$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: Viu5lhwP4ttnwQp2Oqo4sWQ50ImZ2/dwyy3h5zeiP+4= Subject key identifier: B2:17:70:8D:E0:AF:6B:35:65:A1:68:4D:E2:60:BE:E4:52:21:72:BA Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 0221 Signing time: Wed 19 Aug 2026 03:28:52 +0000 Manifest this update: Wed 19 Aug 2026 03:28:52 +0000 Manifest next update: Wed 26 Aug 2026 03:28:52 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: td/rYf5Hlb0IMrhaZcVtb4scIrZYtbq5EKgkiPGP3oE=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: QMRLPWLbyJt3Y3sf3W4kTGlpvnSbMzh/1dBw79mmT2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Aug 19 03:28:52 2026 GMT Not After : Aug 26 03:28:52 2026 GMT Subject: CN=6a8522f4-bb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:b8:a6:54:43:fa:e8:ba:e8:f6:9f:0f:6b: 01:49:43:39:8c:11:c2:42:b3:ce:c9:07:8b:4a:80: 12:97:5d:8a:35:e6:f4:80:8a:b0:02:70:e1:65:b9: 39:e2:eb:98:a0:cf:ca:c7:bd:5c:f8:13:64:0f:19: 0e:4e:cc:a6:a4:05:8c:ca:91:13:c7:db:e1:10:dd: 73:49:cc:af:b1:34:18:e2:9d:a6:fd:33:b3:d5:56: 01:5a:a6:49:cf:5e:2a:96:db:ab:92:2b:6f:ae:70: 15:0e:68:f2:30:d6:51:aa:f9:79:05:35:85:09:06: b6:b2:54:24:ba:b8:f1:e3:46:3b:6f:02:1c:39:01: f7:d9:ae:50:c8:54:8b:b8:a6:eb:c3:4f:7a:67:b1: c0:fc:b4:12:fa:b5:97:17:50:37:8b:e3:7f:3d:86: 15:8d:6b:b0:50:00:e0:78:30:c7:95:23:78:ff:9e: 21:ec:ad:9e:8e:44:1b:80:31:ad:fb:f3:36:cf:a6: c4:45:cc:46:cc:d0:02:db:28:ca:40:c8:6f:61:79: af:38:6a:1d:dc:8a:9b:bd:e8:e5:7b:c5:d8:1f:2e: 61:d9:c0:c8:eb:96:7a:0d:4a:e7:9b:c0:1b:e8:2e: 8e:20:f9:cb:af:58:30:fa:f0:90:63:5f:97:03:f5: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:17:70:8D:E0:AF:6B:35:65:A1:68:4D:E2:60:BE:E4:52:21:72:BA X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fe:bb:fe:25:24:0d:7e:9c:79:fa:cf:f0:6e:94:5c:d1:4f: b9:53:0e:cb:08:d0:12:b3:12:b9:9c:d4:ba:f3:31:02:ff:3f: f1:af:22:86:86:9b:14:14:bf:f9:7e:e5:5f:a8:31:6b:76:fd: 47:66:36:c9:96:f1:75:c9:1f:9f:ba:3a:b9:99:b7:29:37:42: a2:0b:9c:3d:d4:2a:34:f5:70:ee:97:d5:bf:56:60:8d:34:c4: e1:11:98:97:14:4a:ab:b1:88:96:e3:d4:00:7b:59:45:6e:be: 5a:e5:05:64:3b:a8:6b:6d:aa:06:d8:2a:f8:74:e0:d0:40:33: 49:c1:06:bc:c4:f2:04:0e:22:3f:72:f9:58:aa:26:9d:70:0c: c3:27:c1:b7:bd:90:93:a6:bd:9d:f8:f0:f7:ec:01:ca:ce:87: 4f:e6:9a:85:da:53:74:c8:ff:92:c9:63:f5:5d:ca:c8:50:ed: df:1a:fb:7a:ac:87:6a:d4:c0:0e:b9:61:5b:d3:b9:ee:ca:4e: b6:9b:42:bb:ec:34:ee:65:5f:27:8f:08:56:b1:b7:5e:ce:90: 81:a3:84:e2:0e:6f:c0:61:46:c9:cb:e6:2c:55:0e:4a:f7:bd: 9e:f7:da:e8:1d:c7:82:9a:23:ea:f9:a0:0c:0b:59:ce:c2:7a: 50:38:0e:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjYwODE5MDMyODUyWhcNMjYwODI2MDMyODUyWjAYMRYwFAYD VQQDEw02YTg1MjJmNC1iYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva+4plRD+ui66PafD2sBSUM5jBHCQrPOyQeLSoASl12KNeb0gIqwAnDhZbk5 4uuYoM/Kx71c+BNkDxkOTsympAWMypETx9vhEN1zScyvsTQY4p2m/TOz1VYBWqZJ z14qlturkitvrnAVDmjyMNZRqvl5BTWFCQa2slQkurjx40Y7bwIcOQH32a5QyFSL uKbrw096Z7HA/LQS+rWXF1A3i+N/PYYVjWuwUADgeDDHlSN4/54h7K2ejkQbgDGt +/M2z6bERcxGzNAC2yjKQMhvYXmvOGod3Iqbvejle8XYHy5h2cDI65Z6DUrnm8Ab 6C6OIPnLr1gw+vCQY1+XA/WTFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIXcI3g r2s1ZaFoTeJgvuRSIXK6MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/67/iUkDX6cefrP8G6UXNFPuVMOywjQErMSuZzUuvMxAv8/8a8ihoabFBS/ +X7lX6gxa3b9R2Y2yZbxdckfn7o6uZm3KTdCogucPdQqNPVw7pfVv1ZgjTTE4RGY lxRKq7GIluPUAHtZRW6+WuUFZDuoa22qBtgq+HTg0EAzScEGvMTyBA4iP3L5WKom nXAMwyfBt72Qk6a9nfjw9+wBys6HT+aahdpTdMj/kslj9V3KyFDt3xr7eqyHatTA DrlhW9O57spOtptCu+w07mVfJ48IVrG3Xs6QgaOE4g5vwGFGycvmLFUOSve9nvfa 6B3Hgpoj6vmgDAtZzsJ6UDgOTg== -----END CERTIFICATE-----Generated at Wed Aug 19 11:47:03 2026 by rpki-client