$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: A5CP3ZzlaXnERZ9xM7YnNbXIlohkk48osSR6Iy8mHzs= Subject key identifier: B3:AE:86:A6:9F:72:C1:25:04:8D:DE:1A:51:2A:A7:15:11:51:79:11 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 15A4 Signing time: Wed 26 Aug 2026 18:20:53 +0000 Manifest this update: Wed 26 Aug 2026 18:20:53 +0000 Manifest next update: Wed 02 Sep 2026 18:20:53 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: 1K6OsG5kxqZtLWL6MRwe5JamPNVRPreF13bsG6tFaks=) 2: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=) 3: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Aug 26 18:20:53 2026 GMT Not After : Sep 2 18:20:53 2026 GMT Subject: CN=6a8f2e85-98cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:c2:6b:4b:62:f4:06:66:53:11:85:12:5b: 85:95:69:19:2c:ab:d0:31:5e:c8:1e:d3:84:cb:18: 50:19:0a:8b:0f:c8:73:1f:7f:2a:e8:ca:3f:b3:34: dd:57:e1:69:22:7a:26:7a:6e:54:97:de:a0:3c:be: de:09:aa:83:38:e3:55:9e:53:63:a5:a7:cd:d9:8b: 72:b7:f9:75:53:4e:d2:00:4d:7e:bc:e4:d7:0c:d8: ff:f8:3e:2b:8f:04:ac:81:63:61:bf:22:7e:27:c8: 16:fc:89:b4:87:25:d3:bd:9f:69:4d:07:90:ad:79: ed:e1:84:8a:e0:9b:42:26:80:74:58:67:84:aa:15: b0:e9:83:26:af:fc:18:1a:f1:f8:ba:bb:35:f5:c1: 99:05:61:14:29:da:5b:7e:92:c4:bb:05:de:37:75: 8a:9c:d5:c8:e1:2f:f5:27:dd:1f:24:60:00:91:af: 1b:94:3b:e4:16:04:b9:51:f1:d1:f2:b2:43:85:45: 6b:5e:a7:b5:e3:4e:04:26:80:9e:bb:45:f7:d3:8f: 28:be:a3:7d:2f:14:1d:64:5f:00:d0:6d:f2:8e:d6: 60:6f:80:0c:80:a5:d1:75:3d:84:5b:a3:cb:f0:71: 93:b1:a6:80:96:25:b5:63:72:1e:b7:ee:3b:a5:0f: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AE:86:A6:9F:72:C1:25:04:8D:DE:1A:51:2A:A7:15:11:51:79:11 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4a:a7:d2:b4:bc:66:a0:28:6f:1b:ac:50:25:28:ac:ad:51: 6b:56:e4:90:dc:58:bc:76:64:16:07:a8:85:6f:ad:37:30:a3: 20:2e:1f:6c:de:9e:62:ad:47:b7:d3:33:4c:64:3b:f1:55:fc: 2d:42:34:24:76:bf:13:4c:ff:3e:35:80:a7:14:ea:79:df:0f: 5d:ec:11:05:32:37:90:93:0f:c6:69:92:96:3d:22:4f:7b:c8: 63:09:51:0c:3e:08:1b:76:ca:31:7f:2d:5d:c1:4d:4e:e7:3d: 1a:ca:e3:cb:ea:7a:e4:59:04:f0:9f:ae:a4:57:8f:8a:81:b9: 4d:a9:26:bf:78:73:ca:aa:40:e1:f9:64:36:33:34:90:51:7e: 1c:ba:9b:0b:2e:e0:74:b1:cc:8d:93:fa:7c:91:9d:43:5e:9b: 3f:4e:12:8f:43:ea:03:dd:41:6d:81:cf:86:40:a0:9e:5b:50: 5d:6d:b1:cf:23:14:c1:b6:08:5d:02:42:76:81:32:5d:9f:c1: 87:35:5c:65:1f:0b:70:53:81:c1:19:c8:e8:e2:3d:6d:04:67: 72:fd:2e:17:8e:b8:e3:04:5b:77:23:b6:b3:a0:25:cc:03:7c: 19:a6:e0:6b:fe:2d:04:e0:05:d5:11:29:c8:d4:3c:61:c7:d5: 61:76:df:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwODI2MTgyMDUzWhcNMjYwOTAyMTgyMDUzWjAYMRYwFAYD VQQDEw02YThmMmU4NS05OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmM3Ca0ti9AZmUxGFEluFlWkZLKvQMV7IHtOEyxhQGQqLD8hzH38q6Mo/szTd V+FpInomem5Ul96gPL7eCaqDOONVnlNjpafN2Ytyt/l1U07SAE1+vOTXDNj/+D4r jwSsgWNhvyJ+J8gW/Im0hyXTvZ9pTQeQrXnt4YSK4JtCJoB0WGeEqhWw6YMmr/wY GvH4urs19cGZBWEUKdpbfpLEuwXeN3WKnNXI4S/1J90fJGAAka8blDvkFgS5UfHR 8rJDhUVrXqe1404EJoCeu0X3048ovqN9LxQdZF8A0G3yjtZgb4AMgKXRdT2EW6PL 8HGTsaaAliW1Y3Iet+47pQ9W9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOuhqaf csElBI3eGlEqpxURUXkRMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0qn0rS8ZqAobxusUCUorK1Ra1bkkNxYvHZkFgeohW+tNzCjIC4fbN6eYq1H t9MzTGQ78VX8LUI0JHa/E0z/PjWApxTqed8PXewRBTI3kJMPxmmSlj0iT3vIYwlR DD4IG3bKMX8tXcFNTuc9Gsrjy+p65FkE8J+upFePioG5Takmv3hzyqpA4flkNjM0 kFF+HLqbCy7gdLHMjZP6fJGdQ16bP04Sj0PqA91BbYHPhkCgnltQXW2xzyMUwbYI XQJCdoEyXZ/BhzVcZR8LcFOBwRnI6OI9bQRncv0uF4644wRbdyO2s6AlzAN8Gabg a/4tBOAF1REpyNQ8YcfVYXbfUw== -----END CERTIFICATE-----Generated at Thu Aug 27 06:20:22 2026 by rpki-client