$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: gEtXLTCZIl9UKuSwzjrP2T1b/BBO52VLDoqH2jc+rkg= Subject key identifier: 99:09:15:7A:6C:B8:6C:DD:F3:79:22:D1:B2:7D:E3:BA:12:5C:C9:5F Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: C0 Signing time: Wed 19 Aug 2026 07:37:25 +0000 Manifest this update: Wed 19 Aug 2026 07:37:24 +0000 Manifest next update: Wed 26 Aug 2026 07:37:24 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: CXfsBQoIyT7YYuw3YP6zfcIk1yJyBuBb2z5b8jXGUUQ=) 2: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: 16ronhpfPjZ1J9jMJniqcKd5ZSFxc1jnc1AmD+Jt630=) 3: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: iP831x/fULSZ/fmDwuHrWqBHoTP+BYRChB7pWllsa7M=) 4: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: Y8LpukABBo/pP9eZZ75cumiepSudrb+yKJGkwACmG7Q=) 5: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: DLNHUZHuS4L6pQW1+bd0pYlrjjNIUCRkspT0sawq79s=) 6: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: VBUUs43zdemApgQuUI5G2FA+aYtudXOF6LXHVAgrRhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Aug 19 07:37:24 2026 GMT Not After : Aug 26 07:37:24 2026 GMT Subject: CN=6a855d34-ce95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:4e:9c:6f:3a:b2:cb:b0:0d:33:9e:e4:92: 90:dd:53:64:cf:d9:42:be:0a:f4:da:b0:f0:b4:7d: 18:6d:91:f2:dd:c7:08:06:85:9b:be:a6:7d:76:55: a8:ca:b5:e7:04:0a:47:a1:a5:d9:92:3a:8a:cd:8e: dc:85:e4:2f:f3:ad:f8:11:67:7e:f8:63:8f:72:b3: 91:81:08:d0:2f:50:a9:41:65:df:12:d3:12:c9:df: d2:f8:ca:fe:a8:5a:bd:dd:11:1d:62:9c:88:e1:7e: 7b:b4:f9:a4:e8:f8:4d:ef:82:04:0b:a1:da:3d:49: 49:99:1a:83:7b:4e:13:4a:ac:a6:5f:99:9b:88:44: cd:89:c1:11:d4:21:a9:26:01:19:83:45:b2:b3:3f: 75:f2:da:68:d8:2f:94:e7:67:8a:b6:4d:c8:a2:e6: 38:d4:36:35:62:87:db:cc:40:d2:9b:57:b6:7c:d4: f2:2d:0f:0e:0c:6a:fb:98:b2:8b:de:23:93:a1:46: 6f:66:70:97:ee:0b:8b:03:8d:de:26:ca:2a:e5:b2: 19:b9:06:c5:5d:15:46:7a:60:79:14:21:c4:0b:c9: a7:f4:6f:b1:db:36:7a:ee:79:70:e8:d1:4d:1d:9c: 95:14:df:22:17:d2:d6:a0:27:ab:eb:09:94:04:aa: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:09:15:7A:6C:B8:6C:DD:F3:79:22:D1:B2:7D:E3:BA:12:5C:C9:5F X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:78:8b:6c:19:69:29:15:71:8c:41:0a:59:99:ae:89:6a: 72:8d:39:87:37:da:80:d7:22:22:f2:dd:f9:5e:9e:ac:42:ad: ca:3e:9b:72:0d:09:f9:7f:72:e2:3d:2f:b1:0a:75:1c:ca:70: 98:4d:17:42:16:3a:c2:ce:33:60:bc:3d:ee:fa:d7:b7:25:5c: 4f:11:ed:7a:42:8d:90:02:a6:37:2b:b7:d8:3c:ea:16:6f:21: 56:27:82:82:46:9c:0b:f8:eb:83:b6:21:a7:c7:39:7b:1c:fc: 77:42:be:df:f0:bc:51:a5:aa:a1:01:8d:bf:42:70:7d:64:2f: ef:9b:f2:1d:c2:54:bf:7e:c1:a9:79:50:b6:f9:81:bb:b6:5d: 09:39:a6:21:74:65:8c:4d:bb:94:01:29:89:a3:a5:31:8e:66: 7a:9e:f9:79:de:82:68:5c:1c:f6:e9:88:ab:62:d3:d0:12:d0: 02:af:ca:99:04:95:e0:55:df:47:7f:43:87:15:d3:a8:5a:df: 61:90:30:d7:83:fb:af:5c:78:f0:f6:21:7b:07:2d:6c:1a:6a: ae:c2:7d:23:10:94:81:e6:f1:65:8e:ab:ec:90:13:3f:d0:65: 0f:3a:37:57:a9:e4:3f:c8:d9:86:22:ff:ca:0a:6f:ed:58:b8: 53:e9:59:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw NzVFMDlBOTgwHhcNMjYwODE5MDczNzI0WhcNMjYwODI2MDczNzI0WjAYMRYwFAYD VQQDEw02YTg1NWQzNC1jZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfNOnG86ssuwDTOe5JKQ3VNkz9lCvgr02rDwtH0YbZHy3ccIBoWbvqZ9dlWo yrXnBApHoaXZkjqKzY7cheQv8634EWd++GOPcrORgQjQL1CpQWXfEtMSyd/S+Mr+ qFq93REdYpyI4X57tPmk6PhN74IEC6HaPUlJmRqDe04TSqymX5mbiETNicER1CGp JgEZg0Wysz918tpo2C+U52eKtk3IouY41DY1YofbzEDSm1e2fNTyLQ8ODGr7mLKL 3iOToUZvZnCX7guLA43eJsoq5bIZuQbFXRVGemB5FCHEC8mn9G+x2zZ67nlw6NFN HZyVFN8iF9LWoCer6wmUBKpaxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkJFXps uGzd83ki0bJ947oSXMlfMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhC VngyZFRQbFQ5RjRIWGdtcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkvV4i2wZaSkVcYxBClmZrolqco05hzfagNciIvLd+V6erEKtyj6bcg0J+X9y 4j0vsQp1HMpwmE0XQhY6ws4zYLw97vrXtyVcTxHtekKNkAKmNyu32DzqFm8hVieC gkacC/jrg7Yhp8c5exz8d0K+3/C8UaWqoQGNv0JwfWQv75vyHcJUv37BqXlQtvmB u7ZdCTmmIXRljE27lAEpiaOlMY5mep75ed6CaFwc9umIq2LT0BLQAq/KmQSV4FXf R39DhxXTqFrfYZAw14P7r1x48PYhewctbBpqrsJ9IxCUgebxZY6r7JATP9BlDzo3 V6nkP8jZhiL/ygpv7Vi4U+lZSQ== -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:18 2026 by rpki-client