$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft File: 320AK7yrolDSrmtEVOPL_WfSx-o.mft (raw, json) Hash identifier: bkiYsH+ZoqoQxkMgQtBlu75yEU9GAFXNUxpif/orRo8= Subject key identifier: 6B:72:94:EE:B5:4C:F7:DF:D8:5E:D6:87:CB:19:86:BA:4B:3C:0C:04 Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft Manifest number: 0A6F Signing time: Tue 18 Aug 2026 19:55:32 +0000 Manifest this update: Tue 18 Aug 2026 19:55:31 +0000 Manifest next update: Tue 25 Aug 2026 19:55:31 +0000 Files and hashes: 1: 320AK7yrolDSrmtEVOPL_WfSx-o.crl (hash: 6hZsPZ/iiaeZiSeOXii5GCg1UMj2U1HndMWT0nAfxv8=) 2: C07738FE9F4511EB88EBCA76C4F9AE02.roa (hash: AksdzM4PbXGL/XcGvbH1UmcYB82GNXMH4wOGUwrHV60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Aug 18 19:55:31 2026 GMT Not After : Aug 25 19:55:31 2026 GMT Subject: CN=6a84b8b4-6e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:b9:75:0b:c0:fe:3b:a9:a1:80:64:5d:6a: 6a:8f:f1:c0:7d:ba:3c:49:8b:7c:3f:80:b9:93:c4: 95:a7:d5:7c:0e:3d:c5:24:c4:b5:9b:bc:f2:2d:33: 56:0a:30:07:18:58:a0:48:5d:e2:8e:f8:f2:0c:bc: 13:8f:8a:f0:af:65:8e:01:93:48:a7:ef:fa:ef:4c: b0:df:e7:79:59:dc:00:d8:e1:02:24:4f:85:26:0c: 4c:89:2f:bb:1a:54:c4:85:11:ef:b6:44:5c:39:92: 60:b0:8c:63:27:04:bb:0a:49:2a:ab:cf:56:06:00: 44:f8:f8:79:7b:75:eb:02:9a:e0:d9:da:04:60:e6: 66:bd:4a:a9:36:a7:9d:1f:48:3b:5d:48:b3:07:02: 3e:d1:db:44:3b:a7:b3:bb:fc:5f:0a:2c:e6:64:69: 8f:70:a2:1a:a9:b5:85:23:c6:31:c6:b0:50:7d:0f: 52:e9:d0:38:19:73:e9:51:92:d8:15:32:e7:d8:84: da:cc:7b:f0:25:f8:28:1e:21:06:0f:e1:93:db:be: fc:7d:02:99:67:c6:ca:c7:1a:4f:52:00:32:c1:38: 68:d8:99:33:ba:b6:a4:2a:5c:b6:8f:76:5b:6c:c6: 7d:e1:6b:77:60:71:67:67:35:35:1f:a9:19:8f:1e: a8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:94:EE:B5:4C:F7:DF:D8:5E:D6:87:CB:19:86:BA:4B:3C:0C:04 X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:35:43:81:d2:3e:60:35:03:5b:2b:28:25:b3:58:5a:c9:5a: 4c:aa:eb:3c:da:aa:c5:79:bf:5d:ef:b6:52:77:66:af:04:4a: ca:c5:04:ac:d6:07:58:e0:11:e1:b8:8c:83:de:45:15:43:7a: d6:2d:d1:ac:c6:75:2f:36:4e:93:95:39:d5:0b:b1:72:4b:d1: 4d:dc:e0:ef:55:52:f0:f3:f9:8c:68:cb:ce:69:31:09:f2:bb: cf:5b:84:f9:4d:03:ff:a8:e4:e1:8b:3e:5e:71:15:fd:bd:73: 98:b5:4b:35:5c:71:34:53:e9:e7:17:3d:e0:44:36:ae:e4:7a: 0a:f9:73:9c:63:d9:53:6b:fc:8e:20:ef:69:e1:f2:66:29:1d: 30:1c:b6:5a:41:f4:b4:8c:c0:ad:d3:ed:d7:95:f3:15:82:63: 79:60:63:5b:7c:54:e8:84:20:d4:16:d3:ce:39:63:bf:c3:9a: 4e:a6:dc:88:22:ce:cf:56:91:e5:67:17:31:b2:0b:1b:e8:2f: 77:c1:85:ba:04:13:f7:22:80:c1:76:7a:c4:c9:33:46:6a:4c: 63:8d:04:fd:29:2d:61:19:64:9c:f0:d9:11:0d:f6:6c:7e:5a: 9d:f7:28:a7:58:f4:0f:e6:46:f4:4a:eb:13:b3:44:7f:4b:1c: e6:ba:24:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjYwODE4MTk1NTMxWhcNMjYwODI1MTk1NTMxWjAYMRYwFAYD VQQDEw02YTg0YjhiNC02ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWu5dQvA/jupoYBkXWpqj/HAfbo8SYt8P4C5k8SVp9V8Dj3FJMS1m7zyLTNW CjAHGFigSF3ijvjyDLwTj4rwr2WOAZNIp+/670yw3+d5WdwA2OECJE+FJgxMiS+7 GlTEhRHvtkRcOZJgsIxjJwS7Ckkqq89WBgBE+Ph5e3XrAprg2doEYOZmvUqpNqed H0g7XUizBwI+0dtEO6ezu/xfCizmZGmPcKIaqbWFI8YxxrBQfQ9S6dA4GXPpUZLY FTLn2ITazHvwJfgoHiEGD+GT2778fQKZZ8bKxxpPUgAywTho2JkzurakKly2j3Zb bMZ94Wt3YHFnZzU1H6kZjx6o7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtylO61 TPff2F7Wh8sZhrpLPAwEMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RFMi9EMjE4REQ1MjhFOTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9s RFNybXRFVk9QTF9XZlN4LW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXzVDgdI+YDUDWysoJbNYWslaTKrrPNqqxXm/Xe+2UndmrwRKysUErNYHWOAR 4biMg95FFUN61i3RrMZ1LzZOk5U51QuxckvRTdzg71VS8PP5jGjLzmkxCfK7z1uE +U0D/6jk4Ys+XnEV/b1zmLVLNVxxNFPp5xc94EQ2ruR6CvlznGPZU2v8jiDvaeHy ZikdMBy2WkH0tIzArdPt15XzFYJjeWBjW3xU6IQg1BbTzjljv8OaTqbciCLOz1aR 5WcXMbILG+gvd8GFugQT9yKAwXZ6xMkzRmpMY40E/SktYRlknPDZEQ32bH5anfco p1j0D+ZG9ErrE7NEf0sc5rokPw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:32 2026 by rpki-client