$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: /GRShddsImUuxEwY1LZMWZ/l0WmKgPImbqLGyleo4DU= Subject key identifier: 0A:00:5D:8F:6C:10:E2:9D:A2:2C:E7:3E:E0:F0:94:34:B0:30:F9:6F Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 0851 Signing time: Sun 26 Jul 2026 21:35:25 +0000 Manifest this update: Sun 26 Jul 2026 21:35:24 +0000 Manifest next update: Sun 02 Aug 2026 21:35:24 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: u5KrnA+eMO4rhEygKK39cxyWWl3k/kLHuL1LmTC3rjs=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=) 4: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Jul 26 21:35:24 2026 GMT Not After : Aug 2 21:35:24 2026 GMT Subject: CN=6a667d9d-4569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:d2:5c:11:b9:ca:76:f2:08:ec:fb:f5:46: f5:1e:9c:82:54:3a:61:11:f4:45:43:62:f5:21:21: d9:5b:4a:f8:56:05:ce:9a:28:46:d1:5c:4d:a4:08: 16:2c:c7:80:c6:77:7b:33:de:b3:31:b3:84:29:55: ef:96:58:c4:de:73:16:b2:cb:08:4c:d9:17:4c:59: 88:a3:46:0d:8f:f9:ac:e1:53:f4:56:c1:9a:1f:27: 33:b2:99:22:b4:5b:e8:2b:d4:a6:80:e5:97:23:89: db:a7:50:2f:74:d4:2d:61:4b:b7:81:f1:17:8a:e8: 21:a9:56:b9:f2:04:94:cf:e8:da:16:0f:15:bb:0f: 6c:90:1e:41:55:1d:66:3f:ef:1b:d0:b6:b4:1e:3c: 79:59:2a:98:af:1a:6c:85:ad:5c:76:36:e9:67:5a: fb:7d:2b:ad:43:43:fe:07:bd:68:91:1e:ac:cf:f3: 6e:c9:94:79:fc:ed:55:85:9b:67:3c:d7:62:e1:cd: 52:19:b2:5b:61:39:f7:13:4f:05:d5:e4:6b:51:f3: e8:02:53:26:6b:61:c9:f7:d7:bc:25:4e:d0:9c:f8: 33:1b:3e:f2:3b:e8:9b:5a:f8:07:47:c4:f3:da:41: 7e:27:fb:aa:e0:4d:1a:40:29:a6:12:1b:89:12:a2: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:5D:8F:6C:10:E2:9D:A2:2C:E7:3E:E0:F0:94:34:B0:30:F9:6F X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:5b:64:82:a4:a7:45:54:6a:8a:9c:4b:95:68:3a:bf:7d: 6c:a9:90:b4:22:47:3b:c0:79:6f:2e:28:e0:f9:37:e0:7c:c8: 13:00:33:96:46:5b:70:5e:88:90:b7:de:33:c9:0d:b0:a8:e2: d3:64:2f:03:ad:b0:19:15:f4:61:9e:22:b6:a7:e8:7a:88:6c: c4:c2:ff:00:df:4b:51:80:37:73:c9:f8:c4:e9:b6:1d:ca:a8: 05:47:69:f0:78:66:cd:d7:ac:e0:43:85:0a:99:bc:96:49:60: ce:11:2a:dd:f8:f2:57:ce:da:50:e2:b9:c2:96:2c:b3:a9:46: 3d:12:8d:7e:ac:4f:8d:a8:62:e5:a3:b5:dc:f7:cd:c5:8f:2e: 4c:c9:6e:eb:e9:18:3a:6a:5d:ed:73:c0:35:84:66:18:38:07: 0f:13:e7:1b:01:55:51:60:37:09:d9:5d:d3:c9:c1:58:02:b5: 95:77:9b:25:5c:7a:6a:6e:f4:b7:d6:c1:e6:ec:64:fc:36:e5: 06:7c:ca:31:ee:6c:c0:cb:55:ce:32:b5:05:72:33:d0:83:aa: 9a:64:e6:53:68:ab:9b:57:b5:93:b7:eb:a1:e3:cb:5e:d3:46: c5:e7:cd:2c:6e:73:59:d9:c1:30:19:10:77:2a:46:64:68:e5: f2:11:0b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjYwNzI2MjEzNTI0WhcNMjYwODAyMjEzNTI0WjAYMRYwFAYD VQQDEw02YTY2N2Q5ZC00NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroLSXBG5ynbyCOz79Ub1HpyCVDphEfRFQ2L1ISHZW0r4VgXOmihG0VxNpAgW LMeAxnd7M96zMbOEKVXvlljE3nMWsssITNkXTFmIo0YNj/ms4VP0VsGaHyczspki tFvoK9SmgOWXI4nbp1AvdNQtYUu3gfEXiughqVa58gSUz+jaFg8Vuw9skB5BVR1m P+8b0La0Hjx5WSqYrxpsha1cdjbpZ1r7fSutQ0P+B71okR6sz/NuyZR5/O1VhZtn PNdi4c1SGbJbYTn3E08F1eRrUfPoAlMma2HJ99e8JU7QnPgzGz7yO+ibWvgHR8Tz 2kF+J/uq4E0aQCmmEhuJEqJcAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoAXY9s EOKdoiznPuDwlDSwMPlvMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgrxbZIKkp0VUaoqcS5VoOr99bKmQtCJHO8B5by4o4Pk34HzIEwAzlkZbcF6I kLfeM8kNsKji02QvA62wGRX0YZ4itqfoeohsxML/AN9LUYA3c8n4xOm2HcqoBUdp 8Hhmzdes4EOFCpm8lklgzhEq3fjyV87aUOK5wpYss6lGPRKNfqxPjahi5aO13PfN xY8uTMlu6+kYOmpd7XPANYRmGDgHDxPnGwFVUWA3Cdld08nBWAK1lXebJVx6am70 t9bB5uxk/DblBnzKMe5swMtVzjK1BXIz0IOqmmTmU2irm1e1k7froePLXtNGxefN LG5zWdnBMBkQdypGZGjl8hELnA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:16 2026 by rpki-client