$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: JCSfrYpZYbbamH6GBpttV//USuACEeMrhku4T5jiEEM= Subject key identifier: E8:8D:33:6F:19:F8:49:24:FD:DE:C6:E2:99:84:18:78:4E:6B:94:84 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 098B Signing time: Tue 08 Sep 2026 20:07:59 +0000 Manifest this update: Tue 08 Sep 2026 20:07:58 +0000 Manifest next update: Tue 15 Sep 2026 20:07:58 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: TMSF19JBxqgmVaIGJjeeARRAiEDehzG674eczZJEUzo=) 2: 9F5F74265D7511F18F235C80C1833773.roa (hash: 0fZccuokxMBdsDfqfz3v6IokDESdGPotG9nJBoFw7Zw=) 3: 3A30A1505D7611F1A65CDC84C1833773.roa (hash: xhAHuvmO3aSQ7a3p7cQ67FVXsueoW86sk1sPeDMX+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 20:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Sep 8 20:07:58 2026 GMT Not After : Sep 15 20:07:58 2026 GMT Subject: CN=6aa06b1f-9f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:81:c0:be:b9:a1:4e:e6:d1:26:fc:ce:66: b4:41:d6:e8:ed:42:b8:6a:33:35:01:ea:65:b5:2b: 0b:94:3e:56:77:10:23:03:f0:dd:c0:f3:89:5d:34: 76:03:8d:41:00:ad:a3:32:68:df:15:22:05:e5:e3: a4:68:e2:eb:60:59:e7:39:72:18:fc:92:a9:38:d6: f4:41:1a:fc:34:e6:5a:ef:46:0b:95:cb:1b:0e:3c: 77:e0:16:32:3f:53:87:4e:e1:3c:e2:ab:7c:25:bf: ab:c8:d9:a8:21:5f:e7:c6:f1:49:2d:97:37:7e:a3: c3:3a:0b:c4:d1:4a:1b:2e:21:6c:59:a4:3a:ca:6d: 34:aa:3a:ea:87:dd:cd:d1:96:5f:57:f1:54:1f:c1: f2:ed:ce:aa:63:3f:e0:e4:85:29:5a:14:6f:0f:22: f9:54:5b:54:49:b9:d1:e8:df:b8:58:65:2b:dc:90: 7e:36:e0:d3:f4:9d:80:79:de:ec:58:6d:e1:b1:14: f2:c7:9d:38:38:d1:cd:92:19:86:ac:34:fa:ef:88: 9c:b9:98:eb:74:f4:2b:8e:25:4f:59:6f:dc:38:16: ad:e3:9c:ce:32:a7:14:1a:ed:4a:65:a5:05:a8:69: 02:5e:2f:69:2f:f6:89:6d:bd:45:bc:f2:10:d4:48: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8D:33:6F:19:F8:49:24:FD:DE:C6:E2:99:84:18:78:4E:6B:94:84 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e8:07:76:32:2b:dd:43:72:ed:0c:16:b6:91:68:39:9a:d6: 8b:d2:09:39:30:d4:14:7f:b3:2e:1f:85:a0:38:24:24:b0:4f: 83:61:5a:9c:3c:dc:04:a1:d8:87:d3:5a:43:5f:71:a8:46:a4: ef:22:c0:3b:0e:6d:c9:1b:42:8e:aa:b8:8d:7d:27:af:23:b9: f3:4f:94:e7:45:f4:13:bb:b5:8d:59:9f:24:5b:14:6f:b0:23: 8a:77:50:2c:8c:1a:e0:b8:3b:f3:d6:ce:11:6b:3e:58:b4:4a: 3f:56:6e:78:e7:29:c0:96:1f:87:f1:58:24:46:b9:5d:e4:0b: 99:45:aa:2b:22:28:e3:8d:20:7c:88:72:e7:ad:ae:67:eb:4c: 96:5f:57:46:41:7f:b2:ad:46:ec:c2:6b:15:e2:87:8e:ac:5e: 22:ee:8d:6b:09:cf:2a:3c:24:9b:98:58:1b:53:cf:60:4b:dc: 1f:63:09:56:5c:6d:e6:02:b7:20:ba:f5:61:d9:15:51:3f:2c: 80:8e:90:ed:78:8d:72:7f:18:3d:2f:9f:15:c2:b9:41:ac:90: dd:2d:da:bf:a2:49:2b:46:12:9e:29:ca:23:3e:d3:87:d1:2f: cd:0f:73:85:ae:c7:2d:87:96:76:09:85:9c:e5:8c:34:50:22: 9f:a8:88:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjYwOTA4MjAwNzU4WhcNMjYwOTE1MjAwNzU4WjAYMRYwFAYD VQQDEw02YWEwNmIxZi05ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqiBwL65oU7m0Sb8zma0Qdbo7UK4ajM1AepltSsLlD5WdxAjA/DdwPOJXTR2 A41BAK2jMmjfFSIF5eOkaOLrYFnnOXIY/JKpONb0QRr8NOZa70YLlcsbDjx34BYy P1OHTuE84qt8Jb+ryNmoIV/nxvFJLZc3fqPDOgvE0UobLiFsWaQ6ym00qjrqh93N 0ZZfV/FUH8Hy7c6qYz/g5IUpWhRvDyL5VFtUSbnR6N+4WGUr3JB+NuDT9J2Aed7s WG3hsRTyx504ONHNkhmGrDT674icuZjrdPQrjiVPWW/cOBat45zOMqcUGu1KZaUF qGkCXi9pL/aJbb1FvPIQ1EhEeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiNM28Z +Ekk/d7G4pmEGHhOa5SEMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeugHdjIr3UNy7QwWtpFoOZrWi9IJOTDUFH+zLh+FoDgkJLBPg2FanDzcBKHY h9NaQ19xqEak7yLAOw5tyRtCjqq4jX0nryO580+U50X0E7u1jVmfJFsUb7AjindQ LIwa4Lg789bOEWs+WLRKP1ZueOcpwJYfh/FYJEa5XeQLmUWqKyIo440gfIhy562u Z+tMll9XRkF/sq1G7MJrFeKHjqxeIu6NawnPKjwkm5hYG1PPYEvcH2MJVlxt5gK3 ILr1YdkVUT8sgI6Q7XiNcn8YPS+fFcK5QayQ3S3av6JJK0YSninKIz7Th9EvzQ9z ha7HLYeWdgmFnOWMNFAin6iIvw== -----END CERTIFICATE-----Generated at Wed Sep 9 15:06:05 2026 by rpki-client