:09:c6:a8:fd:ef:df:13:0e:ed:1e:95: e3:2c:55:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwOTA0MjAyMjQ5WhcNMjYwOTExMjAyMjQ5WjAYMRYwFAYD VQQDEw02YTliMjg5OS1iMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9JJdwyR+9FDnHH9e7DzNVuzyGFMirtBO/j6grOE9SILdF2W3di1a45vA1i+L Mf3IhFWjww7sUG/XwIn5q6a+uN2XjjMr5gU6aUmHXMf/brzbu2l2MB1kVhq7A7SI Me8OuP8vNjHFVbm2Ykd4D3uTTjg0bzeszl8Ofg8+N6c+LhfCm68D+WqXpSnSfMxH EBNgtH+GHko9aYHg9BjXCV/gxeKZVeRrRgf+hzH2bJKZvWDRpRGlqOPAA5+qgGOl ovPyIHlxrvarM6hVdDOxMW4rINgMweLOA1Udyo2MeXhqAEOoCVfL6n+y0O5I1bGr rJR7556WYYiEqAOm5xPMorrUtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEq1V+ma l1aiZ8y9WB0MurI2LLkdMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe7AUyPTsHwoV42sfQT1uPDZHdXERe3tgHCPXmxN5HJK8IFiyQlB7zEPILtvL MstMKJZ6PXOIPNN1Co9NHumHBA5l8OWLq2UWByR9yIqsnVmo9/H92GD9Ce9FEBA0 EljaHbUO50bRlwykLmO/WSy49pC8YUviLNJbXjK8nd7XOYVlW2aC3+YypCgFEBmx 9tMxUuEFiB7IkcIdyuimRC3PlSnR2eQ66oNw6l3IVvNkZ4sqVLR4MN4W7UHIQ1N9 LIXSU/k2vEcze3DLWdg05vkdrVtfUQ3FOIRLnJM5iZMKDb49P2CVwaohEV9Et4p/ 5u9CpAnGqP3v3xMO7R6V4yxVYQ== -----END CERTIFICATE-----Generated at Sat Sep 5 04:24:15 2026 by rpki-client