$ rpki-client -vvf rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft File: nFFy5DAbErBXIH5LhA56y5CyCK4.mft (raw, json) Hash identifier: 5nftgxFNV9puBNCodhpPDUZMUzQBMymZudEIS9wbb3k= Subject key identifier: FE:78:2E:24:BF:98:AB:66:E0:4C:EE:A7:4C:A7:EA:EB:35:1C:A4:7F Authority key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE Certificate issuer: /CN=A919125D/serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft Manifest number: 08 Signing time: Wed 19 Aug 2026 09:56:13 +0000 Manifest this update: Wed 19 Aug 2026 09:56:13 +0000 Manifest next update: Wed 26 Aug 2026 09:56:13 +0000 Files and hashes: 1: nFFy5DAbErBXIH5LhA56y5CyCK4.crl (hash: D3712nGn9whvLZ1VN9j1gaqgfImNF/WihTaPsAm6+C0=) 2: 2D766076947611F18F33E6295F11F970.roa (hash: nYN/boG0EONSsyNSFsdFD5f6WoaCZ/bo3AQVDqm6EiU=) 3: 74EA4288947611F1B81B112D5F11F970.roa (hash: xf63CpVG1xYHFcYXOGVTTTSM5albmIZRt5CqNRfPUy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE Validity Not Before: Aug 19 09:56:13 2026 GMT Not After : Aug 26 09:56:13 2026 GMT Subject: CN=6a857dbd-4730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:84:a0:d9:b4:b8:c7:6d:f1:46:29:63:68: 17:a4:cb:8c:bb:ba:4e:eb:e4:88:04:5e:ea:03:0e: fc:d4:5a:36:36:d4:53:1f:00:1a:16:52:bd:46:ae: a3:97:a9:18:d8:dc:c1:09:57:38:62:b7:2d:e7:fc: 62:8b:70:c4:79:8b:2a:9a:99:c0:c6:39:f7:d0:3e: 6b:30:23:a3:c9:f9:9b:47:30:d0:c2:1d:00:10:02: 2c:2c:2a:9b:55:53:58:d6:55:0f:e8:5a:d2:97:81: 15:fd:97:a5:9f:ed:d2:97:47:ad:95:78:c3:b4:94: 8f:b8:4b:d5:a3:68:ae:07:da:4d:2d:2e:80:6e:70: 67:fe:37:79:f2:f5:d7:38:5c:41:97:3f:9f:30:8f: dc:ff:14:6e:72:ec:5a:3c:13:bc:17:05:d5:0d:b4: 38:0e:b8:42:c1:85:f4:8a:1f:7a:66:5c:5d:b6:c1: cb:5a:83:12:f9:96:27:c3:8c:52:85:c2:60:db:b8: d7:c7:ce:f1:42:41:10:c1:20:f2:09:df:b1:14:42: 8f:ec:aa:6e:d2:de:7a:a3:0d:e3:88:07:07:2c:3d: f9:61:7f:b2:03:38:5f:77:8d:28:d1:e2:d6:ec:cb: 27:ed:56:7b:5e:5a:d9:b3:3d:42:1c:15:ff:ef:8a: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:78:2E:24:BF:98:AB:66:E0:4C:EE:A7:4C:A7:EA:EB:35:1C:A4:7F X509v3 Authority Key Identifier: keyid:9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:87:b5:99:5c:58:1f:38:5c:0a:be:8b:4a:44:b4:9d:fb:b0: 1e:a4:ee:5a:33:b6:59:99:c6:6a:12:a2:a4:be:05:a4:1a:91: 2f:21:82:2e:ce:20:e5:5d:8a:e4:52:27:fc:81:63:d1:ef:dd: 7e:59:f6:3e:b9:45:20:e0:6c:da:5f:70:fa:33:9a:1d:67:5b: 12:21:66:e1:c6:be:0c:d5:19:c4:dc:97:f9:1a:1e:dd:89:38: 6c:58:61:65:4c:27:9e:89:dd:74:2e:6b:32:52:97:cf:15:8a: 42:15:de:df:e9:81:55:39:fa:f8:b1:33:2c:4e:1a:cb:d9:c0: e3:c9:82:f2:4e:54:b5:b8:77:c2:b1:88:88:a5:f2:d2:96:12: 7c:74:85:4a:20:46:0c:fd:0d:08:2a:c8:10:e4:a8:98:09:ef: 31:89:3e:d2:1e:8d:25:48:54:c6:b2:58:38:78:05:e8:fc:7e: 28:0c:c7:c7:85:55:35:c2:11:e2:03:f1:a3:11:a1:95:39:47: 44:55:75:4f:44:1c:be:a7:f7:ad:d9:28:64:b8:d1:62:9e:4b: c0:07:a1:76:f3:90:e4:43:9e:90:4c:4d:19:4f:e8:0f:98:4e: 41:fd:bc:aa:94:48:3c:50:09:ab:94:6d:12:98:a5:e9:0b:01: bd:d4:30:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTI1RDExMC8GA1UEBRMoOUM1MTcyRTQzMDFCMTJCMDU3MjA3RTRCODQwRTdBQ0I5 MEIyMDhBRTAeFw0yNjA4MTkwOTU2MTNaFw0yNjA4MjYwOTU2MTNaMBgxFjAUBgNV BAMTDTZhODU3ZGJkLTQ3MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCOYSg2bS4x23xRiljaBeky4y7uk7r5IgEXuoDDvzUWjY21FMfABoWUr1GrqOX qRjY3MEJVzhity3n/GKLcMR5iyqamcDGOffQPmswI6PJ+ZtHMNDCHQAQAiwsKptV U1jWVQ/oWtKXgRX9l6Wf7dKXR62VeMO0lI+4S9WjaK4H2k0tLoBucGf+N3ny9dc4 XEGXP58wj9z/FG5y7Fo8E7wXBdUNtDgOuELBhfSKH3pmXF22wctagxL5lifDjFKF wmDbuNfHzvFCQRDBIPIJ37EUQo/sqm7S3nqjDeOIBwcsPflhf7IDOF93jSjR4tbs yyftVnteWtmzPUIcFf/vivGxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/nguJL+Y q2bgTO6nTKfq6zUcpH8wHwYDVR0jBBgwFoAUnFFy5DAbErBXIH5LhA56y5CyCK4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMjVEL0YwNEEzRkY2OTQ3 NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJCWElINUxoQTU2eTVDeUNL NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkZGeTVEQWJFckJYSUg1TGhBNTZ5NUN5Q0s0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MjVEL0YwNEEzRkY2OTQ3NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJC WElINUxoQTU2eTVDeUNLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5h7WZXFgfOFwKvotKRLSd+7AepO5aM7ZZmcZqEqKkvgWkGpEvIYIuziDlXYrk Uif8gWPR791+WfY+uUUg4GzaX3D6M5odZ1sSIWbhxr4M1RnE3Jf5Gh7diThsWGFl TCeeid10LmsyUpfPFYpCFd7f6YFVOfr4sTMsThrL2cDjyYLyTlS1uHfCsYiIpfLS lhJ8dIVKIEYM/Q0IKsgQ5KiYCe8xiT7SHo0lSFTGslg4eAXo/H4oDMfHhVU1whHi A/GjEaGVOUdEVXVPRBy+p/et2ShkuNFinkvAB6F285DkQ56QTE0ZT+gPmE5B/byq lEg8UAmrlG0SmKXpCwG91DA7 -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:47 2026 by rpki-client