$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: k+cYCKcYQYDUdeUb/5X2G4n330uSSkfaCnefAalkc28= Subject key identifier: 7F:F2:30:2D:DA:FE:4E:FC:AC:A6:B8:A0:D0:E1:09:82:59:26:07:84 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 02CA Signing time: Thu 27 Aug 2026 01:46:34 +0000 Manifest this update: Thu 27 Aug 2026 01:46:34 +0000 Manifest next update: Thu 03 Sep 2026 01:46:34 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: 5qXd8SWOJb8rkqqG/Qz53QRmlAZoRKDrnJwyhBAcQdo=) 2: 232F9552F80D11F0AED4E007706F56BC.roa (hash: eD9gDioCM5S2wQWIRX8fMwbM0baYsT5u8C/4wCogM+E=) 3: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: fZlLSWyhk+jtQ34uhpkIw+sRdlD+d7ZiPx48gzF1SuI=) 4: 020607A2498711EFBB260663C4F9AE02.roa (hash: TsRQV86ABpakyFtq/EQ6oWMagaNXmmZwXudJvyvhgkQ=) 5: 23852F72273711F1B6AB5B98AD833773.roa (hash: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4=) 6: 05F505961AA311F0A475D464C4F9AE02.roa (hash: oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 01:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Aug 27 01:46:34 2026 GMT Not After : Sep 3 01:46:34 2026 GMT Subject: CN=6a8f96fa-6d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:4a:1e:59:e2:5b:f5:d0:be:77:24:ef:8b: 99:d7:8e:0b:bf:c8:6f:c0:56:33:d3:98:49:c9:c9: 52:98:10:3e:fd:4e:75:3b:8d:8e:ce:a5:66:a5:f2: fc:e6:eb:b0:e9:a0:bf:59:00:74:66:ac:7e:92:56: 06:fe:1a:a0:e7:0a:b1:97:cf:0b:c1:b8:4a:3d:23: 21:44:e3:25:cc:da:28:7e:35:8d:f9:5e:ad:0f:66: 31:94:0f:59:96:6c:b4:47:ef:d6:ae:14:64:9e:1e: 83:d9:65:d0:5f:58:e6:8c:76:66:bc:63:16:0f:2e: b1:ae:a7:8d:99:f8:c8:4f:39:3e:6d:7d:0a:e8:46: ad:e7:99:eb:26:46:52:65:3e:b2:c8:9e:65:05:f5: c5:26:b2:5e:1a:48:a8:95:77:a6:97:e9:d5:57:57: 3b:97:42:ce:92:96:4a:cd:df:c3:1e:b4:66:ac:fb: 40:b0:53:7f:a5:e6:0a:8d:6c:0b:bc:92:c9:c6:c5: 97:9d:b6:7f:66:d7:5e:e4:13:81:87:25:25:3a:cb: 35:cb:3f:6f:55:c6:81:ee:7a:ca:f6:81:1a:0b:67: aa:67:9a:05:2f:20:9e:f8:37:af:fe:73:23:6e:d2: 8d:e7:98:39:a3:77:ac:f8:fa:98:49:5c:86:0d:2e: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:30:2D:DA:FE:4E:FC:AC:A6:B8:A0:D0:E1:09:82:59:26:07:84 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:69:5a:58:8e:b2:68:f9:68:bb:87:9b:85:8d:5a:b4:7b:1a: 33:71:7d:b9:fc:0b:40:2b:93:f4:5f:7f:1a:8f:98:45:2a:ba: d7:c4:a6:a9:3c:f3:cb:09:b2:47:2c:89:3f:89:2d:32:a1:d2: e8:63:60:e0:3d:ce:1c:79:fe:a2:b5:97:04:cb:31:11:36:3d: c3:11:24:1f:18:ae:dd:78:b5:80:27:1e:d3:1b:b5:35:72:18: 18:47:b6:a7:be:b3:e7:80:e8:9d:c9:3a:15:4e:c5:21:61:2d: a9:c6:6e:4d:b3:3f:49:25:b5:2d:2b:f3:a7:5d:75:4c:d7:39: a3:f1:1e:33:54:f4:11:e4:5c:b1:12:85:5f:26:81:9b:85:e2: da:39:b8:b0:9b:78:76:d9:c6:6c:fb:d5:49:fa:cb:fe:43:82: 36:28:0d:46:1f:b0:62:c4:40:a5:ae:ef:7e:74:e2:15:65:2f: d0:f0:11:3c:e8:30:bd:c9:35:a2:a1:af:be:a1:75:91:55:1b: 79:81:09:64:a1:35:f1:f0:b1:02:03:47:e0:94:c7:0e:5d:65: e9:99:38:51:57:5e:db:23:eb:12:11:93:bb:e0:07:14:e4:64: ec:fe:fe:97:5d:6c:0b:1a:c7:6a:05:0b:cd:bf:36:7e:54:3e: 24:67:e8:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwODI3MDE0NjM0WhcNMjYwOTAzMDE0NjM0WjAYMRYwFAYD VQQDEw02YThmOTZmYS02ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSVKHlniW/XQvnck74uZ144Lv8hvwFYz05hJyclSmBA+/U51O42OzqVmpfL8 5uuw6aC/WQB0Zqx+klYG/hqg5wqxl88LwbhKPSMhROMlzNoofjWN+V6tD2YxlA9Z lmy0R+/WrhRknh6D2WXQX1jmjHZmvGMWDy6xrqeNmfjITzk+bX0K6Eat55nrJkZS ZT6yyJ5lBfXFJrJeGkiolXeml+nVV1c7l0LOkpZKzd/DHrRmrPtAsFN/peYKjWwL vJLJxsWXnbZ/Ztde5BOBhyUlOss1yz9vVcaB7nrK9oEaC2eqZ5oFLyCe+Dev/nMj btKN55g5o3es+PqYSVyGDS7fCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/yMC3a /k78rKa4oNDhCYJZJgeEMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJWlaWI6yaPlou4ebhY1atHsaM3F9ufwLQCuT9F9/Go+YRSq618SmqTzzywmy RyyJP4ktMqHS6GNg4D3OHHn+orWXBMsxETY9wxEkHxiu3Xi1gCce0xu1NXIYGEe2 p76z54Donck6FU7FIWEtqcZuTbM/SSW1LSvzp111TNc5o/EeM1T0EeRcsRKFXyaB m4Xi2jm4sJt4dtnGbPvVSfrL/kOCNigNRh+wYsRApa7vfnTiFWUv0PARPOgwvck1 oqGvvqF1kVUbeYEJZKE18fCxAgNH4JTHDl1l6Zk4UVde2yPrEhGTu+AHFORk7P7+ l11sCxrHagULzb82flQ+JGfoOg== -----END CERTIFICATE-----Generated at Thu Aug 27 16:12:11 2026 by rpki-client