$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: 15szr7Jojejo6LRAgzCacRhxiKksoXoJOKgdmW66baU= Subject key identifier: F2:39:8D:D8:CC:E3:E5:0B:50:D0:21:D7:73:9C:85:7D:B0:03:E1:B4 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 258C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 253A Signing time: Wed 22 Jul 2026 15:49:57 +0000 Manifest this update: Wed 22 Jul 2026 15:49:57 +0000 Manifest next update: Wed 29 Jul 2026 15:49:57 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: 0AekUN9B1h+2NpnJFijkVN+tbnvH7IBGpkvllskcKCs=) 2: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=) 3: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=) 4: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=) 5: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=) 6: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=) 7: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=) 8: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9612 (0x258c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Jul 22 15:49:57 2026 GMT Not After : Jul 29 15:49:57 2026 GMT Subject: CN=6a60e6a5-165b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:71:f0:4c:20:25:37:5a:64:5c:fd:1c:ec: 7c:1a:ce:c9:e3:6e:3c:93:7a:fb:db:c2:25:fd:2b: 96:ce:17:21:84:b0:27:b8:50:74:7e:14:1e:6f:2d: b7:5e:68:8c:d8:12:d1:38:c4:f8:24:df:c4:40:32: 6b:6b:b9:dd:fc:9e:f7:75:30:83:5f:be:df:92:02: 36:02:a8:01:df:a8:90:87:49:a6:17:b0:3f:29:aa: de:da:38:38:c6:40:10:54:57:a7:64:aa:fa:3b:1f: bd:81:98:ff:69:12:ef:56:a6:59:f2:47:1d:b8:03: ce:c3:59:07:b5:15:f3:0a:16:e3:6d:0f:e5:b8:7f: cf:21:b0:37:a8:8b:99:bd:58:f4:cd:34:15:72:10: eb:40:93:2a:f6:a5:ce:8a:04:53:6c:d5:01:07:c4: 53:a4:d8:0a:4d:8c:81:19:ad:d6:ac:4a:10:36:96: 15:d4:c6:71:b8:84:36:84:75:d0:92:1b:50:7b:c7: d1:d8:8b:b9:8b:4d:24:e8:90:0c:09:4e:db:17:66: 13:af:23:32:d1:f3:0c:b2:1f:33:97:95:e1:7e:8d: d0:27:78:35:eb:4c:92:7a:f1:91:35:3a:38:1e:a0: 94:93:de:e4:a2:cb:d2:9f:d6:2a:37:65:99:ac:40: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:8D:D8:CC:E3:E5:0B:50:D0:21:D7:73:9C:85:7D:B0:03:E1:B4 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:70:78:4a:07:b9:8f:a3:37:19:6d:5d:f5:02:3b:c9:d4:e2: ec:d0:04:ed:bd:4c:9a:8b:20:9d:27:c5:07:0f:25:99:ab:b6: 6f:69:5f:7e:17:da:97:ee:ec:f5:70:08:33:ea:92:3a:8a:94: 2e:45:12:b5:e6:b6:c3:ba:bd:95:77:02:87:f9:1d:78:23:fe: 1a:b6:7c:44:cd:ea:8c:b9:a8:c8:b4:2d:50:cf:c1:a0:66:85: fa:9d:05:5a:b0:31:4a:bb:d2:dc:67:6f:d3:d1:b2:bc:32:e2: db:c7:3d:5a:37:58:fd:6f:37:12:0d:22:7f:2e:03:c9:52:72: ad:c2:80:98:aa:20:d5:fb:70:65:04:2a:bc:45:30:c2:d8:66: 9f:53:09:86:97:0b:37:09:e2:6c:3f:95:75:9e:6c:5f:4d:76: 22:e6:d2:fd:12:24:7a:bb:e2:51:81:15:21:b9:95:ab:07:62: 4b:f9:2e:f7:90:44:cb:29:8a:af:23:fa:c3:63:bd:a3:86:68: a3:fb:f6:f3:f9:fc:a5:8a:fd:77:e8:f0:61:76:5d:68:4c:3f: 59:65:63:23:cb:c9:3e:8d:f3:58:49:e9:43:b4:67:b5:2d:cf: 0c:51:7b:ce:fe:6c:ec:22:df:e9:81:49:fe:d8:a3:a9:10:3f: 54:ac:c6:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwNzIyMTU0OTU3WhcNMjYwNzI5MTU0OTU3WjAYMRYwFAYD VQQDEw02YTYwZTZhNS0xNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsJx8EwgJTdaZFz9HOx8Gs7J4248k3r728Il/SuWzhchhLAnuFB0fhQeby23 XmiM2BLROMT4JN/EQDJra7nd/J73dTCDX77fkgI2AqgB36iQh0mmF7A/Kare2jg4 xkAQVFenZKr6Ox+9gZj/aRLvVqZZ8kcduAPOw1kHtRXzChbjbQ/luH/PIbA3qIuZ vVj0zTQVchDrQJMq9qXOigRTbNUBB8RTpNgKTYyBGa3WrEoQNpYV1MZxuIQ2hHXQ khtQe8fR2Iu5i00k6JAMCU7bF2YTryMy0fMMsh8zl5Xhfo3QJ3g160ySevGRNTo4 HqCUk97kosvSn9YqN2WZrEDafwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPI5jdjM 4+ULUNAh13OchX2wA+G0MB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAanB4Sge5j6M3GW1d9QI7ydTi7NAE7b1MmosgnSfFBw8lmau2b2lffhfal+7s 9XAIM+qSOoqULkUStea2w7q9lXcCh/kdeCP+GrZ8RM3qjLmoyLQtUM/BoGaF+p0F WrAxSrvS3Gdv09GyvDLi28c9WjdY/W83Eg0ify4DyVJyrcKAmKog1ftwZQQqvEUw wthmn1MJhpcLNwnibD+VdZ5sX012IubS/RIkerviUYEVIbmVqwdiS/ku95BEyymK ryP6w2O9o4Zoo/v28/n8pYr9d+jwYXZdaEw/WWVjI8vJPo3zWEnpQ7RntS3PDFF7 zv5s7CLf6YFJ/tijqRA/VKzG/Q== -----END CERTIFICATE-----Generated at Fri Jul 24 04:33:47 2026 by rpki-client