$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: 3f8hxgzkkumHw4yjaJ596osLKsfLcQAyWGNWWi7mX7E= Subject key identifier: A7:68:D2:43:F9:A5:4E:41:AF:17:C2:87:59:A7:5A:54:2C:FF:E4:4B Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 09BB Signing time: Tue 18 Aug 2026 20:16:58 +0000 Manifest this update: Tue 18 Aug 2026 20:16:57 +0000 Manifest next update: Tue 25 Aug 2026 20:16:57 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: dIPUiujq2TImO/9hSskZ723BIjYxiVl1JLMsJ8k3K6M=) 2: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=) 3: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=) 4: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Aug 18 20:16:57 2026 GMT Not After : Aug 25 20:16:57 2026 GMT Subject: CN=6a84bdba-c6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:29:b5:6e:8f:83:d2:11:b7:f9:de:51:66:0d: 2b:b8:84:de:cf:b5:90:4d:b6:4e:71:f1:f3:48:e8: 7b:45:d4:93:68:ba:dc:7a:74:45:65:d0:4f:9d:f0: 86:2b:45:4f:43:74:01:b3:3f:3a:fc:9a:65:93:ec: a5:13:ad:2c:3d:3a:8c:25:ac:43:60:87:86:9f:d3: 47:1f:1b:67:c1:28:a8:b2:59:67:5f:70:0e:72:f6: d4:65:e0:1b:b8:0e:3e:16:39:81:68:a7:5b:c0:da: c4:50:6e:04:a8:11:88:c7:22:5e:be:de:97:7f:c4: 87:51:1d:66:fd:08:a2:59:85:1a:6a:a7:9d:a6:ce: 1c:4c:72:13:e2:d9:68:f9:77:a7:51:67:74:29:c8: 98:46:57:95:ba:7b:7a:6f:d2:9a:95:d2:43:c7:66: d2:c2:3e:e8:ef:33:98:21:48:4f:cb:46:47:27:36: b4:36:72:9b:5e:79:bc:02:61:e6:b9:c9:42:26:0e: 5d:6e:ba:3c:45:0b:95:75:73:98:8b:32:ba:0f:67: 6c:c1:00:f9:bf:a1:bd:04:b1:0e:49:41:1e:ea:d6: 61:a7:06:60:16:cb:4d:8d:e9:53:4d:e0:73:c4:eb: c4:9c:70:9f:d7:8c:3f:e4:28:09:9f:de:1f:16:ee: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:D2:43:F9:A5:4E:41:AF:17:C2:87:59:A7:5A:54:2C:FF:E4:4B X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d4:b5:74:8a:22:11:7c:26:3a:26:2d:62:0a:b8:9e:d6:ea: 67:dc:0a:bf:60:1c:34:2b:4a:0a:1e:e7:30:75:ce:25:5a:bf: 13:fb:3c:d4:f3:dd:0a:d6:a5:89:1f:15:d9:ca:74:40:13:93: 94:a7:f5:20:a4:4f:dd:46:20:fe:57:ae:48:8e:99:5a:6d:c2: d0:04:03:1e:3f:d2:a9:70:4b:56:68:51:48:48:16:6c:1f:1e: a2:62:63:dd:9e:11:08:5d:ea:5b:6f:db:dd:a9:96:d6:13:4d: b1:8c:a9:a8:bb:95:5b:74:2d:c0:fb:dc:c2:f5:d5:4e:84:b4: f4:1a:34:94:ee:77:59:9b:b8:c6:cc:b3:62:44:4b:aa:32:1c: 76:37:fb:81:1e:65:f6:58:75:f7:18:70:7c:cd:21:9a:b7:87: e2:f2:f4:51:27:66:ba:e2:bb:d5:e3:16:fd:e3:7a:d7:f1:32: 2f:eb:b7:8d:4e:e5:77:b7:85:a5:c7:36:21:3d:3e:7a:ab:81: 7e:65:40:cf:d5:a4:c9:50:3b:44:33:35:ce:0a:b2:7e:55:6a: 53:fa:c2:28:64:ea:29:3d:85:4c:01:61:41:9a:51:4c:11:e3: 4d:cb:7d:c7:17:f4:1e:76:de:b5:04:0e:65:fe:de:2a:6d:ff: 5e:a2:cf:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwODE4MjAxNjU3WhcNMjYwODI1MjAxNjU3WjAYMRYwFAYD VQQDEw02YTg0YmRiYS1jNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCm1bo+D0hG3+d5RZg0ruITez7WQTbZOcfHzSOh7RdSTaLrcenRFZdBPnfCG K0VPQ3QBsz86/Jplk+ylE60sPTqMJaxDYIeGn9NHHxtnwSiosllnX3AOcvbUZeAb uA4+FjmBaKdbwNrEUG4EqBGIxyJevt6Xf8SHUR1m/QiiWYUaaqedps4cTHIT4tlo +XenUWd0KciYRleVunt6b9KaldJDx2bSwj7o7zOYIUhPy0ZHJza0NnKbXnm8AmHm uclCJg5dbro8RQuVdXOYizK6D2dswQD5v6G9BLEOSUEe6tZhpwZgFstNjelTTeBz xOvEnHCf14w/5CgJn94fFu6xzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdo0kP5 pU5BrxfCh1mnWlQs/+RLMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcdS1dIoiEXwmOiYtYgq4ntbqZ9wKv2AcNCtKCh7nMHXOJVq/E/s81PPdCtal iR8V2cp0QBOTlKf1IKRP3UYg/leuSI6ZWm3C0AQDHj/SqXBLVmhRSEgWbB8eomJj 3Z4RCF3qW2/b3amW1hNNsYypqLuVW3QtwPvcwvXVToS09Bo0lO53WZu4xsyzYkRL qjIcdjf7gR5l9lh19xhwfM0hmreH4vL0USdmuuK71eMW/eN61/EyL+u3jU7ld7eF pcc2IT0+equBfmVAz9WkyVA7RDM1zgqyflVqU/rCKGTqKT2FTAFhQZpRTBHjTct9 xxf0HnbetQQOZf7eKm3/XqLPrA== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:29 2026 by rpki-client