$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: 3x9ayEykDqpKrXBWqkI6MJMf3f1sa9thFbcWp68a6SM= Subject key identifier: 6B:C9:82:9A:95:7A:60:F6:35:56:F5:A7:57:41:D3:92:15:13:ED:FB Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0D20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0D16 Signing time: Tue 18 Aug 2026 18:31:18 +0000 Manifest this update: Tue 18 Aug 2026 18:31:17 +0000 Manifest next update: Tue 25 Aug 2026 18:31:17 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: 1Gzx5fyDlmkbDNucq+6MD5qW9OTYLV5HavLxiFT6Pyg=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Aug 18 18:31:17 2026 GMT Not After : Aug 25 18:31:17 2026 GMT Subject: CN=6a84a4f6-8783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:5e:83:00:4b:c5:ec:ae:8d:66:3a:94:e9: 03:d7:49:31:3c:26:77:ec:3b:53:7e:23:8a:f6:52: 63:d5:d9:e6:6f:ce:7d:3a:90:b8:8a:28:5f:d2:8b: fe:53:cb:68:97:c3:c3:c3:8d:67:3d:e1:22:76:5f: 72:2b:b4:11:b3:d8:86:b8:8e:37:81:73:af:18:27: bc:c9:24:93:1d:6b:d0:d3:60:33:9f:e2:20:56:32: fb:36:32:52:8d:02:99:a4:24:94:2a:8e:5f:4f:f7: 39:6d:73:69:c9:b2:f0:25:40:3c:d4:11:3f:cf:5c: 00:a5:f2:fe:4a:32:df:71:03:2f:ee:6b:88:cd:40: 77:8e:2c:25:1b:89:75:66:de:82:a2:68:e1:71:2c: 78:57:6c:ae:89:e1:e7:63:fd:93:02:1e:fa:7f:86: 4c:f6:8e:e4:67:b7:ed:cc:b6:c1:19:d7:07:1f:f7: 6a:97:ef:38:2e:d5:aa:1a:b3:2a:05:f9:39:02:d4: b1:63:b8:34:97:ea:b2:9f:e1:26:8d:03:e7:0f:f5: 7b:33:f7:e3:11:ce:67:21:6c:ca:b5:3b:d4:d9:44: 06:39:1c:a6:d2:9c:e0:a9:f6:15:59:18:54:72:f2: c2:30:f7:34:cc:a0:20:f7:42:35:5f:12:12:08:bb: 0d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C9:82:9A:95:7A:60:F6:35:56:F5:A7:57:41:D3:92:15:13:ED:FB X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:51:1f:c6:42:dc:eb:19:e7:32:10:fd:31:f9:81:71:d3:81: 19:02:79:69:65:c4:03:c0:ae:db:3c:84:69:25:98:83:b4:a0: 43:e4:30:ca:3d:ae:52:ed:eb:b1:de:2b:df:cd:b5:58:c2:8a: e7:c3:84:40:cb:63:d2:97:96:77:8a:ca:bf:a8:25:c7:57:54: e0:47:ba:71:c4:5b:a8:ba:e3:38:49:2f:74:0f:7c:13:1e:93: c9:24:fb:67:ed:00:cf:4c:f2:51:48:8d:41:84:9c:0a:ec:bd: ab:6d:fc:e4:36:0f:83:6b:cd:b1:76:61:82:9d:b9:58:16:d2: 78:02:2e:f7:10:52:df:cc:b2:6a:93:fc:d3:16:61:8d:d8:29: 46:34:c2:3e:62:93:81:63:ff:25:12:10:7e:f1:62:36:c8:99: 66:de:6c:21:81:44:7d:b5:b5:d0:32:89:17:b2:cd:dd:d1:d2: 6a:de:c8:e7:43:3b:46:71:73:55:11:f3:73:55:1f:50:f6:e8: 38:df:16:5d:1a:e7:d6:c5:ba:b9:a1:62:f3:72:e3:d1:cd:49: d6:d3:87:0e:0a:93:52:a3:cf:c4:ea:dc:95:b7:51:76:13:c9: 88:68:55:f2:36:e1:e1:9c:61:64:41:0e:36:a5:6a:b1:b3:bf: 86:f3:ff:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwODE4MTgzMTE3WhcNMjYwODI1MTgzMTE3WjAYMRYwFAYD VQQDEw02YTg0YTRmNi04NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI1egwBLxeyujWY6lOkD10kxPCZ37DtTfiOK9lJj1dnmb859OpC4iihf0ov+ U8tol8PDw41nPeEidl9yK7QRs9iGuI43gXOvGCe8ySSTHWvQ02Azn+IgVjL7NjJS jQKZpCSUKo5fT/c5bXNpybLwJUA81BE/z1wApfL+SjLfcQMv7muIzUB3jiwlG4l1 Zt6ComjhcSx4V2yuieHnY/2TAh76f4ZM9o7kZ7ftzLbBGdcHH/dql+84LtWqGrMq Bfk5AtSxY7g0l+qyn+EmjQPnD/V7M/fjEc5nIWzKtTvU2UQGORym0pzgqfYVWRhU cvLCMPc0zKAg90I1XxISCLsNZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvJgpqV emD2NVb1p1dB05IVE+37MB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAalEfxkLc6xnnMhD9MfmBcdOBGQJ5aWXEA8Cu2zyEaSWYg7SgQ+Qwyj2uUu3r sd4r3821WMKK58OEQMtj0peWd4rKv6glx1dU4Ee6ccRbqLrjOEkvdA98Ex6TyST7 Z+0Az0zyUUiNQYScCuy9q2385DYPg2vNsXZhgp25WBbSeAIu9xBS38yyapP80xZh jdgpRjTCPmKTgWP/JRIQfvFiNsiZZt5sIYFEfbW10DKJF7LN3dHSat7I50M7RnFz VRHzc1UfUPboON8WXRrn1sW6uaFi83Lj0c1J1tOHDgqTUqPPxOrclbdRdhPJiGhV 8jbh4ZxhZEEONqVqsbO/hvP/vg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:38 2026 by rpki-client