$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: gSEpJjBaZroy0PkFSmuRBtKoQIYSv/fuhvfLeAlyXBs= Subject key identifier: E5:F5:50:8B:A0:9E:77:73:F5:6A:C4:4F:7F:6B:81:22:F7:27:10:09 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A71 Signing time: Sat 22 Aug 2026 19:33:41 +0000 Manifest this update: Sat 22 Aug 2026 19:33:40 +0000 Manifest next update: Sat 29 Aug 2026 19:33:40 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: UlafIfbHdGQd7lOhR/EkUR/US6RbxeenQijkeLvcwXA=) 2: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 3: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 4: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) 5: 7AAA81CC97A211F1B4CCDFD05411F970.roa (hash: ehD/IdSO6obCGGX3OBULfP/M0Zb6tSmU7+GXTV+zo0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Aug 22 19:33:40 2026 GMT Not After : Aug 29 19:33:40 2026 GMT Subject: CN=6a89f995-ce9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:39:1c:f0:21:7a:a3:b8:b6:30:57:00:e8: 46:14:e5:8b:7e:ad:72:12:16:0a:00:b3:18:5d:9f: 1c:32:ba:b7:b0:2a:66:5b:5e:a2:03:19:7e:d5:7a: 93:a3:31:17:80:f0:44:93:21:62:02:bb:44:fd:52: de:4e:2e:18:29:78:09:11:af:3a:b4:2c:85:cd:e3: f5:7a:f8:19:5b:28:15:1d:93:14:c0:21:df:f9:4c: 75:35:27:8a:a0:fd:79:e7:5b:56:0a:b7:7a:58:ce: 9c:04:fe:da:24:a4:eb:e4:6f:8a:04:c2:56:c6:cd: 7f:b3:cb:ab:39:f4:a0:b1:53:ff:64:bd:fb:29:58: f1:87:ec:06:52:84:79:15:10:65:d8:10:a8:01:72: e6:48:f8:f6:74:15:46:76:67:77:02:3a:71:a6:d9: 49:d4:32:5c:fd:9b:8c:86:36:a5:ca:f2:b0:e0:18: b4:ba:a8:2d:3b:d1:ce:f1:3c:3c:ce:cb:69:cf:a6: 5a:78:ab:0e:5e:36:0a:31:d1:ab:e5:a1:d1:ff:dd: d8:cd:3c:22:74:d6:3c:00:26:d5:d9:53:9f:37:7c: c2:b4:40:55:71:6a:e4:1e:37:06:90:a6:84:61:a3: b6:99:10:3e:78:a1:36:39:77:47:07:95:71:ef:5c: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F5:50:8B:A0:9E:77:73:F5:6A:C4:4F:7F:6B:81:22:F7:27:10:09 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1e:f6:6d:d5:91:3a:84:50:a1:6e:4e:a0:8c:27:1f:ca:13: b3:ed:88:99:62:3f:5d:03:50:a5:45:7c:60:2a:49:f9:7e:c9: 81:48:9e:a8:b5:9f:c5:94:e3:9e:71:d6:6e:f8:d4:c4:fa:40: be:d7:c7:b6:c7:23:ac:eb:00:ce:6b:60:9c:94:79:02:2c:77: 43:98:71:13:11:16:af:52:ef:a1:09:63:2a:bf:aa:b0:c7:b9: 44:8f:77:47:bf:d2:c6:d7:4c:40:79:6b:80:5b:a1:fd:5b:89: 03:26:b0:f5:36:0b:c5:a8:8c:6c:8d:c2:bd:32:f6:53:4d:a3: 93:08:a9:a9:3b:5b:24:c1:ad:cd:ae:dd:5f:9b:27:df:e0:ba: 5a:cb:5a:38:37:9b:99:08:36:b3:e4:bd:ec:99:ae:77:c1:bb: e5:8b:e4:bc:26:9e:b2:59:be:92:11:2c:af:fd:c6:a7:3c:25: 61:c8:e2:a5:d2:3d:23:d5:87:8b:5b:de:a0:64:06:b1:8f:62: 4e:4e:d1:50:a7:68:9b:d0:88:d2:af:4f:45:9d:4f:8b:8c:35: ed:a7:03:a0:46:97:33:5b:4f:54:e6:22:1e:28:a1:dd:66:69: 34:5a:1e:63:e6:18:78:39:ff:22:e1:54:9e:b8:9b:92:37:89: 5c:31:a2:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwODIyMTkzMzQwWhcNMjYwODI5MTkzMzQwWjAYMRYwFAYD VQQDEw02YTg5Zjk5NS1jZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzug5HPAheqO4tjBXAOhGFOWLfq1yEhYKALMYXZ8cMrq3sCpmW16iAxl+1XqT ozEXgPBEkyFiArtE/VLeTi4YKXgJEa86tCyFzeP1evgZWygVHZMUwCHf+Ux1NSeK oP1551tWCrd6WM6cBP7aJKTr5G+KBMJWxs1/s8urOfSgsVP/ZL37KVjxh+wGUoR5 FRBl2BCoAXLmSPj2dBVGdmd3AjpxptlJ1DJc/ZuMhjalyvKw4Bi0uqgtO9HO8Tw8 zstpz6ZaeKsOXjYKMdGr5aHR/93YzTwidNY8ACbV2VOfN3zCtEBVcWrkHjcGkKaE YaO2mRA+eKE2OXdHB5Vx71xNqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOX1UIug nndz9WrET39rgSL3JxAJMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArh72bdWROoRQoW5OoIwnH8oTs+2ImWI/XQNQpUV8YCpJ+X7JgUieqLWfxZTj nnHWbvjUxPpAvtfHtscjrOsAzmtgnJR5Aix3Q5hxExEWr1LvoQljKr+qsMe5RI93 R7/SxtdMQHlrgFuh/VuJAyaw9TYLxaiMbI3CvTL2U02jkwipqTtbJMGtza7dX5sn 3+C6WstaODebmQg2s+S97Jmud8G75YvkvCaeslm+khEsr/3GpzwlYcjipdI9I9WH i1veoGQGsY9iTk7RUKdom9CI0q9PRZ1Pi4w17acDoEaXM1tPVOYiHiih3WZpNFoe Y+YYeDn/IuFUnribkjeJXDGixg== -----END CERTIFICATE-----Generated at Sat Aug 22 23:23:29 2026 by rpki-client