$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: evva1J/hYchHmDmZBJIbVAlq62VGgk89JGRkcn5s5Ms= Subject key identifier: EC:67:5A:AC:2D:66:50:92:BD:DD:53:51:C9:68:D5:D4:13:1A:C7:5B Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 01FA Signing time: Wed 19 Aug 2026 03:51:10 +0000 Manifest this update: Wed 19 Aug 2026 03:51:09 +0000 Manifest next update: Wed 26 Aug 2026 03:51:09 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: dGQtnBmckgSrRevMGbQHj4vpXAmwNrsQfsGw3+Ss/2U=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Aug 19 03:51:09 2026 GMT Not After : Aug 26 03:51:09 2026 GMT Subject: CN=6a85282d-e60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:74:98:2f:3e:66:4b:48:7d:f5:1f:91:13:0c: f9:f2:83:42:91:20:42:f5:94:8a:17:92:8b:dc:77: 6b:ad:47:80:06:f9:f5:6b:eb:7a:cb:e9:11:f3:64: 88:69:11:57:a7:cc:23:1f:bf:da:ef:30:5d:47:38: 87:4e:59:52:58:f8:23:03:dc:9b:ce:6c:1d:37:c0: 84:7b:cb:89:01:8b:2f:2b:78:25:1f:bd:59:c2:10: 81:ab:16:cc:a4:26:3a:39:56:d8:aa:8b:5d:f6:d7: f7:fe:87:ae:75:24:ac:6a:64:d3:8f:01:82:cb:f9: 65:ca:b0:14:f6:fb:52:d6:e8:e5:5a:4c:92:81:a9: 89:75:5a:bb:80:3e:1c:7f:e4:18:b5:72:93:5d:08: 53:bf:68:ee:bc:d3:cc:af:f7:9e:12:d0:49:d1:22: e7:d9:ac:f1:8a:2b:19:ea:01:c7:b9:53:37:31:9d: 43:fe:24:d9:32:ff:05:9e:b4:59:3a:16:35:81:29: 78:08:f9:f6:cc:84:df:57:e3:e9:6a:cc:47:10:40: ea:5a:e0:b4:cc:d6:43:7b:e7:d3:c8:de:98:86:cd: 7d:12:67:aa:7d:0c:4b:ba:49:d8:61:f6:85:fe:73: d8:5e:71:d0:f5:c8:88:ff:ad:b0:65:10:e9:4f:4f: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:67:5A:AC:2D:66:50:92:BD:DD:53:51:C9:68:D5:D4:13:1A:C7:5B X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:52:3c:8c:4a:90:d5:42:48:1e:90:dd:d7:06:4d:09:43:e5: ec:2f:d5:78:e9:3b:1f:d8:f3:2f:f0:b2:b1:a2:00:74:4b:e6: cf:b6:16:52:3c:b7:77:7c:d1:f5:9f:91:b3:fa:76:c8:ac:38: db:ce:46:f2:87:a8:ff:0f:2f:14:fd:02:d0:fa:37:58:e2:90: 0b:4f:3b:8f:6f:68:c9:e5:ea:c8:bf:65:37:2a:1b:0a:24:32: ca:83:b0:34:09:b9:4d:28:60:3e:83:fc:23:df:1b:45:64:f2: 88:12:57:1b:39:31:11:67:b7:d1:d1:7b:9f:75:ef:87:3a:57: 70:a9:56:7d:dc:b7:8b:b0:ae:5d:8a:23:ca:a1:2c:d6:22:74: 2e:ff:79:b7:3a:64:af:85:b0:7a:1b:83:a8:29:a3:ba:a2:e9: 2a:a9:ed:f1:42:05:42:63:e7:39:28:88:f3:00:46:3a:7b:f3: cd:9e:ea:40:ad:32:2d:23:df:de:d6:d4:a7:44:90:60:ec:44: 02:c5:de:ed:19:e9:8b:1e:35:d4:42:4e:c0:8c:d7:70:14:a1: 8f:85:ac:89:c9:bc:d2:b2:23:30:68:03:64:62:e8:fe:82:57: ff:10:54:99:a1:85:97:45:b8:0c:d6:00:bc:30:79:53:e6:4b: bb:c5:f9:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwODE5MDM1MTA5WhcNMjYwODI2MDM1MTA5WjAYMRYwFAYD VQQDEw02YTg1MjgyZC1lNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HSYLz5mS0h99R+REwz58oNCkSBC9ZSKF5KL3HdrrUeABvn1a+t6y+kR82SI aRFXp8wjH7/a7zBdRziHTllSWPgjA9ybzmwdN8CEe8uJAYsvK3glH71ZwhCBqxbM pCY6OVbYqotd9tf3/oeudSSsamTTjwGCy/llyrAU9vtS1ujlWkySgamJdVq7gD4c f+QYtXKTXQhTv2juvNPMr/eeEtBJ0SLn2azxiisZ6gHHuVM3MZ1D/iTZMv8FnrRZ OhY1gSl4CPn2zITfV+PpasxHEEDqWuC0zNZDe+fTyN6Yhs19EmeqfQxLuknYYfaF /nPYXnHQ9ciI/62wZRDpT0+wRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxnWqwt ZlCSvd1TUclo1dQTGsdbMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlI8jEqQ1UJIHpDd1wZNCUPl7C/VeOk7H9jzL/CysaIAdEvmz7YWUjy3d3zR 9Z+Rs/p2yKw4285G8oeo/w8vFP0C0Po3WOKQC087j29oyeXqyL9lNyobCiQyyoOw NAm5TShgPoP8I98bRWTyiBJXGzkxEWe30dF7n3XvhzpXcKlWfdy3i7CuXYojyqEs 1iJ0Lv95tzpkr4WwehuDqCmjuqLpKqnt8UIFQmPnOSiI8wBGOnvzzZ7qQK0yLSPf 3tbUp0SQYOxEAsXe7Rnpix411EJOwIzXcBShj4Wsicm80rIjMGgDZGLo/oJX/xBU maGFl0W4DNYAvDB5U+ZLu8X5+A== -----END CERTIFICATE-----Generated at Wed Aug 19 16:45:34 2026 by rpki-client