$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: s7fsj0kot6hQLq19xe6n8D7zLHukFMlA1bwckVwvSMM= Subject key identifier: DD:54:D7:75:C4:BB:AF:B0:5A:0E:4E:4F:4F:7C:73:81:DA:45:6B:F0 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: 017B Signing time: Wed 19 Aug 2026 05:14:06 +0000 Manifest this update: Wed 19 Aug 2026 05:14:05 +0000 Manifest next update: Wed 26 Aug 2026 05:14:05 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: /+JO39dvlZhETAUwqz9n7ntx9aq1rPGsRGliIQ+ZjSw=) 2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=) 3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Aug 19 05:14:05 2026 GMT Not After : Aug 26 05:14:05 2026 GMT Subject: CN=6a853b9e-1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:c3:f8:e4:8f:79:6c:f4:a0:1d:dc:dc:dc: 96:ce:db:05:83:94:c0:ff:e6:a0:e8:fb:74:b5:67: 9c:72:9d:07:70:6a:41:56:c9:4d:0f:68:26:f8:4a: 37:a4:27:e8:aa:84:7f:09:7e:2c:4a:7a:22:e7:94: 05:2d:86:3f:d5:5d:31:37:ce:ee:4f:fb:18:f0:84: 32:59:d1:10:54:50:b1:bb:0e:92:77:7d:d1:b8:fc: b9:f0:f7:49:de:80:fa:61:fa:06:1a:67:15:85:21: 3c:f5:94:0f:48:ec:c7:7e:4f:49:5f:36:b8:ac:13: de:5d:86:55:b7:54:9f:8e:b6:45:20:85:bd:b0:6f: 09:aa:c6:d7:3d:97:1c:c1:5f:73:6f:a3:e9:17:a5: 03:43:5e:d8:0f:ce:90:8c:bd:b2:e8:13:54:32:4a: 1c:52:92:35:15:02:68:e2:79:69:98:8b:12:65:31: c5:da:5e:ca:66:ce:e0:19:e4:dc:9b:a4:0d:91:92: da:ae:57:05:89:d3:b2:4f:ae:2b:94:61:a7:f6:fb: 4d:03:a5:2c:11:83:4c:24:a5:61:d7:73:0f:62:4b: 82:1e:f3:ed:e6:a6:5e:19:bd:fb:c7:4d:27:7a:60: 88:8e:ed:8a:75:11:63:85:0d:b5:18:d1:f0:58:ec: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:D7:75:C4:BB:AF:B0:5A:0E:4E:4F:4F:7C:73:81:DA:45:6B:F0 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f6:58:7a:6f:f7:e5:5e:dc:0e:82:19:0a:ad:8e:d6:20:e4: 6a:f3:f5:23:80:ad:e3:f2:63:43:92:04:82:72:71:7d:7c:2e: e2:d8:82:dc:6f:79:7d:0d:21:0a:a3:df:75:e5:9f:0f:5c:fd: f0:8c:ba:ab:56:ce:a2:23:b0:35:c9:23:24:cc:c4:5e:0b:1b: af:e7:24:4c:1c:92:8e:96:2a:5c:22:97:f8:d9:3d:b6:90:a4: c1:27:5d:1a:0a:e4:46:0b:68:b5:82:4e:f0:22:b2:1c:e3:40: d4:fd:b8:7f:07:8b:4f:c2:8d:49:a5:08:b2:65:ac:7d:4b:69: 65:40:67:ed:ec:cc:fc:5c:ed:11:7e:6a:af:2c:f7:e0:49:0d: 0b:79:06:fd:40:5f:d1:c2:ca:36:7b:d9:27:6d:c6:0a:05:f6: 0e:e2:d5:65:e2:6c:29:27:88:95:5d:77:68:c3:2d:a5:68:55: 20:96:11:59:b0:65:ee:37:a8:42:41:5f:a4:8b:33:68:ea:a0: c0:ea:4f:9a:50:cb:25:43:a7:7a:b2:f5:8e:d8:51:0b:0f:38: 7f:27:52:f6:8c:dc:1f:41:76:f3:b5:8a:3c:9c:6c:df:58:e5: 1c:9f:ec:8a:48:23:6d:4f:87:b8:ae:22:22:8a:37:f9:7f:d2: 87:d0:8a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjYwODE5MDUxNDA1WhcNMjYwODI2MDUxNDA1WjAYMRYwFAYD VQQDEw02YTg1M2I5ZS0xYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5zD+OSPeWz0oB3c3NyWztsFg5TA/+ag6Pt0tWeccp0HcGpBVslND2gm+Eo3 pCfoqoR/CX4sSnoi55QFLYY/1V0xN87uT/sY8IQyWdEQVFCxuw6Sd33RuPy58PdJ 3oD6YfoGGmcVhSE89ZQPSOzHfk9JXza4rBPeXYZVt1SfjrZFIIW9sG8JqsbXPZcc wV9zb6PpF6UDQ17YD86QjL2y6BNUMkocUpI1FQJo4nlpmIsSZTHF2l7KZs7gGeTc m6QNkZLarlcFidOyT64rlGGn9vtNA6UsEYNMJKVh13MPYkuCHvPt5qZeGb37x00n emCIju2KdRFjhQ21GNHwWOwUfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1U13XE u6+wWg5OT098c4HaRWvwMB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXPZYem/35V7cDoIZCq2O1iDkavP1I4Ct4/JjQ5IEgnJxfXwu4tiC3G95fQ0h CqPfdeWfD1z98Iy6q1bOoiOwNckjJMzEXgsbr+ckTBySjpYqXCKX+Nk9tpCkwSdd GgrkRgtotYJO8CKyHONA1P24fweLT8KNSaUIsmWsfUtpZUBn7ezM/FztEX5qryz3 4EkNC3kG/UBf0cLKNnvZJ23GCgX2DuLVZeJsKSeIlV13aMMtpWhVIJYRWbBl7jeo QkFfpIszaOqgwOpPmlDLJUOnerL1jthRCw84fydS9ozcH0F287WKPJxs31jlHJ/s ikgjbU+HuK4iIoo3+X/Sh9CKAA== -----END CERTIFICATE-----Generated at Thu Aug 20 23:32:34 2026 by rpki-client