$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: 6q89SmQJgJQ3EatKyIXNxC50Dz0DcvCsueMjK8Z+Ffc= Subject key identifier: 63:CF:CB:28:25:C9:4A:E0:D9:FC:05:21:06:DB:C4:FC:BF:B0:96:31 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 020B Signing time: Tue 25 Aug 2026 02:58:12 +0000 Manifest this update: Tue 25 Aug 2026 02:58:11 +0000 Manifest next update: Tue 01 Sep 2026 02:58:11 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: KtLeluR5Xe8CgApmjf0HzNnPCRe5XAC2vyj8i1oXpok=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 02:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Aug 25 02:58:11 2026 GMT Not After : Sep 1 02:58:11 2026 GMT Subject: CN=6a8d04c4-8198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:e1:c4:43:15:43:13:e3:5a:c5:24:09:c4: 80:7d:9a:f0:ee:41:b4:32:26:a3:df:a6:dd:ff:4d: f1:0c:2c:2e:27:15:43:f0:ff:31:d3:d0:a0:22:ed: 17:a5:5b:63:33:dc:b4:d3:98:83:4e:5a:0a:13:c9: 18:e6:d9:ab:63:28:ba:c5:22:29:01:7f:d5:f9:ad: f5:fe:28:4c:d7:9c:4f:50:76:ff:f7:59:10:26:3a: 88:65:13:97:9f:70:02:f6:bf:9d:23:dd:56:c8:bc: 33:65:0e:0b:45:7b:be:a7:5e:59:d6:93:fc:73:b4: 8d:26:b2:32:44:90:17:ad:58:91:7a:aa:64:8f:c2: e0:aa:f6:67:2a:e8:79:fb:9c:76:c5:24:26:ae:0a: f2:64:21:53:2f:48:12:67:db:1c:f3:8e:3c:64:7a: bc:72:fc:12:fd:85:cc:aa:9c:68:39:89:76:dc:dc: 86:dd:95:63:9d:58:a2:9b:75:cc:45:82:7f:f4:6a: 3a:21:ec:ad:fb:d0:96:7c:be:c2:26:2e:ff:26:b6: c6:eb:c7:54:f2:dd:d4:30:a8:6e:c1:6f:df:80:91: 04:75:98:93:76:58:d5:af:bd:3d:77:08:b7:7f:92: 38:22:a0:32:b1:f8:cd:4f:52:e6:97:e7:38:f6:a0: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:CB:28:25:C9:4A:E0:D9:FC:05:21:06:DB:C4:FC:BF:B0:96:31 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:db:38:4b:7e:5a:49:e4:7a:fc:7a:48:6b:f6:40:29:05:48: a0:3e:00:4d:fa:c5:6c:1c:4f:5c:2f:f1:e0:43:62:a1:f2:ba: be:18:72:d8:0d:3d:39:1f:64:96:48:bc:50:09:43:c8:ad:19: f3:aa:3a:e9:c6:b7:ef:a1:76:14:d3:77:2c:55:c3:96:3a:f3: 4b:e4:36:77:ad:3d:26:b5:c6:26:56:3e:60:db:f9:fc:1e:81: ee:01:41:1c:d1:f0:21:e2:bd:5b:67:05:82:f1:5a:72:f2:58: d2:61:ee:89:8c:83:bd:ba:8e:c7:f4:95:58:a1:3d:4f:51:6d: d6:97:5f:3e:0a:37:82:b6:95:d4:9d:54:f7:20:d4:a8:e1:37: 65:ed:c4:57:0e:ff:30:42:b2:b5:8d:16:58:91:87:d6:a2:20: 22:de:75:3d:4d:c8:08:4f:69:ac:ba:b1:31:9c:f3:1b:4c:2d: 38:60:99:13:8f:27:a3:0c:81:0a:91:eb:f6:bc:5a:f2:9f:d2: 28:ea:4f:ce:a1:dd:42:43:5f:6e:a9:b3:88:f0:34:cd:df:f1: 20:cc:e9:25:9b:62:92:64:53:7d:c0:54:f3:40:36:e8:fd:15: 8d:2e:c7:a7:a2:ee:ab:5b:cb:4d:67:62:d9:3f:31:25:71:91: 06:44:a0:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjYwODI1MDI1ODExWhcNMjYwOTAxMDI1ODExWjAYMRYwFAYD VQQDEw02YThkMDRjNC04MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmP/hxEMVQxPjWsUkCcSAfZrw7kG0Miaj36bd/03xDCwuJxVD8P8x09CgIu0X pVtjM9y005iDTloKE8kY5tmrYyi6xSIpAX/V+a31/ihM15xPUHb/91kQJjqIZROX n3AC9r+dI91WyLwzZQ4LRXu+p15Z1pP8c7SNJrIyRJAXrViReqpkj8LgqvZnKuh5 +5x2xSQmrgryZCFTL0gSZ9sc8448ZHq8cvwS/YXMqpxoOYl23NyG3ZVjnViim3XM RYJ/9Go6Ieyt+9CWfL7CJi7/JrbG68dU8t3UMKhuwW/fgJEEdZiTdljVr709dwi3 f5I4IqAysfjNT1Lml+c49qDtxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPPyygl yUrg2fwFIQbbxPy/sJYxMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPds4S35aSeR6/HpIa/ZAKQVIoD4ATfrFbBxPXC/x4ENiofK6vhhy2A09OR9k lki8UAlDyK0Z86o66ca376F2FNN3LFXDljrzS+Q2d609JrXGJlY+YNv5/B6B7gFB HNHwIeK9W2cFgvFacvJY0mHuiYyDvbqOx/SVWKE9T1Ft1pdfPgo3graV1J1U9yDU qOE3Ze3EVw7/MEKytY0WWJGH1qIgIt51PU3ICE9prLqxMZzzG0wtOGCZE48nowyB CpHr9rxa8p/SKOpPzqHdQkNfbqmziPA0zd/xIMzpJZtikmRTfcBU80A26P0VjS7H p6Luq1vLTWdi2T8xJXGRBkSgnQ== -----END CERTIFICATE-----Generated at Wed Aug 26 21:06:44 2026 by rpki-client