$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: Hv/k9zTPCl2kAZLwKTa7C4ZURpUi2Lu8vUmbrDIJu2A= Subject key identifier: BD:B9:8C:AC:9F:73:C0:AE:54:C3:D6:F2:0B:77:E8:7A:AB:76:1D:62 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0C20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0C16 Signing time: Tue 18 Aug 2026 19:05:24 +0000 Manifest this update: Tue 18 Aug 2026 19:05:23 +0000 Manifest next update: Tue 25 Aug 2026 19:05:23 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: idLa984YXb13FLLTOEqbOHCIiNza6lKn9af36MD2N6U=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: g0hHwavKHkMKzW+fUc9yoxIkfZMTCDATCQiZVk5QwDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Aug 18 19:05:23 2026 GMT Not After : Aug 25 19:05:23 2026 GMT Subject: CN=6a84acf3-5d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:13:c5:e7:ff:26:00:07:0f:69:9d:bb:78: 78:db:7d:05:86:25:1a:1e:01:b7:67:c8:09:2a:75: cf:a4:1d:50:2e:24:db:91:96:a3:55:f1:2e:fe:5d: 9f:04:44:77:93:4c:13:88:05:c4:e6:bc:4e:85:6d: 29:93:0c:5e:8a:c8:26:b9:fd:11:b8:0a:b5:c7:ad: 55:15:d2:c1:22:f1:ea:f3:53:cf:6b:36:ca:38:cb: 03:b7:4b:61:21:ef:f4:91:09:4f:d9:fb:30:0d:75: 98:ec:c6:77:4f:06:56:e0:57:e0:a1:4f:2d:ac:44: 85:0e:75:10:fa:52:b7:c0:2a:e5:ce:08:aa:b3:64: 12:d9:c4:4f:6d:a2:33:41:87:54:08:cc:8f:69:c4: fc:42:ed:68:03:d3:5c:72:5a:53:9b:23:d9:63:31: 4c:c5:49:d6:d6:bb:f5:83:00:ca:68:2e:10:0e:c5: 20:1a:5d:4a:c8:90:68:2d:4b:e6:5e:53:05:5d:a7: 87:07:6f:81:3b:6d:61:08:78:7e:2e:c2:61:93:7b: 6e:9e:26:b3:55:aa:80:e7:dc:24:a2:28:f3:e3:12: fb:19:5f:73:f9:c7:13:b2:8f:9c:96:a4:a4:75:49: 4e:2a:6a:0c:bd:b4:3f:17:5f:e8:38:a4:60:34:0c: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B9:8C:AC:9F:73:C0:AE:54:C3:D6:F2:0B:77:E8:7A:AB:76:1D:62 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:18:dd:4e:0e:50:4c:ab:7d:00:90:a6:be:e2:66:b9:1e: 98:2a:a6:85:be:8a:50:83:d1:93:18:0d:da:ee:ac:f5:a8:9c: ea:af:b4:11:2d:70:b2:e4:6a:7f:5d:e5:49:57:c4:3e:4a:61: 14:14:5d:fe:42:3a:16:55:89:d0:9f:ef:17:39:11:bd:18:3e: b8:92:d0:ac:8b:92:02:21:ac:ff:ea:e6:44:6a:28:24:25:da: c2:53:62:0a:9d:f1:38:4e:94:e5:ee:47:f3:10:b7:63:a5:1d: 31:7d:cb:da:cd:34:7c:61:ab:eb:ed:3b:57:e0:3c:eb:13:ee: 7b:11:95:2d:db:c1:56:ab:f1:fb:bc:85:76:ca:34:7b:70:40: 3f:23:17:f7:b5:23:92:84:ef:0f:c3:40:56:1c:73:1c:58:65: 19:ba:58:cd:31:2e:32:e4:08:15:94:11:92:8a:17:c5:7a:76: 56:cf:fe:3c:50:02:1e:3a:e5:91:23:74:87:0a:5c:54:97:28: db:80:6c:21:25:d6:1f:0f:7b:4c:be:48:71:71:00:e2:86:76: 02:ed:45:8b:9d:37:a8:24:ee:87:cc:08:7f:36:4f:ba:99:ec: 87:b7:f3:cf:7c:21:21:83:e2:cb:69:fb:b6:ef:45:bc:f0:39: c4:d5:35:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjYwODE4MTkwNTIzWhcNMjYwODI1MTkwNTIzWjAYMRYwFAYD VQQDEw02YTg0YWNmMy01ZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVQTxef/JgAHD2mdu3h4230FhiUaHgG3Z8gJKnXPpB1QLiTbkZajVfEu/l2f BER3k0wTiAXE5rxOhW0pkwxeisgmuf0RuAq1x61VFdLBIvHq81PPazbKOMsDt0th Ie/0kQlP2fswDXWY7MZ3TwZW4FfgoU8trESFDnUQ+lK3wCrlzgiqs2QS2cRPbaIz QYdUCMyPacT8Qu1oA9NcclpTmyPZYzFMxUnW1rv1gwDKaC4QDsUgGl1KyJBoLUvm XlMFXaeHB2+BO21hCHh+LsJhk3tuniazVaqA59wkoijz4xL7GV9z+ccTso+clqSk dUlOKmoMvbQ/F1/oOKRgNAyEBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL25jKyf c8CuVMPW8gt36Hqrdh1iMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbdgY3U4OUEyrfQCQpr7iZrkemCqmhb6KUIPRkxgN2u6s9aic6q+0ES1wsuRq f13lSVfEPkphFBRd/kI6FlWJ0J/vFzkRvRg+uJLQrIuSAiGs/+rmRGooJCXawlNi Cp3xOE6U5e5H8xC3Y6UdMX3L2s00fGGr6+07V+A86xPuexGVLdvBVqvx+7yFdso0 e3BAPyMX97UjkoTvD8NAVhxzHFhlGbpYzTEuMuQIFZQRkooXxXp2Vs/+PFACHjrl kSN0hwpcVJco24BsISXWHw97TL5IcXEA4oZ2Au1Fi503qCTuh8wIfzZPupnsh7fz z3whIYPiy2n7tu9FvPA5xNU1VQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:34 2026 by rpki-client