$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: dfx7zxguTvTcvIzc1m9dcVA8JF5/3S+TRhTY/WnFvbI= Subject key identifier: A1:04:8C:F5:29:41:C2:74:07:01:65:4D:F6:46:1A:FF:45:EE:72:70 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1F70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1F5A Signing time: Tue 18 Aug 2026 16:06:59 +0000 Manifest this update: Tue 18 Aug 2026 16:06:58 +0000 Manifest next update: Tue 25 Aug 2026 16:06:58 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: bXWv6+HBKa3Awsa1yYPKhV+ZXEOeX20LMQRK+jXMB2o=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: xI4eUzx+xF9lkRKKMTUZaqkPy0rPqkMnNWhaAR/1Rn0=) 3: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: 3MKooCBU61wIsuGXSmqPXw064htJ8PtkFCtnxTlqkOw=) 4: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: rr7iOLl9TUyzkrsjzgFR/+q8JCXOgUaSGUX032fYyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8048 (0x1f70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Aug 18 16:06:58 2026 GMT Not After : Aug 25 16:06:58 2026 GMT Subject: CN=6a848323-0de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f1:12:6c:3b:ab:7e:3c:6a:81:54:a7:5c:f3: 88:b7:2f:50:e7:84:64:22:f6:63:43:7a:08:d7:ae: 8d:fa:37:09:b0:2e:bd:e3:ee:bd:d7:10:06:e9:90: 56:09:9e:59:c7:9d:35:d8:b2:1f:34:72:7b:05:ad: d9:73:27:1d:7e:dc:fb:52:3b:01:72:e9:1a:99:af: 9a:03:a3:82:1d:f8:7a:9f:ff:32:d7:d4:ad:e7:04: 6e:f0:2f:53:ed:c8:65:d1:0e:2a:e6:e6:57:34:cd: 75:7d:4c:28:b1:ae:2f:24:51:f8:ee:6c:2f:49:08: 3c:e1:b4:03:89:d0:4f:72:58:fe:38:8a:08:fe:ce: 56:57:74:86:e0:b6:9d:5d:a4:b8:ee:cd:84:98:00: 31:12:cd:4e:9e:81:f4:18:1f:bc:7e:ec:96:73:5e: 49:c1:44:18:03:ac:c0:0b:e0:32:a4:c3:80:4d:ca: 02:20:b3:f1:93:0e:7a:9e:6f:e2:8b:ad:65:af:67: 02:11:ca:eb:b3:b3:27:37:1e:6b:a6:b9:6a:37:d1: 53:03:77:74:db:6f:c2:3f:df:4f:f1:6e:52:75:1a: 45:54:4f:c0:47:c9:b1:ec:c1:53:1e:50:32:d9:00: 24:8a:45:a2:d6:5e:cd:ad:85:49:50:47:d4:a7:9f: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:04:8C:F5:29:41:C2:74:07:01:65:4D:F6:46:1A:FF:45:EE:72:70 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a1:d2:88:25:a6:2c:ed:6f:b3:80:67:d5:ef:3e:19:49:5a: 69:b4:4e:13:e2:f1:85:1f:1d:60:15:df:1f:d5:3d:7a:cc:fb: 15:43:e7:78:5e:19:58:ed:25:25:5b:10:78:0f:81:91:ad:ef: 28:37:b3:33:1f:ce:02:64:d6:e0:fe:2f:a6:95:2a:6a:05:c0: 17:f4:5b:91:f8:e4:cb:98:60:50:ce:b5:65:3c:2c:2f:08:1e: da:d2:1c:a9:d6:fa:25:18:a3:51:81:df:56:4b:0d:b6:3f:3a: 88:5d:19:72:9a:9e:32:2e:93:3c:e7:4f:70:03:c5:90:be:8b: 2a:ef:1b:e4:b1:dc:da:af:19:86:25:35:60:31:bb:1c:b5:a5: 51:61:aa:8a:74:e8:04:77:f2:ad:63:d8:d9:3d:fa:ce:e2:79: 13:d3:22:71:39:1d:0d:83:8d:5f:09:ae:1e:99:b8:33:41:9d: 37:ed:71:09:52:f7:b6:97:25:2f:e9:e2:d6:a5:3d:e3:45:d1: 90:4b:93:e3:fd:81:9e:1c:69:95:53:7f:66:8f:bb:00:33:2b: f9:f5:87:7a:66:1b:cc:ba:ca:58:12:11:7f:9b:43:b9:02:0e: ef:5f:78:a3:f5:63:ef:c2:e1:75:d0:c5:dc:cb:c7:b5:a1:8d: 79:2d:d2:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjYwODE4MTYwNjU4WhcNMjYwODI1MTYwNjU4WjAYMRYwFAYD VQQDEw02YTg0ODMyMy0wZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PESbDurfjxqgVSnXPOIty9Q54RkIvZjQ3oI166N+jcJsC694+691xAG6ZBW CZ5Zx5012LIfNHJ7Ba3Zcycdftz7UjsBcukama+aA6OCHfh6n/8y19St5wRu8C9T 7chl0Q4q5uZXNM11fUwosa4vJFH47mwvSQg84bQDidBPclj+OIoI/s5WV3SG4Lad XaS47s2EmAAxEs1OnoH0GB+8fuyWc15JwUQYA6zAC+AypMOATcoCILPxkw56nm/i i61lr2cCEcrrs7MnNx5rprlqN9FTA3d022/CP99P8W5SdRpFVE/AR8mx7MFTHlAy 2QAkikWi1l7NrYVJUEfUp59z5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEEjPUp QcJ0BwFlTfZGGv9F7nJwMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaKHSiCWmLO1vs4Bn1e8+GUlaabROE+LxhR8dYBXfH9U9esz7FUPneF4ZWO0l JVsQeA+Bka3vKDezMx/OAmTW4P4vppUqagXAF/Rbkfjky5hgUM61ZTwsLwge2tIc qdb6JRijUYHfVksNtj86iF0ZcpqeMi6TPOdPcAPFkL6LKu8b5LHc2q8ZhiU1YDG7 HLWlUWGqinToBHfyrWPY2T36zuJ5E9MicTkdDYONXwmuHpm4M0GdN+1xCVL3tpcl L+ni1qU940XRkEuT4/2BnhxplVN/Zo+7ADMr+fWHemYbzLrKWBIRf5tDuQIO7194 o/Vj78LhddDF3MvHtaGNeS3SuQ== -----END CERTIFICATE-----Generated at Wed Aug 19 12:56:37 2026 by rpki-client