$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json) Hash identifier: aFAm14h6zNBaLLNqFWxJ/6N5/BjZErPnWOct3LuCUXU= Subject key identifier: 4F:0A:E3:F9:68:D4:9E:B4:DB:E9:43:CA:43:72:4D:F7:18:10:EA:AD Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft Manifest number: D8 Signing time: Wed 19 Aug 2026 07:20:11 +0000 Manifest this update: Wed 19 Aug 2026 07:20:10 +0000 Manifest next update: Wed 26 Aug 2026 07:20:10 +0000 Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: ZgdnCd2Rd+C7NcChncjCYPMbSFWcWYaAa3StokjcPv4=) 2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Validity Not Before: Aug 19 07:20:10 2026 GMT Not After : Aug 26 07:20:10 2026 GMT Subject: CN=6a85592b-72a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:54:e8:81:4e:b0:3e:12:34:cb:f7:6a:c5: 6b:eb:6c:54:7b:cb:a6:e0:94:b1:de:12:89:cf:38: 0b:35:a2:97:a6:6e:bb:2f:87:13:ab:71:65:09:03: 24:90:56:f7:1e:1e:ba:29:58:55:e5:0c:4a:f7:c3: 86:96:ff:27:ec:03:12:13:79:01:7e:cf:9b:88:da: 2e:16:dc:b5:62:3e:40:a2:9f:0e:81:4c:8a:e6:61: 78:3e:5b:69:c3:20:19:cc:b1:1e:ed:bf:4a:74:d6: 24:55:58:02:3c:1e:9e:49:59:1f:17:ff:d1:29:77: 8f:75:15:8d:04:2b:1b:49:69:5f:f7:64:4d:1a:bf: 20:86:f2:1e:30:04:e5:58:91:49:9b:0a:9f:eb:fe: c8:88:75:4f:1f:e7:01:0d:ee:47:fe:44:c9:fc:db: 53:48:97:d4:8b:42:49:d1:2e:15:46:ba:67:8b:62: 62:a9:b8:a9:c7:75:f5:78:b4:2f:c1:7b:69:db:8e: cd:2c:47:f4:4d:b6:47:d7:41:fb:c2:10:35:ac:05: 34:15:aa:53:a5:72:ae:0b:65:03:06:b3:77:07:5b: 69:8f:62:bc:2b:84:32:f0:9a:c7:e2:cc:60:48:87: cd:ed:b6:e5:15:e5:5e:c4:bc:3f:28:d3:5d:73:fb: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0A:E3:F9:68:D4:9E:B4:DB:E9:43:CA:43:72:4D:F7:18:10:EA:AD X509v3 Authority Key Identifier: keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a4:68:b2:46:4c:c5:57:d8:8e:d3:80:b5:17:25:cc:b8:a3: 92:e1:60:ff:40:2c:23:f4:a7:18:4b:ae:67:f6:76:ba:dd:8b: 7e:f7:03:7e:59:27:76:f3:63:5a:22:3a:76:b0:ac:ac:49:07: 25:3b:c5:e4:01:e0:ad:60:9b:22:db:da:72:fe:2a:fa:a5:64: 8c:b1:b8:f7:39:b1:be:f8:e0:0e:27:d6:14:b2:08:ab:1b:e5: 37:12:ff:d8:07:d6:38:a3:b8:cb:e0:ec:c8:22:b6:d6:d1:09: 3d:d2:fb:97:30:c1:ce:0b:9d:7c:cc:e0:a6:7e:e4:d6:b8:bf: e1:a2:51:d8:3a:2d:51:b4:ed:8d:d4:0f:59:73:d3:40:69:84: 81:44:bd:ea:c0:df:e8:63:d5:f6:dd:24:f8:9f:23:c3:44:3e: c9:b3:d7:d4:48:e2:11:58:8d:25:7a:60:45:08:ea:4f:2b:67: 7d:3c:98:f3:24:c2:ce:7e:04:88:c6:11:1b:81:18:e8:33:2b: c5:af:9d:29:10:ac:38:2f:24:9f:13:46:bc:46:97:ba:88:d2: 69:30:62:d0:db:5d:34:e1:f1:fd:fe:2f:3b:7b:bc:ed:d1:4f: 2d:f4:53:79:f9:9d:4f:b7:f3:b0:a1:9a:8b:0b:43:cf:44:0c: 90:fd:51:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RjIxMTAvBgNVBAUTKEUzN0RDNEQ4MjQ3NjAzRTg0OEMwMDY2QzQ0NUI5Q0Q4 REE3MzUwRDYwHhcNMjYwODE5MDcyMDEwWhcNMjYwODI2MDcyMDEwWjAYMRYwFAYD VQQDEw02YTg1NTkyYi03MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sNU6IFOsD4SNMv3asVr62xUe8um4JSx3hKJzzgLNaKXpm67L4cTq3FlCQMk kFb3Hh66KVhV5QxK98OGlv8n7AMSE3kBfs+biNouFty1Yj5Aop8OgUyK5mF4Pltp wyAZzLEe7b9KdNYkVVgCPB6eSVkfF//RKXePdRWNBCsbSWlf92RNGr8ghvIeMATl WJFJmwqf6/7IiHVPH+cBDe5H/kTJ/NtTSJfUi0JJ0S4VRrpni2Jiqbipx3X1eLQv wXtp247NLEf0TbZH10H7whA1rAU0FapTpXKuC2UDBrN3B1tpj2K8K4Qy8JrH4sxg SIfN7bblFeVexLw/KNNdc/ufzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8K4/lo 1J602+lDykNyTfcYEOqtMB8GA1UdIwQYMBaAFON9xNgkdgPoSMAGbERbnNjac1DW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhGMi8yODdERTczNjU2 QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEtaEl3QVpzUkZ1YzJOcHpV TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzM0UyQ1IyQS1oSXdBWnNSRnVjMk5welVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhGMi8yODdERTczNjU2QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEt aEl3QVpzUkZ1YzJOcHpVTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqRoskZMxVfYjtOAtRclzLijkuFg/0AsI/SnGEuuZ/Z2ut2LfvcDflkndvNj WiI6drCsrEkHJTvF5AHgrWCbItvacv4q+qVkjLG49zmxvvjgDifWFLIIqxvlNxL/ 2AfWOKO4y+DsyCK21tEJPdL7lzDBzgudfMzgpn7k1ri/4aJR2DotUbTtjdQPWXPT QGmEgUS96sDf6GPV9t0k+J8jw0Q+ybPX1EjiEViNJXpgRQjqTytnfTyY8yTCzn4E iMYRG4EY6DMrxa+dKRCsOC8knxNGvEaXuojSaTBi0NtdNOHx/f4vO3u87dFPLfRT efmdT7fzsKGaiwtDz0QMkP1RRA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:29 2026 by rpki-client