$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: PtpwkJ3m6awOQLtny7v04k/vhZCzX5wnlqeWowatJ7g= Subject key identifier: A6:74:4B:DB:8E:9B:8E:AA:8F:FE:80:BD:89:71:E5:CC:44:EA:6D:6F Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1BF8 Signing time: Tue 18 Aug 2026 17:11:54 +0000 Manifest this update: Tue 18 Aug 2026 17:11:53 +0000 Manifest next update: Tue 25 Aug 2026 17:11:53 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: LrfhT60ZkBCaGRX48jnMHNI9wS++hutXGpJ5qBdmSQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 17:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4901 (0x1325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Aug 18 17:11:53 2026 GMT Not After : Aug 25 17:11:53 2026 GMT Subject: CN=6a84925a-948e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:98:93:7d:60:c6:01:3d:8b:17:04:19:ff: b4:6f:5a:b6:05:57:c2:03:b5:6f:16:41:5c:3b:41: 12:ce:14:a7:05:f5:bc:41:f2:ea:e2:28:61:cc:2b: 6c:ef:b2:ce:13:4f:5f:b9:b2:61:5d:03:ef:0a:8d: ce:a6:9c:15:06:43:76:94:0a:53:19:e6:f9:d3:05: f7:d0:d7:86:d8:d2:e6:56:35:01:82:95:61:fc:0b: 31:9a:87:bf:d2:a9:8c:0d:77:3c:d7:74:89:a5:ba: 72:6b:c5:cc:a2:50:c5:81:f7:ce:f7:99:71:5f:2f: a7:d0:2f:08:49:f6:13:f4:10:5e:76:8b:a9:da:4f: d8:97:2d:54:14:54:02:c2:14:f7:2b:3e:42:e2:4b: d2:a4:dd:75:1c:67:42:d3:bc:82:3e:c6:03:ea:4e: 04:e4:ba:ce:2b:c5:55:57:77:ca:98:be:ef:34:b8: 78:95:6c:e8:0f:77:a2:af:a0:80:1e:9a:27:f0:a1: 6d:dd:ba:e5:eb:4c:ff:62:71:77:aa:18:d3:27:da: 26:24:5f:7a:b6:8d:a0:37:34:26:28:0c:de:be:58: ff:df:c8:96:66:10:7c:90:22:42:5c:54:a0:26:63: 88:7d:b0:87:53:a1:13:40:d3:27:55:7d:1b:a5:98: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:4B:DB:8E:9B:8E:AA:8F:FE:80:BD:89:71:E5:CC:44:EA:6D:6F X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0d:fe:bd:1d:03:2c:aa:0c:28:46:eb:b3:b2:6b:15:e9:9c: dd:ea:e1:2a:56:93:7c:82:cd:f5:fa:51:02:f6:74:2e:c6:d8: a9:d6:d9:b5:d8:10:78:bb:f4:1c:2e:27:2d:06:2a:d9:99:20: c5:da:a6:8d:a5:a1:7e:8a:fc:39:6c:51:51:97:e7:05:1f:75: 2d:a6:0b:2e:5b:d6:e5:ea:8b:35:5d:da:dc:73:a1:2d:48:a7: 94:85:08:e7:79:b4:f3:4f:38:73:01:ba:54:29:f9:1c:e7:26: 59:c5:4b:6d:87:f5:52:90:29:3b:d4:ce:c0:fe:04:20:15:df: dd:f0:d4:36:24:69:d1:fd:71:7d:71:43:a0:eb:4a:a1:33:9e: f5:97:13:7b:07:b6:45:84:fd:19:b3:6a:92:58:79:f9:86:d3: 3b:5d:ec:d0:6c:ba:0c:81:d1:17:99:9f:df:6d:0e:bb:8a:ab: 5d:94:1f:f6:b3:13:f1:09:3c:92:70:c1:4c:66:6d:aa:d2:8a: 6b:44:95:18:19:e6:aa:f6:78:be:ca:8b:e0:50:02:da:1c:71: c8:5a:61:e5:1c:91:95:bf:e5:b7:e2:bf:c2:45:42:32:1a:57: 65:ca:ff:02:0d:94:3c:d4:2e:cb:d0:4c:95:86:b5:27:14:f4: 60:7d:8e:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjYwODE4MTcxMTUzWhcNMjYwODI1MTcxMTUzWjAYMRYwFAYD VQQDEw02YTg0OTI1YS05NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGiYk31gxgE9ixcEGf+0b1q2BVfCA7VvFkFcO0ESzhSnBfW8QfLq4ihhzCts 77LOE09fubJhXQPvCo3OppwVBkN2lApTGeb50wX30NeG2NLmVjUBgpVh/Asxmoe/ 0qmMDXc813SJpbpya8XMolDFgffO95lxXy+n0C8ISfYT9BBedoup2k/Yly1UFFQC whT3Kz5C4kvSpN11HGdC07yCPsYD6k4E5LrOK8VVV3fKmL7vNLh4lWzoD3eir6CA Hpon8KFt3brl60z/YnF3qhjTJ9omJF96to2gNzQmKAzevlj/38iWZhB8kCJCXFSg JmOIfbCHU6ETQNMnVX0bpZiYdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZ0S9uO m46qj/6AvYlx5cxE6m1vMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmA3+vR0DLKoMKEbrs7JrFemc3erhKlaTfILN9fpRAvZ0LsbYqdbZtdgQeLv0 HC4nLQYq2ZkgxdqmjaWhfor8OWxRUZfnBR91LaYLLlvW5eqLNV3a3HOhLUinlIUI 53m08084cwG6VCn5HOcmWcVLbYf1UpApO9TOwP4EIBXf3fDUNiRp0f1xfXFDoOtK oTOe9ZcTewe2RYT9GbNqklh5+YbTO13s0Gy6DIHRF5mf320Ou4qrXZQf9rMT8Qk8 knDBTGZtqtKKa0SVGBnmqvZ4vsqL4FAC2hxxyFph5RyRlb/lt+K/wkVCMhpXZcr/ Ag2UPNQuy9BMlYa1JxT0YH2Oiw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:01 2026 by rpki-client