$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: 3YSL/KWnlFpLEFRCUmIqzFB5+U+km2VbhRrtc3dQvu0= Subject key identifier: B8:85:27:FA:9B:88:F6:7C:92:0F:B0:88:C7:B3:21:78:3E:59:2E:72 Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 0449 Signing time: Wed 19 Aug 2026 00:35:15 +0000 Manifest this update: Wed 19 Aug 2026 00:35:14 +0000 Manifest next update: Wed 26 Aug 2026 00:35:14 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: M7QWEcLIywA9nMTrVnfP8Cb8JI/oMcoU43v1cuvDuBQ=) 2: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=) 3: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=) 4: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Aug 19 00:35:14 2026 GMT Not After : Aug 26 00:35:14 2026 GMT Subject: CN=6a84fa43-f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:86:c7:89:28:35:b5:6a:33:8c:81:1c:47: e8:ee:2d:7c:49:3e:90:96:a0:37:1c:e9:da:33:7b: 49:3f:f3:0c:c7:c8:de:05:52:92:52:2e:83:d7:01: 29:7f:40:27:f2:b3:17:30:50:29:5b:0f:a3:02:aa: 66:5c:f9:8c:60:74:ba:2d:6c:45:f4:f9:c5:e7:c1: 78:d2:82:65:cb:ed:b2:2c:ea:91:f4:e2:7b:bc:a1: eb:3d:27:82:b7:51:fa:d6:5c:c8:b4:9d:b4:2f:66: e1:8c:dd:20:66:47:7b:02:2d:55:2f:e9:94:b1:f6: 5b:d0:7e:02:1a:2e:92:1e:79:de:ee:0b:a5:fc:99: 86:7e:d1:8e:0e:6b:26:0b:17:26:1f:6a:be:80:6e: 99:05:9a:e6:3e:8b:f2:24:e8:b9:70:ad:48:ff:77: 26:da:70:c5:89:bb:ae:c1:ac:26:70:78:ce:4a:5b: f3:0d:ba:8e:fb:3d:3a:8a:12:80:6a:72:ef:0a:20: 8f:b4:8a:f9:d0:27:81:6b:85:d2:47:45:a4:2f:c7: 5b:c2:21:04:56:75:35:e7:61:2a:1b:aa:50:29:dd: 51:4c:a6:68:c4:35:7c:e1:39:b4:2f:29:d2:2d:53: de:aa:71:87:65:5e:00:23:9d:54:fb:42:62:cd:e7: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:27:FA:9B:88:F6:7C:92:0F:B0:88:C7:B3:21:78:3E:59:2E:72 X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c8:7d:27:e2:9b:79:b9:3c:fd:fd:3d:1d:f2:d7:06:fc:b9: 2f:68:0a:f7:bc:34:f5:48:28:8b:6f:26:42:d9:d0:ef:43:8b: b3:60:ef:6a:7d:22:19:59:4f:40:5b:2e:d7:e2:57:cb:a7:ac: ae:87:45:8f:8f:ee:8a:02:ff:fd:de:58:40:10:68:17:51:3e: 8b:b2:e0:73:e2:ee:ca:80:0f:07:0c:c6:8a:2c:ad:3b:22:fc: 3c:9a:8a:37:df:da:8c:0d:81:fe:b5:99:51:38:36:92:28:85: 40:1d:cb:50:3f:5b:98:7a:33:6d:13:99:be:ac:fa:5f:d0:5f: 40:9e:9f:ca:f9:ef:68:e3:9e:4e:8d:fc:59:45:66:13:61:de: 5b:bc:56:f3:10:73:18:fe:cc:63:55:5e:3c:e8:bc:90:b6:8f: e2:74:63:bc:cc:22:a6:23:61:1d:8f:eb:a8:cf:03:5f:cc:3a: 56:e8:7b:b7:16:9d:71:ff:a4:3d:59:dd:8e:d4:47:f5:76:42: bd:69:77:53:29:95:32:6e:11:fb:a8:be:61:03:3d:ee:64:b5: 5e:10:78:63:17:ce:16:c8:7a:d0:42:98:45:0e:40:e9:6f:f5: 5e:26:98:95:b3:2e:39:08:5e:f5:91:cc:dd:e4:c7:21:46:71: 6a:a7:3a:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjYwODE5MDAzNTE0WhcNMjYwODI2MDAzNTE0WjAYMRYwFAYD VQQDEw02YTg0ZmE0My1mMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0iGx4koNbVqM4yBHEfo7i18ST6QlqA3HOnaM3tJP/MMx8jeBVKSUi6D1wEp f0An8rMXMFApWw+jAqpmXPmMYHS6LWxF9PnF58F40oJly+2yLOqR9OJ7vKHrPSeC t1H61lzItJ20L2bhjN0gZkd7Ai1VL+mUsfZb0H4CGi6SHnne7gul/JmGftGODmsm CxcmH2q+gG6ZBZrmPovyJOi5cK1I/3cm2nDFibuuwawmcHjOSlvzDbqO+z06ihKA anLvCiCPtIr50CeBa4XSR0WkL8dbwiEEVnU152EqG6pQKd1RTKZoxDV84Tm0LynS LVPeqnGHZV4AI51U+0JizeeI5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiFJ/qb iPZ8kg+wiMezIXg+WS5yMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAsh9J+Kbebk8/f09HfLXBvy5L2gK97w09Ugoi28mQtnQ70OLs2Dvan0iGVlP QFsu1+JXy6esrodFj4/uigL//d5YQBBoF1E+i7Lgc+LuyoAPBwzGiiytOyL8PJqK N9/ajA2B/rWZUTg2kiiFQB3LUD9bmHozbROZvqz6X9BfQJ6fyvnvaOOeTo38WUVm E2HeW7xW8xBzGP7MY1VePOi8kLaP4nRjvMwipiNhHY/rqM8DX8w6Vuh7txadcf+k PVndjtRH9XZCvWl3UymVMm4R+6i+YQM97mS1XhB4YxfOFsh60EKYRQ5A6W/1XiaY lbMuOQhe9ZHM3eTHIUZxaqc6qw== -----END CERTIFICATE-----Generated at Wed Aug 19 11:44:26 2026 by rpki-client