$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: xJDwlqNjZhGcC5mHv3EJySIsvStakqDt16NHOwH7Xto= Subject key identifier: 52:2B:1A:3C:79:3E:3E:A6:34:8C:FE:8D:33:6F:86:5B:60:1C:D4:54 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 1580 Signing time: Wed 22 Jul 2026 18:40:54 +0000 Manifest this update: Wed 22 Jul 2026 18:40:54 +0000 Manifest next update: Wed 29 Jul 2026 18:40:54 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: DcccFUK28yY0TlxrYPhJUsIFSXVV9IcFIJHwNxAEUsA=) 2: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: mXOFhSyBCv/TAJy8hqfhwv8pJyftfeyIbfuF2KBdAoc=) 3: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: C7vbfjxv89XIR5NcpKz3D4uzRMsCLjoNUKAHCYrmHIY=) 4: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: oxDb8X2lz/Qtc/KEdYDIiS2xmDd6FSCv+Q74AiXUIbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Jul 22 18:40:54 2026 GMT Not After : Jul 29 18:40:54 2026 GMT Subject: CN=6a610eb6-9eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:bd:7c:8d:f9:b0:e6:10:c7:12:b0:d2:1d: fc:53:cd:4f:22:5d:04:6c:a4:84:59:7b:ac:b9:39: d7:26:9c:45:d5:c6:5e:05:ae:4d:33:d5:e3:2a:eb: d9:bd:f9:ac:89:03:f5:06:e5:40:ab:33:4d:d4:f2: 11:66:d0:91:57:d5:41:59:f1:d0:02:97:73:8d:c0: 1e:9a:31:8a:36:fd:6a:31:0d:62:96:b4:7c:27:74: f9:16:bb:13:c5:ad:ce:54:2c:9c:c4:49:f4:68:c0: 03:da:85:67:99:4e:4e:89:73:64:e8:e0:40:79:c7: ec:20:ca:11:c2:45:e4:de:75:77:29:ae:b9:06:bd: 89:13:1f:8b:de:90:1b:79:7b:99:c3:dd:2a:e6:2d: 21:39:da:60:6e:17:cc:c8:f7:3e:57:c2:db:4c:55: 8e:b2:81:c6:5d:69:d1:71:e2:ad:0f:ee:c5:75:9b: 32:03:d7:f9:33:60:b2:0a:22:75:11:9d:be:8c:30: ea:41:01:36:a9:e0:84:8b:a3:11:33:6e:55:ab:e0: 44:f6:70:86:16:1a:43:a2:90:70:20:5c:29:05:81: 23:1d:ca:b9:7a:0e:97:f1:1d:e1:b8:5c:92:ad:18: c7:fe:a8:05:af:aa:2e:46:3f:f1:35:dd:f3:fa:f8: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:1A:3C:79:3E:3E:A6:34:8C:FE:8D:33:6F:86:5B:60:1C:D4:54 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:18:6d:09:a7:d8:ae:ef:7c:d7:15:32:24:83:76:3d:7f: 1f:91:a0:b7:7c:b2:6d:79:67:7d:81:c5:37:14:a1:98:c3:06: 65:25:65:77:b4:75:03:5d:67:1f:45:86:a8:1b:6f:42:7d:c9: b0:38:ff:be:c5:41:e7:f2:96:2d:32:d8:a0:83:d9:3f:63:74: 5d:5c:78:72:b5:ed:a2:e1:ce:56:bc:9a:f6:57:c2:c7:e3:5c: db:65:f2:96:0e:49:04:18:a9:24:b8:4f:d5:15:07:8e:8a:b6: 21:9f:11:71:72:14:7e:00:c3:56:a8:3f:1f:9a:62:14:a8:c4: 89:69:2b:41:de:99:d1:cd:e8:46:e0:cd:af:75:d3:64:18:3a: cf:a0:cd:d4:3b:b6:b8:9f:e1:4d:fa:1c:f4:ce:2d:50:9e:3a: 0c:6a:8d:70:96:3d:6e:7d:0f:db:be:86:a2:1b:42:b2:23:0e: 4d:5a:cb:fb:e9:a6:cb:bc:d5:7a:ed:de:45:b6:0a:dc:b7:2e: de:18:89:9c:fb:ab:04:99:a1:d9:81:d3:85:ef:1b:71:1a:dc: 18:91:f4:b1:d0:44:33:f4:95:aa:4e:94:c3:59:f8:c3:71:24: e5:8c:af:0e:f4:4f:79:c1:4f:4a:51:76:28:5b:58:47:d7:a4: 88:4b:3b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwNzIyMTg0MDU0WhcNMjYwNzI5MTg0MDU0WjAYMRYwFAYD VQQDEw02YTYxMGViNi05ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJu9fI35sOYQxxKw0h38U81PIl0EbKSEWXusuTnXJpxF1cZeBa5NM9XjKuvZ vfmsiQP1BuVAqzNN1PIRZtCRV9VBWfHQApdzjcAemjGKNv1qMQ1ilrR8J3T5FrsT xa3OVCycxEn0aMAD2oVnmU5OiXNk6OBAecfsIMoRwkXk3nV3Ka65Br2JEx+L3pAb eXuZw90q5i0hOdpgbhfMyPc+V8LbTFWOsoHGXWnRceKtD+7FdZsyA9f5M2CyCiJ1 EZ2+jDDqQQE2qeCEi6MRM25Vq+BE9nCGFhpDopBwIFwpBYEjHcq5eg6X8R3huFyS rRjH/qgFr6ouRj/xNd3z+vjPmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIrGjx5 Pj6mNIz+jTNvhltgHNRUMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn48YbQmn2K7vfNcVMiSDdj1/H5Ggt3yybXlnfYHFNxShmMMGZSVld7R1A11n H0WGqBtvQn3JsDj/vsVB5/KWLTLYoIPZP2N0XVx4crXtouHOVrya9lfCx+Nc22Xy lg5JBBipJLhP1RUHjoq2IZ8RcXIUfgDDVqg/H5piFKjEiWkrQd6Z0c3oRuDNr3XT ZBg6z6DN1Du2uJ/hTfoc9M4tUJ46DGqNcJY9bn0P276GohtCsiMOTVrL++mmy7zV eu3eRbYK3Lcu3hiJnPurBJmh2YHThe8bcRrcGJH0sdBEM/SVqk6Uw1n4w3Ek5Yyv DvRPecFPSlF2KFtYR9ekiEs7oQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:55 2026 by rpki-client