$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: CTY5P4Zp8Qk6jChLHdtEpr57kA7fTvoQlIdAyKzq4Mg= Subject key identifier: 28:1A:FC:87:DB:C3:93:77:1F:C5:C7:10:F7:D3:0B:44:9E:66:74:C2 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0A01 Signing time: Tue 18 Aug 2026 20:09:47 +0000 Manifest this update: Tue 18 Aug 2026 20:09:46 +0000 Manifest next update: Tue 25 Aug 2026 20:09:46 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: 0XpjUNnFA1qpuLUDmtjFfYuiYoJIf/gtTxTjbSrmUKw=) 2: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=) 3: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Aug 18 20:09:46 2026 GMT Not After : Aug 25 20:09:46 2026 GMT Subject: CN=6a84bc0a-53b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:b7:17:8e:4a:fc:0d:61:21:f3:8f:6b:b2: 0e:38:02:83:45:f5:b0:8c:fd:7d:5c:9a:d3:09:fe: b9:7f:a9:57:19:35:ea:60:e7:04:8e:7d:1f:cc:ec: 56:63:55:3d:6a:89:38:79:73:c4:dc:36:4b:b7:68: cf:51:18:3e:cd:db:c6:f0:24:ed:65:27:06:83:c2: b4:27:0e:e2:a5:3a:9d:f3:a9:0c:16:0a:c6:d6:52: 61:3d:72:ad:53:bb:a8:98:3e:f1:b3:5e:13:fe:01: 4e:22:68:11:93:9f:e7:70:4e:41:e5:45:b5:35:36: 88:71:d1:8f:2a:1e:f2:a3:51:a2:8a:fb:4d:fe:18: 06:2c:35:47:e7:4c:ba:11:2b:5b:7a:a2:dd:9d:6d: 0f:e4:52:d2:90:2e:02:4e:8f:ba:bc:9c:65:bc:36: c4:3f:af:b0:7d:95:54:2a:03:8d:cf:22:f5:5e:2b: 39:3f:7e:ea:ea:77:e9:2b:5c:28:06:a6:26:c3:d3: 86:77:9e:4a:ab:e7:53:a4:29:fe:9a:45:6d:7b:06: 0a:a6:21:3f:84:51:2e:67:d0:a2:1e:ce:11:d0:ff: 9e:37:c2:62:04:26:59:30:25:de:e5:67:10:21:a2: 89:fe:b1:4e:be:4e:61:07:3c:5d:a9:91:98:17:b3: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:FC:87:DB:C3:93:77:1F:C5:C7:10:F7:D3:0B:44:9E:66:74:C2 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f0:00:2b:9f:f5:d3:5a:83:0c:f6:80:9a:2b:b0:19:98:c1: fd:45:f2:d5:5a:99:57:78:66:f2:44:cc:fa:db:c3:52:81:67: d8:b2:f2:aa:df:d8:d6:e3:c8:ea:a9:a4:e0:09:ef:e0:ee:77: 01:9a:9c:d0:3a:6f:b7:6e:1b:de:7d:e0:ce:88:4b:f9:8b:6d: 73:7d:54:6d:79:78:b2:cf:2b:0e:a4:68:c2:8e:0e:ce:65:5e: 82:b2:6b:ff:1b:a6:55:2d:f8:63:2d:03:19:6f:71:d8:1d:20: 92:c8:b8:d4:32:b7:f1:b2:30:e6:f9:fe:28:ca:b8:69:fe:11: 99:0a:47:26:3b:dc:e6:85:0a:c5:d1:9b:1c:31:96:8b:48:eb: f1:cc:a4:bd:72:c9:5b:fb:48:44:06:6c:21:34:f2:ac:c9:bf: bb:4b:cb:ef:a0:d4:24:97:97:51:94:24:5a:69:38:fb:bd:27: e2:77:57:14:99:d1:c0:2f:ed:f8:53:b2:57:0d:80:66:8f:7f: 30:03:1d:5e:52:4c:ea:47:2c:23:d3:4a:18:7b:b8:90:b2:7b: e0:51:89:d5:c8:93:3e:f5:15:cc:7a:fd:17:61:ca:4f:0f:48: bd:71:d3:71:a5:c3:0b:68:c7:8f:34:fb:6e:eb:31:45:8e:b5: 44:51:bc:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjYwODE4MjAwOTQ2WhcNMjYwODI1MjAwOTQ2WjAYMRYwFAYD VQQDEw02YTg0YmMwYS01M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRK3F45K/A1hIfOPa7IOOAKDRfWwjP19XJrTCf65f6lXGTXqYOcEjn0fzOxW Y1U9aok4eXPE3DZLt2jPURg+zdvG8CTtZScGg8K0Jw7ipTqd86kMFgrG1lJhPXKt U7uomD7xs14T/gFOImgRk5/ncE5B5UW1NTaIcdGPKh7yo1GiivtN/hgGLDVH50y6 EStbeqLdnW0P5FLSkC4CTo+6vJxlvDbEP6+wfZVUKgONzyL1Xis5P37q6nfpK1wo BqYmw9OGd55Kq+dTpCn+mkVtewYKpiE/hFEuZ9CiHs4R0P+eN8JiBCZZMCXe5WcQ IaKJ/rFOvk5hBzxdqZGYF7NsBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCga/Ifb w5N3H8XHEPfTC0SeZnTCMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPAAK5/101qDDPaAmiuwGZjB/UXy1VqZV3hm8kTM+tvDUoFn2LLyqt/Y1uPI 6qmk4Anv4O53AZqc0Dpvt24b3n3gzohL+Yttc31UbXl4ss8rDqRowo4OzmVegrJr /xumVS34Yy0DGW9x2B0gksi41DK38bIw5vn+KMq4af4RmQpHJjvc5oUKxdGbHDGW i0jr8cykvXLJW/tIRAZsITTyrMm/u0vL76DUJJeXUZQkWmk4+70n4ndXFJnRwC/t +FOyVw2AZo9/MAMdXlJM6kcsI9NKGHu4kLJ74FGJ1ciTPvUVzHr9F2HKTw9IvXHT caXDC2jHjzT7busxRY61RFG80w== -----END CERTIFICATE-----Generated at Wed Aug 19 11:43:10 2026 by rpki-client