$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json) Hash identifier: D6SL1Dxrb5JRL1yUh9YFvMnqNeKprkiabzOrAjoUYvo= Subject key identifier: B8:7B:C3:67:05:DB:52:A6:86:79:3D:89:D2:AA:1C:9E:02:14:FC:02 Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft Manifest number: 02C2 Signing time: Wed 19 Aug 2026 01:58:10 +0000 Manifest this update: Wed 19 Aug 2026 01:58:10 +0000 Manifest next update: Wed 26 Aug 2026 01:58:10 +0000 Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: 7fKLC5+2Oee2DaVe+j/1FSEgA3oCGCtWzlG3RVXc2Fc=) 2: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: Rq+tZUOjeaItK065Mwn6s2PgGSWpFi22osco/w96fYU=) 3: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: PtDZ91mnT8EbY3+b/UvFfpQljI6ctCClP32Mn4w89n8=) 4: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: D/XxgpTmAqVDQH9jHYni1JxMUh1+GB1xdzs9QThZoNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Aug 19 01:58:10 2026 GMT Not After : Aug 26 01:58:10 2026 GMT Subject: CN=6a850db2-9066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:b6:3a:3c:8f:02:f4:39:ab:b1:7e:c6:6c: 42:3a:d3:1a:08:1d:d3:4a:7d:8a:dd:9b:ef:ec:18: 51:23:25:0a:1e:3b:e5:da:aa:2e:5c:ec:26:93:c7: 0c:e3:6b:56:43:d8:1a:87:e7:8f:28:10:a2:38:61: e3:37:fa:ed:5d:f2:40:f3:e5:89:c7:4a:fa:f5:4a: 02:62:de:83:bf:6c:52:99:58:b1:d5:32:a1:29:3c: 73:dd:84:b4:33:ba:55:c0:98:ff:25:8b:54:8a:b2: d9:b2:9d:28:8e:c1:d5:57:12:42:f9:ff:a1:19:e1: 76:1d:ea:fa:74:2f:f3:68:7b:7e:6b:53:65:b5:5b: 08:2a:29:36:98:c8:99:b0:dc:7b:8a:86:d2:1a:39: fe:c6:08:43:30:8d:91:c3:92:f5:22:52:0f:87:5d: 28:96:d0:07:12:e5:19:da:e4:55:73:60:c1:bb:dd: 3a:8f:47:66:2a:c7:d4:fd:aa:7c:69:8a:30:0e:c3: 0b:be:49:84:62:bf:51:3b:d7:95:b7:f9:26:b5:c8: d9:e8:16:cc:e4:6b:c4:8b:41:2b:2f:dc:18:f0:f2: b8:2b:78:15:69:0a:5a:4c:0a:54:5b:27:e4:c6:a4: 33:e5:ff:9c:d6:47:ad:e4:ab:31:16:30:33:bc:3f: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:C3:67:05:DB:52:A6:86:79:3D:89:D2:AA:1C:9E:02:14:FC:02 X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:28:03:9d:e2:11:ab:c3:1b:6e:36:8d:72:d9:69:56:57:a5: 12:6a:bf:03:53:a3:09:47:2f:d6:bd:fa:07:73:e6:51:5a:b3: 07:d5:6d:2d:65:43:8c:dd:7a:bd:45:f6:bf:13:69:49:bc:b4: 73:59:36:56:c0:e6:74:b5:3b:7a:f0:d5:8a:e1:c4:8d:9d:31: 64:3f:e1:b4:92:09:25:35:6c:53:09:8c:6a:46:b1:ee:83:1a: ec:69:af:28:fd:24:23:e2:2e:40:6c:14:b1:ee:1e:53:1e:18: a5:bc:ad:7f:84:89:85:75:80:6b:41:80:4e:56:68:9d:d6:4e: 30:0e:ef:80:2a:e2:de:47:60:14:d2:da:b4:4a:b2:3e:66:ab: a2:86:36:3b:fa:00:8c:0b:b6:6f:51:d8:fd:32:e7:c6:c3:5d: d2:6d:43:18:a5:5f:a6:39:4c:c2:7c:d3:99:cb:1a:36:b7:8f: 75:51:52:84:e7:18:56:ba:95:08:30:f8:5f:6c:84:bc:36:a3: 1f:e1:e7:49:a3:81:72:cd:6e:5c:66:a6:0b:ed:bf:91:99:81: d3:9a:25:b8:6f:22:ef:5d:4b:d8:d4:13:37:8b:5c:b6:7d:73: 41:c5:85:36:31:4a:42:4e:f1:b8:a4:f7:81:5d:4b:6d:3f:14: 9a:b2:99:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjYwODE5MDE1ODEwWhcNMjYwODI2MDE1ODEwWjAYMRYwFAYD VQQDEw02YTg1MGRiMi05MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi+2OjyPAvQ5q7F+xmxCOtMaCB3TSn2K3Zvv7BhRIyUKHjvl2qouXOwmk8cM 42tWQ9gah+ePKBCiOGHjN/rtXfJA8+WJx0r69UoCYt6Dv2xSmVix1TKhKTxz3YS0 M7pVwJj/JYtUirLZsp0ojsHVVxJC+f+hGeF2Her6dC/zaHt+a1NltVsIKik2mMiZ sNx7iobSGjn+xghDMI2Rw5L1IlIPh10oltAHEuUZ2uRVc2DBu906j0dmKsfU/ap8 aYowDsMLvkmEYr9RO9eVt/kmtcjZ6BbM5GvEi0ErL9wY8PK4K3gVaQpaTApUWyfk xqQz5f+c1ket5KsxFjAzvD+RVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLh7w2cF 21Kmhnk9idKqHJ4CFPwCMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8zNjVCQ0NFQzdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJ cDExQnItUjYxQTBxdVJoOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyygDneIRq8MbbjaNctlpVlelEmq/A1OjCUcv1r36B3PmUVqzB9VtLWVDjN16 vUX2vxNpSby0c1k2VsDmdLU7evDViuHEjZ0xZD/htJIJJTVsUwmMakax7oMa7Gmv KP0kI+IuQGwUse4eUx4Ypbytf4SJhXWAa0GATlZondZOMA7vgCri3kdgFNLatEqy PmarooY2O/oAjAu2b1HY/TLnxsNd0m1DGKVfpjlMwnzTmcsaNrePdVFShOcYVrqV CDD4X2yEvDajH+HnSaOBcs1uXGamC+2/kZmB05oluG8i711L2NQTN4tctn1zQcWF NjFKQk7xuKT3gV1LbT8UmrKZqQ== -----END CERTIFICATE-----Generated at Thu Aug 20 23:32:21 2026 by rpki-client