$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: DSfuL90pT5ui8hpI9Q8eGUhKpN/y6d3NOaok6SAaKBU= Subject key identifier: 1F:91:7D:BF:7D:60:B4:B0:39:32:01:AC:15:82:A5:8C:D5:8B:B3:A8 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 08F3 Signing time: Tue 18 Aug 2026 20:38:18 +0000 Manifest this update: Tue 18 Aug 2026 20:38:17 +0000 Manifest next update: Tue 25 Aug 2026 20:38:17 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: 4Zx7H1FICbZVIv1XEBzgTJ47Rhbzdrw8Jl3lhj9CHYU=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Aug 18 20:38:17 2026 GMT Not After : Aug 25 20:38:17 2026 GMT Subject: CN=6a84c2ba-07e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:89:73:aa:d6:7d:95:3d:d6:7a:a2:4f:ad: d5:15:ef:7e:f7:28:6c:a1:3b:50:e4:0f:a3:40:73: e1:ea:53:1f:5c:ea:66:2d:38:eb:cd:14:a7:43:0b: c4:9c:ee:df:b8:96:a5:e8:9c:f1:e5:8c:94:e9:a3: 6e:c4:4f:d1:8b:a8:f1:33:15:b4:d8:3c:45:6b:26: 4f:7f:0f:d4:27:9f:58:1d:fd:fc:d6:1a:9d:2e:f4: 88:5b:22:07:62:7b:a7:6a:9d:bb:dc:bb:03:64:69: ef:13:84:33:b0:c2:d9:e2:e6:92:21:c4:3c:e4:b0: b0:d8:89:39:6d:cd:1a:1a:5d:bc:6f:ef:e4:29:35: e0:8d:cb:f8:ba:90:68:d8:92:99:ab:8b:1d:d3:57: b2:80:1f:72:2c:bb:da:c6:1a:5c:85:db:4f:3e:3d: 21:2b:74:20:fb:ca:dc:2c:a7:fa:2d:1b:b9:15:1b: 5a:2c:78:b9:00:3a:7a:4b:c0:30:86:67:79:92:23: a3:eb:12:5f:a1:4a:ef:b7:f7:50:a9:08:19:5f:a9: 76:77:65:a4:d9:a7:cc:c0:4b:21:64:22:5d:80:b2: 69:3b:2c:82:83:3b:b0:59:13:b9:73:e4:e1:52:cd: 3f:31:2a:0e:16:4e:3c:9b:b8:36:7b:27:46:bf:a4: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:91:7D:BF:7D:60:B4:B0:39:32:01:AC:15:82:A5:8C:D5:8B:B3:A8 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:98:5a:3f:57:e9:b6:f8:96:a3:d2:f1:01:66:2a:f9:8b:3b: de:17:1f:65:71:58:b8:cb:aa:33:43:9d:3f:63:1c:8e:af:1d: 85:f9:bb:87:85:ae:2b:f5:5b:8c:0d:16:fb:ea:a7:39:97:af: ce:63:4a:2b:c9:c0:dd:36:d8:e7:69:16:36:01:41:fb:d9:30: 53:80:02:39:68:08:0f:61:8a:50:1e:3e:cd:fa:4c:48:7a:a3: 0f:78:1b:bc:61:7c:1d:2c:27:fa:9c:88:95:d3:1e:98:03:4d: aa:0e:6f:86:91:b6:e8:79:79:7d:e5:c8:1f:a3:5d:08:b9:04: 7f:7c:4a:e8:24:0c:9f:08:50:6f:aa:a4:68:a2:3b:1e:56:f5: 99:9e:83:1d:6e:9e:28:af:2f:90:72:83:6a:4d:3e:1c:0f:d5: 59:aa:75:55:b2:16:13:82:8a:e8:96:43:4f:6d:f2:0a:39:78: 05:65:42:51:98:66:e5:1c:6a:68:a7:01:4b:45:a8:df:f2:09: 07:1e:72:b7:ae:84:75:76:b3:f8:06:25:71:a4:7c:c9:a4:86: 8e:c5:c8:c3:18:78:5b:83:c5:fb:af:71:e9:ea:7c:6e:9b:45: a7:1a:cb:a3:49:73:24:82:a0:20:ec:3d:eb:6f:7e:6e:bc:cb: 74:34:f0:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwODE4MjAzODE3WhcNMjYwODI1MjAzODE3WjAYMRYwFAYD VQQDEw02YTg0YzJiYS0wN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOqJc6rWfZU91nqiT63VFe9+9yhsoTtQ5A+jQHPh6lMfXOpmLTjrzRSnQwvE nO7fuJal6Jzx5YyU6aNuxE/Ri6jxMxW02DxFayZPfw/UJ59YHf381hqdLvSIWyIH Ynunap273LsDZGnvE4QzsMLZ4uaSIcQ85LCw2Ik5bc0aGl28b+/kKTXgjcv4upBo 2JKZq4sd01eygB9yLLvaxhpchdtPPj0hK3Qg+8rcLKf6LRu5FRtaLHi5ADp6S8Aw hmd5kiOj6xJfoUrvt/dQqQgZX6l2d2Wk2afMwEshZCJdgLJpOyyCgzuwWRO5c+Th Us0/MSoOFk48m7g2eydGv6R+GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+Rfb99 YLSwOTIBrBWCpYzVi7OoMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlphaP1fptviWo9LxAWYq+Ys73hcfZXFYuMuqM0OdP2Mcjq8dhfm7h4WuK/Vb jA0W++qnOZevzmNKK8nA3TbY52kWNgFB+9kwU4ACOWgID2GKUB4+zfpMSHqjD3gb vGF8HSwn+pyIldMemANNqg5vhpG26Hl5feXIH6NdCLkEf3xK6CQMnwhQb6qkaKI7 Hlb1mZ6DHW6eKK8vkHKDak0+HA/VWap1VbIWE4KK6JZDT23yCjl4BWVCUZhm5Rxq aKcBS0Wo3/IJBx5yt66EdXaz+AYlcaR8yaSGjsXIwxh4W4PF+69x6ep8bptFpxrL o0lzJIKgIOw9629+brzLdDTw5g== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:43 2026 by rpki-client