$ rpki-client -vvf rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft File: BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft (raw, json) Hash identifier: fsfL1JwwxHqVT62ZVd4rvDb8fBRWB1ZkKWAhVCQD9ok= Subject key identifier: 6E:DE:25:9E:77:02:C0:C5:5A:21:BF:16:0B:EA:14:42:A2:69:D6:48 Authority key identifier: 04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49 Certificate issuer: /CN=A919AF98/serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft Manifest number: 02 Signing time: Wed 19 Aug 2026 04:16:37 +0000 Manifest this update: Wed 19 Aug 2026 04:16:36 +0000 Manifest next update: Wed 26 Aug 2026 04:16:36 +0000 Files and hashes: 1: BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl (hash: y3Pc6APO3DPcmb3q+mHqRoEvnNazIbu9EIZ3QELsiIw=) 2: C00714349B8411F18334ED1A4411F970.roa (hash: 7WRwPo6iEbBRHxiEEQbgGvdPHVegmpYL90b4d/Lk1hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AF98, serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049 Validity Not Before: Aug 19 04:16:36 2026 GMT Not After : Aug 26 04:16:36 2026 GMT Subject: CN=6a852e25-88bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:6c:e4:21:43:8b:a9:d4:64:60:d5:fa:38: de:e4:a7:72:10:85:7c:97:d3:34:d7:ee:5a:c5:dc: 56:03:4c:ac:15:b4:17:f9:98:b4:40:c9:fb:df:4c: 9e:4b:d1:c4:44:e3:8c:a5:cf:aa:5f:8a:9d:ba:d3: 00:8b:44:ff:0a:23:0d:cf:ab:9c:7f:29:9f:3b:32: ed:28:a7:8e:c5:0a:07:40:65:2c:3b:13:cc:eb:71: 68:9c:d5:7c:ed:cd:e8:c9:91:b2:9e:54:cb:62:5b: a3:0f:8a:09:21:0f:8d:b6:e3:c0:60:78:1c:a9:a1: b8:98:24:fe:b2:34:d7:a3:14:91:f2:23:c5:36:c0: 44:1c:90:57:18:98:19:f5:e8:cd:ec:fe:64:4a:32: da:87:ea:f4:3d:f3:d3:5c:bc:78:2f:41:d9:57:15: a2:70:0d:0f:5d:90:0a:0c:35:e9:40:6a:73:81:d0: e0:a2:80:93:d7:bb:97:99:24:f8:0c:bd:26:44:ba: 10:36:44:2b:05:bb:7f:73:f3:3e:a4:53:e2:71:09: 98:32:7c:7c:85:a1:20:11:a5:e0:df:5f:bd:00:b0: d9:6a:c9:bf:ad:53:17:94:32:71:ca:cf:a6:63:ab: a5:86:61:4e:69:77:eb:8e:0b:05:98:4e:c4:e2:06: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:25:9E:77:02:C0:C5:5A:21:BF:16:0B:EA:14:42:A2:69:D6:48 X509v3 Authority Key Identifier: keyid:04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e4:49:8a:4a:fa:ab:7b:4a:ee:ac:83:76:d4:14:01:92:38: c7:26:31:25:15:2d:e0:fa:8f:7f:ec:2f:a8:17:fe:72:da:11: c7:1b:67:35:e9:44:4a:88:98:27:a2:1b:7f:45:76:78:c4:6a: 2f:76:90:4f:9c:25:7e:72:c7:10:65:8f:fd:b0:9f:f3:38:fa: d0:60:64:47:59:f8:fa:84:5b:5e:37:62:85:14:57:08:31:6c: cf:60:ad:8b:49:cb:36:a2:cb:d4:00:58:03:ff:0e:33:7e:be: 79:bf:04:c9:61:a4:9a:a7:a5:23:3c:00:d9:e7:44:05:b6:27: e6:df:bb:64:01:d7:ba:ca:33:7c:4b:8d:ce:58:2f:78:81:a4: c7:68:02:d9:9a:30:b7:4b:e2:dc:d6:97:4a:8d:fa:6a:02:04: 7d:45:d1:e9:b0:e3:c4:94:d8:f8:c4:70:0c:20:4d:0a:2d:32: a7:cd:54:a0:7c:fd:94:6b:f6:b3:39:90:27:76:cd:f2:f0:52: 40:42:95:89:9a:52:c7:a5:8b:c8:5d:35:dc:f6:8e:a7:53:aa: 4a:6f:51:8b:50:3b:44:a6:8e:93:0c:19:ce:5e:67:bb:55:51: 25:46:21:b3:26:70:5d:2e:25:a3:40:3c:25:d2:11:06:f1:70: ed:d8:3a:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUY5ODExMC8GA1UEBRMoMDREMEY4NEIxQUI2RTMxMzE5QjAzM0JFQ0JDMDUzNDVG RUNGRjA0OTAeFw0yNjA4MTkwNDE2MzZaFw0yNjA4MjYwNDE2MzZaMBgxFjAUBgNV BAMTDTZhODUyZTI1LTg4YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjBWzkIUOLqdRkYNX6ON7kp3IQhXyX0zTX7lrF3FYDTKwVtBf5mLRAyfvfTJ5L 0cRE44ylz6pfip260wCLRP8KIw3Pq5x/KZ87Mu0op47FCgdAZSw7E8zrcWic1Xzt zejJkbKeVMtiW6MPigkhD42248BgeBypobiYJP6yNNejFJHyI8U2wEQckFcYmBn1 6M3s/mRKMtqH6vQ989NcvHgvQdlXFaJwDQ9dkAoMNelAanOB0OCigJPXu5eZJPgM vSZEuhA2RCsFu39z8z6kU+JxCZgyfHyFoSARpeDfX70AsNlqyb+tUxeUMnHKz6Zj q6WGYU5pd+uOCwWYTsTiBnLjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbt4lnncC wMVaIb8WC+oUQqJp1kgwHwYDVR0jBBgwFoAUBND4Sxq24xMZsDO+y8BTRf7P8Ekw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRjk4LzIxNDM0NjlDOUI4 NDExRjE4NUVBNERFNTQyMTFGOTcwL0JORDRTeHEyNHhNWnNETy15OEJUUmY3UDhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQk5ENFN4cTI0eE1ac0RPLXk4QlRSZjdQOEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB Rjk4LzIxNDM0NjlDOUI4NDExRjE4NUVBNERFNTQyMTFGOTcwL0JORDRTeHEyNHhN WnNETy15OEJUUmY3UDhFay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBs5EmKSvqre0rurIN21BQBkjjHJjElFS3g+o9/7C+oF/5y2hHHG2c16URKiJgn oht/RXZ4xGovdpBPnCV+cscQZY/9sJ/zOPrQYGRHWfj6hFteN2KFFFcIMWzPYK2L Scs2osvUAFgD/w4zfr55vwTJYaSap6UjPADZ50QFtifm37tkAde6yjN8S43OWC94 gaTHaALZmjC3S+Lc1pdKjfpqAgR9RdHpsOPElNj4xHAMIE0KLTKnzVSgfP2Ua/az OZAnds3y8FJAQpWJmlLHpYvIXTXc9o6nU6pKb1GLUDtEpo6TDBnOXme7VVElRiGz JnBdLiWjQDwl0hEG8XDt2DpQ -----END CERTIFICATE-----Generated at Wed Aug 19 12:44:40 2026 by rpki-client