$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json) Hash identifier: Vq6lNmCLUrvCt6p3JwGESffIT5FyqkR8Voxr9xz6N74= Subject key identifier: 26:6A:5E:EC:71:D7:CF:08:8B:7A:D0:09:09:6F:82:56:69:8C:2B:52 Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft Manifest number: 7B Signing time: Thu 03 Sep 2026 08:04:22 +0000 Manifest this update: Thu 03 Sep 2026 08:04:21 +0000 Manifest next update: Thu 10 Sep 2026 08:04:21 +0000 Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: zl9gPrOp6qayJwLDNjQOrcDHpcnLuBuQYp2Grp3MacI=) 2: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=) 3: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8 Validity Not Before: Sep 3 08:04:21 2026 GMT Not After : Sep 10 08:04:21 2026 GMT Subject: CN=6a992a06-4c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:cf:1a:15:72:bd:84:af:ab:ea:f6:1a:04: b8:5f:0d:d0:4c:62:ba:c7:1a:b4:cd:71:ed:0e:d1: db:3b:0c:04:62:de:85:78:46:2e:ca:f2:9a:1a:8e: 64:e5:de:5b:18:27:e0:12:7a:21:de:ba:58:2e:18: 6e:9e:64:ab:4e:35:b0:b1:53:74:e6:ca:c1:0b:ec: 7f:f9:29:68:59:c9:61:1c:66:02:0a:5a:5a:0b:42: c2:97:19:2f:0b:ab:fa:55:7c:96:98:c7:d3:0c:22: 2a:df:f0:75:d6:51:60:9f:86:f0:08:c6:2a:43:bb: fe:61:07:67:21:09:60:da:10:36:83:8e:9b:f3:0e: e3:86:c7:ef:3e:ff:0f:ac:d6:5c:92:2c:e0:79:37: 2b:4a:11:7b:ab:31:28:75:3f:dc:3c:d9:f2:b4:41: 3e:7f:b1:83:cb:cf:86:4a:ac:55:e0:98:f5:06:02: 93:fe:78:30:85:d6:f4:db:59:bf:86:8f:f5:01:2e: ab:f0:b4:8b:7f:66:21:d0:00:c9:cd:ad:fe:9e:51: bd:91:5c:1e:c1:65:9b:9e:9a:05:7b:b3:d1:35:13: f2:6f:85:d8:40:6f:e1:34:40:45:87:ed:ee:51:0e: d0:4a:6f:34:c0:4c:7a:88:e3:a8:03:42:fb:0b:61: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6A:5E:EC:71:D7:CF:08:8B:7A:D0:09:09:6F:82:56:69:8C:2B:52 X509v3 Authority Key Identifier: keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ba:30:ec:09:a7:70:d5:26:45:2c:c1:c5:9d:33:c5:6a:5a: 75:a6:ca:08:e6:97:00:06:c0:5b:44:3b:9b:fb:ed:3f:8c:cd: e7:85:68:39:fc:4f:c3:7a:0c:6f:d3:75:cf:25:f0:87:cd:c3: f3:e1:b2:a8:88:4d:83:81:64:a3:5a:18:ab:e4:d0:4e:fd:01: a9:75:4c:1a:e4:87:96:45:d5:fb:c4:69:f1:ce:ec:12:28:f1: 68:27:f7:a8:c7:fe:d5:61:d1:4f:33:90:fa:c6:aa:44:aa:11: 67:46:2b:6f:33:da:4a:10:49:16:5b:d1:9c:23:17:b7:9e:8c: 54:ba:78:42:4e:2f:8b:3e:fd:48:bb:4d:8a:99:fa:bd:bd:7a: af:a0:93:49:92:11:8e:dd:4c:5b:64:94:0b:6a:58:49:c5:df: fe:4c:39:22:db:68:1f:b6:10:3c:0e:71:31:9e:6e:50:e4:da: 4e:bd:18:02:74:e0:59:95:a4:85:91:ac:15:ee:fa:2b:19:3e: 5c:ab:c4:99:9e:c2:f7:b7:3e:c9:30:37:eb:40:1c:c7:8a:1c: cb:61:d3:a5:1f:57:95:21:de:a5:6c:a9:16:db:4f:f8:ee:7f: 6e:6a:11:1b:0e:73:fb:6e:8b:8f:6a:e2:c6:37:5f:72:c1:a9: 4c:c0:be:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBNTUxMTAvBgNVBAUTKEM1RUIyNTQ2QkI3M0FDRTY5M0UxOUFCMTA3RDgzRjI2 NjYzMkNFRTgwHhcNMjYwOTAzMDgwNDIxWhcNMjYwOTEwMDgwNDIxWjAYMRYwFAYD VQQDEw02YTk5MmEwNi00YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WLPGhVyvYSvq+r2GgS4Xw3QTGK6xxq0zXHtDtHbOwwEYt6FeEYuyvKaGo5k 5d5bGCfgEnoh3rpYLhhunmSrTjWwsVN05srBC+x/+SloWclhHGYCClpaC0LClxkv C6v6VXyWmMfTDCIq3/B11lFgn4bwCMYqQ7v+YQdnIQlg2hA2g46b8w7jhsfvPv8P rNZckizgeTcrShF7qzEodT/cPNnytEE+f7GDy8+GSqxV4Jj1BgKT/ngwhdb021m/ ho/1AS6r8LSLf2Yh0ADJza3+nlG9kVwewWWbnpoFe7PRNRPyb4XYQG/hNEBFh+3u UQ7QSm80wEx6iOOoA0L7C2F99wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZqXuxx 188Ii3rQCQlvglZpjCtSMB8GA1UdIwQYMBaAFMXrJUa7c6zmk+GasQfYPyZmMs7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E1NS9CMzJCNTAyOEY3 QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJPYVQ0WnF4QjlnX0ptWXl6 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E1NS9CMzJCNTAyOEY3QTUxMUYwODdFNTFGMTY1NTZGNTZCQy94ZXNsUnJ0enJP YVQ0WnF4QjlnX0ptWXl6dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATLow7AmncNUmRSzBxZ0zxWpadabKCOaXAAbAW0Q7m/vtP4zN54VoOfxPw3oM b9N1zyXwh83D8+GyqIhNg4Fko1oYq+TQTv0BqXVMGuSHlkXV+8Rp8c7sEijxaCf3 qMf+1WHRTzOQ+saqRKoRZ0YrbzPaShBJFlvRnCMXt56MVLp4Qk4viz79SLtNipn6 vb16r6CTSZIRjt1MW2SUC2pYScXf/kw5IttoH7YQPA5xMZ5uUOTaTr0YAnTgWZWk hZGsFe76Kxk+XKvEmZ7C97c+yTA360Acx4ocy2HTpR9XlSHepWypFttP+O5/bmoR Gw5z+26Lj2rixjdfcsGpTMC+jg== -----END CERTIFICATE-----Generated at Sat Sep 5 02:45:00 2026 by rpki-client