$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: 4RsraZmjgUTchXdOer9gfsrVvNUIZmxZV1Kwbo5hrtg= Subject key identifier: 4B:24:5E:D3:BC:B5:18:4C:BA:1E:93:D2:78:77:8E:93:3B:12:39:C6 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 0232 Signing time: Sat 01 Aug 2026 04:03:31 +0000 Manifest this update: Sat 01 Aug 2026 04:03:30 +0000 Manifest next update: Sat 08 Aug 2026 04:03:30 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: z66uNxDu7gjN2QUs95stBEEaQMVTT5WnyjZY9SykUZI=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: MwZtlUb/HsIKEstfPVSC25HdnKaI4guHiJ45vaYc4PY=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Aug 2026 04:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Aug 1 04:03:30 2026 GMT Not After : Aug 8 04:03:30 2026 GMT Subject: CN=6a6d7013-c8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:c7:81:02:b7:eb:e9:a4:40:c0:60:4b:f6: cf:79:59:35:9e:44:e5:b6:36:7e:f6:73:e5:22:ac: a6:b4:70:b9:c2:b5:fc:b6:55:c4:91:34:ec:0e:92: 9c:59:82:5e:ff:66:5d:46:95:19:5c:a4:3c:b4:22: 50:fe:e8:18:14:17:60:67:e2:5e:01:05:6a:18:ca: 46:b7:e6:eb:8e:30:29:2a:09:b6:64:85:46:99:f1: f2:be:a1:e9:e5:ee:2c:ce:1f:4c:dd:1b:fd:ac:c7: ce:de:19:50:9d:4a:83:82:b2:9b:9c:82:ce:3a:f7: 74:e3:51:47:ec:1a:8e:24:63:66:5c:0d:99:df:66: 5a:31:22:7d:00:c2:e6:df:23:20:5c:b3:4b:23:8d: e5:2c:b1:9a:14:bc:66:c7:fe:8b:cc:b0:54:6e:ef: 66:dc:7f:93:20:2c:d4:e1:9d:95:5b:10:f4:cf:88: 8a:a8:68:41:30:35:c5:c9:2c:57:23:96:6e:f4:24: 4c:e2:e1:a2:c0:a0:2c:38:21:39:f7:0d:6c:85:3b: d3:59:47:03:72:78:96:ec:d5:4c:31:3d:36:5c:6b: 03:e1:13:1c:02:55:31:2b:52:08:1a:b3:12:93:9b: e2:43:89:9b:21:d9:09:3d:f9:48:d4:7c:53:ad:f1: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:24:5E:D3:BC:B5:18:4C:BA:1E:93:D2:78:77:8E:93:3B:12:39:C6 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:04:97:93:80:6a:f7:70:7b:ba:66:2b:5f:82:4a:48:7c:84: 60:94:a6:91:44:7b:f8:6c:1e:25:9e:ea:f1:f4:91:95:e3:67: d8:06:b3:f7:a4:45:5b:0d:fc:d6:94:ce:79:f0:6d:19:9a:86: 12:c4:c3:e1:e8:74:fc:f2:13:10:21:36:10:c7:c0:af:0d:af: 19:12:39:42:56:fe:15:1e:44:a2:c2:8b:43:f0:03:21:11:37: 11:12:0e:79:63:cc:55:0e:3c:af:1b:e9:33:f6:f6:8e:ba:fe: 1e:53:fc:bd:75:84:e4:c4:c0:2b:9e:46:0a:92:5d:6a:e8:7b: 4a:fb:f3:e5:d3:be:1e:86:60:7e:40:3f:a1:64:ff:4b:fa:e6: b5:09:70:0a:59:42:d6:3e:97:6c:eb:4a:76:51:a2:04:ca:5b: 9f:79:e4:f3:dd:37:d6:3f:dc:b3:3a:83:2b:68:fb:7b:90:83: 12:b3:09:57:1c:43:0f:e8:a1:5d:9d:f2:a4:25:79:3b:31:9e: 0b:95:15:cc:8f:04:e5:56:c4:7f:e2:c0:a0:ef:9c:bf:b0:15: 4f:5c:3a:23:79:62:03:55:88:d1:95:3c:62:df:ac:d4:21:6f: 7e:b1:1a:3d:e3:f3:4a:6e:87:b7:bd:7f:76:0a:7a:88:61:92: d4:e2:5e:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwODAxMDQwMzMwWhcNMjYwODA4MDQwMzMwWjAYMRYwFAYD VQQDEw02YTZkNzAxMy1jOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCbHgQK36+mkQMBgS/bPeVk1nkTltjZ+9nPlIqymtHC5wrX8tlXEkTTsDpKc WYJe/2ZdRpUZXKQ8tCJQ/ugYFBdgZ+JeAQVqGMpGt+brjjApKgm2ZIVGmfHyvqHp 5e4szh9M3Rv9rMfO3hlQnUqDgrKbnILOOvd041FH7BqOJGNmXA2Z32ZaMSJ9AMLm 3yMgXLNLI43lLLGaFLxmx/6LzLBUbu9m3H+TICzU4Z2VWxD0z4iKqGhBMDXFySxX I5Zu9CRM4uGiwKAsOCE59w1shTvTWUcDcniW7NVMMT02XGsD4RMcAlUxK1IIGrMS k5viQ4mbIdkJPflI1HxTrfGolwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEskXtO8 tRhMuh6T0nh3jpM7EjnGMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlASXk4Bq93B7umYrX4JKSHyEYJSmkUR7+GweJZ7q8fSRleNn2Aaz96RFWw38 1pTOefBtGZqGEsTD4eh0/PITECE2EMfArw2vGRI5Qlb+FR5EosKLQ/ADIRE3ERIO eWPMVQ48rxvpM/b2jrr+HlP8vXWE5MTAK55GCpJdauh7Svvz5dO+HoZgfkA/oWT/ S/rmtQlwCllC1j6XbOtKdlGiBMpbn3nk89031j/cszqDK2j7e5CDErMJVxxDD+ih XZ3ypCV5OzGeC5UVzI8E5VbEf+LAoO+cv7AVT1w6I3liA1WI0ZU8Yt+s1CFvfrEa PePzSm6Ht71/dgp6iGGS1OJeFg== -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:41 2026 by rpki-client