$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: Blz9zDNNZBGghZFTSAQWEJqOmREwI3MxOZtupdfYuOo= Subject key identifier: BD:60:9C:4C:75:18:0A:B6:26:E8:78:A2:37:88:E4:91:B1:FA:53:0A Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01F1 Signing time: Wed 19 Aug 2026 03:53:48 +0000 Manifest this update: Wed 19 Aug 2026 03:53:48 +0000 Manifest next update: Wed 26 Aug 2026 03:53:48 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: IVyny8Z42calMEkt3RpHFdSA8jx4uDCkglMQjiaJ4Ss=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Aug 19 03:53:48 2026 GMT Not After : Aug 26 03:53:48 2026 GMT Subject: CN=6a8528cc-52c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:1e:e7:de:7c:64:72:12:d8:9e:e1:75:28: 4d:91:a8:bd:62:7c:98:44:fb:51:0b:61:13:ee:3b: 6e:1e:e9:5f:41:59:d4:d1:20:07:32:34:e1:f2:7e: c5:27:4d:53:33:f9:5e:c5:25:bd:36:27:f5:99:88: 81:cd:63:a4:8f:4a:c4:1c:50:3f:63:ed:df:82:c7: 02:76:d9:87:57:16:1d:a5:49:56:f6:17:e8:c6:c7: 65:e1:8a:13:4e:58:f3:f6:24:d7:d7:ad:ce:d0:55: 37:7a:4e:86:50:2d:b7:c2:57:68:52:35:42:3b:0a: b7:0c:ed:96:d5:5c:26:0c:74:dc:4a:20:ae:e3:6e: cc:a0:72:08:a6:71:38:50:94:7f:4b:86:fe:99:b9: 03:01:1a:b2:2c:02:23:16:e3:43:db:5e:9c:2e:1f: 19:d3:cb:fc:58:d0:2d:c9:e2:ff:1f:85:07:4e:50: d8:32:08:c2:cc:9a:1c:c2:25:c4:00:06:28:25:89: cf:3a:23:77:5f:d9:62:cc:70:ec:b4:04:61:3c:1f: 53:f1:f4:d5:c8:73:50:c8:e3:ed:1e:d2:09:de:97: b8:46:fc:97:b9:56:30:7c:ee:8c:26:54:fb:42:75: 9f:91:13:c7:45:8b:c7:2f:9e:95:63:35:b0:4c:3e: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:9C:4C:75:18:0A:B6:26:E8:78:A2:37:88:E4:91:B1:FA:53:0A X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:a1:6b:09:b9:1d:96:43:5c:1d:41:5e:cc:d5:80:77:16: ad:71:c5:af:e1:25:b4:d9:48:9b:f4:6b:8e:e3:6c:00:9c:6b: 4b:3d:cd:43:2c:28:ea:7b:a4:d5:fe:91:fb:0c:b5:ca:28:56: cc:40:27:76:60:4b:b7:ec:05:39:f2:df:8c:15:0f:33:1a:fc: 2d:2b:ba:b4:9f:28:e4:57:c0:84:ed:64:06:c0:43:4a:43:3f: aa:90:f2:66:09:26:9d:d5:22:95:8a:41:dc:96:18:86:cc:88: d2:4f:13:d7:fe:cb:72:f0:c0:81:c7:cf:e8:e3:46:96:df:0c: 7d:47:d0:28:a0:2f:95:02:42:1f:5a:c0:47:8d:e7:d9:a8:40: c2:c0:e4:23:ad:6c:91:21:c9:82:1a:87:3d:63:cd:32:fd:c4: c0:50:40:c0:42:13:0e:d7:a3:c9:6d:cc:17:fc:70:16:76:1d: 33:b4:51:b7:35:2d:4e:10:12:bb:12:52:0f:3e:db:f4:60:18: a5:55:d2:a2:16:f5:42:e4:3c:83:08:60:83:e2:91:a5:c7:42: 2c:73:3d:e5:39:92:ee:ef:55:02:d9:90:74:35:14:57:28:13: 5a:80:b0:f8:82:39:d8:29:40:3b:a5:5c:b9:1d:4a:17:a2:af: f5:8d:98:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwODE5MDM1MzQ4WhcNMjYwODI2MDM1MzQ4WjAYMRYwFAYD VQQDEw02YTg1MjhjYy01MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW8e5958ZHIS2J7hdShNkai9YnyYRPtRC2ET7jtuHulfQVnU0SAHMjTh8n7F J01TM/lexSW9Nif1mYiBzWOkj0rEHFA/Y+3fgscCdtmHVxYdpUlW9hfoxsdl4YoT Tljz9iTX163O0FU3ek6GUC23wldoUjVCOwq3DO2W1VwmDHTcSiCu427MoHIIpnE4 UJR/S4b+mbkDARqyLAIjFuND216cLh8Z08v8WNAtyeL/H4UHTlDYMgjCzJocwiXE AAYoJYnPOiN3X9lizHDstARhPB9T8fTVyHNQyOPtHtIJ3pe4RvyXuVYwfO6MJlT7 QnWfkRPHRYvHL56VYzWwTD5HLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1gnEx1 GAq2Juh4ojeI5JGx+lMKMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMY+hawm5HZZDXB1BXszVgHcWrXHFr+EltNlIm/RrjuNsAJxrSz3NQywo6nuk 1f6R+wy1yihWzEAndmBLt+wFOfLfjBUPMxr8LSu6tJ8o5FfAhO1kBsBDSkM/qpDy ZgkmndUilYpB3JYYhsyI0k8T1/7LcvDAgcfP6ONGlt8MfUfQKKAvlQJCH1rAR43n 2ahAwsDkI61skSHJghqHPWPNMv3EwFBAwEITDtejyW3MF/xwFnYdM7RRtzUtThAS uxJSDz7b9GAYpVXSohb1QuQ8gwhgg+KRpcdCLHM95TmS7u9VAtmQdDUUVygTWoCw +II52ClAO6VcuR1KF6Kv9Y2Yjg== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:20 2026 by rpki-client