$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: b6WYt8Tk1dIfT8Ntw0ZQ3Y8ichepgAybUGY1I3Hqr+M= Subject key identifier: 30:4C:CE:72:07:F2:03:A8:F5:F8:C9:71:86:03:0D:A0:4A:51:9A:AF Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 259B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 2549 Signing time: Thu 20 Aug 2026 15:43:47 +0000 Manifest this update: Thu 20 Aug 2026 15:43:46 +0000 Manifest next update: Thu 27 Aug 2026 15:43:46 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: ZVFgXRsb27PQbhhuyFYh0XUzYevazV3mCKf5GsnTG00=) 2: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=) 3: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=) 4: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=) 5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=) 6: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=) 7: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=) 8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9627 (0x259b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Aug 20 15:43:46 2026 GMT Not After : Aug 27 15:43:46 2026 GMT Subject: CN=6a8720b2-3e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:b8:4b:f7:63:83:86:c2:17:59:2d:43:c0: e5:29:04:3a:b5:40:a7:ff:5c:b2:5b:77:d1:16:40: d3:2b:ef:03:2a:c8:3a:46:8f:3b:54:c9:d5:8e:1a: df:d2:9d:ab:d3:2e:3c:78:71:fe:10:04:d9:0b:98: e9:b5:85:63:94:08:09:99:4a:f4:b0:6f:b0:9b:a9: 3d:e8:2b:db:97:2c:5d:8f:6c:96:ba:5d:5b:05:e6: 1d:68:b1:33:0c:06:64:f5:37:ca:77:12:cf:41:b3: 4b:91:ae:ad:bd:a0:dc:97:8d:e1:b4:b3:e2:b6:61: ee:d6:ff:bc:ca:24:d2:e3:25:58:60:2a:63:45:7a: 16:c1:e6:69:d7:ef:33:fb:b8:8d:cd:cc:77:d2:87: 3b:ee:58:71:f8:38:ab:45:8f:10:91:a9:f0:06:bd: 15:87:eb:38:b4:9c:85:76:e9:99:08:4f:5a:3a:b6: 06:3f:20:5f:fd:45:94:9a:e3:6b:c6:17:58:d1:73: aa:9a:93:8b:fa:5f:fb:2b:e3:21:d4:89:79:c5:c5: 2e:d4:57:15:5a:b3:30:e5:0e:c8:10:f2:50:1f:34: 21:3d:67:df:e3:06:8c:6b:24:72:7b:97:98:4a:ce: 44:cf:95:10:98:c2:90:78:e0:86:40:de:fc:93:c8: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:CE:72:07:F2:03:A8:F5:F8:C9:71:86:03:0D:A0:4A:51:9A:AF X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:88:db:8c:41:dd:2c:d9:75:cb:82:38:6e:9d:58:18:ef:1d: 79:7b:9f:81:6d:03:3d:7e:9d:5f:52:9a:36:f4:40:fc:29:f1: ac:a2:60:09:14:8b:ab:5a:46:fd:b8:18:56:56:f9:6a:06:ed: 26:97:41:38:03:11:c1:31:79:5a:ae:7f:41:4f:d3:2a:b8:98: ad:4f:87:77:6d:11:b5:7a:df:b8:ab:b2:19:24:2a:e5:95:87: a8:7b:87:cc:a2:da:17:9c:9e:e0:58:f8:8f:df:5b:46:0c:d0: d4:4b:f2:8a:ac:43:d8:48:73:9c:e9:22:89:58:53:97:23:97: 1e:7d:a7:d6:d3:42:9c:10:96:83:62:9a:37:42:00:3e:1f:01: 00:be:43:42:23:15:99:12:30:f7:c9:59:b7:98:63:35:dd:18: e1:5d:c8:59:70:f3:17:46:b4:af:69:d7:11:d3:24:5a:f0:a5: fa:4f:86:06:82:8e:b8:33:8e:05:34:9f:0b:a3:3a:6a:f5:2e: 2c:e7:a1:2e:82:80:49:0a:b8:fe:e4:97:57:31:57:5c:c3:d7: 17:23:25:01:92:78:2b:a0:52:71:16:0f:5a:9f:a8:cb:36:2f: 6f:fb:e1:1f:1f:bf:3e:8a:de:c1:05:fa:31:35:b9:e1:a5:4e: 24:4d:c1:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwODIwMTU0MzQ2WhcNMjYwODI3MTU0MzQ2WjAYMRYwFAYD VQQDEw02YTg3MjBiMi0zZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd24S/djg4bCF1ktQ8DlKQQ6tUCn/1yyW3fRFkDTK+8DKsg6Ro87VMnVjhrf 0p2r0y48eHH+EATZC5jptYVjlAgJmUr0sG+wm6k96Cvblyxdj2yWul1bBeYdaLEz DAZk9TfKdxLPQbNLka6tvaDcl43htLPitmHu1v+8yiTS4yVYYCpjRXoWweZp1+8z +7iNzcx30oc77lhx+DirRY8QkanwBr0Vh+s4tJyFdumZCE9aOrYGPyBf/UWUmuNr xhdY0XOqmpOL+l/7K+Mh1Il5xcUu1FcVWrMw5Q7IEPJQHzQhPWff4waMayRye5eY Ss5Ez5UQmMKQeOCGQN78k8hwYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBMznIH 8gOo9fjJcYYDDaBKUZqvMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF4jbjEHdLNl1y4I4bp1YGO8deXufgW0DPX6dX1KaNvRA/CnxrKJgCRSLq1pG /bgYVlb5agbtJpdBOAMRwTF5Wq5/QU/TKriYrU+Hd20RtXrfuKuyGSQq5ZWHqHuH zKLaF5ye4Fj4j99bRgzQ1EvyiqxD2EhznOkiiVhTlyOXHn2n1tNCnBCWg2KaN0IA Ph8BAL5DQiMVmRIw98lZt5hjNd0Y4V3IWXDzF0a0r2nXEdMkWvCl+k+GBoKOuDOO BTSfC6M6avUuLOehLoKASQq4/uSXVzFXXMPXFyMlAZJ4K6BScRYPWp+oyzYvb/vh Hx+/PorewQX6MTW54aVOJE3BwA== -----END CERTIFICATE-----Generated at Sat Aug 22 06:48:18 2026 by rpki-client