$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: GDjinU6alAp3fLMWweIpSj3kwQQCCo+0C5BztJRp5is= Subject key identifier: 18:4D:2D:86:50:30:D9:DD:EE:CE:2A:E1:9B:F6:F8:25:D1:CB:CF:0F Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0439 Signing time: Wed 19 Aug 2026 00:38:32 +0000 Manifest this update: Wed 19 Aug 2026 00:38:31 +0000 Manifest next update: Wed 26 Aug 2026 00:38:31 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: +40wqEsH+0HFqMT5fllDt/W9s2Bg8z/whlOqXpYeqpA=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Aug 19 00:38:31 2026 GMT Not After : Aug 26 00:38:31 2026 GMT Subject: CN=6a84fb08-1020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d6:8c:b5:e1:0f:a8:32:92:a8:2f:27:98:19: d5:b0:5d:f1:3c:49:f6:c4:5d:94:4e:bf:c4:86:d3: 7a:a6:58:f2:b5:d3:7b:f8:bc:9a:9e:d4:50:9d:e5: 09:d7:1f:c0:90:43:c0:bb:b4:4f:4e:06:cd:7e:67: c8:e5:4c:e2:ce:9d:3f:dd:ad:8c:af:96:0b:59:a9: 06:b6:be:6c:12:23:9b:df:e7:d1:28:f3:41:f2:07: fb:87:21:0a:40:2b:78:bf:ff:8f:95:a5:07:3f:6e: de:ff:b4:14:e6:ec:cf:33:08:d4:0d:2e:6b:d3:58: f9:0f:79:c3:43:33:61:38:aa:64:b4:17:31:e3:cc: f0:68:49:ee:4c:bb:2c:3e:fe:52:b2:28:34:84:f2: 27:73:bd:f7:14:c5:fa:de:ab:4d:e5:9f:79:26:df: c9:5a:61:8d:d3:aa:0b:63:c2:60:e9:30:27:13:30: 0e:1d:c2:8a:27:7c:83:7b:1e:23:2b:b2:f2:9b:c9: f4:7f:7a:83:9b:7d:dc:dc:03:91:52:cf:5a:3c:82: af:91:0a:19:42:ab:91:36:88:e1:5a:02:a9:73:73: d8:62:92:76:9f:11:bc:67:35:7b:be:e3:5f:03:69: 58:65:3f:b8:8b:0e:64:86:2c:f2:53:33:dc:5e:86: c5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:2D:86:50:30:D9:DD:EE:CE:2A:E1:9B:F6:F8:25:D1:CB:CF:0F X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c2:49:8b:5c:c1:d2:1f:d6:42:e1:6e:8b:bf:86:5a:15:8b: d8:52:d1:39:09:de:3b:1f:60:1f:72:1e:b2:c0:82:c4:55:46: e1:95:10:cf:40:15:00:47:3f:94:1b:9b:c9:47:90:63:7d:5f: 54:79:9a:a6:c6:7d:4e:81:f3:30:b4:94:8a:c4:44:11:62:18: 13:51:69:18:49:69:95:ad:20:9e:bd:54:fc:55:c8:0f:d4:cb: 38:c0:5a:42:de:cf:66:9a:74:3b:5e:8e:aa:c9:ba:92:14:f3: 5a:45:81:49:2c:42:c7:4c:43:a0:9b:a3:a0:fa:e3:a6:b2:70: 92:44:e9:cf:f0:26:a0:34:cb:a0:96:a4:7f:9c:ff:20:ca:43: e2:da:93:13:6c:96:25:99:d5:22:29:e5:90:57:1a:f5:9f:20: 8f:ff:8d:8f:d8:ed:93:24:60:6d:75:f3:88:05:7b:bb:00:57: f7:9b:6d:c3:46:ac:27:64:c8:f7:a9:27:35:ce:1e:20:e3:c8: 48:0a:6a:c0:9e:a2:a3:cf:9d:42:65:ab:24:55:e1:1a:2f:2b: ef:f3:be:73:15:2b:fd:3b:4e:85:14:dc:26:76:ae:94:36:95: 9d:27:f6:ce:9e:36:86:0d:be:40:d0:d9:df:c8:db:4d:6e:94: 6b:0d:c5:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwODE5MDAzODMxWhcNMjYwODI2MDAzODMxWjAYMRYwFAYD VQQDEw02YTg0ZmIwOC0xMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNaMteEPqDKSqC8nmBnVsF3xPEn2xF2UTr/EhtN6pljytdN7+LyantRQneUJ 1x/AkEPAu7RPTgbNfmfI5Uzizp0/3a2Mr5YLWakGtr5sEiOb3+fRKPNB8gf7hyEK QCt4v/+PlaUHP27e/7QU5uzPMwjUDS5r01j5D3nDQzNhOKpktBcx48zwaEnuTLss Pv5Ssig0hPInc733FMX63qtN5Z95Jt/JWmGN06oLY8Jg6TAnEzAOHcKKJ3yDex4j K7Lym8n0f3qDm33c3AORUs9aPIKvkQoZQquRNojhWgKpc3PYYpJ2nxG8ZzV7vuNf A2lYZT+4iw5khizyUzPcXobFBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhNLYZQ MNnd7s4q4Zv2+CXRy88PMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALcJJi1zB0h/WQuFui7+GWhWL2FLROQneOx9gH3IessCCxFVG4ZUQz0AVAEc/ lBubyUeQY31fVHmapsZ9ToHzMLSUisREEWIYE1FpGElpla0gnr1U/FXID9TLOMBa Qt7PZpp0O16Oqsm6khTzWkWBSSxCx0xDoJujoPrjprJwkkTpz/AmoDTLoJakf5z/ IMpD4tqTE2yWJZnVIinlkFca9Z8gj/+Nj9jtkyRgbXXziAV7uwBX95ttw0asJ2TI 96knNc4eIOPISApqwJ6io8+dQmWrJFXhGi8r7/O+cxUr/TtOhRTcJnaulDaVnSf2 zp42hg2+QNDZ38jbTW6Uaw3FBw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:11 2026 by rpki-client