$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft File: 4A98xO20ZNoqTvnfvu5imVNRVeo.mft (raw, json) Hash identifier: UFlf5SDOnpQxdLwQQIqCI5yqZinMepCBWvarQg5oTaY= Subject key identifier: A5:AC:CB:18:11:6B:EE:85:C9:8D:F9:62:5E:8D:2E:33:A3:61:4E:21 Authority key identifier: E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA Certificate issuer: /CN=A9165746/serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft Manifest number: 28 Signing time: Wed 19 Aug 2026 09:31:16 +0000 Manifest this update: Wed 19 Aug 2026 09:31:15 +0000 Manifest next update: Wed 26 Aug 2026 09:31:15 +0000 Files and hashes: 1: 4A98xO20ZNoqTvnfvu5imVNRVeo.crl (hash: aPf6VMo3zR9KEHAK50L6Tr+T88EwlnBe14Ud6IaD1Qk=) 2: 031954DE5F3611F180101EC97F47A888.roa (hash: 8MG6eGpVkP9CJ/8UlblTP9Xx22hFfv4p4ykAcJ2UqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA Validity Not Before: Aug 19 09:31:15 2026 GMT Not After : Aug 26 09:31:15 2026 GMT Subject: CN=6a8577e4-3715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:23:27:b2:58:c6:74:f6:c8:84:ec:0f:5d:c3: 87:f8:7c:18:1a:77:8a:5a:46:d1:53:5c:e6:1e:41: 7c:4a:40:3c:79:ae:ba:64:f0:6d:7d:ea:ff:fe:aa: 94:f3:53:9d:45:2b:0d:d0:4d:05:f9:45:2e:60:b5: e6:9e:d9:08:5d:ca:89:33:c5:c5:68:b7:8a:f1:71: 53:84:b6:67:f7:22:c0:db:d5:1c:62:4e:d9:9c:bb: 98:89:d7:be:b1:34:33:8d:cd:61:c7:75:7f:83:9a: 48:73:a9:b2:25:c5:3a:60:0f:69:e7:5f:94:6a:54: ad:57:a8:d2:bf:83:d3:93:78:32:28:e4:8d:95:1d: 47:43:7c:4c:21:51:82:82:b0:71:66:75:7b:36:c1: cd:35:55:73:aa:ab:4b:0d:a4:e1:8c:33:cc:ab:26: bd:8e:d3:b8:5a:5f:1e:f3:06:0e:3c:af:13:26:e1: 2c:1f:90:e3:8b:1a:8f:30:fb:8a:a6:d4:3f:b4:98: de:19:22:9f:ca:db:7c:16:8b:27:2f:9b:56:bb:1e: 47:ed:f3:27:86:fb:41:70:aa:37:77:97:a9:54:c7: 7f:57:cc:5d:f5:8c:40:32:74:dd:8c:31:32:c9:ae: 60:e3:e7:6e:ea:7a:3f:6f:4c:b1:b7:de:a3:e9:73: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:CB:18:11:6B:EE:85:C9:8D:F9:62:5E:8D:2E:33:A3:61:4E:21 X509v3 Authority Key Identifier: keyid:E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6e:67:44:10:10:8f:c2:14:16:c6:77:f7:67:3f:5d:07:d4: 3c:35:03:ac:2f:7e:90:a0:c6:f6:98:38:81:1b:55:1d:97:61: f9:7b:bd:79:76:99:62:b7:da:70:c1:c7:f6:97:86:17:4e:be: 9b:19:ed:5d:94:6e:24:23:d3:c1:9a:8d:30:f0:2a:55:a4:b2: 80:23:11:a6:17:b6:c8:f1:89:7e:55:48:39:c5:bd:c5:35:72: 59:21:97:5e:a2:30:e1:7b:a6:92:c2:34:6a:60:16:49:0b:35: d9:c4:54:f8:75:0e:f5:21:9a:e5:52:ff:70:29:a7:00:15:03: b0:b6:36:ba:3f:2a:02:8d:db:b6:ed:97:76:a5:1b:d1:2d:c2: ba:a3:e0:93:86:a4:56:cf:72:34:59:e9:a8:77:47:5b:4c:95: 4d:bd:60:49:6d:5e:1e:ea:21:3a:63:ff:54:a2:67:c0:cb:09: 45:c4:e7:82:e2:f0:99:fe:1e:e3:56:90:df:a9:e5:1c:89:8d: 69:21:19:77:42:b6:a7:c2:43:80:1b:32:fd:d7:c9:9d:ad:4d: ef:92:cc:18:6d:0f:c8:0d:ef:b5:4a:ff:0d:7e:7c:7e:34:09: 09:7e:4a:ca:d2:75:8b:78:b2:f5:9a:ab:92:37:62:ed:f6:8e: 97:df:48:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTc0NjExMC8GA1UEBRMoRTAwRjdDQzRFREI0NjREQTJBNEVGOURGQkVFRTYyOTk1 MzUxNTVFQTAeFw0yNjA4MTkwOTMxMTVaFw0yNjA4MjYwOTMxMTVaMBgxFjAUBgNV BAMTDTZhODU3N2U0LTM3MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoIyeyWMZ09siE7A9dw4f4fBgad4paRtFTXOYeQXxKQDx5rrpk8G196v/+qpTz U51FKw3QTQX5RS5gteae2QhdyokzxcVot4rxcVOEtmf3IsDb1RxiTtmcu5iJ176x NDONzWHHdX+DmkhzqbIlxTpgD2nnX5RqVK1XqNK/g9OTeDIo5I2VHUdDfEwhUYKC sHFmdXs2wc01VXOqq0sNpOGMM8yrJr2O07haXx7zBg48rxMm4SwfkOOLGo8w+4qm 1D+0mN4ZIp/K23wWiycvm1a7Hkft8yeG+0Fwqjd3l6lUx39XzF31jEAydN2MMTLJ rmDj527qej9vTLG33qPpcyb9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpazLGBFr 7oXJjfliXo0uM6NhTiEwHwYDVR0jBBgwFoAU4A98xO20ZNoqTvnfvu5imVNRVeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NzQ2LzcyQUMyMDUyNUYz NTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5vcVR2bmZ2dTVpbVZOUlZl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEE5OHhPMjBaTm9xVHZuZnZ1NWltVk5SVmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NzQ2LzcyQUMyMDUyNUYzNTExRjFBM0FFMkY3NTdFNDdBODg4LzRBOTh4TzIwWk5v cVR2bmZ2dTVpbVZOUlZlby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCVbmdEEBCPwhQWxnf3Zz9dB9Q8NQOsL36QoMb2mDiBG1Udl2H5e715dplit9pw wcf2l4YXTr6bGe1dlG4kI9PBmo0w8CpVpLKAIxGmF7bI8Yl+VUg5xb3FNXJZIZde ojDhe6aSwjRqYBZJCzXZxFT4dQ71IZrlUv9wKacAFQOwtja6PyoCjdu27Zd2pRvR LcK6o+CThqRWz3I0Wemod0dbTJVNvWBJbV4e6iE6Y/9UomfAywlFxOeC4vCZ/h7j VpDfqeUciY1pIRl3QranwkOAGzL918mdrU3vkswYbQ/IDe+1Sv8Nfnx+NAkJfkrK 0nWLeLL1mquSN2Lt9o6X30gp -----END CERTIFICATE-----Generated at Wed Aug 19 17:08:09 2026 by rpki-client