$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: TRDvHZkvfMYkAK25qG+HrLQb0p5m4MxR2fEf27V4xwQ= Subject key identifier: 4B:C9:66:AE:E7:8D:BD:CE:12:3C:8B:60:44:91:B5:EB:61:5F:29:F6 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B9E Signing time: Tue 18 Aug 2026 16:23:15 +0000 Manifest this update: Tue 18 Aug 2026 16:23:14 +0000 Manifest next update: Tue 25 Aug 2026 16:23:14 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: 2n7lkPE3eDW2FhKWqqtw3LAr1JikOnc9OUq3r1D4oW0=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PINyvml/lmMP9n4bWW3ReQfqdMUKwVbzw95W7AWHcZQ=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7127 (0x1bd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Aug 18 16:23:14 2026 GMT Not After : Aug 25 16:23:14 2026 GMT Subject: CN=6a8486f3-ea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:8e:5b:aa:5c:03:29:e4:b3:80:55:71:99: a8:f8:66:a8:f9:13:f9:a8:6b:d6:35:5a:e8:40:d8: cf:f3:c3:2b:c5:5f:3b:37:3e:08:54:2d:9b:db:83: bf:f2:d9:b9:67:2a:b9:44:a7:8e:6d:71:e2:f5:34: 28:17:12:e2:fd:fd:6c:e1:e0:eb:7a:d4:d9:be:86: 46:27:28:6b:3a:4b:e4:c5:4a:30:8e:a9:99:5b:3d: a8:d6:3d:ad:49:44:c6:4f:22:cc:0f:16:e6:45:10: e3:77:63:23:85:2c:e0:67:02:1c:84:57:08:0d:af: ae:48:2c:d2:71:7c:0a:86:98:cd:5e:41:4f:0f:8d: 09:11:4e:c5:6c:5a:7c:52:a7:2e:e6:72:7c:a6:b1: 4d:d0:6f:f0:e2:74:62:21:74:38:3e:dc:cb:bf:7b: f7:fa:68:f3:5d:5b:63:ee:10:40:2f:5c:45:7c:2b: 2d:eb:cb:1f:27:c2:d9:72:75:b4:52:fc:c9:7d:2d: 92:0e:1b:2a:b7:05:ae:30:a5:03:23:60:f4:18:d8: 62:5f:b3:35:46:03:3d:13:3d:81:f0:53:9c:47:32: 57:d2:fb:72:91:a5:c6:5f:e2:26:df:f9:e8:5e:62: 7b:c6:db:c4:2b:aa:df:3d:42:5c:b9:cc:b5:5a:08: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:66:AE:E7:8D:BD:CE:12:3C:8B:60:44:91:B5:EB:61:5F:29:F6 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7c:be:5d:29:f9:22:54:84:eb:60:b8:85:27:7e:80:a7:77: a6:a1:d0:c4:80:6c:39:55:4f:6c:2f:67:31:bf:f0:bc:dc:f7: bf:31:1f:b6:18:60:e5:84:56:ec:79:4e:81:d8:46:fb:ce:2e: 54:40:ec:0a:52:65:a4:cf:f9:42:1f:79:65:dd:0f:70:a3:a1: 7c:dd:ce:47:c4:63:5a:5b:bc:a8:43:90:68:de:35:ee:80:79: 4e:bc:c3:56:10:1b:da:12:7c:51:e1:20:51:fa:66:8f:b2:56: 21:3e:f5:67:9f:67:ea:75:13:56:4a:18:88:0c:a6:dc:9c:3b: d7:3a:64:27:d5:a4:fc:97:ab:3a:86:fa:8c:ff:b1:9e:1f:9e: 30:10:2f:81:c7:9e:d7:4a:e1:73:cf:4f:bd:99:ac:d6:89:84: a4:da:55:6d:ab:9a:c7:42:8c:0c:f9:76:20:bc:a9:45:a6:3c: 8a:d5:26:05:40:e4:26:49:c8:6b:62:7a:63:11:1c:d3:94:2d: 15:88:5c:6a:88:17:f9:ee:88:7a:ad:f0:d0:3b:25:05:fa:b5: be:5a:be:ab:60:91:b9:c0:be:51:bd:ac:e7:37:38:8c:a5:b6: 44:05:a1:e3:9f:c1:c7:25:94:8e:6c:70:2c:4e:94:03:b8:1f: a7:c5:9a:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjYwODE4MTYyMzE0WhcNMjYwODI1MTYyMzE0WjAYMRYwFAYD VQQDEw02YTg0ODZmMy1lYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBKOW6pcAynks4BVcZmo+Gao+RP5qGvWNVroQNjP88MrxV87Nz4IVC2b24O/ 8tm5Zyq5RKeObXHi9TQoFxLi/f1s4eDretTZvoZGJyhrOkvkxUowjqmZWz2o1j2t SUTGTyLMDxbmRRDjd2MjhSzgZwIchFcIDa+uSCzScXwKhpjNXkFPD40JEU7FbFp8 Uqcu5nJ8prFN0G/w4nRiIXQ4PtzLv3v3+mjzXVtj7hBAL1xFfCst68sfJ8LZcnW0 UvzJfS2SDhsqtwWuMKUDI2D0GNhiX7M1RgM9Ez2B8FOcRzJX0vtykaXGX+Im3/no XmJ7xtvEK6rfPUJcucy1Wgi0bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvJZq7n jb3OEjyLYESRtethXyn2MB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQXy+XSn5IlSE62C4hSd+gKd3pqHQxIBsOVVPbC9nMb/wvNz3vzEfthhg5YRW 7HlOgdhG+84uVEDsClJlpM/5Qh95Zd0PcKOhfN3OR8RjWlu8qEOQaN417oB5TrzD VhAb2hJ8UeEgUfpmj7JWIT71Z59n6nUTVkoYiAym3Jw71zpkJ9Wk/JerOob6jP+x nh+eMBAvgcee10rhc89PvZms1omEpNpVbauax0KMDPl2ILypRaY8itUmBUDkJknI a2J6YxEc05QtFYhcaogX+e6Ieq3w0DslBfq1vlq+q2CRucC+Ub2s5zc4jKW2RAWh 45/BxyWUjmxwLE6UA7gfp8Wa/A== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:58 2026 by rpki-client