$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: zNgD7Feg6hzFu4Px91b7eZQ+yg3gk+lLIHX0cWj+Il4= Subject key identifier: 97:E9:8A:D6:37:3B:04:2E:12:12:1F:F4:54:EA:D4:00:21:94:33:9B Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 0108 Signing time: Thu 03 Sep 2026 06:21:56 +0000 Manifest this update: Thu 03 Sep 2026 06:21:55 +0000 Manifest next update: Thu 10 Sep 2026 06:21:55 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: a+itIlNUN/3WKMDgAwzNklPUCW/iF4D+M5I/S/lXg+4=) 2: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: vNh/5KqyGcLBgRea4GEaf1GiSDPNGV2ayLMJqKrT05s=) 3: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=) 4: E31A926E6EAF11F088699976C4F9AE02.roa (hash: FKzaSN7wk2dTCiUFf01WiFdCMnfThuKnhdLTnhYbGgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Sep 3 06:21:55 2026 GMT Not After : Sep 10 06:21:55 2026 GMT Subject: CN=6a991204-c1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:e6:65:eb:7c:63:34:c0:d1:40:6a:3d:9e: 7e:68:eb:af:00:09:24:c6:32:7c:43:6c:e9:b3:a5: 5c:49:57:4a:ce:aa:8f:83:b2:55:51:30:26:62:77: 51:c5:5b:26:62:dc:c3:4d:2a:c8:c8:6d:1b:45:ed: 6d:18:1f:5e:0a:14:6b:16:84:5b:9d:f1:3d:75:ed: d9:21:56:d7:18:14:ed:ec:49:6a:54:8a:ff:c1:7e: 1a:46:6d:e3:b1:af:35:2a:b5:8e:78:1f:45:50:01: db:e7:d0:0f:ea:7a:0f:ff:07:56:0a:96:e2:75:87: f8:fc:fa:f0:b5:c2:07:4d:83:51:35:58:ac:ed:3e: f1:20:2d:3e:7b:1d:40:03:46:93:cb:9d:8e:b1:46: 3a:c2:d0:28:f2:e9:6b:08:9d:12:44:7c:c0:97:db: 55:cd:d9:41:e8:e0:c6:1c:17:47:48:e2:86:56:da: 6d:91:95:fe:65:74:f7:69:72:21:30:c2:d8:44:61: 87:29:e3:a2:2b:62:bc:e1:89:18:6a:d3:df:98:2e: ca:ec:c6:f4:0a:d1:f7:d6:b8:f9:d0:8a:80:20:a9: 7d:5d:c6:41:07:43:bf:a3:bd:3b:f9:5b:f2:a2:68: 45:d7:0e:ce:09:24:aa:8b:6e:d8:3e:77:9c:af:79: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:8A:D6:37:3B:04:2E:12:12:1F:F4:54:EA:D4:00:21:94:33:9B X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f5:06:02:dc:82:13:21:a7:f7:0e:a5:29:c7:7c:85:70:df: b3:5d:b3:fc:63:6a:73:1f:f6:90:8d:64:a8:63:90:dd:a5:47: 10:77:fd:25:6c:1d:ea:bc:1f:68:b5:aa:70:aa:68:6a:28:ed: f8:8c:04:56:19:77:bd:c0:3d:0c:c3:06:19:c2:e0:ac:5b:76: 13:1d:99:d4:e6:17:c5:3b:60:5f:26:07:9f:4c:49:5c:94:4b: 5b:3d:3b:f4:d7:e2:f0:2c:5e:35:b8:09:a5:93:ad:aa:ad:61: f4:4e:37:2d:98:1b:71:a3:a8:b7:e1:e2:74:b4:c7:b7:97:93: d7:ec:d5:e9:4f:6c:c2:32:fc:79:42:0e:37:20:55:a2:c5:a2: c6:e3:83:d7:e7:3d:50:8f:51:72:ef:ae:0c:58:61:4e:6f:56: 13:ad:2f:4f:0c:b6:71:fe:bc:58:5e:94:34:72:53:e6:97:68: 26:ab:6f:8d:db:ea:82:34:e9:e2:0f:40:73:c1:7b:36:5b:1c: c7:7a:8c:a5:d4:37:e8:82:69:21:2e:fd:98:dc:b8:91:a9:e8: 56:74:03:39:1d:43:14:97:3d:d5:1f:38:aa:e4:5f:ac:ff:b0: 55:7d:9f:f3:3d:dc:75:b2:c9:b8:c2:53:b8:6d:cf:74:cc:68: ca:d8:ec:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5 RDE2Nzc0QjEwHhcNMjYwOTAzMDYyMTU1WhcNMjYwOTEwMDYyMTU1WjAYMRYwFAYD VQQDEw02YTk5MTIwNC1jMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwnmZet8YzTA0UBqPZ5+aOuvAAkkxjJ8Q2zps6VcSVdKzqqPg7JVUTAmYndR xVsmYtzDTSrIyG0bRe1tGB9eChRrFoRbnfE9de3ZIVbXGBTt7ElqVIr/wX4aRm3j sa81KrWOeB9FUAHb59AP6noP/wdWCpbidYf4/PrwtcIHTYNRNVis7T7xIC0+ex1A A0aTy52OsUY6wtAo8ulrCJ0SRHzAl9tVzdlB6ODGHBdHSOKGVtptkZX+ZXT3aXIh MMLYRGGHKeOiK2K84YkYatPfmC7K7Mb0CtH31rj50IqAIKl9XcZBB0O/o707+Vvy omhF1w7OCSSqi27YPnecr3mYUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfpitY3 OwQuEhIf9FTq1AAhlDObMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjZCQy9BMDMwQ0QzMDIwNEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6 bm5WajhrRTdjakdkRm5kTEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPvUGAtyCEyGn9w6lKcd8hXDfs12z/GNqcx/2kI1kqGOQ3aVHEHf9JWwd6rwf aLWqcKpoaijt+IwEVhl3vcA9DMMGGcLgrFt2Ex2Z1OYXxTtgXyYHn0xJXJRLWz07 9Nfi8CxeNbgJpZOtqq1h9E43LZgbcaOot+HidLTHt5eT1+zV6U9swjL8eUIONyBV osWixuOD1+c9UI9Rcu+uDFhhTm9WE60vTwy2cf68WF6UNHJT5pdoJqtvjdvqgjTp 4g9Ac8F7Nlscx3qMpdQ36IJpIS79mNy4kanoVnQDOR1DFJc91R84quRfrP+wVX2f 8z3cdbLJuMJTuG3PdMxoytjs6Q== -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:22 2026 by rpki-client