$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft File: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft (raw, json) Hash identifier: QCLvGC6vTv57E1nZvuA8nx/J0d1/u6TdbExBbidgr7k= Subject key identifier: D9:D8:CC:64:45:F1:72:77:37:4F:5B:C2:0E:C1:B2:D1:56:56:B9:75 Authority key identifier: EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78 Certificate issuer: /CN=A917A689/serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft Manifest number: 1A Signing time: Wed 19 Aug 2026 09:44:04 +0000 Manifest this update: Wed 19 Aug 2026 09:44:04 +0000 Manifest next update: Wed 26 Aug 2026 09:44:04 +0000 Files and hashes: 1: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl (hash: xy78Q6wuw9FMJ+rjXHdp/7l0P8QM1Uli7aJ58xLDmRU=) 2: 6BB66614922E11F1A0FBFE5C6C11F970.roa (hash: mCT+YqSEAXN3Qz20/1loqK5VGh0Yd2JbQFmwVbOtvZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A689, serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78 Validity Not Before: Aug 19 09:44:04 2026 GMT Not After : Aug 26 09:44:04 2026 GMT Subject: CN=6a857ae4-3788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:93:b9:da:40:5e:c8:e0:44:d3:28:5d:75: 4d:29:4e:3b:61:cb:3a:af:98:61:22:cf:86:2e:35: f0:fa:11:91:20:14:f5:82:8e:87:3d:78:9d:78:28: 73:8b:01:0a:97:97:b5:f2:a4:d7:78:7d:33:b8:17: b7:f1:5f:52:af:0e:4a:b4:59:fb:b5:21:2c:bd:9b: 61:1c:43:15:fe:35:c5:00:0f:6f:ea:d0:2f:72:95: 05:c9:51:ca:3c:10:95:9b:06:87:b2:81:71:db:37: 6f:10:e2:c3:f2:3b:1a:8b:ee:0e:0c:ed:66:c4:6c: 0d:ef:35:53:b3:83:03:b8:91:92:c8:3d:a8:24:91: 5e:90:43:5c:d3:c7:8b:03:1b:ab:3e:be:e3:7c:05: 74:a1:17:c4:49:00:a3:b9:c3:e8:ee:a8:79:5d:d1: 98:1f:ec:04:7e:5a:88:10:b1:7e:53:8a:8c:d2:e1: 78:46:da:cb:79:e1:34:2c:a6:d0:f9:4b:7f:f5:11: 8d:80:de:18:09:9c:e2:43:23:ba:32:b5:36:4b:ed: 7f:11:a7:30:d6:de:c0:28:75:d6:d1:80:9e:f8:4b: fd:c3:16:ec:dd:86:56:78:2c:fc:46:d0:e3:ed:80: ff:de:17:85:a0:c3:52:ca:88:0c:11:82:38:1a:b0: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:CC:64:45:F1:72:77:37:4F:5B:C2:0E:C1:B2:D1:56:56:B9:75 X509v3 Authority Key Identifier: keyid:EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:dd:87:c5:6a:73:7b:eb:f5:b2:f8:18:21:71:1d:0d:25: b9:9e:b5:d6:5c:28:65:99:44:81:ac:77:db:03:44:df:cc:97: 40:6f:1e:4a:38:e5:d1:0d:cc:2e:e8:29:1c:e7:c5:c4:7f:f3: 28:76:33:59:9b:73:ca:6f:aa:47:f2:01:aa:9f:1f:f8:98:85: 94:da:92:c2:18:b0:bb:0c:61:f9:56:25:dd:2b:21:df:3a:73: 93:28:6d:f5:75:06:a1:61:8f:a9:55:08:0a:80:81:89:69:a2: ba:b6:82:80:ba:74:7c:e1:59:b1:74:47:9c:8f:3a:e7:a0:fb: 9c:ed:73:9f:f5:30:74:d2:30:2b:b0:d3:68:e0:4b:d8:53:96: 3d:e9:3f:60:fc:f2:71:32:b5:0f:56:6c:76:59:4e:9c:ae:80: b8:bc:27:fc:58:25:91:bc:93:96:c7:36:d9:96:8d:bd:0d:55: 18:6d:21:29:30:15:8e:d9:60:6b:87:87:2c:18:0b:b9:97:b5: fc:bd:3d:9a:81:a1:6a:40:ac:b3:f1:35:86:81:80:65:64:1c: e4:b5:d0:10:ee:e8:98:4f:d2:08:8c:7e:c7:f2:11:25:44:c9: f9:2e:76:30:8c:03:d8:93:10:6b:01:c7:da:3a:c3:f6:92:af: 61:33:d5:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTY4OTExMC8GA1UEBRMoRUUzRDI4QjQzRTUyNDYzRjUzNjEwODREM0I0Q0QxNUZC MTIxREM3ODAeFw0yNjA4MTkwOTQ0MDRaFw0yNjA4MjYwOTQ0MDRaMBgxFjAUBgNV BAMTDTZhODU3YWU0LTM3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDky5O52kBeyOBE0yhddU0pTjthyzqvmGEiz4YuNfD6EZEgFPWCjoc9eJ14KHOL AQqXl7XypNd4fTO4F7fxX1KvDkq0Wfu1ISy9m2EcQxX+NcUAD2/q0C9ylQXJUco8 EJWbBoeygXHbN28Q4sPyOxqL7g4M7WbEbA3vNVOzgwO4kZLIPagkkV6QQ1zTx4sD G6s+vuN8BXShF8RJAKO5w+juqHld0Zgf7AR+WogQsX5TiozS4XhG2st54TQsptD5 S3/1EY2A3hgJnOJDI7oytTZL7X8RpzDW3sAoddbRgJ74S/3DFuzdhlZ4LPxG0OPt gP/eF4Wgw1LKiAwRgjgasObbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2djMZEXx cnc3T1vCDsGy0VZWuXUwHwYDVR0jBBgwFoAU7j0otD5SRj9TYQhNO0zRX7Eh3Hgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5Lzk4QTQzRDEyN0E5 NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5VFlRaE5PMHpSWDdFaDNI Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2owb3RENVNSajlUWVFoTk8welJYN0VoM0hnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Njg5Lzk4QTQzRDEyN0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5 VFlRaE5PMHpSWDdFaDNIZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaL92HxWpze+v1svgYIXEdDSW5nrXWXChlmUSBrHfbA0TfzJdAbx5KOOXRDcwu 6Ckc58XEf/ModjNZm3PKb6pH8gGqnx/4mIWU2pLCGLC7DGH5ViXdKyHfOnOTKG31 dQahYY+pVQgKgIGJaaK6toKAunR84VmxdEecjzrnoPuc7XOf9TB00jArsNNo4EvY U5Y96T9g/PJxMrUPVmx2WU6croC4vCf8WCWRvJOWxzbZlo29DVUYbSEpMBWO2WBr h4csGAu5l7X8vT2agaFqQKyz8TWGgYBlZBzktdAQ7uiYT9IIjH7H8hElRMn5LnYw jAPYkxBrAcfaOsP2kq9hM9WV -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:44 2026 by rpki-client