$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json) Hash identifier: XoOWe500HuGjCucu4j3DZ9uCV4Lo1mJOv81UByMcmZc= Subject key identifier: 40:AA:3F:79:3F:93:F7:4D:77:85:02:15:51:31:3C:A3:71:13:45:D7 Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft Manifest number: 0338 Signing time: Wed 19 Aug 2026 01:25:27 +0000 Manifest this update: Wed 19 Aug 2026 01:25:26 +0000 Manifest next update: Wed 26 Aug 2026 01:25:26 +0000 Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: ShH6YPhcVF2CBrBFqg4Wo+6BK2fb1/oKnCSsPuczCRk=) 2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: FwO40S+xjulf9/jOcYKw9vVREBioLQw+tNB6AZvia7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Validity Not Before: Aug 19 01:25:26 2026 GMT Not After : Aug 26 01:25:26 2026 GMT Subject: CN=6a850606-e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:a0:d4:03:2e:3b:b6:fb:dc:4a:42:3e:dc: 81:29:65:6c:fe:13:bf:d5:50:7c:de:15:fa:5c:75: 62:d9:e8:96:ef:ac:af:43:96:c9:62:d3:0c:80:ff: ef:fa:0b:35:a3:ec:34:18:6b:3d:9f:cc:16:4b:c6: 3e:26:5a:c0:7b:62:04:b2:dc:c5:b4:66:27:0e:45: d0:ef:39:a5:80:d1:2c:2f:a4:f4:df:e0:d7:ad:72: 9d:aa:23:a4:a3:f5:79:db:e4:c8:d7:fb:98:9a:f0: ca:e7:57:a3:6e:56:93:26:12:ab:26:3d:fa:90:18: 19:17:ae:05:91:68:5f:28:d5:1c:d6:08:c6:73:64: f0:90:11:e0:b0:bf:b8:f6:9e:64:1e:fd:83:fd:b4: c1:3b:c3:0e:cb:eb:d1:30:5e:83:55:35:6a:d7:2d: 95:b1:64:92:fb:72:4d:00:d8:ca:46:00:6a:53:28: 18:43:c3:68:51:e6:92:c3:d5:7f:53:de:8f:e6:34: 44:c9:fa:24:5e:00:46:75:f6:a8:93:bc:9f:08:86: de:2f:07:72:a1:9c:ca:8f:c2:41:7b:29:d8:3e:cd: 6f:e4:bf:4c:d5:f0:66:dd:02:3b:16:00:55:ff:95: 59:49:d6:ed:d6:74:c6:86:7d:56:17:9f:d4:a5:f4: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:3F:79:3F:93:F7:4D:77:85:02:15:51:31:3C:A3:71:13:45:D7 X509v3 Authority Key Identifier: keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:87:e1:9c:cf:d2:6d:63:12:49:94:3d:d2:54:61:48:ac:cc: f2:56:0e:6c:77:87:8e:65:37:ae:e6:d8:45:e9:a1:c3:c0:d0: c9:7f:ee:ac:24:51:9f:bc:e3:af:a7:9e:3c:96:51:df:bd:94: 6f:c2:63:b9:00:7c:f9:f1:f2:21:a0:ab:18:2e:61:88:a4:c3: 08:6a:98:b1:89:8e:f0:11:3e:75:84:d0:e7:03:ef:a7:62:a2: 69:ab:92:48:e2:ba:0f:60:43:a9:0e:2e:94:b9:72:42:73:b9: e7:dc:00:7c:e6:4e:0a:1c:75:36:51:0c:69:68:fa:43:8f:a6: 0e:6a:5f:b1:0a:43:7f:f1:38:a9:29:47:16:c0:e3:da:83:65: 23:4f:05:4a:f2:ed:a4:38:84:88:48:90:9c:5f:f7:2f:fb:78: 1f:ac:14:15:10:bf:4d:55:68:ae:9e:9b:87:35:df:8f:51:38: 87:e8:2e:08:0d:a6:66:63:ea:91:68:4d:28:02:72:ee:b8:8f: 66:bd:5c:7a:80:52:e5:ae:dc:25:d6:db:4c:5d:5b:90:bf:99: e2:82:3a:89:b2:52:38:ae:da:fa:66:3d:20:86:a3:e8:8b:84: 08:d1:05:de:42:69:fd:35:31:aa:bf:bf:f3:1d:cc:3d:92:9f: 6b:09:2e:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB ODdGQ0M4NTIwHhcNMjYwODE5MDEyNTI2WhcNMjYwODI2MDEyNTI2WjAYMRYwFAYD VQQDEw02YTg1MDYwNi1lMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomig1AMuO7b73EpCPtyBKWVs/hO/1VB83hX6XHVi2eiW76yvQ5bJYtMMgP/v +gs1o+w0GGs9n8wWS8Y+JlrAe2IEstzFtGYnDkXQ7zmlgNEsL6T03+DXrXKdqiOk o/V52+TI1/uYmvDK51ejblaTJhKrJj36kBgZF64FkWhfKNUc1gjGc2TwkBHgsL+4 9p5kHv2D/bTBO8MOy+vRMF6DVTVq1y2VsWSS+3JNANjKRgBqUygYQ8NoUeaSw9V/ U96P5jREyfokXgBGdfaok7yfCIbeLwdyoZzKj8JBeynYPs1v5L9M1fBm3QI7FgBV /5VZSdbt1nTGhn1WF5/UpfTSXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECqP3k/ k/dNd4UCFVExPKNxE0XXMB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTRDNi9FQUI5NDdBODFFMTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRt X0RIVGxMNFRLN3lvZjh5RkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs4fhnM/SbWMSSZQ90lRhSKzM8lYObHeHjmU3rubYRemhw8DQyX/urCRRn7zj r6eePJZR372Ub8JjuQB8+fHyIaCrGC5hiKTDCGqYsYmO8BE+dYTQ5wPvp2KiaauS SOK6D2BDqQ4ulLlyQnO559wAfOZOChx1NlEMaWj6Q4+mDmpfsQpDf/E4qSlHFsDj 2oNlI08FSvLtpDiEiEiQnF/3L/t4H6wUFRC/TVVorp6bhzXfj1E4h+guCA2mZmPq kWhNKAJy7riPZr1ceoBS5a7cJdbbTF1bkL+Z4oI6ibJSOK7a+mY9IIaj6IuECNEF 3kJp/TUxqr+/8x3MPZKfawkuaA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:42 2026 by rpki-client