$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json) Hash identifier: L03Q+kCriDvkSRHTBjkIy+d9SRn9HZGWwEjoJYgONbk= Subject key identifier: DE:A2:8B:79:DC:0A:CB:F3:B3:C2:E1:8D:CE:D0:E4:37:0D:3D:6F:81 Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Certificate serial: 1654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft Manifest number: 1623 Signing time: Tue 18 Aug 2026 16:52:37 +0000 Manifest this update: Tue 18 Aug 2026 16:52:37 +0000 Manifest next update: Tue 25 Aug 2026 16:52:37 +0000 Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: eJU72HFbr2XsskH//V1gLck3k1NSQIgrQN9nqwp/1cQ=) 2: AEDD46DA487611F19FF1A884A9833773.roa (hash: FgMrKWrpn+GpJXgcQDWpUtszqF8ntn4M2Lt8jWP8WSE=) 3: 0A668418C9EB11F091DA0157C4F9AE02.roa (hash: B6XAGeoWJ7gHsK/A3cgf58EH7svezuHZq4znOTQReaI=) 4: C6EC9794487611F1BB18259CA9833773.roa (hash: uGrQMABcpDblMXvOGQEAZzr9X1BUnAS5sR63BxjFBqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5716 (0x1654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Validity Not Before: Aug 18 16:52:37 2026 GMT Not After : Aug 25 16:52:37 2026 GMT Subject: CN=6a848dd5-68a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:d5:80:2c:4c:8a:fd:0e:9c:58:ac:a3:09: fb:44:93:4d:bf:23:40:cc:82:50:87:02:73:dd:91: e7:30:dd:a9:f3:a2:a4:56:b7:73:89:b7:e0:91:08: 1d:05:9a:02:2c:6e:1d:3e:07:79:6c:50:1a:1f:7d: 15:8f:4b:8c:a2:28:e8:71:bf:c4:47:b7:b2:9d:3b: 8e:27:6b:22:c2:c6:da:da:ea:85:72:26:48:e0:17: 42:e0:8a:ce:ce:c7:75:18:79:5d:74:3f:8d:ef:c7: 5a:6a:0d:87:1b:db:f5:0f:32:47:5a:81:c1:b2:23: 28:b0:35:ac:50:7e:11:da:62:a4:ed:a8:6b:58:b8: 3f:eb:ec:0a:5a:83:ae:fc:e1:f4:e3:bf:06:98:13: ca:c7:80:c1:b4:83:ce:21:cb:13:1f:8c:83:54:16: 43:64:f7:08:04:5a:8e:d7:b1:44:21:c0:7c:e1:70: 46:56:37:44:25:75:56:7d:bf:55:65:e1:77:99:4a: 92:80:39:aa:ea:26:1f:c0:b9:b2:e5:fc:ce:44:73: 5a:17:51:6b:09:f4:50:46:61:b6:08:65:27:69:b9: 83:02:7a:4e:bd:52:58:20:19:41:3f:9c:06:06:20: 90:5f:8e:40:62:95:84:a4:4b:62:f1:7d:3a:05:49: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A2:8B:79:DC:0A:CB:F3:B3:C2:E1:8D:CE:D0:E4:37:0D:3D:6F:81 X509v3 Authority Key Identifier: keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:78:4e:56:e7:7d:ac:aa:a2:ab:a9:42:8d:13:84:3b:13:e1: 77:9a:67:2b:71:70:91:3b:47:8a:30:fb:33:58:0c:c2:10:c9: 72:68:14:16:4d:72:e7:8e:fe:65:a3:54:e0:2b:22:ad:de:c2: 0d:3f:f9:ee:5b:ec:6e:11:15:78:0b:d6:8c:c3:87:0d:d9:4e: 14:eb:e6:db:50:eb:5f:e2:8f:82:e3:71:c0:d0:bd:e9:f1:c1: 6f:17:8a:41:ee:3f:57:c0:fb:80:85:48:07:ab:2e:97:12:e2: 05:13:9c:99:cd:dc:20:fd:4d:39:e1:89:07:6c:c7:dc:2d:d5: e7:f5:07:de:70:68:e0:0b:46:9a:23:25:2b:b6:5d:93:e9:89: 8d:29:6c:72:6b:92:7f:10:62:52:14:2e:9d:db:7b:d7:37:2b: 1a:a8:9c:b1:1b:5d:ac:87:19:82:b7:ea:0f:e5:2b:d0:09:85: d6:c6:1a:6a:ea:d8:af:d6:05:f8:20:2a:83:47:61:48:94:52: 6c:13:27:e3:d4:13:49:ab:d3:b0:e7:14:04:d8:51:68:c9:0b: 45:29:dc:9e:02:4b:31:5e:41:ed:88:a0:52:54:17:e2:83:82: 00:c8:e7:b2:61:7d:1d:3c:99:41:c3:fd:46:95:67:43:e3:1e: b3:1d:9b:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4 Mzg4MjRFQzMwHhcNMjYwODE4MTY1MjM3WhcNMjYwODI1MTY1MjM3WjAYMRYwFAYD VQQDEw02YTg0OGRkNS02OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoInVgCxMiv0OnFisown7RJNNvyNAzIJQhwJz3ZHnMN2p86KkVrdzibfgkQgd BZoCLG4dPgd5bFAaH30Vj0uMoijocb/ER7eynTuOJ2siwsba2uqFciZI4BdC4IrO zsd1GHlddD+N78daag2HG9v1DzJHWoHBsiMosDWsUH4R2mKk7ahrWLg/6+wKWoOu /OH0478GmBPKx4DBtIPOIcsTH4yDVBZDZPcIBFqO17FEIcB84XBGVjdEJXVWfb9V ZeF3mUqSgDmq6iYfwLmy5fzORHNaF1FrCfRQRmG2CGUnabmDAnpOvVJYIBlBP5wG BiCQX45AYpWEpEti8X06BUnTTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6ii3nc Csvzs8Lhjc7Q5DcNPW+BMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5 NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDk5RS80NjA0OEM3MDQ5NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZB RHV0Q0pib2kxdm1EaUNUc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3hOVud9rKqiq6lCjROEOxPhd5pnK3FwkTtHijD7M1gMwhDJcmgUFk1y547+ ZaNU4Csird7CDT/57lvsbhEVeAvWjMOHDdlOFOvm21DrX+KPguNxwNC96fHBbxeK Qe4/V8D7gIVIB6sulxLiBROcmc3cIP1NOeGJB2zH3C3V5/UH3nBo4AtGmiMlK7Zd k+mJjSlscmuSfxBiUhQundt71zcrGqicsRtdrIcZgrfqD+Ur0AmF1sYaaurYr9YF +CAqg0dhSJRSbBMn49QTSavTsOcUBNhRaMkLRSncngJLMV5B7YigUlQX4oOCAMjn smF9HTyZQcP9RpVnQ+Mesx2bGQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:40 2026 by rpki-client