$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json) Hash identifier: UFPA62xbPlEr1o9CfCVMNGlUfqa8lsZGFm2ppyFGsRY= Subject key identifier: 43:52:EF:4F:D0:79:0E:7D:7C:13:F5:DB:B9:72:49:15:87:87:50:2E Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft Manifest number: 03EC Signing time: Fri 21 Aug 2026 00:21:31 +0000 Manifest this update: Fri 21 Aug 2026 00:21:31 +0000 Manifest next update: Fri 28 Aug 2026 00:21:31 +0000 Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: 1RgX2ShbdxWemLM02tc1zg/LVd2vWArtyIG0mleksSE=) 2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=) 3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=) 4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Aug 21 00:21:31 2026 GMT Not After : Aug 28 00:21:31 2026 GMT Subject: CN=6a879a0b-fe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:68:07:d7:b3:9a:4e:61:a4:4e:61:f9:f8: c2:e6:e4:b4:ab:ff:ed:b9:57:cc:25:6d:06:13:d5: 50:84:d4:84:be:79:0a:7d:74:0b:2a:15:5b:7f:ab: be:0b:5d:bf:e9:40:ba:3d:bf:aa:de:f1:8c:50:1a: ea:05:f1:84:53:fb:a7:cd:12:ef:68:19:99:91:85: 97:c0:27:0a:e3:0b:e3:7b:d5:fd:ea:14:f7:5d:6f: 20:ff:ef:27:62:70:69:6d:78:76:61:d7:72:e9:68: b6:80:b3:51:df:a6:19:cf:d2:d1:62:bb:25:7c:e7: 34:cd:ce:64:76:91:d0:e4:9d:e6:51:25:8c:41:d7: fe:a4:45:8e:13:0a:47:9d:56:6b:1e:3d:a4:d3:bd: 8a:97:56:51:c2:d4:f0:ba:5a:5b:2a:76:95:8c:a7: df:57:3e:34:87:b1:2f:d0:6f:d2:fa:d8:7f:92:f7: ff:6b:00:01:97:4d:58:75:d2:ad:39:8a:c5:7b:f0: 4e:6f:5e:e1:72:a3:d9:7c:aa:57:9e:28:3e:61:ec: ff:31:23:ac:bf:7c:20:db:6d:72:c5:19:38:f3:ed: c8:1e:c7:03:09:aa:54:46:e0:b4:59:b2:e0:b6:b1: 90:2f:cc:99:35:24:9b:21:be:ae:6e:f5:21:75:fd: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:EF:4F:D0:79:0E:7D:7C:13:F5:DB:B9:72:49:15:87:87:50:2E X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:54:07:fa:9c:07:7e:6b:d3:20:54:ac:a5:16:be:57:8d:e9: 87:77:58:d2:e1:6a:bc:ad:53:60:ba:29:7d:69:2e:36:61:39: d7:1c:c3:c2:0f:75:02:1f:0a:5d:8e:2d:c3:33:41:22:75:11: 41:73:99:2f:fd:af:65:20:f4:f8:e4:0b:4c:a9:aa:ee:c0:2f: db:10:74:36:bc:94:de:70:61:ec:6f:2f:dd:92:09:d8:12:d1: c0:ee:c3:fb:42:24:45:fb:ae:8b:ca:6c:44:df:29:bf:f0:c3: c3:0a:90:b6:f1:93:ba:92:55:5f:2c:87:18:93:5d:3c:26:5f: 81:00:09:6e:69:19:5e:c3:85:fb:a8:cb:b2:34:41:2a:20:0f: 00:85:18:68:46:3f:e1:a9:27:da:45:80:ec:cb:97:c1:37:f0: 7b:2b:32:9a:21:19:d0:a8:11:51:dd:71:16:2c:52:dc:f8:1a: 96:1f:be:7d:de:8d:b6:e4:4c:4e:f0:97:70:14:cd:86:62:1a: 34:79:ff:7d:d3:fa:28:a2:5b:ab:0e:79:cb:32:b2:f5:d1:9d: 99:6a:68:74:46:13:17:f2:80:9b:76:9a:8d:8f:36:6e:f7:f0: 83:e6:6e:4a:7d:63:8b:cd:57:86:38:37:ff:40:33:c7:23:dd: 57:ec:03:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjYwODIxMDAyMTMxWhcNMjYwODI4MDAyMTMxWjAYMRYwFAYD VQQDEw02YTg3OWEwYi1mZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiOdoB9ezmk5hpE5h+fjC5uS0q//tuVfMJW0GE9VQhNSEvnkKfXQLKhVbf6u+ C12/6UC6Pb+q3vGMUBrqBfGEU/unzRLvaBmZkYWXwCcK4wvje9X96hT3XW8g/+8n YnBpbXh2Yddy6Wi2gLNR36YZz9LRYrslfOc0zc5kdpHQ5J3mUSWMQdf+pEWOEwpH nVZrHj2k072Kl1ZRwtTwulpbKnaVjKffVz40h7Ev0G/S+th/kvf/awABl01YddKt OYrFe/BOb17hcqPZfKpXnig+Yez/MSOsv3wg221yxRk48+3IHscDCapURuC0WbLg trGQL8yZNSSbIb6ubvUhdf1xtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENS70/Q eQ59fBP127lySRWHh1AuMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAllQH+pwHfmvTIFSspRa+V43ph3dY0uFqvK1TYLopfWkuNmE51xzDwg91Ah8K XY4twzNBInURQXOZL/2vZSD0+OQLTKmq7sAv2xB0NryU3nBh7G8v3ZIJ2BLRwO7D +0IkRfuui8psRN8pv/DDwwqQtvGTupJVXyyHGJNdPCZfgQAJbmkZXsOF+6jLsjRB KiAPAIUYaEY/4akn2kWA7MuXwTfweysymiEZ0KgRUd1xFixS3Pgalh++fd6NtuRM TvCXcBTNhmIaNHn/fdP6KKJbqw55yzKy9dGdmWpodEYTF/KAm3aajY82bvfwg+Zu Sn1ji81Xhjg3/0AzxyPdV+wDcw== -----END CERTIFICATE-----Generated at Fri Aug 21 23:25:04 2026 by rpki-client