$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: GVBSJr+JXesjg/I7KdvfQfFWA3jquvuS05OPlUYkbTA= Subject key identifier: 88:D0:DE:27:2C:FA:2A:BD:58:C5:C0:4D:DD:A4:97:CA:05:A8:1B:A7 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0B25 Signing time: Fri 04 Sep 2026 19:12:34 +0000 Manifest this update: Fri 04 Sep 2026 19:12:34 +0000 Manifest next update: Fri 11 Sep 2026 19:12:34 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: k9FWsJ0LB6loFir9sh2c/Rs/b/2/xd5vLFIxvp5JBq4=) 2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=) 3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: Sep 4 19:12:34 2026 GMT Not After : Sep 11 19:12:34 2026 GMT Subject: CN=6a9b1822-db4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:92:41:27:0c:f6:ef:2a:3f:1f:aa:ab:b5: ac:74:09:55:47:3d:07:c3:ff:77:66:e4:94:5c:ef: 9b:16:b3:17:f4:07:bc:e5:61:f1:37:79:6d:1d:fa: 90:30:ac:4b:01:ea:f4:c2:f3:1f:32:68:94:0e:ad: 27:cf:5e:31:36:b3:a3:6f:18:69:e7:2e:d8:e4:6c: 04:97:bf:bb:c3:1f:e9:16:e8:f1:57:7d:19:af:12: c9:73:b7:eb:f7:af:a1:7d:c6:0a:09:81:9d:4d:e3: f0:16:3a:cb:51:6e:b9:ab:6f:1b:eb:35:93:a0:af: a4:04:34:7e:35:c4:73:5d:42:b1:f6:2a:e5:66:91: 75:d8:57:d9:f6:b3:33:c8:bc:0c:a2:20:c8:ad:d6: 71:33:17:02:66:4b:3b:2f:d3:71:0b:ed:79:d9:cb: 37:f5:07:0c:12:e2:01:91:8a:e1:2c:fa:39:79:a4: 63:8e:53:a5:44:74:a0:18:0a:d3:bc:a4:06:9b:4c: cc:ff:08:3d:f8:cf:c5:23:37:80:fc:57:3d:1c:ce: 1d:6b:a0:34:b6:ef:02:41:af:42:15:d9:f8:dd:d0: 36:c8:52:80:83:bd:bb:6d:9e:f2:0a:a8:c3:55:e0: 4e:05:9a:85:6d:54:4d:86:2d:ed:77:74:4f:07:97: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:DE:27:2C:FA:2A:BD:58:C5:C0:4D:DD:A4:97:CA:05:A8:1B:A7 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:83:86:f5:c1:fc:75:1a:6d:20:17:ab:99:65:82:d8:2d:d7: 58:e9:ec:1e:ef:af:c0:67:71:dd:20:40:77:a3:4f:14:7d:d7: 8c:31:d4:8d:66:a1:eb:27:a8:64:e2:a7:fc:d7:ec:69:bc:b0: a5:ff:bf:a9:6e:06:c9:6a:cb:07:d8:6c:31:5f:c6:23:33:7d: 83:f4:c9:4e:f8:76:dd:44:23:04:0d:d7:45:35:3b:9d:34:48: 2e:31:41:8e:a0:96:05:41:57:35:32:81:93:5f:fa:a0:f3:37: 02:b1:91:f4:22:97:18:60:66:90:02:4c:18:1e:19:6b:73:2d: 44:4f:b5:89:17:45:e7:83:75:c2:e9:5f:af:4b:d8:da:fb:17: 29:42:4e:b1:e3:c8:9f:e0:65:76:7c:c7:c8:f3:c1:24:75:24: c6:22:1e:8f:4c:d1:bc:67:3e:fc:81:4c:33:6c:f7:0c:e7:a5: 19:6c:c1:75:ef:f5:b3:a8:ee:75:ad:05:3e:f7:7b:cd:81:d2: a4:e2:e4:09:2a:eb:5a:ec:ce:5b:3e:fc:a8:8d:ce:c3:03:80: 22:95:08:3d:d5:06:6b:5a:d1:c6:0f:1a:2f:9b:fc:2e:97:fd: 13:88:94:ee:85:e4:23:8d:64:5d:86:a9:0c:c0:95:fc:0e:4a: ee:c5:c2:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjYwOTA0MTkxMjM0WhcNMjYwOTExMTkxMjM0WjAYMRYwFAYD VQQDEw02YTliMTgyMi1kYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DCSQScM9u8qPx+qq7WsdAlVRz0Hw/93ZuSUXO+bFrMX9Ae85WHxN3ltHfqQ MKxLAer0wvMfMmiUDq0nz14xNrOjbxhp5y7Y5GwEl7+7wx/pFujxV30ZrxLJc7fr 96+hfcYKCYGdTePwFjrLUW65q28b6zWToK+kBDR+NcRzXUKx9irlZpF12FfZ9rMz yLwMoiDIrdZxMxcCZks7L9NxC+152cs39QcMEuIBkYrhLPo5eaRjjlOlRHSgGArT vKQGm0zM/wg9+M/FIzeA/Fc9HM4da6A0tu8CQa9CFdn43dA2yFKAg727bZ7yCqjD VeBOBZqFbVRNhi3td3RPB5etWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjQ3ics +iq9WMXATd2kl8oFqBunMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYoOG9cH8dRptIBermWWC2C3XWOnsHu+vwGdx3SBAd6NPFH3XjDHUjWah6yeo ZOKn/Nfsabywpf+/qW4GyWrLB9hsMV/GIzN9g/TJTvh23UQjBA3XRTU7nTRILjFB jqCWBUFXNTKBk1/6oPM3ArGR9CKXGGBmkAJMGB4Za3MtRE+1iRdF54N1wulfr0vY 2vsXKUJOsePIn+BldnzHyPPBJHUkxiIej0zRvGc+/IFMM2z3DOelGWzBde/1s6ju da0FPvd7zYHSpOLkCSrrWuzOWz78qI3OwwOAIpUIPdUGa1rRxg8aL5v8Lpf9E4iU 7oXkI41kXYapDMCV/A5K7sXC4w== -----END CERTIFICATE-----Generated at Sat Sep 5 11:44:08 2026 by rpki-client