$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft File: 526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json) Hash identifier: hJHkV+N7Xo8ZJNufBBVdPdW6i9ZVKBzT+EqLK/2rAFM= Subject key identifier: C1:38:B2:1D:0A:DD:C0:CC:44:D4:80:58:D7:AD:EB:40:B4:DA:14:B7 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft Manifest number: 389A Signing time: Wed 22 Jul 2026 14:31:57 +0000 Manifest this update: Wed 22 Jul 2026 14:31:56 +0000 Manifest next update: Wed 29 Jul 2026 14:31:56 +0000 Files and hashes: 1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: IGfwIWHbSAqZVkcwGI2wQYeXwIh7yvSZirwOM963Fgo=) 2: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=) 3: 3601365863DE11F1AE9C550C8747A888.roa (hash: a5VM7JtD6LcodsYeGlB0EAm1aE+9xhQRh0wSSd39kMo=) 4: CF554666863D11F08BD39411C4F9AE02.roa (hash: ViBAfZN4LiVLC+KVZsA7wOjPz6zBLhpLOCuCREPCPgs=) 5: 6C90766A5E8A11F1951FE0531F7AAC22.roa (hash: Z0joRDTU6UnMTJGUdEJ2x7iNAhHSw9rxupkw/CwB3kA=) 6: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=) 7: 54D1C7F2541911F183547C4A96833773.roa (hash: LQdAIiOk1sBJSFerO+TkZnrFySbe+uENSVyUB4hyye0=) 8: klqyR0Jg2m3JH3jAqxR3mV0K_Ww.asa (hash: 8usYXBil9VNIWwPRBZMI9oGDIid+R8mJ1on2E0LXobY=) 9: AC20C79663DD11F1A8F4A29A8647A888.roa (hash: iqHrEZCcn4iOrmIl6xU/5IkvDTh+MMY2cMGXFBRoFRY=) 10: wt5YEsRneVM1Ae48Nc2G50437RA.asa (hash: n2BS6UAxp3+88ptQXu0ryAEeiqiHBOv1EcxLsH56KyY=) 11: oDLUoXawp2QA711TQg82qdaL7xY.asa (hash: Ys7znSRNCneTeNFEjwpU1LIBFt1uJ9cK3tjYt8xYZm4=) 12: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=) 13: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=) 14: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=) 15: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=) 16: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15328 (0x3be0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Jul 22 14:31:56 2026 GMT Not After : Jul 29 14:31:56 2026 GMT Subject: CN=6a60d45d-26de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:6c:95:fe:bf:49:a4:8a:34:a2:75:90:53: 69:b0:06:01:b6:f2:3f:cc:5a:45:d5:12:26:8f:de: b4:64:72:33:8e:dd:b4:25:a9:10:58:6b:36:f2:b5: f0:de:f5:9d:98:f9:8c:79:1b:c8:35:3b:db:02:f0: d5:47:26:4c:62:56:96:f4:1d:50:50:e0:7a:8f:2b: 58:38:52:d7:b4:de:7c:97:e4:4d:af:d4:38:0e:8f: 29:e7:4a:1c:95:c0:ee:19:60:6c:84:48:a2:d8:9f: e3:71:8c:4d:15:a7:bc:50:f8:9b:70:e3:0b:0a:f9: d8:b6:c8:bd:15:5c:c9:25:ef:d6:d8:75:12:ef:6f: 50:f1:a6:61:ad:cb:0d:c5:0e:7c:9f:26:2d:0a:5f: 1b:ad:84:b4:18:66:70:f5:52:f5:d9:5d:98:a9:13: 07:91:5d:22:97:aa:68:16:84:54:4c:ed:f4:99:fb: c7:e7:1a:e0:38:75:b0:ba:8c:3c:4f:70:b9:7d:7b: c4:64:84:f2:69:1f:57:fb:49:75:e3:e3:96:5e:88: 16:97:ea:35:55:7a:d7:97:de:d7:71:01:f7:0d:15: bb:7d:e0:00:cb:29:e1:06:da:3d:93:ae:4b:b0:d7: b3:68:6b:41:7a:78:4d:cf:5f:f7:9e:e6:a4:6a:ad: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:B2:1D:0A:DD:C0:CC:44:D4:80:58:D7:AD:EB:40:B4:DA:14:B7 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1c:a0:52:64:97:4e:78:4a:c0:03:b6:96:50:67:28:da:d9: ff:04:d2:41:e9:d8:6e:6c:57:f1:54:38:68:24:0f:85:f7:fa: 70:be:e3:bc:d6:05:da:1e:42:41:f9:17:23:57:08:20:b8:1b: 61:cc:71:aa:80:ac:1c:41:7a:27:6f:0b:3c:c9:fd:51:34:d9: 8a:ab:c2:c8:c3:57:5e:dd:39:b4:75:1c:c3:a8:7d:b0:3a:6c: 87:e1:ea:e1:d2:82:ae:55:3c:85:05:67:f8:f8:4e:e2:d4:b7: 78:57:be:42:78:bb:9b:da:04:bd:52:fc:ce:ca:92:fc:b4:17: 37:f2:43:8e:5d:09:1f:ec:43:e6:34:ce:74:ae:72:5a:9b:72: bb:56:55:1e:5b:68:b8:49:19:15:23:21:4d:40:46:d1:a4:75: 71:cd:57:22:fa:f0:99:6a:78:7b:74:e0:69:0f:4f:d1:a8:b8: 51:d3:99:86:25:71:71:95:c7:32:dd:58:10:03:e9:dc:b4:7e: 15:98:09:ec:56:3a:61:dc:cf:e2:5a:26:98:f8:a7:f0:5f:73: fe:ec:c7:bc:f8:f1:82:fa:e5:ca:7c:2c:49:5e:81:9f:0e:12: 12:92:49:a6:cb:27:0d:4e:8a:9a:ae:c4:90:19:f6:4a:d8:ba: 14:c1:9d:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICO+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjYwNzIyMTQzMTU2WhcNMjYwNzI5MTQzMTU2WjAYMRYwFAYD VQQDEw02YTYwZDQ1ZC0yNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6Bslf6/SaSKNKJ1kFNpsAYBtvI/zFpF1RImj960ZHIzjt20JakQWGs28rXw 3vWdmPmMeRvINTvbAvDVRyZMYlaW9B1QUOB6jytYOFLXtN58l+RNr9Q4Do8p50oc lcDuGWBshEii2J/jcYxNFae8UPibcOMLCvnYtsi9FVzJJe/W2HUS729Q8aZhrcsN xQ58nyYtCl8brYS0GGZw9VL12V2YqRMHkV0il6poFoRUTO30mfvH5xrgOHWwuow8 T3C5fXvEZITyaR9X+0l14+OWXogWl+o1VXrXl97XcQH3DRW7feAAyynhBto9k65L sNezaGtBenhNz1/3nuakaq1v+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFME4sh0K 3cDMRNSAWNet60C02hS3MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNI NHBCNWVEUS1tdG5kSWY0Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShygUmSXTnhKwAO2llBnKNrZ/wTSQenYbmxX8VQ4aCQPhff6cL7jvNYF2h5C QfkXI1cIILgbYcxxqoCsHEF6J28LPMn9UTTZiqvCyMNXXt05tHUcw6h9sDpsh+Hq 4dKCrlU8hQVn+PhO4tS3eFe+Qni7m9oEvVL8zsqS/LQXN/JDjl0JH+xD5jTOdK5y Wptyu1ZVHltouEkZFSMhTUBG0aR1cc1XIvrwmWp4e3TgaQ9P0ai4UdOZhiVxcZXH Mt1YEAPp3LR+FZgJ7FY6YdzP4lommPin8F9z/uzHvPjxgvrlynwsSV6Bnw4SEpJJ pssnDU6Kmq7EkBn2Sti6FMGdvg== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:04 2026 by rpki-client