$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: ofnsM9F0mv/XNc1J+Ovh5gNzxWIA6A42V98qNeCA4Hc= Subject key identifier: 7D:97:D4:78:B2:D9:1C:AB:3B:1B:B0:3C:42:AB:29:D3:7D:70:03:99 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01E0 Signing time: Sat 05 Sep 2026 03:33:32 +0000 Manifest this update: Sat 05 Sep 2026 03:33:32 +0000 Manifest next update: Sat 12 Sep 2026 03:33:32 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: pDAI6Flwmv6DX9GeliNp8KR67ZK5JJYMOaeh6bKExts=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 7eQsc3jFfyJA5G5xsvQGlnjUsJ7FXLyXJQcnFpGfOuU=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Y5OchRYZWCfXmYyEmnL2P8kc7yv28yWNLEvFTKE+MGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Sep 5 03:33:32 2026 GMT Not After : Sep 12 03:33:32 2026 GMT Subject: CN=6a9b8d8c-abc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:cf:f8:e0:62:1a:f4:ff:de:4e:30:f4:8d: 79:e0:3c:64:5f:d1:d7:99:b3:cf:1d:c2:19:d3:08: 06:41:93:a4:fe:f2:e3:e2:ef:67:bb:1d:80:73:31: fc:6a:c3:47:83:50:84:40:83:fd:19:2a:ce:f8:c6: 7b:30:6c:02:e2:01:80:9f:54:fb:de:ff:3e:e0:b1: e1:01:5a:b4:80:4b:0b:ae:1e:32:cf:14:61:63:c8: 7e:17:24:e4:c7:1f:c8:3c:97:6a:60:3a:f4:2d:d1: eb:7e:08:5c:7e:b4:e9:f0:9c:90:c5:b6:df:8f:90: b3:33:97:80:8a:59:48:3b:f6:56:78:56:35:15:59: 2f:59:a7:25:45:83:14:ce:db:2d:fc:0f:c7:d1:7e: 78:b8:8c:77:a3:06:67:b1:e5:d3:fb:fa:bb:ca:70: 29:81:5d:37:c8:24:67:18:70:7c:57:6e:e3:1c:b4: 58:6a:49:88:93:7e:bd:e0:63:71:b4:65:a9:81:fd: 88:c3:93:92:10:fe:5c:7c:d8:f0:5a:e9:e6:5a:f2: 71:4c:46:86:bf:ca:fd:94:d0:f8:dd:07:02:e7:8a: 2e:a1:7f:7d:e6:ea:ab:07:64:eb:b0:62:db:bf:de: 11:97:a4:4a:e7:d5:8b:db:5d:a0:42:cf:ec:aa:f9: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:D4:78:B2:D9:1C:AB:3B:1B:B0:3C:42:AB:29:D3:7D:70:03:99 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ae:21:6f:13:cc:7b:d8:f9:d5:78:ea:10:01:a7:30:32:4d: c1:fb:a9:0d:bd:c8:12:40:ce:d9:b8:e9:62:83:c5:a5:1b:f3: d8:3d:93:61:6e:92:96:11:6a:d6:4a:bd:17:28:5c:86:0b:67: 3c:c3:06:89:45:78:96:38:fd:9f:b2:f2:f4:3b:0b:98:f7:ce: 8d:ba:0d:85:c8:55:01:f4:ce:02:81:2a:1f:bc:e1:a2:35:67: 5e:64:31:82:e6:df:4e:86:bd:10:62:79:d6:38:f1:e8:be:d1: 0f:5a:c5:b2:09:d4:17:a2:31:00:aa:f7:b8:27:15:96:ca:eb: 3a:7e:66:74:f3:15:cb:5e:52:7a:58:ee:c3:df:d4:8d:3e:19: f9:c3:d2:e7:1c:b3:4c:7b:d4:fe:a2:1d:80:44:7e:2b:ed:15: a2:d5:7a:45:46:dc:c4:1b:a3:9b:f0:2e:f6:b8:20:17:de:3a: d5:b6:92:bf:63:6d:d9:b2:95:bd:ca:11:28:93:ec:97:fd:a7: e9:ae:52:2f:2c:6f:e6:3b:87:ed:49:fa:33:b2:4a:c8:8a:ac: 2f:3f:a7:96:e2:16:97:43:ab:00:7a:6b:be:33:eb:f7:cd:c3: 36:81:ab:29:42:6f:65:e1:0b:fb:0a:4d:07:85:67:3d:b3:16: bf:bb:6d:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwOTA1MDMzMzMyWhcNMjYwOTEyMDMzMzMyWjAYMRYwFAYD VQQDEw02YTliOGQ4Yy1hYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw3P+OBiGvT/3k4w9I154DxkX9HXmbPPHcIZ0wgGQZOk/vLj4u9nux2AczH8 asNHg1CEQIP9GSrO+MZ7MGwC4gGAn1T73v8+4LHhAVq0gEsLrh4yzxRhY8h+FyTk xx/IPJdqYDr0LdHrfghcfrTp8JyQxbbfj5CzM5eAillIO/ZWeFY1FVkvWaclRYMU ztst/A/H0X54uIx3owZnseXT+/q7ynApgV03yCRnGHB8V27jHLRYakmIk3694GNx tGWpgf2Iw5OSEP5cfNjwWunmWvJxTEaGv8r9lND43QcC54ouoX995uqrB2TrsGLb v94Rl6RK59WL212gQs/sqvmN5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2X1Hiy 2RyrOxuwPEKrKdN9cAOZMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATK4hbxPMe9j51XjqEAGnMDJNwfupDb3IEkDO2bjpYoPFpRvz2D2TYW6SlhFq 1kq9FyhchgtnPMMGiUV4ljj9n7Ly9DsLmPfOjboNhchVAfTOAoEqH7zhojVnXmQx gubfToa9EGJ51jjx6L7RD1rFsgnUF6IxAKr3uCcVlsrrOn5mdPMVy15Seljuw9/U jT4Z+cPS5xyzTHvU/qIdgER+K+0VotV6RUbcxBujm/Au9rggF9461baSv2Nt2bKV vcoRKJPsl/2n6a5SLyxv5juH7Un6M7JKyIqsLz+nluIWl0OrAHprvjPr983DNoGr KUJvZeEL+wpNB4VnPbMWv7tthw== -----END CERTIFICATE-----Generated at Sat Sep 5 08:14:16 2026 by rpki-client