$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft File: rYQ8jfSRtv8A6PnztRksOZYqSM8.mft (raw, json) Hash identifier: u3Z+cHDbm3/aUG5XKIdgpIA9JwvYlIKLcXxQHDJXk78= Subject key identifier: 49:26:DA:BC:C8:1E:C0:8A:71:ED:D4:33:45:2E:D9:AC:5B:23:80:88 Authority key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF Certificate issuer: /CN=A911583F/serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft Manifest number: 0D Signing time: Tue 25 Aug 2026 09:02:26 +0000 Manifest this update: Tue 25 Aug 2026 09:02:25 +0000 Manifest next update: Tue 01 Sep 2026 09:02:25 +0000 Files and hashes: 1: rYQ8jfSRtv8A6PnztRksOZYqSM8.crl (hash: M9ne6jLpolRX498EEAfpHVlWKjT9CWZXhTPuh126jqo=) 2: 72D413B290EC11F1A202C1754A11F970.roa (hash: Arcy6owVvYDgskgZwg06kTzf4YUjIwfvXCvbOmqa3OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 09:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF Validity Not Before: Aug 25 09:02:25 2026 GMT Not After : Sep 1 09:02:25 2026 GMT Subject: CN=6a8d5a22-2964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:21:79:bc:5b:1f:ec:d0:ac:28:4f:12:1f: 71:3c:ab:2a:47:18:88:49:31:ff:15:cb:db:32:bc: 8a:42:78:1a:11:36:dd:f0:ab:12:89:ea:39:3d:d8: 33:cd:11:4b:41:19:95:e4:20:89:de:17:2e:89:6c: 65:4e:d4:2b:cf:02:88:8f:83:a7:bb:a2:bb:68:06: 8e:eb:3c:06:18:59:91:22:32:dc:ca:bf:a5:8f:de: 70:89:bc:8d:b3:3d:48:c9:ae:73:99:22:a0:97:5c: 36:ad:c0:ce:cf:21:b7:78:50:21:cf:1b:10:ff:4c: 5c:88:73:4b:e9:b2:8d:dc:95:59:52:69:e1:03:73: 22:42:cb:7c:18:86:2a:57:11:cf:30:dc:cd:d2:68: 48:1f:9e:7e:20:91:89:28:83:10:86:cc:04:99:dc: 27:85:8e:57:11:b0:1e:23:3b:e6:42:c8:ac:9c:8f: 5f:8f:a9:59:80:d7:c7:25:62:75:fa:7d:7e:e9:62: 47:f7:af:92:59:1e:e4:e2:fb:4e:78:86:da:ed:25: 1f:fe:94:40:73:cb:1c:85:c3:58:47:cb:25:d8:05: 6c:61:c0:5e:f2:b5:dd:aa:fd:e1:4a:9d:36:e6:ac: 90:9e:9f:9c:03:0d:ea:45:31:38:f9:67:94:48:86: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:26:DA:BC:C8:1E:C0:8A:71:ED:D4:33:45:2E:D9:AC:5B:23:80:88 X509v3 Authority Key Identifier: keyid:AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e7:61:8b:fb:6f:b5:e5:c6:55:98:48:3c:01:f8:53:5f:39: 86:ad:3c:1e:07:bb:79:b0:df:dc:99:00:4f:b9:79:ee:30:9b: 54:3f:e5:61:e4:9d:66:b0:1c:5f:50:8f:5d:e2:25:25:53:06: ed:5c:d8:9c:1d:ff:b2:eb:9a:a7:c3:92:fc:0e:9c:c7:41:aa: d0:ad:3d:09:f6:5d:bf:7c:c7:78:97:09:fd:7f:6e:00:22:31: 8b:8e:1e:53:89:5f:ca:0b:2e:0e:bc:c1:b8:5d:cb:2a:83:79: 3f:93:f8:f3:68:e7:51:d9:e8:75:75:8e:74:31:e8:2d:69:1d: 0c:e4:f2:f6:0f:51:e5:4b:a3:33:fe:b7:e7:51:03:11:61:fd: 90:3a:3c:d1:d8:af:b2:4e:ec:db:49:b9:74:db:58:99:c7:20: 7d:6e:cb:00:2d:e3:9e:02:22:5c:ee:74:36:1e:1e:4b:5a:78: ff:91:f2:af:9f:5f:73:33:34:72:09:da:84:e1:42:25:85:cc: cc:80:d5:59:4b:15:ca:6e:7e:bb:02:c1:a2:1f:8d:89:6c:49: 97:2f:84:b2:45:4d:86:16:e2:4a:b5:30:d2:f9:9f:9c:da:a5: 36:cd:de:92:44:d1:82:9b:4e:51:05:a8:c9:d6:3a:48:4e:b5: 62:ec:d7:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NTgzRjExMC8GA1UEBRMoQUQ4NDNDOERGNDkxQjZGRjAwRThGOUYzQjUxOTJDMzk5 NjJBNDhDRjAeFw0yNjA4MjUwOTAyMjVaFw0yNjA5MDEwOTAyMjVaMBgxFjAUBgNV BAMTDTZhOGQ1YTIyLTI5NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvQCF5vFsf7NCsKE8SH3E8qypHGIhJMf8Vy9syvIpCeBoRNt3wqxKJ6jk92DPN EUtBGZXkIIneFy6JbGVO1CvPAoiPg6e7ortoBo7rPAYYWZEiMtzKv6WP3nCJvI2z PUjJrnOZIqCXXDatwM7PIbd4UCHPGxD/TFyIc0vpso3clVlSaeEDcyJCy3wYhipX Ec8w3M3SaEgfnn4gkYkogxCGzASZ3CeFjlcRsB4jO+ZCyKycj1+PqVmA18clYnX6 fX7pYkf3r5JZHuTi+054htrtJR/+lEBzyxyFw1hHyyXYBWxhwF7ytd2q/eFKnTbm rJCen5wDDepFMTj5Z5RIhr+fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSSbavMge wIpx7dQzRS7ZrFsjgIgwHwYDVR0jBBgwFoAUrYQ8jfSRtv8A6PnztRksOZYqSM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1ODNGLzY5ODc3MzBFOTBF QjExRjE5NTI0NUM4MjQ5MTFGOTcwL3JZUThqZlNSdHY4QTZQbnp0UmtzT1pZcVNN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcllROGpmU1J0djhBNlBuenRSa3NPWllxU004LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1 ODNGLzY5ODc3MzBFOTBFQjExRjE5NTI0NUM4MjQ5MTFGOTcwL3JZUThqZlNSdHY4 QTZQbnp0UmtzT1pZcVNNOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT52GL+2+15cZVmEg8AfhTXzmGrTweB7t5sN/cmQBPuXnuMJtUP+Vh5J1msBxf UI9d4iUlUwbtXNicHf+y65qnw5L8DpzHQarQrT0J9l2/fMd4lwn9f24AIjGLjh5T iV/KCy4OvMG4Xcsqg3k/k/jzaOdR2eh1dY50MegtaR0M5PL2D1HlS6Mz/rfnUQMR Yf2QOjzR2K+yTuzbSbl021iZxyB9bssALeOeAiJc7nQ2Hh5LWnj/kfKvn19zMzRy CdqE4UIlhczMgNVZSxXKbn67AsGiH42JbEmXL4SyRU2GFuJKtTDS+Z+c2qU2zd6S RNGCm05RBajJ1jpITrVi7NcU -----END CERTIFICATE-----Generated at Wed Aug 26 13:55:39 2026 by rpki-client