$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: bWHnvsPMYEkqU7kMU0QvniqSn7xRcgpoJBRoXhcRefE= Subject key identifier: AA:79:5F:21:9D:02:43:1A:4B:98:C1:94:12:35:98:25:34:6C:5A:1F Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 17C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 17AD Signing time: Tue 18 Aug 2026 16:43:53 +0000 Manifest this update: Tue 18 Aug 2026 16:43:53 +0000 Manifest next update: Tue 25 Aug 2026 16:43:53 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: r/0pdI/F7cnRAkRLr2FXH6q3IiS+446/eY/1hOo6e7g=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: RfIwQugUF5e4NxZfyETqjmTf0Zh9v0gdDlStWYdhYuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Aug 18 16:43:53 2026 GMT Not After : Aug 25 16:43:53 2026 GMT Subject: CN=6a848bc9-d589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:82:2a:01:30:ce:13:60:33:7b:2f:c7:c5: a0:3c:38:5d:6b:64:63:2a:42:be:3a:6a:a8:b1:89: da:a6:84:7b:94:fb:7c:63:58:c8:59:a1:58:a5:8b: 07:87:c1:7f:56:90:2d:58:3a:b8:2f:7f:99:4a:e7: 79:2d:62:0a:6b:ad:a8:fa:a2:28:7c:54:05:b8:94: 76:e7:61:32:7b:e2:f6:c1:c0:ef:c9:82:38:33:dd: 75:5c:66:5e:a9:8f:21:69:da:62:e7:c3:1e:d6:cb: 9b:d7:58:17:31:03:3b:74:35:0d:f6:ec:89:1c:d0: af:00:da:82:58:9f:f3:f2:44:5c:61:44:13:45:ca: e0:85:4e:49:49:5d:23:6c:5a:2b:c6:9c:86:52:34: 48:24:8f:54:97:2a:f3:94:9e:6f:89:bb:bb:c8:df: a7:48:c2:ba:2e:82:c2:ae:cc:e8:7f:fe:f1:29:40: e9:4e:16:69:7b:8a:41:87:dd:49:f0:9e:22:f1:f0: ca:44:86:98:ab:23:58:b6:9b:36:b3:87:c7:1d:ac: c2:73:e9:04:81:8e:b8:c6:95:c5:de:9c:e4:ea:23: ec:a0:93:12:1f:bb:62:43:cb:c0:6e:da:63:d4:e5: a9:f3:4c:dd:f7:e2:fc:b7:bf:de:17:2e:a5:76:c7: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:5F:21:9D:02:43:1A:4B:98:C1:94:12:35:98:25:34:6C:5A:1F X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2e:86:89:c0:1c:58:ee:e7:a1:3a:ea:bb:80:bb:31:94:19: 6f:5f:ac:2c:62:23:48:f3:74:85:20:99:f5:b3:40:87:7a:08: 21:00:07:f1:1b:ba:2c:15:9e:08:1e:a8:20:ff:61:3d:59:c9: 47:15:46:f6:c2:b9:57:5f:ef:da:b1:ae:89:60:3c:16:db:9e: 29:63:35:18:32:5e:bb:14:88:7f:4e:e8:64:f3:f6:14:cb:bd: 0a:a2:e0:f6:c3:ce:e2:61:a5:79:3e:9e:2e:d5:be:80:13:5f: ab:27:17:4d:66:bf:1d:e8:4e:8d:3d:2c:d4:6b:ed:94:f5:b0: f5:3f:db:9b:f5:65:3d:7b:0c:24:77:a1:50:57:5a:98:89:2d: 8f:4f:20:b6:ae:7b:6f:16:87:49:6d:07:ea:75:20:60:ae:03: 70:5a:a5:12:6e:96:30:e4:97:3a:32:22:05:f7:33:29:56:80: e3:08:87:97:f8:9e:d1:0f:86:da:3a:36:87:b9:64:4d:a1:b2: f2:20:79:c9:24:f3:fc:34:a2:40:10:16:c3:b1:56:95:dd:97: 51:7a:dd:47:99:73:df:f4:8f:0f:55:7e:5b:6b:24:8c:74:f1: f5:09:7a:a3:0e:7c:d4:11:58:7b:5a:26:a4:9a:bd:e6:5f:a5: 59:3a:ef:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjYwODE4MTY0MzUzWhcNMjYwODI1MTY0MzUzWjAYMRYwFAYD VQQDEw02YTg0OGJjOS1kNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM2CKgEwzhNgM3svx8WgPDhda2RjKkK+OmqosYnapoR7lPt8Y1jIWaFYpYsH h8F/VpAtWDq4L3+ZSud5LWIKa62o+qIofFQFuJR252Eye+L2wcDvyYI4M911XGZe qY8hadpi58Me1sub11gXMQM7dDUN9uyJHNCvANqCWJ/z8kRcYUQTRcrghU5JSV0j bForxpyGUjRIJI9UlyrzlJ5vibu7yN+nSMK6LoLCrszof/7xKUDpThZpe4pBh91J 8J4i8fDKRIaYqyNYtps2s4fHHazCc+kEgY64xpXF3pzk6iPsoJMSH7tiQ8vAbtpj 1OWp80zd9+L8t7/eFy6ldsdg0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKp5XyGd AkMaS5jBlBI1mCU0bFofMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXi6GicAcWO7noTrqu4C7MZQZb1+sLGIjSPN0hSCZ9bNAh3oIIQAH8Ru6LBWe CB6oIP9hPVnJRxVG9sK5V1/v2rGuiWA8FtueKWM1GDJeuxSIf07oZPP2FMu9CqLg 9sPO4mGleT6eLtW+gBNfqycXTWa/HehOjT0s1GvtlPWw9T/bm/VlPXsMJHehUFda mIktj08gtq57bxaHSW0H6nUgYK4DcFqlEm6WMOSXOjIiBfczKVaA4wiHl/ie0Q+G 2jo2h7lkTaGy8iB5ySTz/DSiQBAWw7FWld2XUXrdR5lz3/SPD1V+W2skjHTx9Ql6 ow581BFYe1ompJq95l+lWTrvTA== -----END CERTIFICATE-----Generated at Wed Aug 19 14:33:04 2026 by rpki-client