$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: Z3N0DOpVbWZZ4EX1t1x5NtYJ62sFILuuqlusaesb4zg= Subject key identifier: 21:D5:69:14:B3:08:A6:A7:BD:DB:95:8D:C5:9B:1B:E4:A9:78:2E:FA Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 024D Signing time: Wed 19 Aug 2026 02:55:28 +0000 Manifest this update: Wed 19 Aug 2026 02:55:27 +0000 Manifest next update: Wed 26 Aug 2026 02:55:27 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: jJpADJBnAoha6E30Q3a22ukze3v2SeAFJYH1DgE1a0w=) 2: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=) 3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=) 4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Aug 19 02:55:27 2026 GMT Not After : Aug 26 02:55:27 2026 GMT Subject: CN=6a851b20-6398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:f6:3a:5b:a3:2d:37:01:95:cb:6b:17:30: 75:46:5e:36:c2:cf:9d:32:d7:57:e5:d8:87:64:ad: b2:e3:a9:05:2f:9c:10:b4:d5:9a:33:ad:85:f7:e9: 1d:98:47:26:90:a3:3f:9a:2d:d7:3a:f5:be:46:c2: 7b:f4:96:39:6e:37:64:f1:14:d0:8e:82:2c:ba:fb: 03:31:84:86:c4:4b:63:c8:88:90:9d:44:19:15:d4: bf:8c:07:9c:de:c8:75:24:00:ed:d1:af:9e:e5:ab: 33:17:65:a2:35:31:2a:67:87:26:70:0a:1c:ec:87: 85:4d:0e:2d:39:28:5c:ad:aa:6b:3e:b3:7a:11:d4: 33:f5:5c:67:be:a0:99:84:5b:1b:72:55:87:18:e7: 1d:6a:e2:47:a2:12:80:9b:31:bb:ff:fb:1b:bf:dc: 91:73:83:44:7a:18:74:0f:ff:99:db:d3:21:cc:07: 41:0f:ea:d6:a1:d2:3f:6a:eb:1a:71:78:4c:39:9e: 92:6b:5f:8e:48:28:e5:b2:d6:7a:90:dd:99:0a:16: 5f:24:36:41:9e:a4:47:d5:75:72:8a:b2:76:fd:46: 0e:c1:6e:18:db:a4:f9:cc:1f:66:f7:15:3d:e4:d2: 02:90:f8:a9:d3:21:dc:f4:7d:70:7f:d1:75:62:19: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D5:69:14:B3:08:A6:A7:BD:DB:95:8D:C5:9B:1B:E4:A9:78:2E:FA X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:ff:73:34:7a:05:d1:81:4d:54:ab:87:54:a3:20:8a:31: 3e:7f:7a:b3:fa:a7:38:70:48:59:8b:f0:76:8e:28:2a:b4:59: 90:a6:64:15:23:34:9f:be:af:7d:43:26:f9:98:04:dc:ad:20: 9b:4a:29:cd:13:7f:09:a3:c7:eb:a3:b2:a2:55:56:da:5b:1c: 6b:30:ca:f1:83:4a:c3:b3:ff:57:33:e7:18:3b:a8:27:0f:55: c5:9a:3f:b8:74:7a:4b:6a:2c:52:f9:67:6a:7a:81:77:3f:f1: ee:10:71:9f:61:e1:96:ad:07:5e:98:c7:33:be:9e:f5:7c:39: 43:e2:2f:7d:96:b1:67:aa:54:5c:d6:60:0d:21:73:58:06:ae: 5b:3b:8a:a8:d6:e2:c4:dd:2a:59:89:5e:9a:13:cc:07:5b:99: 4f:1a:96:a8:ef:1f:84:63:f4:f8:c9:e7:fa:f5:be:a5:c5:79: 3d:cb:4f:f1:3e:49:0f:e2:7f:e7:c5:4c:c0:47:53:66:4d:85: 5b:af:50:16:f3:91:49:f4:77:8d:f1:a9:a2:f8:9c:ca:a1:45: 97:bb:72:6f:1b:69:32:c8:17:b2:67:d1:62:69:a3:9a:af:b1: 97:5d:9e:f9:4f:96:cf:b3:e8:6b:eb:ee:45:bb:2c:61:8b:f8: 16:db:53:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjYwODE5MDI1NTI3WhcNMjYwODI2MDI1NTI3WjAYMRYwFAYD VQQDEw02YTg1MWIyMC02Mzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9D2OlujLTcBlctrFzB1Rl42ws+dMtdX5diHZK2y46kFL5wQtNWaM62F9+kd mEcmkKM/mi3XOvW+RsJ79JY5bjdk8RTQjoIsuvsDMYSGxEtjyIiQnUQZFdS/jAec 3sh1JADt0a+e5aszF2WiNTEqZ4cmcAoc7IeFTQ4tOShcraprPrN6EdQz9VxnvqCZ hFsbclWHGOcdauJHohKAmzG7//sbv9yRc4NEehh0D/+Z29MhzAdBD+rWodI/ausa cXhMOZ6Sa1+OSCjlstZ6kN2ZChZfJDZBnqRH1XVyirJ2/UYOwW4Y26T5zB9m9xU9 5NICkPip0yHc9H1wf9F1YhkBCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHVaRSz CKanvduVjcWbG+SpeC76MB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACKj/czR6BdGBTVSrh1SjIIoxPn96s/qnOHBIWYvwdo4oKrRZkKZkFSM0n76v fUMm+ZgE3K0gm0opzRN/CaPH66OyolVW2lscazDK8YNKw7P/VzPnGDuoJw9VxZo/ uHR6S2osUvlnanqBdz/x7hBxn2Hhlq0HXpjHM76e9Xw5Q+IvfZaxZ6pUXNZgDSFz WAauWzuKqNbixN0qWYlemhPMB1uZTxqWqO8fhGP0+Mnn+vW+pcV5PctP8T5JD+J/ 58VMwEdTZk2FW69QFvORSfR3jfGpovicyqFFl7tybxtpMsgXsmfRYmmjmq+xl12e +U+Wz7Poa+vuRbssYYv4FttTAQ== -----END CERTIFICATE-----Generated at Thu Aug 20 22:56:50 2026 by rpki-client