$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: JdpQjBG1olHjwk0zIjfgiTOfnv7GyFdbvL76BW0/tTY= Subject key identifier: A0:42:F5:18:15:3D:A4:11:F2:25:15:60:6B:98:69:E5:14:9F:EF:9B Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3570 Signing time: Tue 18 Aug 2026 15:12:49 +0000 Manifest this update: Tue 18 Aug 2026 15:12:48 +0000 Manifest next update: Tue 25 Aug 2026 15:12:48 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: UnMF6fJ2URGTjynPh7EW1UVnocmj8zACsn2x1Xayh0w=) 2: F5389BBA875611F1BE97359E4011F970.roa (hash: TRK/A/pTRaHZO7jPVNYpphghOVFA26P6A8rTBEvdJD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13682 (0x3572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Aug 18 15:12:48 2026 GMT Not After : Aug 25 15:12:48 2026 GMT Subject: CN=6a847671-ee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:74:36:66:45:f7:a9:91:26:8a:ca:f5:82: ed:48:8e:9b:24:e5:95:f7:22:24:fb:8d:71:cc:06: b3:59:a4:a8:a9:10:28:09:cd:d5:ca:68:74:d9:d9: 7f:53:6c:a2:11:87:78:e1:ee:dd:d3:6d:c3:7f:5a: e1:e6:20:3b:2c:12:9a:b1:d8:5c:67:a7:f2:86:26: cc:b2:39:43:0a:26:cf:e2:dc:56:51:ad:bf:13:3e: 65:7c:23:4c:c3:3f:e1:6e:ab:4a:8b:1b:16:13:e6: 39:a5:a1:a7:69:3b:05:ea:c0:02:3c:ee:de:60:d2: 3e:6a:e4:ba:85:94:02:df:13:a5:3a:48:fa:08:ea: 90:7c:21:72:0b:c6:40:d9:e9:6a:29:74:94:0c:d8: 7a:bb:bd:81:3b:da:9a:4d:71:ea:77:f8:39:74:ea: 00:b3:9a:d8:f5:8f:cb:5a:6f:8a:35:04:29:0b:a9: db:81:40:8b:88:24:50:da:81:fc:35:97:95:6b:22: 61:96:ef:6d:3e:1e:34:d3:2e:90:52:ac:57:26:36: 23:53:07:c0:77:e3:dc:a5:ff:38:6a:60:c6:d8:ea: 7f:5f:8d:3e:7d:b5:60:d4:8f:f8:9b:3a:d2:c1:64: be:2d:ac:92:5d:7e:97:ee:f7:39:51:cd:fe:e2:28: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:F5:18:15:3D:A4:11:F2:25:15:60:6B:98:69:E5:14:9F:EF:9B X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e3:b0:d1:ac:15:24:fd:d8:f0:3c:1e:b2:7d:1c:6b:34:dc: 9d:0b:ed:7f:18:9a:4f:18:9c:98:df:86:7a:67:d3:20:a4:18: 21:6e:4c:3d:78:54:73:a8:24:f8:5a:0e:8a:61:f8:cd:f1:00: 99:b0:09:71:58:bb:7e:b3:10:c1:b5:f4:eb:41:01:ed:7d:6b: a6:6e:a7:45:90:55:70:16:e7:f9:f4:dd:1c:87:6d:8a:c3:60: 66:3d:57:22:63:88:a9:59:ec:b0:9d:67:fc:55:67:bf:a8:d9: 4a:a4:71:a4:9b:0f:3e:78:d3:54:5d:a8:3d:29:4c:51:2b:44: 0e:64:6a:66:df:8d:85:3a:cf:65:0a:f9:fb:07:b5:95:d1:f8: 45:87:f7:96:77:03:1e:e4:bd:00:86:1e:57:96:5d:d4:8e:ae: 0a:b4:40:89:5f:3e:e2:60:e7:cf:ae:e7:0d:10:63:ca:b5:d6: b8:eb:d4:9d:aa:85:8b:45:00:8e:ef:6f:ce:2d:19:f5:6e:2c: 62:35:93:6e:37:70:79:e7:a9:57:3e:39:2e:29:70:54:d3:84: 4b:9d:94:76:36:ea:dd:80:fc:3a:6a:1a:7e:94:ce:7c:fd:0a: 72:8d:d0:13:2c:08:3e:cc:97:9d:1b:00:77:73:0e:a2:b2:63: 7e:65:55:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjYwODE4MTUxMjQ4WhcNMjYwODI1MTUxMjQ4WjAYMRYwFAYD VQQDEw02YTg0NzY3MS1lZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV50NmZF96mRJorK9YLtSI6bJOWV9yIk+41xzAazWaSoqRAoCc3Vymh02dl/ U2yiEYd44e7d023Df1rh5iA7LBKasdhcZ6fyhibMsjlDCibP4txWUa2/Ez5lfCNM wz/hbqtKixsWE+Y5paGnaTsF6sACPO7eYNI+auS6hZQC3xOlOkj6COqQfCFyC8ZA 2elqKXSUDNh6u72BO9qaTXHqd/g5dOoAs5rY9Y/LWm+KNQQpC6nbgUCLiCRQ2oH8 NZeVayJhlu9tPh400y6QUqxXJjYjUwfAd+Pcpf84amDG2Op/X40+fbVg1I/4mzrS wWS+LaySXX6X7vc5Uc3+4igyVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBC9RgV PaQR8iUVYGuYaeUUn++bMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuOw0awVJP3Y8Dwesn0cazTcnQvtfxiaTxicmN+GemfTIKQYIW5MPXhUc6gk +FoOimH4zfEAmbAJcVi7frMQwbX060EB7X1rpm6nRZBVcBbn+fTdHIdtisNgZj1X ImOIqVnssJ1n/FVnv6jZSqRxpJsPPnjTVF2oPSlMUStEDmRqZt+NhTrPZQr5+we1 ldH4RYf3lncDHuS9AIYeV5Zd1I6uCrRAiV8+4mDnz67nDRBjyrXWuOvUnaqFi0UA ju9vzi0Z9W4sYjWTbjdweeepVz45LilwVNOES52Udjbq3YD8OmoafpTOfP0Kco3Q EywIPsyXnRsAd3MOorJjfmVVdg== -----END CERTIFICATE-----Generated at Wed Aug 19 14:29:51 2026 by rpki-client