$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: 88976hVuK18Rke/CRD2Q8XAoP2bgSXFNzz8SXVzvGWE= Subject key identifier: 17:81:55:15:3B:0F:A8:2F:9C:66:13:5D:9B:0F:7C:24:39:2F:90:E2 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0D5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0D46 Signing time: Tue 18 Aug 2026 18:22:08 +0000 Manifest this update: Tue 18 Aug 2026 18:22:07 +0000 Manifest next update: Tue 25 Aug 2026 18:22:07 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: koDmu57oXn3nN+yRNYPbBi071COWMVL1dCvJI7upaRg=) 2: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Aug 18 18:22:07 2026 GMT Not After : Aug 25 18:22:07 2026 GMT Subject: CN=6a84a2d0-2692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:64:65:14:f5:32:2c:a0:71:b5:7f:c6:02: 23:61:fa:8b:ca:69:24:df:1c:81:76:68:1d:c2:17: c9:d9:f3:40:ce:4a:e2:ac:bf:94:4c:6a:0d:2c:f8: b6:1b:a6:35:e1:ef:a8:0e:b1:ca:28:7e:18:14:cf: f8:ab:42:b6:1e:16:b9:be:37:80:33:55:6f:7a:d7: 6f:0e:50:ea:bc:a5:34:cf:b8:bb:ab:b2:ae:34:d2: 9c:31:7d:75:0b:d8:f7:d7:1d:7b:31:13:f3:aa:37: b7:23:69:71:81:52:d3:a3:f6:bb:9c:c7:15:95:4f: c8:17:d9:90:1c:b6:77:a7:3c:4a:31:6e:98:1f:15: fd:08:b1:ca:66:ed:58:69:cb:5c:00:8d:78:e1:6b: e9:2c:f2:38:a2:1d:b3:64:a6:87:41:08:ec:f4:2e: a8:ff:39:47:87:34:4a:b9:4d:36:3a:81:9d:9f:d3: c7:d5:c7:91:d0:c5:3d:1b:a4:20:1e:a0:d8:4c:12: 4d:3f:bb:25:72:c7:20:92:f2:44:a1:76:64:f3:3e: a1:0a:e2:c3:a9:ee:d9:1c:3e:d8:da:aa:4f:23:18: 29:da:14:11:36:7f:16:66:4d:b7:46:c0:e6:72:b4: af:97:41:b3:20:32:c8:ba:4e:20:6f:22:e1:93:63: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:55:15:3B:0F:A8:2F:9C:66:13:5D:9B:0F:7C:24:39:2F:90:E2 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ae:a5:6e:a4:e5:2c:93:32:51:29:7f:54:71:6f:3f:d8:cd: 11:27:60:22:89:b3:96:e7:dc:ee:74:2a:b3:ea:8b:43:eb:67: cf:8f:08:eb:6e:ba:a7:62:b3:10:28:71:ab:bd:aa:a4:fc:6b: 2b:5e:90:6f:bf:8f:25:48:35:d1:f5:1e:03:e8:27:1c:9b:80: dd:74:92:3f:2e:9c:9c:4c:d0:59:b6:7b:20:bd:6c:7a:72:cb: 97:8e:63:58:f0:fb:5d:58:ee:d8:fe:f3:18:03:0f:49:cf:f0: ce:b4:17:f5:66:f6:09:ef:6b:62:2c:65:92:0f:df:b2:8c:c7: 9a:39:03:4b:c8:4c:3a:64:34:9d:73:62:1d:11:3c:da:7f:90: 11:f3:90:c8:57:d1:6b:95:c5:b8:1a:a8:49:92:ff:c0:cd:5c: 47:e1:6c:5a:ae:a8:62:8a:42:34:f3:e9:1c:d8:ed:cb:9c:61: a8:fa:7a:6c:d7:8d:1e:83:da:33:6c:72:f7:1c:51:cb:b9:6d: 06:95:88:2f:e5:d9:9b:13:74:4e:fd:09:a1:bb:c3:72:42:f2: f8:5d:4d:34:7c:1e:24:16:e4:75:14:0a:66:4a:59:bc:24:bc: 56:25:77:23:83:33:c1:50:94:81:8d:5d:31:c3:10:b4:65:b1: 3d:9e:e1:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjYwODE4MTgyMjA3WhcNMjYwODI1MTgyMjA3WjAYMRYwFAYD VQQDEw02YTg0YTJkMC0yNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T1kZRT1MiygcbV/xgIjYfqLymkk3xyBdmgdwhfJ2fNAzkrirL+UTGoNLPi2 G6Y14e+oDrHKKH4YFM/4q0K2Hha5vjeAM1VvetdvDlDqvKU0z7i7q7KuNNKcMX11 C9j31x17MRPzqje3I2lxgVLTo/a7nMcVlU/IF9mQHLZ3pzxKMW6YHxX9CLHKZu1Y actcAI144WvpLPI4oh2zZKaHQQjs9C6o/zlHhzRKuU02OoGdn9PH1ceR0MU9G6Qg HqDYTBJNP7slcscgkvJEoXZk8z6hCuLDqe7ZHD7Y2qpPIxgp2hQRNn8WZk23RsDm crSvl0GzIDLIuk4gbyLhk2MaUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeBVRU7 D6gvnGYTXZsPfCQ5L5DiMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr66lbqTlLJMyUSl/VHFvP9jNESdgIomzlufc7nQqs+qLQ+tnz48I6266p2Kz EChxq72qpPxrK16Qb7+PJUg10fUeA+gnHJuA3XSSPy6cnEzQWbZ7IL1senLLl45j WPD7XVju2P7zGAMPSc/wzrQX9Wb2Ce9rYixlkg/fsozHmjkDS8hMOmQ0nXNiHRE8 2n+QEfOQyFfRa5XFuBqoSZL/wM1cR+FsWq6oYopCNPPpHNjty5xhqPp6bNeNHoPa M2xy9xxRy7ltBpWIL+XZmxN0Tv0JobvDckLy+F1NNHweJBbkdRQKZkpZvCS8ViV3 I4MzwVCUgY1dMcMQtGWxPZ7hKw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:27 2026 by rpki-client