$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: AH0fPNKL5OB9rzrqz7AG4jzxW86+4p55XFzZdW7bFsY= Subject key identifier: 5B:A4:55:87:84:1D:86:83:04:59:44:80:E8:0D:70:2F:65:26:CA:54 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 05F3 Signing time: Tue 08 Sep 2026 23:05:12 +0000 Manifest this update: Tue 08 Sep 2026 23:05:11 +0000 Manifest next update: Tue 15 Sep 2026 23:05:11 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: Yf9e5lKXygz7uPCIGVkpyz2quXP+lcU4o4H1E2eK4dI=) 2: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=) 3: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=) 5: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=) 6: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: Llq8/Xlvmvs7fWUQmUTFmoYLL9C5z/28iM22A4jGmVI=) 7: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 23:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Sep 8 23:05:11 2026 GMT Not After : Sep 15 23:05:11 2026 GMT Subject: CN=6aa094a8-a9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:d8:0b:bc:21:9c:08:ec:99:b7:fb:7f:96: 60:a2:9b:cf:38:f3:c8:8e:a4:c8:6f:5e:79:94:44: 6e:c2:87:6c:19:13:5c:34:6d:2d:fd:2e:37:80:de: 18:bd:47:76:46:5b:08:0c:fb:85:b5:46:9d:75:9f: 58:57:8f:ce:e1:9c:b9:04:cf:c4:1e:64:c4:7d:2c: e7:66:71:cb:c8:a1:0b:f2:84:73:df:66:87:02:64: 38:b9:96:dc:e4:ce:24:ed:0b:e3:b4:49:77:bf:e7: 0a:c6:63:fd:e8:9b:b1:db:7d:16:23:4c:69:fd:a5: 0f:d4:23:2f:d2:65:87:91:60:4c:f4:8d:af:0b:93: 47:0f:99:20:53:d4:a3:ba:6c:36:8f:fd:df:80:96: f0:5f:f4:be:ac:7c:a6:bb:1e:db:33:92:79:58:72: 10:22:11:04:7d:bb:cb:77:64:5b:b1:3b:71:49:02: f5:ae:db:c7:31:11:c1:e1:f0:17:6c:64:d2:f4:2d: 30:cb:59:a4:cb:13:07:c1:b5:ed:df:13:69:14:c1: b5:78:8d:db:d0:b4:aa:33:d2:6a:65:68:e2:4c:55: 25:f1:46:38:f2:9a:68:e7:eb:cc:ce:5f:85:49:f7: 73:f2:fa:f6:7c:b1:5d:ad:00:69:85:ae:aa:80:34: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A4:55:87:84:1D:86:83:04:59:44:80:E8:0D:70:2F:65:26:CA:54 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:62:3b:da:51:e3:3d:25:52:11:30:40:4b:8e:fe:40:00:e1: 0f:05:94:67:2b:39:47:86:a4:28:44:a3:90:6c:fa:a9:fb:fe: 7d:9b:a1:fa:88:3f:a5:9e:7b:ae:0e:55:69:10:bb:5f:5a:2a: 17:14:44:93:3b:ac:39:f2:9c:1c:d0:3c:15:c0:3d:d4:8c:1a: e3:3e:b9:11:2b:9b:f8:d3:8d:f6:a7:a9:86:04:02:74:de:3c: 4c:89:50:a2:9b:72:10:6e:a8:c8:94:8d:2a:6c:e5:9e:4b:7b: 16:d0:32:87:70:b1:4d:f9:65:d7:a0:d2:dc:0c:eb:5a:6e:8a: c6:63:3c:60:7a:0b:11:6c:41:56:c5:64:6d:89:f6:3e:08:49: b8:dc:c8:9b:fd:90:a4:5a:e0:ce:28:3e:54:b2:6e:f1:df:5c: 9a:0f:4e:47:99:52:69:fc:2b:56:d6:70:a4:6b:aa:ff:a1:49: e0:5a:33:e4:ba:7e:53:fe:fb:3e:b0:f6:a9:1e:6e:39:f6:84: 3a:56:bf:ef:5d:5c:97:21:24:74:c9:a8:3b:1c:bc:99:dd:c6: 2e:67:02:a4:69:d6:4d:b3:cd:56:3b:71:53:f7:b0:4e:06:70: 84:b0:68:d7:f2:c5:b3:1e:81:b0:fc:32:d0:ce:52:53:92:7b: 30:fa:05:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwOTA4MjMwNTExWhcNMjYwOTE1MjMwNTExWjAYMRYwFAYD VQQDEw02YWEwOTRhOC1hOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nLYC7whnAjsmbf7f5ZgopvPOPPIjqTIb155lERuwodsGRNcNG0t/S43gN4Y vUd2RlsIDPuFtUaddZ9YV4/O4Zy5BM/EHmTEfSznZnHLyKEL8oRz32aHAmQ4uZbc 5M4k7QvjtEl3v+cKxmP96Jux230WI0xp/aUP1CMv0mWHkWBM9I2vC5NHD5kgU9Sj umw2j/3fgJbwX/S+rHymux7bM5J5WHIQIhEEfbvLd2RbsTtxSQL1rtvHMRHB4fAX bGTS9C0wy1mkyxMHwbXt3xNpFMG1eI3b0LSqM9JqZWjiTFUl8UY48ppo5+vMzl+F Sfdz8vr2fLFdrQBpha6qgDSDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFukVYeE HYaDBFlEgOgNcC9lJspUMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWI72lHjPSVSETBAS47+QADhDwWUZys5R4akKESjkGz6qfv+fZuh+og/pZ57 rg5VaRC7X1oqFxREkzusOfKcHNA8FcA91Iwa4z65ESub+NON9qephgQCdN48TIlQ optyEG6oyJSNKmzlnkt7FtAyh3CxTfll16DS3AzrWm6KxmM8YHoLEWxBVsVkbYn2 PghJuNzIm/2QpFrgzig+VLJu8d9cmg9OR5lSafwrVtZwpGuq/6FJ4Foz5Lp+U/77 PrD2qR5uOfaEOla/711clyEkdMmoOxy8md3GLmcCpGnWTbPNVjtxU/ewTgZwhLBo 1/LFsx6BsPwy0M5SU5J7MPoFVQ== -----END CERTIFICATE-----Generated at Thu Sep 10 19:13:55 2026 by rpki-client