$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: 2692yxx6RyO6fFujvkVPFa3OoOY1eG4dFkdi4/Z9wW0= Subject key identifier: C7:E5:3F:DC:5D:C0:91:89:25:95:7F:2B:C3:5D:80:60:FC:BE:F3:B6 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 037C Signing time: Wed 19 Aug 2026 01:10:00 +0000 Manifest this update: Wed 19 Aug 2026 01:09:59 +0000 Manifest next update: Wed 26 Aug 2026 01:09:59 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: djYGI1oqNIpnScgMlZitgGeVFFNanIp5sPS8qvW9Qqk=) 2: 41F88F22042111ED888BB024C4F9AE02.roa (hash: aCy5PMuDzpryQuVwSt0E5y4Po7ZiB/Ss+uP5KTFzKkw=) 3: 42D236F0042111ED888BB024C4F9AE02.roa (hash: AL1NzX9lNGPHM09HP1wQ+++0IfWrYhSei2NeZGdZGpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Aug 19 01:09:59 2026 GMT Not After : Aug 26 01:09:59 2026 GMT Subject: CN=6a850267-980b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:bf:30:97:7e:ba:2e:f9:ef:8d:f6:1a:8a: 5e:6e:ba:48:69:96:81:87:e6:c8:8d:e8:52:7d:d1: a1:de:1e:db:d5:bd:dd:78:4d:ab:38:8b:4d:d7:4a: cc:fb:94:e7:f8:fa:7f:60:5a:ca:9b:3c:72:2d:56: ee:82:e3:f5:5d:7f:cd:d5:c1:c9:8d:29:2a:1b:38: dd:2c:ca:f7:7e:44:21:9e:b6:2d:35:af:01:aa:47: db:57:7a:90:67:2b:27:c7:b1:70:66:91:66:aa:4f: 70:39:a2:fd:7a:f6:c1:08:bc:1f:b0:09:f3:78:fc: 25:1a:7c:2d:07:ba:e9:9b:b6:3f:c1:02:27:9b:9a: a9:3e:55:de:79:3d:a9:63:f4:cd:0d:b8:2a:da:41: 96:4f:d2:93:28:d3:e2:fe:6e:70:08:a4:d7:f8:c0: ac:52:67:71:99:b7:a8:cf:16:38:92:29:d7:4a:44: 83:ec:6d:60:bd:d5:be:c3:4e:fc:4d:10:6f:8f:57: f4:98:1e:c6:24:a5:f3:04:52:10:59:72:06:29:8c: f1:e8:92:d6:f3:61:e0:56:9a:fc:61:4d:c7:05:61: 17:71:a1:93:ae:97:03:e5:2f:60:8b:c3:40:54:52: 8f:3a:c0:0b:ca:67:e1:80:25:13:bf:8d:57:d9:0e: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E5:3F:DC:5D:C0:91:89:25:95:7F:2B:C3:5D:80:60:FC:BE:F3:B6 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:89:6c:42:82:3c:33:83:79:ed:93:0e:44:8d:42:d4:15:3f: 38:03:fd:76:bc:32:39:97:a8:44:57:f4:fb:29:90:cd:44:71: 2c:ba:c0:58:f1:95:96:b7:5e:2a:33:13:55:fe:55:1c:6c:05: 6d:b1:49:b5:43:da:71:7d:90:84:a2:e6:9e:a5:cb:e0:0c:b8: a3:0c:f1:ee:50:8b:49:66:28:0a:74:d9:79:80:22:42:e1:91: 0d:d2:f2:d0:4b:20:02:1b:a0:26:26:a2:c9:e2:82:dc:bb:ff: 92:06:1c:96:c9:ff:da:73:10:ec:77:ff:74:84:c5:64:26:dc: 66:cd:63:79:1f:44:2e:80:e6:c8:4e:e6:0e:7e:e1:16:9f:31: 0b:95:88:10:c5:74:42:02:4f:a8:66:fa:c1:a4:f1:ce:40:f9: 61:1e:c1:c1:95:32:e0:a0:80:22:24:d4:fd:2f:b3:fb:ed:1d: 55:ca:f6:21:82:d7:b3:86:af:e9:ce:83:38:cf:2d:fc:3b:79: 7b:15:fd:eb:20:eb:92:24:fc:3b:67:a8:6c:f4:ee:c6:aa:0b: 7a:53:8f:92:65:a0:cf:97:d9:82:f2:f5:2c:ac:e4:59:e2:9b: ff:58:b2:32:a3:b4:a1:9f:ec:3e:dd:22:fe:ef:78:fc:12:29: ce:10:75:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjYwODE5MDEwOTU5WhcNMjYwODI2MDEwOTU5WjAYMRYwFAYD VQQDEw02YTg1MDI2Ny05ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nS/MJd+ui757432GopebrpIaZaBh+bIjehSfdGh3h7b1b3deE2rOItN10rM +5Tn+Pp/YFrKmzxyLVbuguP1XX/N1cHJjSkqGzjdLMr3fkQhnrYtNa8BqkfbV3qQ Zysnx7FwZpFmqk9wOaL9evbBCLwfsAnzePwlGnwtB7rpm7Y/wQInm5qpPlXeeT2p Y/TNDbgq2kGWT9KTKNPi/m5wCKTX+MCsUmdxmbeozxY4kinXSkSD7G1gvdW+w078 TRBvj1f0mB7GJKXzBFIQWXIGKYzx6JLW82HgVpr8YU3HBWEXcaGTrpcD5S9gi8NA VFKPOsALymfhgCUTv41X2Q7wEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMflP9xd wJGJJZV/K8NdgGD8vvO2MB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE4lsQoI8M4N57ZMORI1C1BU/OAP9drwyOZeoRFf0+ymQzURxLLrAWPGVlrde KjMTVf5VHGwFbbFJtUPacX2QhKLmnqXL4Ay4owzx7lCLSWYoCnTZeYAiQuGRDdLy 0EsgAhugJiaiyeKC3Lv/kgYclsn/2nMQ7Hf/dITFZCbcZs1jeR9ELoDmyE7mDn7h Fp8xC5WIEMV0QgJPqGb6waTxzkD5YR7BwZUy4KCAIiTU/S+z++0dVcr2IYLXs4av 6c6DOM8t/Dt5exX96yDrkiT8O2eobPTuxqoLelOPkmWgz5fZgvL1LKzkWeKb/1iy MqO0oZ/sPt0i/u94/BIpzhB1NQ== -----END CERTIFICATE-----Generated at Wed Aug 19 15:14:41 2026 by rpki-client