$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: N/ghaH35GN8MWMP6/j0q7WNfi/OF3Kn+9M+iZV61KOE= Subject key identifier: 4C:94:B3:64:A0:9C:0F:69:56:E5:D7:88:E5:D8:71:EA:60:74:07:FA Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 363D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 35DD Signing time: Thu 20 Aug 2026 14:22:00 +0000 Manifest this update: Thu 20 Aug 2026 14:22:00 +0000 Manifest next update: Thu 27 Aug 2026 14:22:00 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: bzZxZgNHAofHF0A/4AZDIRQPYZtyBP+g2bJVWQTG9+w=) 2: 783697D2107A11F1854A0E192E3D8C67.roa (hash: +OAeGwPI3EPeO4SeSL4WG+KcFLm2kg/q6A7zTPgsK3U=) 3: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: tb4d2WGXbPvyRotaqWLKmyeyfbjygOlLQLA75/yIS44=) 4: 34013D1A69E911F18D43391FA247A888.roa (hash: B5hqzXpedqgnZtGOdEIoJ/WqxIH1YMp8ISvKWijhIAE=) 5: 8064BD9A531811F19CFFFF86C0833773.roa (hash: zSJ6qgvJW4YfFqxprlmttvge2oBgvp5fBh5eAOZUFpw=) 6: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: 44+Ej6Drcby9zo63RA/x3RlFQ8dLgOq2yjB6zWmXKWk=) 7: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: v1F73588I5TIbxHibltwszQp+2stCp9gQQEXZntRoSg=) 8: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: Pb/eLHkERr63KOIiKN491GilAbuAMZ4Dkw6lIR/9gwg=) 9: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zOvHuNJfy1g+VIIU05MR/IwrnELnixR7jdUcwFZKVV0=) 10: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: kU7keJ3x9xRJ8liHmf1Z7GOvHcN9zrhffJ5NaB0tInI=) 11: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: bnNYNW5woRijMAziiX+GdjxArSN9zPt7BYM1OrTOpgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13885 (0x363d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Aug 20 14:22:00 2026 GMT Not After : Aug 27 14:22:00 2026 GMT Subject: CN=6a870d88-8265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:46:b7:6a:50:1c:8d:c0:e1:7d:6e:02:bd: 12:ba:5d:8c:21:04:87:72:05:79:bf:a5:85:39:bf: a1:92:b6:26:ca:cf:8b:c6:8c:df:dc:b4:3b:a1:35: 02:d9:07:b9:d3:04:e4:3f:17:b8:37:df:82:9c:54: 8c:ad:ef:a6:ee:13:e3:17:0b:3a:3a:12:b6:b4:ac: 30:d7:f3:42:06:48:94:11:50:43:31:16:6d:90:f4: fb:80:75:eb:a2:6a:09:ab:0a:1c:89:d9:1f:ea:cb: 89:89:73:c0:7c:56:6b:87:f1:9e:37:d4:48:ba:46: 3a:56:54:b6:47:0a:22:02:db:9e:9f:7f:16:28:f2: 81:68:6d:ec:f0:8a:bf:f1:50:c3:35:51:90:55:42: ff:37:a1:9b:26:13:ce:ca:81:de:01:3a:c5:b5:7b: 49:e2:6b:61:36:4c:a6:57:1b:1d:f9:d6:53:61:ef: 5f:f0:a2:85:7f:62:e5:b7:ef:89:5f:e6:ba:f4:c5: 8e:58:8a:43:34:c7:74:07:06:51:f5:fa:17:2f:a4: 7d:b0:87:a5:e9:84:5f:b4:57:5b:15:6c:e2:ed:18: ba:a8:cb:f3:86:55:f4:94:16:05:f1:12:94:c6:3c: 63:db:48:73:2d:f6:c6:df:0e:ac:b0:7b:78:c5:51: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:B3:64:A0:9C:0F:69:56:E5:D7:88:E5:D8:71:EA:60:74:07:FA X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f6:0f:ab:7f:b5:58:94:d1:7e:97:4a:5c:05:ab:60:66:2b: a7:be:07:56:40:c5:19:c3:86:7a:ca:ef:1c:d0:5e:0a:d6:00: 5f:4c:14:73:9d:b5:7b:d3:3b:85:f9:0b:cf:73:58:f9:65:98: 59:b0:3d:2a:52:38:56:c0:b0:ac:93:05:ec:f8:49:fc:65:06: cc:8d:aa:06:17:b1:2c:f2:5b:95:95:a1:85:92:f1:6e:69:61: 07:33:58:43:57:1b:b6:9c:3e:4b:16:3d:a2:38:9a:dd:75:d7: db:f6:c5:dc:07:99:49:1b:68:21:3f:e6:95:29:ef:ae:93:fa: 08:7d:ae:bb:0a:41:90:8a:e0:3f:32:e4:40:ca:22:7b:9a:20: ea:57:66:a5:b5:e9:ad:6d:45:9f:bf:ee:f9:c5:09:50:40:32: eb:c7:ae:2a:ef:e1:46:a0:70:af:36:3a:ae:b8:69:e9:47:53: a8:b6:28:c8:99:ca:1b:81:95:c1:a1:ef:04:47:cd:c8:8c:c9: cd:a6:73:3c:05:3f:d2:fc:fe:29:8a:be:dd:f8:4e:df:8d:c4: 96:98:76:24:c0:f5:b6:29:f6:83:b4:77:2d:e4:48:af:b1:18: 33:04:7c:a5:77:2c:74:f1:b7:40:93:d6:8d:c2:89:61:75:7b: 22:7b:7a:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwODIwMTQyMjAwWhcNMjYwODI3MTQyMjAwWjAYMRYwFAYD VQQDEw02YTg3MGQ4OC04MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4pGt2pQHI3A4X1uAr0Sul2MIQSHcgV5v6WFOb+hkrYmys+Lxozf3LQ7oTUC 2Qe50wTkPxe4N9+CnFSMre+m7hPjFws6OhK2tKww1/NCBkiUEVBDMRZtkPT7gHXr omoJqwocidkf6suJiXPAfFZrh/GeN9RIukY6VlS2RwoiAtuen38WKPKBaG3s8Iq/ 8VDDNVGQVUL/N6GbJhPOyoHeATrFtXtJ4mthNkymVxsd+dZTYe9f8KKFf2Llt++J X+a69MWOWIpDNMd0BwZR9foXL6R9sIel6YRftFdbFWzi7Ri6qMvzhlX0lBYF8RKU xjxj20hzLfbG3w6ssHt4xVGCOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyUs2Sg nA9pVuXXiOXYcepgdAf6MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsfYPq3+1WJTRfpdKXAWrYGYrp74HVkDFGcOGesrvHNBeCtYAX0wUc521e9M7 hfkLz3NY+WWYWbA9KlI4VsCwrJMF7PhJ/GUGzI2qBhexLPJblZWhhZLxbmlhBzNY Q1cbtpw+SxY9ojia3XXX2/bF3AeZSRtoIT/mlSnvrpP6CH2uuwpBkIrgPzLkQMoi e5og6ldmpbXprW1Fn7/u+cUJUEAy68euKu/hRqBwrzY6rrhp6UdTqLYoyJnKG4GV waHvBEfNyIzJzaZzPAU/0vz+KYq+3fhO343Elph2JMD1tin2g7R3LeRIr7EYMwR8 pXcsdPG3QJPWjcKJYXV7Int6gQ== -----END CERTIFICATE-----Generated at Fri Aug 21 01:05:15 2026 by rpki-client