$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft File: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft (raw, json) Hash identifier: PuaTWLT70yb6OpY8YjvIyINTkqwcA3EUkBd0/p+sJ7I= Subject key identifier: 2D:99:ED:13:16:FC:AE:75:D2:BE:39:9E:2C:93:F0:9F:56:0C:CA:AB Authority key identifier: D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 Certificate issuer: /CN=A917AAAD/serialNumber=D617D4710482C7F775752057DC8682259B319C78 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft Manifest number: 08AC Signing time: Fri 14 Aug 2026 20:36:52 +0000 Manifest this update: Fri 14 Aug 2026 20:36:51 +0000 Manifest next update: Fri 21 Aug 2026 20:36:51 +0000 Files and hashes: 1: 1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl (hash: dsIGu3YvhTJ40kNpOG3+/8ADGXgvghKRGAGd7fA1YO0=) 2: CAB0B6B2F7C311EA8A722484C4F9AE02.roa (hash: /xCNBqLNz0L8cDqpYEQMnHLgfzVahak+S8dk9Uan5oM=) 3: CB42F018F7C311EA8A722484C4F9AE02.roa (hash: IxYVxX1BoFCHdIOrjAwAEmnCO+dNiZSE2wEYWsIxYD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 20:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAAD, serialNumber=D617D4710482C7F775752057DC8682259B319C78 Validity Not Before: Aug 14 20:36:51 2026 GMT Not After : Aug 21 20:36:51 2026 GMT Subject: CN=6a7f7c64-87c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:c6:39:1a:f8:a4:17:23:d7:b6:c4:c6:bc: f1:c8:01:71:85:76:36:d0:b8:4c:63:fd:ca:59:b7: f0:67:09:ac:c7:6a:a1:0e:fd:c0:e8:09:86:b6:52: 97:6c:83:2d:d3:95:6a:07:9d:30:9c:e3:26:df:c1: 4b:71:8b:4b:0b:58:f8:58:38:9f:ff:1a:3b:91:b2: 69:1a:96:66:e1:cd:9e:cd:66:34:6d:bd:be:b0:3e: 68:fb:e1:e6:fb:6e:25:1f:71:12:4e:82:8c:b5:b5: 92:9d:36:14:9e:08:25:de:01:53:7f:b4:0a:c9:a9: fd:3c:d0:53:ff:f5:e4:e8:26:db:24:d1:87:4b:e9: 0a:41:f1:2a:ec:02:92:6c:3a:14:b9:5d:32:86:d8: 0c:8a:4e:37:cb:70:9a:b6:ce:48:27:df:30:59:7d: 40:4b:c0:de:9c:75:c2:b2:1b:54:ff:71:db:39:44: df:39:04:bb:50:74:c2:1c:6a:cb:9a:16:74:6e:fb: 12:a6:57:2c:9d:74:d8:3e:a0:fa:2a:97:85:d8:da: d5:ee:96:1d:19:db:f8:0b:ed:07:0f:db:10:4e:75: 08:3b:4e:44:46:64:b7:db:c9:04:2c:52:20:16:4b: e1:2d:e1:53:31:b9:15:41:e2:da:d7:33:67:ae:c6: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:99:ED:13:16:FC:AE:75:D2:BE:39:9E:2C:93:F0:9F:56:0C:CA:AB X509v3 Authority Key Identifier: keyid:D6:17:D4:71:04:82:C7:F7:75:75:20:57:DC:86:82:25:9B:31:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hfUcQSCx_d1dSBX3IaCJZsxnHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAAD/E3B2B644F7C111EA8275CB66C4F9AE02/1hfUcQSCx_d1dSBX3IaCJZsxnHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:70:cf:8e:47:f2:be:48:98:e6:30:51:e5:fc:36:99:f7: 05:2d:f0:a7:fa:1c:ab:fe:f6:76:56:23:99:92:a7:9c:0f:37: d7:bd:eb:3a:8a:7c:63:71:a2:c3:1c:37:a4:01:03:80:cc:13: 6c:6a:6b:bd:5c:91:d7:a9:6c:25:e7:9d:9d:71:65:18:50:d0: b6:68:40:ae:1e:19:db:c3:7a:ed:da:3f:84:dc:54:0b:0a:84: 51:5c:57:f8:d0:ca:5e:f6:50:24:9f:80:5a:8e:ff:1f:c5:2b: db:e7:53:ed:8c:f6:47:39:94:b7:f3:ba:4f:1c:69:87:15:68: 9d:5b:3c:15:bc:75:e1:f0:dd:0d:36:a7:24:7e:4e:c0:a8:c7: 2f:d7:8d:76:fc:d9:aa:5d:ae:29:4d:15:d4:23:0b:62:c8:d5: 04:28:a8:14:0d:9d:d2:79:6c:32:70:f6:6d:bf:fb:a7:da:ab: 64:aa:59:98:6a:81:c0:3b:95:99:f0:e0:d3:6f:d9:94:8d:d8: 2b:2b:cc:79:c2:6f:dd:7d:b2:43:3c:8e:77:b3:f6:67:fd:e9: e4:d2:eb:14:6c:fa:ae:ed:a3:ae:86:ce:a4:39:83:a6:c5:ea: a8:bd:57:44:e8:75:4d:cc:fc:98:57:63:bd:85:bd:ab:fa:19: 1d:a7:c8:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBQUQxMTAvBgNVBAUTKEQ2MTdENDcxMDQ4MkM3Rjc3NTc1MjA1N0RDODY4MjI1 OUIzMTlDNzgwHhcNMjYwODE0MjAzNjUxWhcNMjYwODIxMjAzNjUxWjAYMRYwFAYD VQQDEw02YTdmN2M2NC04N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9LGORr4pBcj17bExrzxyAFxhXY20LhMY/3KWbfwZwmsx2qhDv3A6AmGtlKX bIMt05VqB50wnOMm38FLcYtLC1j4WDif/xo7kbJpGpZm4c2ezWY0bb2+sD5o++Hm +24lH3ESToKMtbWSnTYUnggl3gFTf7QKyan9PNBT//Xk6CbbJNGHS+kKQfEq7AKS bDoUuV0yhtgMik43y3Cats5IJ98wWX1AS8DenHXCshtU/3HbOUTfOQS7UHTCHGrL mhZ0bvsSplcsnXTYPqD6KpeF2NrV7pYdGdv4C+0HD9sQTnUIO05ERmS328kELFIg FkvhLeFTMbkVQeLa1zNnrsa7rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2Z7RMW /K510r45niyT8J9WDMqrMB8GA1UdIwQYMBaAFNYX1HEEgsf3dXUgV9yGgiWbMZx4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFBRC9FM0IyQjY0NEY3 QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hfZDFkU0JYM0lhQ0pac3hu SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZlVjUVNDeF9kMWRTQlgzSWFDSlpzeG5IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFBRC9FM0IyQjY0NEY3QzExMUVBODI3NUNCNjZDNEY5QUUwMi8xaGZVY1FTQ3hf ZDFkU0JYM0lhQ0pac3huSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF5Nwz45H8r5ImOYwUeX8Npn3BS3wp/ocq/72dlYjmZKnnA83173rOop8Y3Gi wxw3pAEDgMwTbGprvVyR16lsJeednXFlGFDQtmhArh4Z28N67do/hNxUCwqEUVxX +NDKXvZQJJ+AWo7/H8Ur2+dT7Yz2RzmUt/O6TxxphxVonVs8Fbx14fDdDTanJH5O wKjHL9eNdvzZql2uKU0V1CMLYsjVBCioFA2d0nlsMnD2bb/7p9qrZKpZmGqBwDuV mfDg02/ZlI3YKyvMecJv3X2yQzyOd7P2Z/3p5NLrFGz6ru2jrobOpDmDpsXqqL1X ROh1Tcz8mFdjvYW9q/oZHafIOA== -----END CERTIFICATE-----Generated at Sat Aug 15 11:43:48 2026 by rpki-client