$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft File: oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft (raw, json) Hash identifier: Q/lfRQ1bDmou8vHwn47DSOLQpvYr+FT6pqNeb+gSmDY= Subject key identifier: 0B:D6:E0:46:AB:57:99:F3:9C:46:76:52:3A:32:C2:35:D9:EE:71:E9 Authority key identifier: A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 Certificate issuer: /CN=A917F429/serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft Manifest number: 42 Signing time: Wed 19 Aug 2026 09:10:52 +0000 Manifest this update: Wed 19 Aug 2026 09:10:52 +0000 Manifest next update: Wed 26 Aug 2026 09:10:52 +0000 Files and hashes: 1: oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl (hash: GOIq6XhA0lOreYCX3qbR1rTUQLOznbjpiu0SxxTv758=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F429, serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24 Validity Not Before: Aug 19 09:10:52 2026 GMT Not After : Aug 26 09:10:52 2026 GMT Subject: CN=6a85731c-0d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:8c:e8:31:e6:36:a9:29:3b:5f:0d:1c:0d: f5:63:e0:eb:76:d4:61:0f:f8:0e:a2:48:23:31:67: f5:5d:2b:9c:b3:d9:a1:0e:7d:21:78:4c:e7:84:34: 35:77:ce:92:45:a9:4b:dc:df:e6:31:17:6c:9c:51: be:ff:a6:1f:e5:aa:4c:d6:7c:b5:28:a4:9d:a5:13: 45:3a:4d:93:bb:d1:99:d1:af:25:f1:c7:f7:86:4b: da:9a:af:58:f1:7b:a4:fd:5d:2d:68:fc:95:6f:07: d6:f9:c7:de:26:11:ae:0f:9b:0c:8a:2d:87:ff:8c: b7:7c:36:c8:7c:ae:a2:39:26:e1:78:5c:44:b3:d4: ec:83:99:d4:0c:5e:3f:80:3d:d4:40:34:a0:87:1f: c3:9d:c2:f2:b6:e1:c8:45:d1:fa:87:66:a3:4f:e0: 74:76:b0:70:0c:09:78:12:a7:e8:ee:58:05:60:2e: 15:f6:9e:68:39:06:fb:30:61:41:66:ab:4a:5a:9f: 7f:d7:8d:84:62:63:a6:53:ab:cd:a4:89:6e:21:a9: 5a:65:30:f7:48:37:c9:d3:90:7c:f3:b9:e5:51:72: 95:9b:da:35:32:d2:eb:2a:10:d6:c3:a6:07:41:1a: ea:f9:69:14:f8:37:75:e8:ca:21:4e:8f:46:64:0f: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:E0:46:AB:57:99:F3:9C:46:76:52:3A:32:C2:35:D9:EE:71:E9 X509v3 Authority Key Identifier: keyid:A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:85:6b:42:26:70:73:8d:2f:50:8c:8a:39:58:ff:6d:4e:b7: d3:d4:d8:07:22:5b:cf:01:d5:b0:91:64:0b:7c:51:49:a6:cd: 1d:a5:f8:81:d5:fd:71:25:43:31:c6:76:a7:a7:fc:4b:32:f7: 89:d8:db:cc:43:90:6f:ba:23:7c:2c:da:54:39:f2:f7:74:46: f3:f1:d4:34:63:96:50:83:a9:cf:d0:8d:df:e5:99:e2:22:76: db:55:95:40:55:7c:69:7a:00:f9:05:28:32:32:60:6c:c8:32: b4:c3:2a:8d:45:1d:b6:a4:38:bf:a0:9b:81:4c:01:89:1d:ff: cd:07:3c:c0:cd:87:5f:60:4c:c9:31:c3:52:35:19:f4:5c:72: 40:2f:cd:89:e4:ed:d7:ec:6c:ad:7a:92:66:1b:9c:e0:69:9b: 51:94:da:d1:f1:18:d1:93:ae:cd:f1:86:50:bf:4f:94:34:50: ed:56:da:10:88:18:cd:96:95:e2:6f:c4:77:ec:f0:42:c9:be: 38:76:d7:f3:2c:91:c2:0d:c2:04:b1:d0:b2:df:11:e3:8c:01: 8f:c5:2f:02:29:24:7b:62:a3:5c:24:e4:ff:f3:23:fc:1c:2e: 42:7d:38:c2:cb:dd:20:73:14:88:09:6f:c9:62:24:d8:18:37: 03:55:d9:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjQyOTExMC8GA1UEBRMoQTE2MjM3QjE4MzBDRDI0MDI5ODhBQTBCMzBBQTY3NjQz MEY2NUMyNDAeFw0yNjA4MTkwOTEwNTJaFw0yNjA4MjYwOTEwNTJaMBgxFjAUBgNV BAMTDTZhODU3MzFjLTBkMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsMozoMeY2qSk7Xw0cDfVj4Ot21GEP+A6iSCMxZ/VdK5yz2aEOfSF4TOeENDV3 zpJFqUvc3+YxF2ycUb7/ph/lqkzWfLUopJ2lE0U6TZO70ZnRryXxx/eGS9qar1jx e6T9XS1o/JVvB9b5x94mEa4PmwyKLYf/jLd8Nsh8rqI5JuF4XESz1OyDmdQMXj+A PdRANKCHH8OdwvK24chF0fqHZqNP4HR2sHAMCXgSp+juWAVgLhX2nmg5BvswYUFm q0pan3/XjYRiY6ZTq82kiW4hqVplMPdIN8nTkHzzueVRcpWb2jUy0usqENbDpgdB Gur5aRT4N3XoyiFOj0ZkD4TnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC9bgRqtX mfOcRnZSOjLCNdnucekwHwYDVR0jBBgwFoAUoWI3sYMM0kApiKoLMKpnZDD2XCQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzBCMDAxMUU2Mzcx OTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtBcGlLb0xNS3BuWkREMlhD US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1dJM3NZTU0wa0FwaUtvTE1LcG5aREQyWENRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NDI5LzBCMDAxMUU2MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL29XSTNzWU1NMGtB cGlLb0xNS3BuWkREMlhDUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfhWtCJnBzjS9QjIo5WP9tTrfT1NgHIlvPAdWwkWQLfFFJps0dpfiB1f1xJUMx xnanp/xLMveJ2NvMQ5BvuiN8LNpUOfL3dEbz8dQ0Y5ZQg6nP0I3f5ZniInbbVZVA VXxpegD5BSgyMmBsyDK0wyqNRR22pDi/oJuBTAGJHf/NBzzAzYdfYEzJMcNSNRn0 XHJAL82J5O3X7GytepJmG5zgaZtRlNrR8RjRk67N8YZQv0+UNFDtVtoQiBjNlpXi b8R37PBCyb44dtfzLJHCDcIEsdCy3xHjjAGPxS8CKSR7YqNcJOT/8yP8HC5CfTjC y90gcxSICW/JYiTYGDcDVdle -----END CERTIFICATE-----Generated at Wed Aug 19 12:52:55 2026 by rpki-client