$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: vxpHDv8tL8yPzndCCHOGbbFHsOGouj4uy2p4bwJxY9o= Subject key identifier: F8:08:13:1A:D2:9E:2D:32:0D:55:4C:B1:7E:50:60:49:88:FC:3A:3E Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 35AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 3583 Signing time: Fri 04 Sep 2026 15:02:23 +0000 Manifest this update: Fri 04 Sep 2026 15:02:23 +0000 Manifest next update: Fri 11 Sep 2026 15:02:23 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: qejR0lonTzCCgCXOyCUGMsgCCBrfif1BWdv70JF+NEc=) 2: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=) 4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Sep 4 15:02:23 2026 GMT Not After : Sep 11 15:02:23 2026 GMT Subject: CN=6a9add7f-96ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:65:6c:f3:a0:51:af:98:b5:80:c8:8a:28: 3e:92:ff:ca:84:fe:30:13:70:ba:02:2e:f4:1e:73: 61:c0:63:6f:0c:b0:3b:1e:ec:3c:a1:0b:48:87:2c: 4c:6d:bf:ed:fd:d1:cc:2b:23:d8:64:b1:64:dd:91: 04:34:18:5b:07:e8:04:e3:9b:4c:4c:e0:a5:c5:d3: 3b:14:bd:3e:53:cc:7b:fb:2b:98:3f:84:16:db:79: b5:77:27:df:96:81:82:83:50:d2:ce:75:65:96:ed: 94:df:54:83:3f:10:49:0c:3c:c7:10:b0:9a:ec:7f: b2:e1:8a:e7:a8:ac:b1:48:2e:d0:29:e3:3e:15:e5: 74:50:9e:d2:88:35:8e:5f:82:86:e9:e8:46:48:e1: f7:ed:8b:af:a7:f4:1d:aa:87:60:ff:90:eb:b3:30: da:8a:04:8d:9b:8e:db:6e:ca:cd:ea:97:da:0e:30: b5:4d:80:c7:34:19:dc:7a:90:c0:fb:a0:fa:da:77: ff:b6:b7:24:34:0c:87:86:11:50:45:4a:5d:88:8d: 53:de:b0:70:49:31:5c:46:0b:d3:fa:b7:ee:d3:d7: 0d:61:b3:d9:fd:68:7c:d5:5c:fa:75:30:24:c2:8a: 51:6f:1c:90:7c:5c:37:77:1b:f3:e6:83:d0:8a:d1: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:08:13:1A:D2:9E:2D:32:0D:55:4C:B1:7E:50:60:49:88:FC:3A:3E X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e1:5f:37:cd:24:84:f3:01:8c:8f:63:d7:07:67:1c:4c:c1: e3:3b:f8:d7:df:a7:98:0d:a0:a9:9f:a4:0c:0c:ef:53:43:51: c5:97:27:bc:aa:e3:a7:27:93:48:fd:31:d4:8d:ab:91:a3:37: 68:ca:58:bc:d8:0e:78:ae:36:2c:53:c9:ca:4d:41:05:19:f3: c4:c5:9b:9a:50:1d:a4:98:6d:b3:62:90:b0:a6:99:c0:25:e5: dc:3f:a0:48:17:bc:47:34:cc:f3:cf:06:c6:af:49:6a:7f:6f: 25:6a:6a:25:b5:fa:73:d0:50:18:89:5a:17:6f:e2:b8:e4:47: 1c:d6:75:7e:51:13:83:ee:3f:fc:5d:55:d9:60:07:bd:b1:6b: e2:fb:4d:18:1d:29:44:c5:54:b6:66:5b:1d:58:f4:d2:db:57: 29:bb:96:28:62:c1:a1:2d:85:ff:d9:12:0a:31:b3:69:1e:0b: 69:07:2c:5a:c9:12:75:f9:b5:c8:a2:b8:23:76:d7:c4:ae:a0: 56:30:26:2e:4d:38:94:05:eb:07:75:aa:9e:e2:ff:d4:56:59: 74:0a:32:76:45:99:0b:98:2b:d7:8c:65:03:15:c0:be:7b:08: 8b:70:af:31:f5:71:fb:35:21:ef:8c:d0:52:e6:c6:e3:3d:6a: 7d:4f:b9:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjYwOTA0MTUwMjIzWhcNMjYwOTExMTUwMjIzWjAYMRYwFAYD VQQDEw02YTlhZGQ3Zi05NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryZlbPOgUa+YtYDIiig+kv/KhP4wE3C6Ai70HnNhwGNvDLA7Huw8oQtIhyxM bb/t/dHMKyPYZLFk3ZEENBhbB+gE45tMTOClxdM7FL0+U8x7+yuYP4QW23m1dyff loGCg1DSznVllu2U31SDPxBJDDzHELCa7H+y4YrnqKyxSC7QKeM+FeV0UJ7SiDWO X4KG6ehGSOH37Yuvp/Qdqodg/5DrszDaigSNm47bbsrN6pfaDjC1TYDHNBncepDA +6D62nf/trckNAyHhhFQRUpdiI1T3rBwSTFcRgvT+rfu09cNYbPZ/Wh81Vz6dTAk wopRbxyQfFw3dxvz5oPQitESfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgIExrS ni0yDVVMsX5QYEmI/Do+MB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIeFfN80khPMBjI9j1wdnHEzB4zv419+nmA2gqZ+kDAzvU0NRxZcnvKrjpyeT SP0x1I2rkaM3aMpYvNgOeK42LFPJyk1BBRnzxMWbmlAdpJhts2KQsKaZwCXl3D+g SBe8RzTM888Gxq9Jan9vJWpqJbX6c9BQGIlaF2/iuORHHNZ1flETg+4//F1V2WAH vbFr4vtNGB0pRMVUtmZbHVj00ttXKbuWKGLBoS2F/9kSCjGzaR4LaQcsWskSdfm1 yKK4I3bXxK6gVjAmLk04lAXrB3WqnuL/1FZZdAoydkWZC5gr14xlAxXAvnsIi3Cv MfVx+zUh74zQUubG4z1qfU+5Cg== -----END CERTIFICATE-----Generated at Sat Sep 5 14:14:26 2026 by rpki-client