$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: NdxWKmJ4YKCnkwWlQZ7fRUqfgTVB+c2sw4RgdG5b0Mk= Subject key identifier: 8E:EC:16:C4:41:C1:3E:B0:41:78:D6:B6:5A:B9:26:98:43:E6:38:47 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 27A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2719 Signing time: Sun 26 Jul 2026 15:46:26 +0000 Manifest this update: Sun 26 Jul 2026 15:46:25 +0000 Manifest next update: Sun 02 Aug 2026 15:46:25 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: psMogdxD91LyV1Bque+5J4e8EhF1m1EGq/WTIililsU=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 8bcJT2SUfJvBhjjxVcOLkV67/1UHWnWs/wyeZ8062Mk=) 4: 8ZyB5Nc2gIY5ylh7rhnl6Cy2gbw.asa (hash: +Pjl1MLAprkwiqwhT673Q9jFse4Elz7TYi7+ZiBgGbI=) 5: 9qAcg6cCriNo_EL5rFif8L2qvyQ.asa (hash: GDoXzuebgCv+n7JB5o6wM41UcS8TK2ToFJTNzWZ7MQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10150 (0x27a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Jul 26 15:46:25 2026 GMT Not After : Aug 2 15:46:25 2026 GMT Subject: CN=6a662bd2-ed6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:15:16:c9:6d:57:9d:b8:7b:53:84:b5:a5: b0:22:6f:4f:4e:25:15:cb:ff:eb:ba:f3:0b:14:9f: b2:d8:06:a7:25:c9:27:e5:b0:3a:7a:b5:0b:0d:65: 64:e2:98:6e:25:9c:9c:fa:bc:f9:55:50:cd:13:16: e0:b3:5d:da:5c:46:87:43:0f:17:ff:93:71:69:79: 63:d7:92:ee:6b:4b:66:aa:59:82:17:6f:c3:a0:4b: c6:fc:86:2a:a2:77:22:0e:8a:df:13:3c:e4:49:90: 04:b5:eb:cd:7e:37:ce:4d:79:ef:b6:5a:ac:36:81: 6b:59:c3:e2:73:7b:f7:2e:84:25:b3:2e:f4:1e:a6: 7d:29:6f:fe:d7:f0:e7:91:91:fa:9f:b3:44:eb:4f: 6d:44:6c:ff:7e:35:ee:8f:46:60:7e:43:a6:fe:95: 21:0b:a2:a7:14:c0:25:6d:6b:7d:46:c5:6d:c9:67: 3f:33:4a:58:8a:13:b3:84:a3:43:fe:fa:1b:4d:09: 4a:b6:dd:60:89:72:b1:ac:2c:2f:1c:29:27:11:1b: 72:a2:e6:75:be:c6:44:d7:e0:32:55:54:43:01:bc: 81:0a:5b:7b:c7:36:8f:83:ab:f6:ce:37:62:ff:ed: aa:89:b9:c8:31:cf:ad:c9:46:fb:88:10:33:3a:46: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:16:C4:41:C1:3E:B0:41:78:D6:B6:5A:B9:26:98:43:E6:38:47 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:78:23:a3:c2:28:78:15:0c:17:93:f6:9a:b5:21:2b:23: 66:d0:2e:06:95:0b:eb:82:23:5c:0f:da:d8:b8:95:c5:52:e1: e5:12:6c:c3:99:a0:5d:4e:63:4f:ea:f4:12:22:da:a6:57:e4: 75:f0:07:a9:b4:18:83:7e:e9:24:14:3b:63:6d:4d:ca:b6:70: 20:65:b5:26:55:b1:0a:a2:90:13:79:49:8e:06:9f:ef:97:a5: 40:88:b5:cc:29:58:71:2c:83:12:83:bc:73:d0:32:5a:2e:1c: b9:44:35:f3:f9:07:00:b4:aa:66:de:2a:74:21:26:33:c7:04: b8:38:2d:eb:bf:07:fc:e0:2d:c2:59:0f:32:d3:4d:67:e4:db: 27:da:27:f2:6f:eb:f3:58:5f:59:88:04:0b:dd:24:ca:22:e2: 66:1c:9f:ce:cf:47:eb:31:5d:ab:2b:d0:79:1e:12:81:11:42: e6:06:7b:57:0d:21:f7:0b:24:61:5f:32:6d:93:cb:dd:7d:b8: 45:4c:a5:e2:3a:a5:9c:fd:a3:0b:03:67:71:6d:e8:27:bd:4e: ae:9b:6d:5b:fb:e7:c0:ce:78:23:99:48:6f:dd:dc:8f:56:a8: 06:ae:12:02:9c:c1:78:be:fe:e9:a1:16:ac:4a:5f:68:d2:54: 4e:18:7e:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjYwNzI2MTU0NjI1WhcNMjYwODAyMTU0NjI1WjAYMRYwFAYD VQQDEw02YTY2MmJkMi1lZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOEVFsltV524e1OEtaWwIm9PTiUVy//ruvMLFJ+y2AanJckn5bA6erULDWVk 4phuJZyc+rz5VVDNExbgs13aXEaHQw8X/5NxaXlj15Lua0tmqlmCF2/DoEvG/IYq onciDorfEzzkSZAEtevNfjfOTXnvtlqsNoFrWcPic3v3LoQlsy70HqZ9KW/+1/Dn kZH6n7NE609tRGz/fjXuj0ZgfkOm/pUhC6KnFMAlbWt9RsVtyWc/M0pYihOzhKND /vobTQlKtt1giXKxrCwvHCknERtyouZ1vsZE1+AyVVRDAbyBClt7xzaPg6v2zjdi /+2qibnIMc+tyUb7iBAzOkY7bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7sFsRB wT6wQXjWtlq5JphD5jhHMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQ94I6PCKHgVDBeT9pq1ISsjZtAuBpUL64IjXA/a2LiVxVLh5RJsw5mgXU5j T+r0EiLaplfkdfAHqbQYg37pJBQ7Y21NyrZwIGW1JlWxCqKQE3lJjgaf75elQIi1 zClYcSyDEoO8c9AyWi4cuUQ18/kHALSqZt4qdCEmM8cEuDgt678H/OAtwlkPMtNN Z+TbJ9on8m/r81hfWYgEC90kyiLiZhyfzs9H6zFdqyvQeR4SgRFC5gZ7Vw0h9wsk YV8ybZPL3X24RUyl4jqlnP2jCwNncW3oJ71OrpttW/vnwM54I5lIb93cj1aoBq4S ApzBeL7+6aEWrEpfaNJUThh+HA== -----END CERTIFICATE-----Generated at Tue Jul 28 13:39:16 2026 by rpki-client