$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: 4tQif5NwLWQ87ylD+Jde0iSI0SmgHhwuWadeGO7HPJA= Subject key identifier: C6:D7:B7:86:8C:2E:C0:62:1C:93:D5:F6:B3:78:D7:40:76:BB:DB:B5 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 09B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 09A6 Signing time: Thu 20 Aug 2026 19:54:14 +0000 Manifest this update: Thu 20 Aug 2026 19:54:13 +0000 Manifest next update: Thu 27 Aug 2026 19:54:13 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: CR0LS8nclYP2LZOmVcixXMR2iFv1xfGnB0Laqs03BxA=) 2: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: oLP/jKOtL4Ffh6w6dK/dJZMBr+6GxoUP/Gc5UVj8ghc=) 3: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2488 (0x9b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Aug 20 19:54:13 2026 GMT Not After : Aug 27 19:54:13 2026 GMT Subject: CN=6a875b65-91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:31:f9:65:fb:f7:87:d1:ab:9b:a6:70:0b: b9:dc:03:14:01:2f:d5:01:40:0e:25:d3:a9:a7:2c: 49:5f:8b:17:03:93:6e:32:29:df:fd:d0:8e:74:ca: 98:a1:68:3e:9f:11:8b:b0:ad:2a:09:67:3d:34:1d: 8c:28:f2:60:75:a3:3d:e7:34:37:f9:16:1d:ed:b7: f3:16:bc:02:59:ce:28:31:ac:a9:e7:87:b3:be:d6: 7f:14:d2:1d:c7:d3:da:7c:3b:92:d0:55:61:df:0d: 0d:c0:e3:4f:69:25:b4:22:95:17:2c:bc:46:56:c2: 0d:bf:21:5f:e0:ed:a2:17:05:c2:78:a5:8f:c5:4b: bb:14:be:8c:76:f7:71:66:68:27:cf:52:d4:5b:69: f7:90:39:7a:e3:ca:45:22:60:25:e1:78:68:80:50: 6a:31:fc:15:cc:e2:2b:85:75:ff:38:08:f3:33:b6: f4:57:0b:12:d8:17:d5:00:64:c3:63:5b:b8:3d:62: bc:2b:69:c5:c3:7b:ff:2f:de:9d:28:5f:db:83:cd: 57:98:4d:b6:c8:fb:39:68:2a:de:ce:53:d5:12:09: 1b:74:48:50:5e:c4:5a:87:73:af:63:0b:bb:85:00: 45:41:b5:2a:d4:94:06:8a:cf:9c:21:4a:2f:76:73: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:B7:86:8C:2E:C0:62:1C:93:D5:F6:B3:78:D7:40:76:BB:DB:B5 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:e8:00:eb:13:59:24:b5:83:d9:12:99:f1:ae:a1:b8:9a: 51:05:46:6b:d9:86:4e:a4:c3:a7:04:92:7d:16:3e:9b:76:32: f8:b6:81:4f:de:40:c2:63:18:f1:1f:b4:2a:a6:b6:1c:a5:75: 46:f0:1c:f7:f1:b9:26:0c:a0:51:15:e6:58:32:68:ae:43:4f: 97:cf:94:84:b4:c1:c4:71:a1:32:2a:6f:d1:07:45:58:75:20: 0c:a7:38:e6:8e:9e:55:38:35:4e:dc:81:fa:c2:6a:19:42:ed: cf:e3:fb:60:51:fb:3d:fe:fc:7e:43:61:53:61:a5:49:ba:37: 13:4c:61:bd:14:f9:02:02:1d:06:d3:ce:99:a5:d4:56:df:52: e3:6b:63:2f:47:22:a3:fd:37:b0:fd:b8:9d:71:74:f9:1d:bf: b5:fe:70:61:f7:3b:4d:ef:24:31:6b:80:fc:6a:8e:08:60:1e: f6:3e:e6:17:b2:16:aa:60:1e:4c:d2:c6:df:da:af:c8:96:76: e1:a6:36:0e:26:ec:18:6b:1f:9c:45:8d:d0:9b:d7:27:c8:81: 86:7c:6f:c9:3c:bd:37:5c:78:60:8f:ee:bd:f8:6f:3e:3d:2a: 5c:27:1f:9d:4d:98:40:80:d8:6a:5f:f0:f5:d0:e6:c2:8b:e8: 98:e0:ab:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjYwODIwMTk1NDEzWhcNMjYwODI3MTk1NDEzWjAYMRYwFAYD VQQDEw02YTg3NWI2NS05MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxEx+WX794fRq5umcAu53AMUAS/VAUAOJdOppyxJX4sXA5NuMinf/dCOdMqY oWg+nxGLsK0qCWc9NB2MKPJgdaM95zQ3+RYd7bfzFrwCWc4oMayp54ezvtZ/FNId x9PafDuS0FVh3w0NwONPaSW0IpUXLLxGVsINvyFf4O2iFwXCeKWPxUu7FL6Mdvdx Zmgnz1LUW2n3kDl648pFImAl4XhogFBqMfwVzOIrhXX/OAjzM7b0VwsS2BfVAGTD Y1u4PWK8K2nFw3v/L96dKF/bg81XmE22yPs5aCrezlPVEgkbdEhQXsRah3OvYwu7 hQBFQbUq1JQGis+cIUovdnP87wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbXt4aM LsBiHJPV9rN410B2u9u1MB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGm7oAOsTWSS1g9kSmfGuobiaUQVGa9mGTqTDpwSSfRY+m3Yy+LaBT95AwmMY 8R+0Kqa2HKV1RvAc9/G5JgygURXmWDJorkNPl8+UhLTBxHGhMipv0QdFWHUgDKc4 5o6eVTg1TtyB+sJqGULtz+P7YFH7Pf78fkNhU2GlSbo3E0xhvRT5AgIdBtPOmaXU Vt9S42tjL0cio/03sP24nXF0+R2/tf5wYfc7Te8kMWuA/GqOCGAe9j7mF7IWqmAe TNLG39qvyJZ24aY2DibsGGsfnEWN0JvXJ8iBhnxvyTy9N1x4YI/uvfhvPj0qXCcf nU2YQIDYal/w9dDmwovomOCr/A== -----END CERTIFICATE-----Generated at Thu Aug 20 22:56:42 2026 by rpki-client