$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: 7liTww1jmFmZ00H9Kb+ZtnbNpWHITAiRw/CB/rJ4wy8= Subject key identifier: 71:C1:1B:90:92:21:70:0B:C7:21:B4:1F:D6:9C:86:22:27:F9:D1:51 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 07AE Signing time: Mon 24 Aug 2026 21:25:17 +0000 Manifest this update: Mon 24 Aug 2026 21:25:16 +0000 Manifest next update: Mon 31 Aug 2026 21:25:16 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: 1nNi7GJalF88yZUNJi6kh0MmZOp7xOwepV2ma0T3Vf4=) 2: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: OuyC5TmVNJMLDabcwM8A0FwhQBrfR/VlGDzUJTCn8/U=) 3: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: QtOxsjWDqgNGgCTcsMTzCCptaAMNkGCIlXxZlBPaZcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 21:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Aug 24 21:25:16 2026 GMT Not After : Aug 31 21:25:16 2026 GMT Subject: CN=6a8cb6bc-609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:51:6a:6a:22:bb:67:d5:63:e0:be:52:cd:66: 6d:ee:6e:05:ff:54:d6:aa:4d:32:e4:38:ea:d2:45: 9a:d3:0f:fd:a9:af:02:8d:ba:ef:11:36:b9:52:00: 21:bb:e3:8c:a5:e9:4d:9f:67:06:89:0b:ea:06:d5: ed:3a:ed:d0:85:0f:65:3d:75:63:24:41:ad:f7:8e: 67:52:bd:db:3d:3d:4b:51:b2:69:0e:53:f4:f3:d9: b0:77:33:49:f0:64:af:b5:98:27:34:2a:03:21:54: ab:db:ee:ae:10:8d:2a:3c:5b:84:b0:cb:6e:b1:26: 55:43:97:e9:ac:c9:27:aa:24:7e:1d:38:d7:ba:b7: 18:c6:1e:c6:99:04:07:02:77:b8:25:87:ae:41:9f: 6d:52:c5:af:b5:c4:dd:95:13:2d:07:de:d4:5b:f7: 74:34:e7:19:da:2f:a5:cf:60:30:43:96:2d:da:38: 3a:5a:ae:2f:08:00:2c:3a:f3:ca:7a:27:39:20:4a: 31:9c:8a:2a:9a:5e:05:d5:fa:11:cd:03:15:ec:c5: 80:38:b7:6d:ec:2f:f8:9d:26:7f:ef:7b:70:54:16: 65:26:62:83:b1:7d:e0:04:72:7b:89:81:1a:4e:9e: de:0d:05:5a:f1:bd:4b:a7:3a:eb:6b:ed:95:90:a1: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C1:1B:90:92:21:70:0B:C7:21:B4:1F:D6:9C:86:22:27:F9:D1:51 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a2:3e:f1:40:fd:ed:3b:f7:d5:4b:88:8b:f1:03:f6:15:29: 08:d9:09:8d:be:a4:72:cc:cd:37:64:7b:db:8a:32:e9:52:54: 37:fd:c0:6b:e8:ca:a7:7b:c2:6c:60:48:06:90:dd:5d:2c:81: 90:f1:a4:b4:27:00:df:27:f0:fa:56:c4:17:76:17:4d:ed:70: b1:cf:4a:e5:5e:88:34:ef:1a:ac:0a:68:9b:8c:2c:b6:03:cc: e3:79:ff:f9:75:f8:07:ad:f9:2f:6c:02:74:13:bb:05:8a:ba: f5:92:99:84:ad:16:f0:9b:44:e9:2e:6b:83:bb:7d:17:96:20: 1c:00:52:8b:e7:57:13:7e:12:7d:17:6b:f3:7f:a7:14:11:9c: 47:f3:98:c6:c5:98:48:69:e2:88:94:b7:94:1d:49:1b:d8:51: f9:9d:78:3e:8d:d2:42:9a:7e:72:2d:81:48:58:44:aa:51:9d: 08:3c:71:4d:a5:29:a8:fa:96:38:5a:77:a4:ad:1a:3e:aa:26: e2:72:e8:26:e0:6c:41:40:2a:0b:b9:db:d5:e4:11:aa:84:98: df:e4:5f:20:9c:bb:25:ed:d7:6b:74:c8:db:e8:1b:6d:cd:d7: b0:ae:e2:61:d6:2b:eb:15:93:e9:90:40:5e:77:8d:3e:c2:56: b4:f9:e6:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjYwODI0MjEyNTE2WhcNMjYwODMxMjEyNTE2WjAYMRYwFAYD VQQDEw02YThjYjZiYy02MDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71FqaiK7Z9Vj4L5SzWZt7m4F/1TWqk0y5Djq0kWa0w/9qa8CjbrvETa5UgAh u+OMpelNn2cGiQvqBtXtOu3QhQ9lPXVjJEGt945nUr3bPT1LUbJpDlP089mwdzNJ 8GSvtZgnNCoDIVSr2+6uEI0qPFuEsMtusSZVQ5fprMknqiR+HTjXurcYxh7GmQQH Ane4JYeuQZ9tUsWvtcTdlRMtB97UW/d0NOcZ2i+lz2AwQ5Yt2jg6Wq4vCAAsOvPK eic5IEoxnIoqml4F1foRzQMV7MWAOLdt7C/4nSZ/73twVBZlJmKDsX3gBHJ7iYEa Tp7eDQVa8b1Lpzrra+2VkKGvcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHBG5CS IXALxyG0H9achiIn+dFRMB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKI+8UD97Tv31UuIi/ED9hUpCNkJjb6kcszNN2R724oy6VJUN/3Aa+jKp3vC bGBIBpDdXSyBkPGktCcA3yfw+lbEF3YXTe1wsc9K5V6INO8arApom4wstgPM43n/ +XX4B635L2wCdBO7BYq69ZKZhK0W8JtE6S5rg7t9F5YgHABSi+dXE34SfRdr83+n FBGcR/OYxsWYSGniiJS3lB1JG9hR+Z14Po3SQpp+ci2BSFhEqlGdCDxxTaUpqPqW OFp3pK0aPqom4nLoJuBsQUAqC7nb1eQRqoSY3+RfIJy7Je3Xa3TI2+gbbc3XsK7i YdYr6xWT6ZBAXneNPsJWtPnmMQ== -----END CERTIFICATE-----Generated at Wed Aug 26 13:05:00 2026 by rpki-client