$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: 2e8wfeYr1YvBhWH/KY3r18o8xDwQHlyZbYBPfK8mpzs= Subject key identifier: 20:50:3D:53:5D:86:14:49:E7:40:E9:07:6C:AB:5D:72:26:81:E7:A9 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 25AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 255A Signing time: Sun 20 Sep 2026 15:43:12 +0000 Manifest this update: Sun 20 Sep 2026 15:43:11 +0000 Manifest next update: Sun 27 Sep 2026 15:43:11 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: ueQ/Yf/64XDlQMgBS1m7ZVTvGyhXFdikoc4B3aXLRWc=) 2: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=) 4: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=) 5: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=) 6: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=) 7: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=) 8: 1A13A1D0ABFD11F1A01A66F56A11F970.roa (hash: /mdRJmdwf41+PjME0KrvJ9ifiBelFKWQGM/p14mQGFc=) 9: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9645 (0x25ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Sep 20 15:43:11 2026 GMT Not After : Sep 27 15:43:11 2026 GMT Subject: CN=6aafff10-6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:82:86:25:05:da:07:ed:00:36:53:17:bf: 36:a7:86:bf:99:a1:d7:8c:ec:82:41:7d:c1:23:2f: 8c:5c:e2:68:f4:aa:a6:8e:d1:ca:c3:a1:04:bc:b1: 28:e5:4b:58:68:b4:ec:fe:ba:d0:2c:55:23:8a:4a: a5:59:8b:b0:97:fe:81:01:9b:ef:a7:d2:90:32:cf: 19:d7:a7:b1:9c:7c:d5:e9:b6:6b:0f:e4:89:63:49: e6:7f:30:c8:20:00:55:96:59:2d:eb:62:94:ba:1f: d5:94:fa:b3:e5:ce:a9:f8:8f:91:d4:47:e2:97:d1: 3a:b5:1a:a6:71:3a:7e:88:ac:1a:70:e7:62:cc:23: 89:38:a3:54:ae:70:f6:1e:62:d6:9f:e0:cd:3f:18: f1:ab:c6:67:99:6f:ee:58:61:12:22:32:5f:4b:80: 1e:71:43:41:01:85:25:87:e8:c0:8f:87:84:31:97: 35:6c:9d:2c:fe:34:08:06:e5:74:5f:17:c2:d2:7e: 81:ad:fe:db:74:1f:b6:fc:6b:4d:0b:2e:24:c3:fa: 1a:63:f1:bd:7d:01:33:c2:9e:4b:92:a0:b6:05:1b: b1:f4:90:e6:dc:32:33:b7:50:83:3a:31:65:eb:bb: e7:0a:de:72:7c:61:34:51:65:97:df:78:b2:e2:11: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:50:3D:53:5D:86:14:49:E7:40:E9:07:6C:AB:5D:72:26:81:E7:A9 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0a:75:d0:b1:76:5f:88:1a:51:75:35:a2:2f:02:79:ab:a1: 55:5f:37:c0:e2:29:d6:a5:06:07:78:33:c8:4f:17:b5:a2:00: 8f:0e:b7:46:a6:0e:63:56:bb:17:64:b3:1f:3f:ea:14:31:7d: 3f:7c:95:54:32:a2:ba:c9:c9:f1:73:5a:25:ed:30:2f:30:28: 22:d4:21:48:04:57:bc:da:a5:de:bc:7e:3f:84:01:47:65:a0: f2:df:61:b5:c0:04:40:16:d4:4d:c8:e1:84:1c:a5:e0:79:22: f2:a7:9d:97:21:f6:57:38:5c:93:d1:c2:c4:f5:fb:f4:85:3f: b6:a6:2b:ae:3f:68:fd:1a:43:2b:7b:ae:f6:ef:14:14:63:19: e6:9c:3e:66:67:69:31:1b:99:f5:5b:d0:25:de:50:b0:07:80: dc:1f:69:9c:be:5f:39:61:9f:1b:6c:09:f7:40:77:0b:cc:9e: 3a:5f:7d:a2:5c:13:5c:0f:5a:b4:93:c0:4a:00:6f:6d:7b:b6: 7f:ad:df:63:5d:6b:0e:73:72:7b:6e:94:50:97:ed:da:b4:aa: 4d:8b:fe:dc:82:21:c7:3f:90:f5:bd:b7:97:2b:44:42:c5:d7: 96:e5:c6:83:8f:67:09:f5:2e:94:eb:51:e7:5a:ce:7d:c8:e3: f0:52:14:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwOTIwMTU0MzExWhcNMjYwOTI3MTU0MzExWjAYMRYwFAYD VQQDEw02YWFmZmYxMC02ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5uChiUF2gftADZTF782p4a/maHXjOyCQX3BIy+MXOJo9KqmjtHKw6EEvLEo 5UtYaLTs/rrQLFUjikqlWYuwl/6BAZvvp9KQMs8Z16exnHzV6bZrD+SJY0nmfzDI IABVllkt62KUuh/VlPqz5c6p+I+R1Efil9E6tRqmcTp+iKwacOdizCOJOKNUrnD2 HmLWn+DNPxjxq8ZnmW/uWGESIjJfS4AecUNBAYUlh+jAj4eEMZc1bJ0s/jQIBuV0 XxfC0n6Brf7bdB+2/GtNCy4kw/oaY/G9fQEzwp5LkqC2BRux9JDm3DIzt1CDOjFl 67vnCt5yfGE0UWWX33iy4hHSmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBQPVNd hhRJ50DpB2yrXXImgeepMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQp10LF2X4gaUXU1oi8CeauhVV83wOIp1qUGB3gzyE8XtaIAjw63RqYOY1a7 F2SzHz/qFDF9P3yVVDKiusnJ8XNaJe0wLzAoItQhSARXvNql3rx+P4QBR2Wg8t9h tcAEQBbUTcjhhByl4Hki8qedlyH2Vzhck9HCxPX79IU/tqYrrj9o/RpDK3uu9u8U FGMZ5pw+ZmdpMRuZ9VvQJd5QsAeA3B9pnL5fOWGfG2wJ90B3C8yeOl99olwTXA9a tJPASgBvbXu2f63fY11rDnNye26UUJft2rSqTYv+3IIhxz+Q9b23lytEQsXXluXG g49nCfUulOtR51rOfcjj8FIU+g== -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:55 2026 by rpki-client