$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json) Hash identifier: VsTzjMn9dKecEy5ntSJgb0nuwR7Sv0eLrxgK8KOtgw8= Subject key identifier: F8:A9:B8:72:B4:45:E4:CC:28:7A:98:DE:2A:D6:97:10:68:C4:E9:17 Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft Manifest number: DE Signing time: Wed 19 Aug 2026 07:17:15 +0000 Manifest this update: Wed 19 Aug 2026 07:17:15 +0000 Manifest next update: Wed 26 Aug 2026 07:17:15 +0000 Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: kZK2hMI1XBrkw01keoM3SKl9VuqGD5ualgYA1krqQ1M=) 2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: 33GM4Ev+qxmSxYN6+COOoVbBWpx3q5s4t5+8sg62BMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Validity Not Before: Aug 19 07:17:15 2026 GMT Not After : Aug 26 07:17:15 2026 GMT Subject: CN=6a85587b-4d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:9c:21:3c:ec:4e:45:65:91:83:07:d5:4f: 16:bc:b5:d1:a1:12:6f:64:af:1a:0b:b1:e5:e5:ef: d4:30:2f:24:9e:69:07:1e:16:71:a7:70:ca:4f:31: 18:20:7e:09:7e:18:01:05:24:9e:39:1e:e0:cb:56: 48:6e:6a:09:3d:4a:f7:66:27:45:22:d7:a7:f8:b6: 5b:f5:f0:0f:be:75:99:27:be:d2:33:b6:43:69:f5: e8:b6:8b:06:c2:c1:03:51:4b:2c:f8:ad:9e:f1:4e: 8d:36:4a:10:90:c5:4a:3c:59:3e:ea:94:89:84:eb: bb:8a:43:23:3a:a5:60:39:e9:cd:df:71:37:bf:14: 25:d3:8d:23:c9:a3:76:d8:a5:13:b3:f5:54:12:6f: 2e:ce:1d:6f:d3:20:c7:79:83:0f:d7:7c:46:77:ca: c9:38:31:fd:ab:ca:96:1d:ec:40:ff:3c:02:e0:c7: 6a:f6:a8:3e:6d:91:96:e6:0f:79:e5:d1:22:eb:37: d7:7e:1d:bd:7c:26:91:f3:f1:a4:bb:4b:ab:c3:8b: bb:f8:e5:e3:88:20:fd:00:89:45:fb:76:a3:9f:18: ee:cd:6d:de:aa:63:a7:e6:49:5c:dd:5a:6e:ed:ed: a0:7f:71:36:fd:87:d1:26:a6:c8:4e:a4:a3:ae:78: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:B8:72:B4:45:E4:CC:28:7A:98:DE:2A:D6:97:10:68:C4:E9:17 X509v3 Authority Key Identifier: keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:58:d0:57:ae:05:6b:13:91:00:3a:06:70:e0:c7:8c:18:1c: b3:be:00:2d:33:26:c2:3f:b6:b7:a0:16:7e:95:50:cc:4f:9a: 8b:f0:9a:e9:d3:f0:6e:e0:71:b4:c4:77:07:4c:b1:eb:15:82: 63:f9:24:95:00:cd:3f:c0:d8:3a:18:bf:9c:12:8e:9a:d6:53: 41:b3:40:15:f3:b0:0d:be:d5:8b:b7:ef:d7:19:88:81:e6:d6: 9c:1d:b1:27:21:e1:ca:05:b5:c0:4f:c2:c7:6f:e9:0f:d9:f0: e2:7a:ed:de:2c:b3:7a:8a:5c:7d:d9:52:bf:56:5e:10:c1:55: bb:ff:ab:ae:fc:aa:f2:b9:a9:b4:7f:8f:4c:74:46:e1:50:ad: a3:ca:c6:98:1d:fb:15:a8:64:f9:d6:e8:10:40:fc:22:91:b4: 72:e0:af:e0:c8:28:c3:59:98:71:04:56:74:c4:50:58:31:d8: 45:09:e9:b5:e3:39:4b:25:74:d2:32:03:9d:2c:d3:9f:44:95: 4c:30:72:c9:12:b2:76:86:fb:80:cf:8f:16:19:17:f0:1c:df: a4:32:58:b4:8c:bb:9a:23:eb:13:9a:ea:be:92:72:98:71:b0: 0e:2f:ba:6b:20:fb:75:a2:56:61:71:d0:5b:94:b2:5a:44:e8: a6:2e:5b:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE1NkQxMTAvBgNVBAUTKDQ5REREMUU0QzVBOUZDNzY2NjI2RDJGQTNCNjYzN0RB ODBFQTJGRDIwHhcNMjYwODE5MDcxNzE1WhcNMjYwODI2MDcxNzE1WjAYMRYwFAYD VQQDEw02YTg1NTg3Yi00ZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3KcITzsTkVlkYMH1U8WvLXRoRJvZK8aC7Hl5e/UMC8knmkHHhZxp3DKTzEY IH4JfhgBBSSeOR7gy1ZIbmoJPUr3ZidFIten+LZb9fAPvnWZJ77SM7ZDafXotosG wsEDUUss+K2e8U6NNkoQkMVKPFk+6pSJhOu7ikMjOqVgOenN33E3vxQl040jyaN2 2KUTs/VUEm8uzh1v0yDHeYMP13xGd8rJODH9q8qWHexA/zwC4Mdq9qg+bZGW5g95 5dEi6zfXfh29fCaR8/Gku0urw4u7+OXjiCD9AIlF+3ajnxjuzW3eqmOn5klc3Vpu 7e2gf3E2/YfRJqbITqSjrnhunwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPipuHK0 ReTMKHqY3irWlxBoxOkXMB8GA1UdIwQYMBaAFEnd0eTFqfx2ZibS+jtmN9qA6i/S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTU2RC83Q0QzREVBQzRF ODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9IWm1KdEw2TzJZMzJvRHFM OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkM1I1TVdwX0habUp0TDZPMlkzMm9EcUw5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTU2RC83Q0QzREVBQzRFODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9I Wm1KdEw2TzJZMzJvRHFMOUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIVjQV64FaxORADoGcODHjBgcs74ALTMmwj+2t6AWfpVQzE+ai/Ca6dPwbuBx tMR3B0yx6xWCY/kklQDNP8DYOhi/nBKOmtZTQbNAFfOwDb7Vi7fv1xmIgebWnB2x JyHhygW1wE/Cx2/pD9nw4nrt3iyzeopcfdlSv1ZeEMFVu/+rrvyq8rmptH+PTHRG 4VCto8rGmB37Fahk+dboEED8IpG0cuCv4Mgow1mYcQRWdMRQWDHYRQnpteM5SyV0 0jIDnSzTn0SVTDByyRKydob7gM+PFhkX8BzfpDJYtIy7miPrE5rqvpJymHGwDi+6 ayD7daJWYXHQW5SyWkTopi5baA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:47:04 2026 by rpki-client