$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: 1PooGQ5jTxjMdTwYHj+EN8Ns1vVrKaEkqxFHxDWEZLg= Subject key identifier: 23:78:F7:9A:67:71:9A:5C:B6:44:6A:CA:12:3C:6C:7F:6B:18:4A:EC Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0D21 Signing time: Tue 28 Jul 2026 18:17:24 +0000 Manifest this update: Tue 28 Jul 2026 18:17:24 +0000 Manifest next update: Tue 04 Aug 2026 18:17:24 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: C3jw10tgn8iMse42sTLP8A+mvnRcpbvVv6qiS89/Nxg=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: UfHKPMUY6EmaHpXY4OrXsN6dBJ4bjLIXmajgIcZM4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Jul 28 18:17:24 2026 GMT Not After : Aug 4 18:17:24 2026 GMT Subject: CN=6a68f234-5b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:7b:54:4f:2d:ea:58:76:19:c3:43:bb:b4: 3e:b0:cf:0c:53:39:52:30:5c:32:c9:d8:dc:68:94: 16:24:36:04:cd:45:69:73:66:74:1d:b6:fc:0b:4d: d7:dd:e6:9d:7c:38:f2:b1:b7:04:6e:5a:1f:3a:b5: 01:58:3a:79:a5:f4:a3:42:2b:6f:58:e5:c7:5b:0e: ea:b7:29:94:11:21:b4:eb:a1:ef:56:b9:7a:e2:84: 06:e0:0c:36:26:9d:09:c8:bd:39:df:2a:cd:5e:4f: 6e:41:9b:cb:15:f8:fc:55:cb:27:6b:56:7d:09:9f: 7a:35:ed:e0:db:71:07:b7:53:aa:20:e3:28:d5:40: 72:e5:56:0f:98:02:df:35:b1:f3:a6:72:33:92:26: d6:9e:b2:65:84:af:9c:63:04:06:1d:34:70:ca:ac: fa:3b:4f:d3:43:50:d4:e7:dd:a8:96:26:28:b5:94: f2:07:11:b8:85:b0:ec:f0:67:92:55:5a:53:49:ca: e5:ab:7f:78:d4:9d:20:88:6c:69:06:2a:5d:3f:e8: b0:ad:62:aa:e0:62:9e:74:0c:42:11:73:1b:cf:09: 7f:ba:75:e3:b2:09:f8:bf:55:41:24:d1:ae:4b:98: 61:99:08:28:de:96:00:d2:ce:ed:9c:3f:e5:01:51: 51:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:78:F7:9A:67:71:9A:5C:B6:44:6A:CA:12:3C:6C:7F:6B:18:4A:EC X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3a:16:2f:aa:a0:8a:e9:69:27:8f:52:cf:91:f7:af:83:51: bb:f9:42:ea:98:84:3a:65:46:a1:7a:b1:60:e9:4b:d2:d2:c2: 6c:70:ff:f8:b3:e8:aa:cf:62:bc:3a:f7:aa:c9:9c:4d:ac:2c: 6b:74:a3:48:c8:e4:6e:8d:ce:9b:4e:24:14:4d:fb:7f:db:ca: 28:aa:81:2c:59:3a:9c:c5:b2:68:e3:e6:88:af:da:35:76:98: f9:c0:7e:fb:f1:5f:e2:ff:2f:54:00:e4:dc:b7:4f:d0:25:d1: 84:9e:a8:56:1a:77:29:df:ee:c3:e6:c5:ae:32:a4:06:23:6e: 90:3e:81:cb:78:c6:b9:4e:48:8d:8f:52:86:f2:73:d8:2c:e9: a3:23:b4:da:c0:b5:be:ee:1e:00:89:46:75:52:52:33:fa:af: 85:82:17:d5:08:f3:b9:0d:b6:4b:ef:6b:dc:db:eb:19:70:70: 5f:a4:ef:86:50:06:18:65:34:0c:6e:e6:29:6d:7d:89:85:48: e7:fa:ff:04:dd:d3:8a:47:7e:90:00:5b:97:4f:33:28:f6:f0: e5:90:1f:ee:a9:61:c0:b6:8c:90:a0:d2:ee:48:4a:0b:50:2f: cb:74:68:3f:24:28:51:cc:04:f6:3e:c4:0c:c2:a4:fb:75:3d: c0:4b:fe:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjYwNzI4MTgxNzI0WhcNMjYwODA0MTgxNzI0WjAYMRYwFAYD VQQDEw02YTY4ZjIzNC01YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wV7VE8t6lh2GcNDu7Q+sM8MUzlSMFwyydjcaJQWJDYEzUVpc2Z0Hbb8C03X 3eadfDjysbcEblofOrUBWDp5pfSjQitvWOXHWw7qtymUESG066HvVrl64oQG4Aw2 Jp0JyL053yrNXk9uQZvLFfj8Vcsna1Z9CZ96Ne3g23EHt1OqIOMo1UBy5VYPmALf NbHzpnIzkibWnrJlhK+cYwQGHTRwyqz6O0/TQ1DU592oliYotZTyBxG4hbDs8GeS VVpTScrlq3941J0giGxpBipdP+iwrWKq4GKedAxCEXMbzwl/unXjsgn4v1VBJNGu S5hhmQgo3pYA0s7tnD/lAVFRRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCN495pn cZpctkRqyhI8bH9rGErsMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEjoWL6qgiulpJ49Sz5H3r4NRu/lC6piEOmVGoXqxYOlL0tLCbHD/+LPoqs9i vDr3qsmcTawsa3SjSMjkbo3Om04kFE37f9vKKKqBLFk6nMWyaOPmiK/aNXaY+cB+ +/Ff4v8vVADk3LdP0CXRhJ6oVhp3Kd/uw+bFrjKkBiNukD6By3jGuU5IjY9ShvJz 2CzpoyO02sC1vu4eAIlGdVJSM/qvhYIX1QjzuQ22S+9r3NvrGXBwX6TvhlAGGGU0 DG7mKW19iYVI5/r/BN3Tikd+kABbl08zKPbw5ZAf7qlhwLaMkKDS7khKC1Avy3Ro PyQoUcwE9j7EDMKk+3U9wEv+Ww== -----END CERTIFICATE-----Generated at Tue Jul 28 21:54:28 2026 by rpki-client