$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: Y1PqB/sCW3WTtNEUHzlq1DxaL7qoUexNQSl+++Ch8iU= Subject key identifier: 00:A6:23:8C:45:8D:74:8E:61:3C:00:1C:F1:71:8B:72:ED:B3:2F:95 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0C0E Signing time: Tue 18 Aug 2026 19:09:01 +0000 Manifest this update: Tue 18 Aug 2026 19:09:01 +0000 Manifest next update: Tue 25 Aug 2026 19:09:01 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: RccdcPO2DCkjb5z1puxVCPoo3Mo6jQ7OtfOovwmF/vA=) 2: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) 3: BA16840475D911F1B46C33AD6CA30FBC.roa (hash: /qKxnSXL8e1JhFVlrKwLNg4T/NwR0oewdz+ElfcHN+w=) 4: BCA6A73A75D911F1B46C33AD6CA30FBC.roa (hash: 200zdhmpRY9TDWyoBotBxLY/NlAK1wTrZHNyeeHEV/Q=) 5: BB848D8675D911F1B46C33AD6CA30FBC.roa (hash: hKK67kho1xmsmO4LWvmGhYdHu4g9sHo6GKRHNdTGbfY=) 6: B899690275D911F1B46C33AD6CA30FBC.roa (hash: fmi7Xv25W86/nRUdBaLjYoJWXUK1k9Dy00DZvttwrRQ=) 7: 614D895A75DC11F19A6AA48A6DA30FBC.roa (hash: J5F3yuhEXayGWTKZqGEyENb3lEvu+CWT2L181CXwpDw=) 8: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 9: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Aug 18 19:09:01 2026 GMT Not After : Aug 25 19:09:01 2026 GMT Subject: CN=6a84adcd-12a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:fe:b2:c4:3e:95:b7:5b:d3:28:72:0b:51: aa:fc:60:f1:c2:e7:83:ba:13:40:dd:43:53:26:cb: fa:b1:2e:1f:57:08:5e:0f:56:89:64:65:eb:f3:e4: 6d:16:47:be:90:e5:f3:3f:a9:10:b4:ec:d6:b4:63: 28:ba:04:5e:4a:64:f9:dc:5f:9f:f3:67:1a:7b:52: 15:89:67:3b:42:c6:55:ed:2f:ab:71:a4:37:ca:84: c9:86:ef:b9:a8:0e:cf:24:f4:b8:5e:56:30:2f:d1: 70:65:ab:38:3c:d3:1e:a6:f2:e5:e6:c2:f5:a7:4d: 54:f8:d1:42:d2:8a:9e:b6:9a:0e:82:f0:ea:84:14: ab:50:c4:1a:52:ea:d2:b0:43:a7:49:9f:46:65:45: d4:e1:74:10:ce:46:1b:9f:2b:33:b4:b1:44:52:3c: f3:70:94:a6:db:d8:39:d4:7b:4d:78:e0:58:63:ef: 6a:39:61:e8:6d:f9:1e:7c:0f:fd:af:88:f7:67:97: 06:ed:8c:81:83:b9:78:5b:fc:7f:ed:fa:4d:dd:10: c1:83:b3:4e:16:48:55:7d:0c:72:d0:b3:60:6e:10: 24:3b:70:be:ce:f1:ca:3b:4f:60:e1:c6:53:e7:aa: 2d:81:12:1b:eb:53:c9:c4:d1:a7:37:f7:45:09:69: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A6:23:8C:45:8D:74:8E:61:3C:00:1C:F1:71:8B:72:ED:B3:2F:95 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:4a:33:cc:e7:73:5e:0b:29:ae:60:35:ee:ad:9f:4d:f5: d8:12:d0:21:02:75:79:d2:93:a1:6b:3c:f5:44:d0:47:f8:c4: c5:3f:4b:d6:80:01:f3:73:bb:a1:cf:91:22:0c:dc:72:85:0e: 4e:db:03:67:2f:5d:14:6a:0f:f1:e2:a8:0e:0d:c0:04:9a:30: 79:00:93:88:ef:45:bb:67:e6:13:f7:b9:58:0b:64:d7:03:d7: d0:5e:f1:10:42:db:ba:9f:05:c5:11:68:49:57:df:90:4a:7a: 25:2c:c1:0c:d0:ee:c3:6f:de:3d:e7:07:9d:a1:96:90:d5:32: d7:0d:f9:4d:91:60:46:32:e9:45:17:39:da:22:72:95:90:74: a2:ff:55:34:ef:79:87:c0:d4:4d:2f:c9:2b:a3:00:71:71:e0: c1:fb:81:b7:94:2f:9d:ff:47:75:36:45:3f:2e:2d:67:07:3a: 40:92:02:54:36:d9:0b:29:27:d6:38:87:8f:37:e6:8b:b7:46: 03:0a:c1:5b:fb:b0:0a:74:ba:26:72:c7:ba:ec:30:a9:bf:29: 17:d6:bc:2d:b0:d3:94:62:50:0d:55:dd:0e:97:06:df:ab:16: 92:3b:43:1b:95:ee:63:0c:4e:55:8e:34:b9:a2:cd:00:d2:c5: 00:dd:b5:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwODE4MTkwOTAxWhcNMjYwODI1MTkwOTAxWjAYMRYwFAYD VQQDEw02YTg0YWRjZC0xMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuD+ssQ+lbdb0yhyC1Gq/GDxwueDuhNA3UNTJsv6sS4fVwheD1aJZGXr8+Rt Fke+kOXzP6kQtOzWtGMougReSmT53F+f82cae1IViWc7QsZV7S+rcaQ3yoTJhu+5 qA7PJPS4XlYwL9FwZas4PNMepvLl5sL1p01U+NFC0oqetpoOgvDqhBSrUMQaUurS sEOnSZ9GZUXU4XQQzkYbnysztLFEUjzzcJSm29g51HtNeOBYY+9qOWHobfkefA/9 r4j3Z5cG7YyBg7l4W/x/7fpN3RDBg7NOFkhVfQxy0LNgbhAkO3C+zvHKO09g4cZT 56otgRIb61PJxNGnN/dFCWmv9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACmI4xF jXSOYTwAHPFxi3Ltsy+VMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKhNKM8znc14LKa5gNe6tn0312BLQIQJ1edKToWs89UTQR/jExT9L1oAB83O7 oc+RIgzccoUOTtsDZy9dFGoP8eKoDg3ABJoweQCTiO9Fu2fmE/e5WAtk1wPX0F7x EELbup8FxRFoSVffkEp6JSzBDNDuw2/ePecHnaGWkNUy1w35TZFgRjLpRRc52iJy lZB0ov9VNO95h8DUTS/JK6MAcXHgwfuBt5Qvnf9HdTZFPy4tZwc6QJICVDbZCykn 1jiHjzfmi7dGAwrBW/uwCnS6JnLHuuwwqb8pF9a8LbDTlGJQDVXdDpcG36sWkjtD G5XuYwxOVY40uaLNANLFAN21+g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:19 2026 by rpki-client