$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json) Hash identifier: JqLr2h31jTdD9kewSzo3JSeB9wbgQRSrbLA4EKiVmUg= Subject key identifier: 81:04:33:F9:69:15:FF:26:B6:F6:B0:83:18:3F:C6:64:E5:0C:17:8A Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft Manifest number: 01A7 Signing time: Thu 03 Sep 2026 04:20:30 +0000 Manifest this update: Thu 03 Sep 2026 04:20:29 +0000 Manifest next update: Thu 10 Sep 2026 04:20:29 +0000 Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: kEJF34WQhDCmwV8Iastd8uJh2iq5oPw8MWVaEMvxstE=) 2: CCAF2918109411F186362BB2353D8C67.roa (hash: gaaPUIqPnrKZcPoj++Gk3lTtF/eI1Q4+XK7Ewpz97Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 04:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Validity Not Before: Sep 3 04:20:29 2026 GMT Not After : Sep 10 04:20:29 2026 GMT Subject: CN=6a98f58d-8239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:cb:ef:5a:0f:f6:d9:ef:2b:5a:8f:e7:ea: da:7c:a7:b1:2e:47:3e:f9:45:ea:5c:a0:90:7d:c3: 90:37:22:d9:03:40:7b:2a:cc:cf:ad:db:59:6b:23: a2:ce:96:27:9f:62:ed:27:d4:5f:8c:4c:0f:8f:ba: 84:f9:70:b6:f0:a6:ef:63:20:46:70:1c:8c:93:0e: dc:98:c0:ee:79:63:49:8e:7d:f2:1a:68:4b:b9:f7: 07:33:3f:4e:9e:80:e4:12:a6:e1:5e:1a:56:9e:5e: 96:bc:c1:4d:a2:2a:6d:5d:3e:9c:ed:64:c7:5b:ba: e8:7f:bb:8c:18:8d:2c:60:35:e5:86:79:b0:56:09: 79:f2:63:98:60:a7:5f:e6:49:7e:45:41:e4:d2:24: e5:f4:d1:09:3f:da:a3:ec:9f:fb:89:a6:2a:5d:75: 90:0a:4e:d9:fd:7d:7f:c3:50:a4:71:d0:07:51:a5: e7:f6:b2:e2:74:b9:88:35:85:b8:c7:7c:b0:c0:cd: 66:6b:b2:c3:ac:fa:85:72:3a:c3:d9:b1:9c:97:33: d2:b2:49:f6:63:00:8b:fb:1c:66:88:7f:7c:c3:14: b5:39:54:cf:d2:7e:c1:e4:cd:be:68:4d:b3:9e:1b: f9:81:36:7a:e4:01:e8:9e:71:07:16:8c:ae:fa:2c: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:04:33:F9:69:15:FF:26:B6:F6:B0:83:18:3F:C6:64:E5:0C:17:8A X509v3 Authority Key Identifier: keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:a2:ee:a2:0e:24:1c:be:6d:c7:fc:8e:71:9b:a5:42:58: 6b:8a:f6:4a:25:1e:e0:36:5a:01:3f:93:1b:72:56:63:36:74: f9:b5:73:ad:9e:de:b5:7f:76:1f:87:62:a3:52:62:16:aa:8e: 61:e3:74:bd:ea:23:c1:f6:55:56:cd:af:8c:29:71:bb:b8:6b: 3a:bc:84:fd:d8:1f:d9:13:74:59:89:a1:ea:24:df:82:ea:b5: 73:02:72:46:e0:e4:6f:e0:5c:a4:71:2d:14:14:10:7f:42:8c: 0e:07:64:ba:dd:69:3b:52:99:40:fc:0b:12:e8:6a:3b:62:b4: 8f:e9:10:7e:25:2c:6f:51:45:18:2b:42:2f:d9:aa:37:75:c3: 80:f5:ee:af:b5:39:fe:ca:d0:76:a6:63:ba:4d:c3:50:4a:08: 33:48:d0:84:18:10:28:fd:96:cb:c1:81:53:03:c8:81:78:69: fc:92:3b:14:fc:d5:7d:91:67:96:8a:58:63:49:c2:6f:ea:cb: 8d:58:db:66:41:bd:2e:8d:c1:38:09:bb:d5:b9:d1:47:38:32: 64:d9:03:71:10:bb:ed:e7:f0:9f:10:d5:16:58:5a:76:be:ba: 67:54:ba:b2:8d:02:8e:30:bc:b6:49:66:a1:19:0e:22:54:52: 40:87:69:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKDkwOERCM0Y5Qjc0NkY1MjBCQkI5QTg0Qzg1M0Y2OTI2 QzE1RUI5QkQwHhcNMjYwOTAzMDQyMDI5WhcNMjYwOTEwMDQyMDI5WjAYMRYwFAYD VQQDEw02YTk4ZjU4ZC04MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZrL71oP9tnvK1qP5+rafKexLkc++UXqXKCQfcOQNyLZA0B7KszPrdtZayOi zpYnn2LtJ9RfjEwPj7qE+XC28KbvYyBGcByMkw7cmMDueWNJjn3yGmhLufcHMz9O noDkEqbhXhpWnl6WvMFNoiptXT6c7WTHW7rof7uMGI0sYDXlhnmwVgl58mOYYKdf 5kl+RUHk0iTl9NEJP9qj7J/7iaYqXXWQCk7Z/X1/w1CkcdAHUaXn9rLidLmINYW4 x3ywwM1ma7LDrPqFcjrD2bGclzPSskn2YwCL+xxmiH98wxS1OVTP0n7B5M2+aE2z nhv5gTZ65AHonnEHFoyu+iyh9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEEM/lp Ff8mtvawgxg/xmTlDBeKMB8GA1UdIwQYMBaAFJCNs/m3RvUgu7moTIU/aSbBXrm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8yMDlFRERDRTJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlTQzd1YWhNaFQ5cEpzRmV1 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJMnotYmRHOVNDN3VhaE1oVDlwSnNGZXViMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8yMDlFRERDRTJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlT Qzd1YWhNaFQ5cEpzRmV1YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoP+i7qIOJBy+bcf8jnGbpUJYa4r2SiUe4DZaAT+TG3JWYzZ0+bVzrZ7etX92 H4dio1JiFqqOYeN0veojwfZVVs2vjClxu7hrOryE/dgf2RN0WYmh6iTfguq1cwJy RuDkb+BcpHEtFBQQf0KMDgdkut1pO1KZQPwLEuhqO2K0j+kQfiUsb1FFGCtCL9mq N3XDgPXur7U5/srQdqZjuk3DUEoIM0jQhBgQKP2Wy8GBUwPIgXhp/JI7FPzVfZFn lopYY0nCb+rLjVjbZkG9Lo3BOAm71bnRRzgyZNkDcRC77efwnxDVFlhadr66Z1S6 so0CjjC8tklmoRkOIlRSQIdpeQ== -----END CERTIFICATE-----Generated at Sat Sep 5 03:51:26 2026 by rpki-client