$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft File: 433E2CR2A-hIwAZsRFuc2NpzUNY.mft (raw, json) Hash identifier: ntgCHZYklz7hDyVicfzy0ERVNRS7xfpA78mIBWwaNRI= Subject key identifier: 82:52:FB:4F:74:F9:24:86:B7:D7:AA:08:1D:B5:82:82:4E:86:CC:26 Authority key identifier: E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 Certificate issuer: /CN=A916C8F2/serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft Manifest number: CC Signing time: Mon 27 Jul 2026 08:55:44 +0000 Manifest this update: Mon 27 Jul 2026 08:55:43 +0000 Manifest next update: Mon 03 Aug 2026 08:55:43 +0000 Files and hashes: 1: 433E2CR2A-hIwAZsRFuc2NpzUNY.crl (hash: BOZA8A95UIaGbwqj0DG69WEcU0W31XYRD31X4zNXKZI=) 2: 730C503A56C611F096620043C4F9AE02.roa (hash: 0O+T5p2u9RjCzYCInOpadN0gyJxBbnecFtZNvwYOPBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8F2, serialNumber=E37DC4D8247603E848C0066C445B9CD8DA7350D6 Validity Not Before: Jul 27 08:55:43 2026 GMT Not After : Aug 3 08:55:43 2026 GMT Subject: CN=6a671d10-09b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:aa:d4:23:39:c8:cd:d0:42:33:43:90:28: 16:0e:fb:45:50:fb:7e:28:de:01:77:31:53:9f:79: 98:b3:58:b0:ca:39:a7:30:79:a5:f7:ff:14:f6:78: 0a:31:26:e0:e8:bc:a9:7c:b0:55:e0:a7:2f:ef:17: f3:23:db:9b:24:40:de:6f:09:9b:71:d0:89:76:43: a2:df:b6:3a:81:5c:2d:e3:0e:8e:c7:e9:aa:a2:21: 49:78:26:c2:82:72:48:bb:9a:fd:47:b7:98:98:52: 1e:4a:f0:e4:d3:5f:70:ac:25:c1:4a:7f:a0:09:ab: 0c:7b:68:5e:e1:f2:0b:2f:df:4c:21:3a:ba:0f:63: f0:78:59:7f:6f:6d:6a:58:bd:9f:bb:25:c3:a1:55: cd:74:5d:5f:87:82:9a:51:ea:0e:c9:0a:a8:9e:c6: d8:fb:c0:40:6b:9c:f1:4f:a0:8f:53:ce:3c:54:52: 41:b3:7e:0a:2e:2c:ed:b2:30:8a:b9:98:ec:06:85: dc:22:c3:63:f4:68:00:97:74:ec:c6:62:e5:93:4b: cd:7e:97:07:c2:97:31:56:57:35:0f:2e:df:47:0c: 71:07:a4:2a:18:71:5b:d2:6e:b2:d3:18:67:3c:c0: 09:b4:ad:3f:f6:1e:13:d3:74:19:c4:e0:eb:c4:1b: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:52:FB:4F:74:F9:24:86:B7:D7:AA:08:1D:B5:82:82:4E:86:CC:26 X509v3 Authority Key Identifier: keyid:E3:7D:C4:D8:24:76:03:E8:48:C0:06:6C:44:5B:9C:D8:DA:73:50:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/433E2CR2A-hIwAZsRFuc2NpzUNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8F2/287DE73656C611F092BDA042C4F9AE02/433E2CR2A-hIwAZsRFuc2NpzUNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:76:23:07:7f:f7:7f:12:7d:8e:1b:9e:ee:12:c9:dd:95:95: 42:73:cb:97:e5:ed:4c:a1:83:e2:61:9d:89:c3:26:4e:be:2b: 14:56:75:4f:94:0e:64:ba:97:7d:f4:e6:c9:b2:83:d6:26:39: c4:56:75:23:2d:3a:94:0b:d9:e3:d1:0c:23:6b:1c:66:d4:23: 3e:ff:a1:ce:f9:4f:b5:8b:96:ae:95:72:e5:cc:fd:db:db:d1: 99:52:29:da:b0:68:92:56:98:5a:9f:ce:e2:19:7e:49:10:b3: 4a:cd:3d:28:f5:90:36:63:d0:e9:b8:fa:7e:01:e7:ac:5f:10: c9:c0:f2:07:db:db:41:32:04:4d:bc:d3:b3:ec:f9:bd:35:d8: 5d:74:90:c1:c6:a6:92:a7:4d:e0:15:4d:6c:55:6a:f4:ae:40: 04:bb:97:22:6b:d2:8a:65:bb:70:c5:2d:8c:4d:68:2a:28:ea: 3a:0e:bb:1c:6e:49:fc:88:aa:46:d3:a5:2e:12:1f:40:78:48: 56:48:04:cb:87:bd:5e:70:68:d6:c7:34:20:73:56:c7:92:7a: c4:9b:47:60:4b:0d:3d:02:98:4f:a2:12:05:2d:a9:fb:00:a6: 3f:cd:d5:82:bc:f6:6e:13:23:a0:a4:79:e4:c4:4c:a2:a3:e4: da:9d:aa:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RjIxMTAvBgNVBAUTKEUzN0RDNEQ4MjQ3NjAzRTg0OEMwMDY2QzQ0NUI5Q0Q4 REE3MzUwRDYwHhcNMjYwNzI3MDg1NTQzWhcNMjYwODAzMDg1NTQzWjAYMRYwFAYD VQQDEw02YTY3MWQxMC0wOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Imq1CM5yM3QQjNDkCgWDvtFUPt+KN4BdzFTn3mYs1iwyjmnMHml9/8U9ngK MSbg6LypfLBV4Kcv7xfzI9ubJEDebwmbcdCJdkOi37Y6gVwt4w6Ox+mqoiFJeCbC gnJIu5r9R7eYmFIeSvDk019wrCXBSn+gCasMe2he4fILL99MITq6D2PweFl/b21q WL2fuyXDoVXNdF1fh4KaUeoOyQqonsbY+8BAa5zxT6CPU848VFJBs34KLiztsjCK uZjsBoXcIsNj9GgAl3TsxmLlk0vNfpcHwpcxVlc1Dy7fRwxxB6QqGHFb0m6y0xhn PMAJtK0/9h4T03QZxODrxBvO/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJS+090 +SSGt9eqCB21goJOhswmMB8GA1UdIwQYMBaAFON9xNgkdgPoSMAGbERbnNjac1DW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhGMi8yODdERTczNjU2 QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEtaEl3QVpzUkZ1YzJOcHpV TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzM0UyQ1IyQS1oSXdBWnNSRnVjMk5welVOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhGMi8yODdERTczNjU2QzYxMUYwOTJCREEwNDJDNEY5QUUwMi80MzNFMkNSMkEt aEl3QVpzUkZ1YzJOcHpVTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwHYjB3/3fxJ9jhue7hLJ3ZWVQnPLl+XtTKGD4mGdicMmTr4rFFZ1T5QOZLqX ffTmybKD1iY5xFZ1Iy06lAvZ49EMI2scZtQjPv+hzvlPtYuWrpVy5cz929vRmVIp 2rBoklaYWp/O4hl+SRCzSs09KPWQNmPQ6bj6fgHnrF8QycDyB9vbQTIETbzTs+z5 vTXYXXSQwcamkqdN4BVNbFVq9K5ABLuXImvSimW7cMUtjE1oKijqOg67HG5J/Iiq RtOlLhIfQHhIVkgEy4e9XnBo1sc0IHNWx5J6xJtHYEsNPQKYT6ISBS2p+wCmP83V grz2bhMjoKR55MRMoqPk2p2qGg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:50:27 2026 by rpki-client