$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: 3uH477/DR/j+CAJVSs/YOP96eD9yoTW/2SnVqVr/CR0= Subject key identifier: C5:78:49:D6:B5:02:CD:FE:83:9D:8B:99:B0:DD:CA:D9:CD:A3:8A:4A Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 258F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 253D Signing time: Tue 28 Jul 2026 15:51:05 +0000 Manifest this update: Tue 28 Jul 2026 15:51:04 +0000 Manifest next update: Tue 04 Aug 2026 15:51:04 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: iMSHtlc2FtNClRzeLAMWP10ytZ2sWfQ13KxFjawuLGU=) 2: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=) 3: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=) 4: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=) 5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=) 6: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=) 7: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=) 8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9615 (0x258f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Jul 28 15:51:04 2026 GMT Not After : Aug 4 15:51:04 2026 GMT Subject: CN=6a68cfe9-ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:24:4e:f9:3b:b0:c1:9f:cb:72:ca:2d:25: e7:86:2f:70:8c:5c:a4:dc:d1:6f:53:1a:4a:79:0d: 62:15:ef:22:f3:95:b5:23:99:79:a7:f6:e4:b9:42: 27:a8:b8:a7:fe:0e:ed:a8:74:a4:32:bb:92:91:80: 91:50:f8:76:df:9e:08:ed:6c:43:e7:75:aa:79:13: f5:9e:be:3c:52:34:f1:11:d0:c1:17:28:c7:90:ea: 32:a3:b7:97:74:6d:bb:f9:4b:ae:68:ac:a9:81:1d: 04:b4:b4:7b:6e:38:19:4b:ba:da:10:d9:83:6a:41: e8:d4:1a:89:e5:11:bc:bb:ad:21:26:82:7b:38:6e: ef:11:c1:51:77:46:74:75:14:cb:a9:db:94:21:18: fc:b5:01:0c:b1:d6:93:fb:49:ef:5e:c3:c9:54:7a: 24:8e:f3:fd:8d:9d:c6:14:e7:6c:cd:b7:60:36:39: 64:2f:96:fc:04:a4:9d:f8:e2:09:de:68:aa:a5:a2: 34:9c:76:32:0e:4f:2b:1b:79:5f:0a:e5:e6:77:43: 78:b3:9b:37:3c:39:53:91:39:de:7a:60:45:f9:e3: 53:24:c5:90:bb:51:f3:76:e4:e2:41:21:c9:10:97: 3a:47:b4:5e:26:18:54:0e:a0:03:a7:4c:f8:97:30: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:49:D6:B5:02:CD:FE:83:9D:8B:99:B0:DD:CA:D9:CD:A3:8A:4A X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:9b:35:68:99:74:02:c3:6b:eb:78:a1:23:dc:78:72:1c: e3:99:4a:1a:2d:74:4b:3d:3f:fe:0b:e3:a4:d9:50:93:5d:c3: 3f:1d:ff:91:ad:5f:92:c1:ee:6d:3a:a0:dc:29:74:96:ad:6c: b8:6a:4e:a2:da:98:9c:f4:81:c9:96:1d:8b:01:31:c7:a6:0f: a9:80:d1:f0:56:a8:86:a3:84:6d:b2:49:fc:03:d7:d8:fb:9d: b4:c7:05:65:a3:fb:09:ee:42:3f:eb:eb:96:34:c7:8b:e2:91: 89:74:d2:ca:53:cf:6b:a9:af:63:8f:ac:c5:e1:70:34:c7:64: fb:8c:03:54:bb:ba:98:96:97:30:c1:f8:53:5a:60:de:61:54: 78:c5:17:a8:9b:d5:79:1f:39:96:35:5a:0a:b2:31:84:3a:bc: d3:0a:81:30:1b:ed:8f:1f:3b:5b:bb:c6:4c:56:a3:c2:b4:35: da:73:06:a9:24:af:f4:31:f3:34:ff:88:87:31:f0:8f:ba:ed: 47:23:54:a9:a6:d0:55:0f:29:80:32:2f:91:e1:a1:05:f9:bb: 6c:df:c7:df:d7:d2:b7:eb:02:d7:97:9d:c2:81:e3:50:a4:01: 0a:dd:ef:0c:bd:6f:ad:f7:42:a6:91:09:d2:05:f7:26:14:42: a5:30:9b:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwNzI4MTU1MTA0WhcNMjYwODA0MTU1MTA0WjAYMRYwFAYD VQQDEw02YTY4Y2ZlOS1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j4kTvk7sMGfy3LKLSXnhi9wjFyk3NFvUxpKeQ1iFe8i85W1I5l5p/bkuUIn qLin/g7tqHSkMruSkYCRUPh2354I7WxD53WqeRP1nr48UjTxEdDBFyjHkOoyo7eX dG27+UuuaKypgR0EtLR7bjgZS7raENmDakHo1BqJ5RG8u60hJoJ7OG7vEcFRd0Z0 dRTLqduUIRj8tQEMsdaT+0nvXsPJVHokjvP9jZ3GFOdszbdgNjlkL5b8BKSd+OIJ 3miqpaI0nHYyDk8rG3lfCuXmd0N4s5s3PDlTkTneemBF+eNTJMWQu1HzduTiQSHJ EJc6R7ReJhhUDqADp0z4lzBDGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMV4Sda1 As3+g52LmbDdytnNo4pKMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiUybNWiZdALDa+t4oSPceHIc45lKGi10Sz0//gvjpNlQk13DPx3/ka1fksHu bTqg3Cl0lq1suGpOotqYnPSByZYdiwExx6YPqYDR8FaohqOEbbJJ/APX2PudtMcF ZaP7Ce5CP+vrljTHi+KRiXTSylPPa6mvY4+sxeFwNMdk+4wDVLu6mJaXMMH4U1pg 3mFUeMUXqJvVeR85ljVaCrIxhDq80wqBMBvtjx87W7vGTFajwrQ12nMGqSSv9DHz NP+IhzHwj7rtRyNUqabQVQ8pgDIvkeGhBfm7bN/H39fSt+sC15edwoHjUKQBCt3v DL1vrfdCppEJ0gX3JhRCpTCbNQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:29:35 2026 by rpki-client