$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: Yp9VdrDOh+k0nGOLIi0EmBSSUxdHHOCQzSpym50nHho= Subject key identifier: CB:32:68:F1:50:7F:FF:49:9A:20:23:3A:68:46:17:17:F4:33:F0:8B Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 0567 Signing time: Tue 18 Aug 2026 23:45:20 +0000 Manifest this update: Tue 18 Aug 2026 23:45:20 +0000 Manifest next update: Tue 25 Aug 2026 23:45:20 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: p7DWwO5Xsgl4+Zp2FHVICe/uVQgkrhoB0kBaMEIZibc=) 2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: b5XLxKmuQjlgPRC2YJU3aeX9AvktKsDS2h1VBTEltQw=) 3: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: VCY6VieVb7TG2U03HIBFTaPiwgKuFeeeP7S9R6dlJ6E=) 4: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: XS0xAK4nnF7Dq2UBrvrKqZgDFOkN/XmKJyB81kCEows=) 5: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 6vDTx1Sxq8tUZv93hoBcq2yOxm15beDyF9zkAam3IFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Aug 18 23:45:20 2026 GMT Not After : Aug 25 23:45:20 2026 GMT Subject: CN=6a84ee90-c6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:ad:e8:0e:1d:3f:0d:e7:61:fe:d5:04:cd: 06:4c:20:3e:b2:d7:bd:33:8e:7b:61:ca:77:f4:20: 65:16:ca:ac:ff:46:4b:d2:e1:24:60:e5:a7:d1:2d: 98:aa:0f:55:ea:f3:0d:d1:6a:a3:39:39:ed:25:05: 9d:62:22:fe:91:33:aa:38:a4:21:cb:46:a3:33:d1: 22:62:10:11:de:f3:01:3b:b8:82:82:cc:7b:80:37: cb:d6:68:55:cd:09:52:25:e7:3f:59:78:9a:0c:eb: 8f:fa:af:08:79:5e:6b:fe:4a:a4:33:0c:dc:00:6c: 35:c7:86:27:3b:af:d2:d8:0d:0d:2b:2c:cc:22:53: 3b:49:17:a1:2c:eb:f2:2e:07:a2:c8:6a:39:43:17: b3:1d:45:59:d7:3d:d4:ff:85:96:70:0e:63:ec:d5: 05:87:77:fa:de:b4:32:24:e4:21:ec:63:5d:da:75: c6:d1:b7:bf:12:50:4d:8f:c2:c2:85:f9:e9:33:ae: c7:66:40:64:51:c4:17:d0:d9:c2:87:c2:a6:20:92: 54:50:95:fb:0d:66:31:a1:7e:d2:a4:93:2b:8a:70: ee:7b:52:6a:d2:db:d4:93:6c:d4:01:e2:d1:68:1f: 3e:12:d5:2f:ed:18:08:5e:16:ee:3e:67:6d:dd:d4: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:68:F1:50:7F:FF:49:9A:20:23:3A:68:46:17:17:F4:33:F0:8B X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:80:a6:4f:81:58:4b:5e:b8:11:85:2d:3c:dd:7f:51:85: 5b:bc:4f:f2:7b:90:9d:3c:38:9f:75:a0:9c:e5:d0:62:77:23: d6:ef:fc:eb:d2:63:88:92:cb:61:d2:f8:f9:11:32:80:a4:64: 80:9c:70:8e:08:43:db:13:37:90:6f:3b:56:7b:40:74:09:7f: 5e:1b:4e:51:69:43:c7:02:32:ff:34:70:a9:99:7c:10:2f:b6: 1d:b9:87:39:b1:91:de:d2:9f:86:14:f7:2f:f8:d3:2f:e7:8e: 5f:3a:c0:dd:4c:14:12:76:8c:37:ff:58:46:92:d4:86:5c:4b: 1a:91:cc:ce:7b:df:ad:72:79:f2:4f:43:f5:01:ca:cd:18:ad: 7d:0a:bd:7d:2c:9d:6f:1a:c3:94:7f:01:c4:81:77:17:eb:e2: 40:bf:a0:98:e0:67:15:4e:ef:7b:28:f0:c9:50:e8:aa:79:3b: 94:9b:19:b4:41:2a:76:e2:64:3e:25:9d:54:d1:dd:6a:38:ae: 20:d2:79:a9:c1:97:8f:1d:a2:83:12:ac:11:96:c9:5f:7c:0e: 2a:c2:6a:61:fe:b2:6a:17:df:4a:b6:1a:ba:22:0b:de:cf:6d: 75:6a:6c:b4:fa:e1:8a:19:35:52:be:1e:07:ce:6d:a6:2f:f0: 1e:b3:2b:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjYwODE4MjM0NTIwWhcNMjYwODI1MjM0NTIwWjAYMRYwFAYD VQQDEw02YTg0ZWU5MC1jNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/St6A4dPw3nYf7VBM0GTCA+ste9M457Ycp39CBlFsqs/0ZL0uEkYOWn0S2Y qg9V6vMN0WqjOTntJQWdYiL+kTOqOKQhy0ajM9EiYhAR3vMBO7iCgsx7gDfL1mhV zQlSJec/WXiaDOuP+q8IeV5r/kqkMwzcAGw1x4YnO6/S2A0NKyzMIlM7SRehLOvy LgeiyGo5QxezHUVZ1z3U/4WWcA5j7NUFh3f63rQyJOQh7GNd2nXG0be/ElBNj8LC hfnpM67HZkBkUcQX0NnCh8KmIJJUUJX7DWYxoX7SpJMrinDue1Jq0tvUk2zUAeLR aB8+EtUv7RgIXhbuPmdt3dTE/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsyaPFQ f/9JmiAjOmhGFxf0M/CLMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQeApk+BWEteuBGFLTzdf1GFW7xP8nuQnTw4n3WgnOXQYncj1u/869JjiJLL YdL4+REygKRkgJxwjghD2xM3kG87VntAdAl/XhtOUWlDxwIy/zRwqZl8EC+2HbmH ObGR3tKfhhT3L/jTL+eOXzrA3UwUEnaMN/9YRpLUhlxLGpHMznvfrXJ58k9D9QHK zRitfQq9fSydbxrDlH8BxIF3F+viQL+gmOBnFU7veyjwyVDoqnk7lJsZtEEqduJk PiWdVNHdajiuINJ5qcGXjx2igxKsEZbJX3wOKsJqYf6yahffSrYauiIL3s9tdWps tPrhihk1Ur4eB85tpi/wHrMrow== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:00 2026 by rpki-client