$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: V0WsdSmUOxmM+tH2IQyAkUHFKBvHl59CYMYVxEL55uY= Subject key identifier: 8D:25:D4:FB:4A:EC:70:05:72:24:A2:0C:30:9C:A2:7A:AC:6A:4F:DF Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0CBA Signing time: Tue 18 Aug 2026 19:14:40 +0000 Manifest this update: Tue 18 Aug 2026 19:14:39 +0000 Manifest next update: Tue 25 Aug 2026 19:14:39 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: /HyYxRCQKtiOKmj+ka9Aixiig26vo5TJGYfI0nIu7Mw=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Aug 18 19:14:39 2026 GMT Not After : Aug 25 19:14:39 2026 GMT Subject: CN=6a84af1f-25ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:8a:f8:4b:c3:b4:05:8d:59:69:d6:75:41: ae:65:36:9b:c3:34:07:cc:cd:29:ae:97:a6:b2:92: 17:11:3d:18:33:df:2b:d9:60:9b:f2:52:2d:02:16: 12:31:6d:3b:e8:21:ac:fd:1d:47:82:7c:08:e8:99: 7e:ae:99:eb:88:42:d0:ae:3b:f9:23:2a:6e:fb:50: 15:92:58:6a:46:0b:61:8d:38:f6:ee:6e:8e:d8:f9: f9:4a:00:ba:68:49:14:96:19:fd:b5:0b:0d:f2:0e: e6:dd:45:53:6d:73:37:ba:46:f6:d7:f2:f5:86:50: 6c:d0:df:8f:b4:fe:92:99:bf:e0:33:b8:c2:23:fe: ce:56:59:d6:ad:96:8d:7b:d5:bd:7f:64:a1:c4:37: 13:06:4a:67:0f:8c:0f:f0:fc:cc:8f:f1:15:9e:b5: 23:ff:6c:8b:16:44:88:ed:62:88:5a:d4:83:cd:1e: d3:e4:d5:2c:f8:87:99:60:78:e8:db:94:96:0f:7a: bb:72:95:a8:7d:31:56:9a:4c:13:f2:4a:ed:2c:6f: ff:82:a1:d5:37:dc:e1:77:dc:2f:0d:58:75:dc:b2: db:d1:55:4c:1c:82:16:6a:1f:01:db:33:8c:19:c0: f6:31:98:24:e2:06:d2:c9:62:3b:d4:0b:0d:d6:39: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:25:D4:FB:4A:EC:70:05:72:24:A2:0C:30:9C:A2:7A:AC:6A:4F:DF X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8c:da:51:7c:3d:f8:a8:28:e6:a2:89:d0:bd:87:ce:4a:68: a7:eb:58:8b:88:47:7a:ce:f1:d1:4d:6d:84:0a:be:84:16:41: 37:d0:b1:00:b4:69:c6:bd:b7:dc:8f:1b:42:b1:d2:f3:10:c7: df:fe:de:3f:4f:bc:43:d0:65:b4:11:0c:68:3e:a1:2c:87:1f: 4c:1f:7a:e6:fc:ed:8d:ad:91:3a:aa:4f:18:6d:55:ff:2b:20: 92:33:42:29:db:f4:fe:47:28:1c:7e:38:09:14:49:84:00:83: 70:c6:ab:6b:fc:c7:9a:f6:e8:ec:cd:12:15:05:d7:2f:a4:de: 43:a7:97:e1:1b:1c:40:50:78:70:00:39:f3:47:f2:02:6f:93: 76:85:be:f6:d5:e0:82:e7:cb:7d:0e:a7:59:42:a4:8a:e4:0f: ea:1f:cc:21:f8:33:a2:e6:f9:42:f1:70:10:23:57:cd:88:b6: 76:3d:c3:9b:7f:63:b4:eb:42:a9:4f:a4:95:b1:7d:3f:d5:93: 97:1a:72:d8:2d:c2:78:f6:cf:70:cc:4a:ee:8e:be:92:9b:51: 50:18:5b:85:83:4f:05:16:02:2d:15:58:20:93:27:a8:2b:75: 95:04:24:22:b3:1c:5d:ee:8f:a5:6f:82:c3:51:a8:44:45:de: 04:8b:44:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDg0NEJENkQxQTk3MkNGRDJCNjBCODRERTBDQjYzRTVE NTRBRkE4Q0YwHhcNMjYwODE4MTkxNDM5WhcNMjYwODI1MTkxNDM5WjAYMRYwFAYD VQQDEw02YTg0YWYxZi0yNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJKK+EvDtAWNWWnWdUGuZTabwzQHzM0prpemspIXET0YM98r2WCb8lItAhYS MW076CGs/R1HgnwI6Jl+rpnriELQrjv5Iypu+1AVklhqRgthjTj27m6O2Pn5SgC6 aEkUlhn9tQsN8g7m3UVTbXM3ukb21/L1hlBs0N+PtP6Smb/gM7jCI/7OVlnWrZaN e9W9f2ShxDcTBkpnD4wP8PzMj/EVnrUj/2yLFkSI7WKIWtSDzR7T5NUs+IeZYHjo 25SWD3q7cpWofTFWmkwT8krtLG//gqHVN9zhd9wvDVh13LLb0VVMHIIWah8B2zOM GcD2MZgk4gbSyWI71AsN1jnbSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0l1PtK 7HAFciSiDDCconqsak/fMB8GA1UdIwQYMBaAFIRL1tGpcs/StguE3gy2Pl1Ur6jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5SzJDNFRlRExZLVhWU3Zx TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9oRXZXMGFseXo5 SzJDNFRlRExZLVhWU3ZxTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYzaUXw9+Kgo5qKJ0L2Hzkpop+tYi4hHes7x0U1thAq+hBZBN9CxALRpxr23 3I8bQrHS8xDH3/7eP0+8Q9BltBEMaD6hLIcfTB965vztja2ROqpPGG1V/ysgkjNC Kdv0/kcoHH44CRRJhACDcMara/zHmvbo7M0SFQXXL6TeQ6eX4RscQFB4cAA580fy Am+TdoW+9tXggufLfQ6nWUKkiuQP6h/MIfgzoub5QvFwECNXzYi2dj3Dm39jtOtC qU+klbF9P9WTlxpy2C3CePbPcMxK7o6+kptRUBhbhYNPBRYCLRVYIJMnqCt1lQQk IrMcXe6PpW+Cw1GoREXeBItE6A== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:14 2026 by rpki-client