$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: l3jES06tuSUPb1GofU3GqG48sSCnXva6PEvqgEXYn/o= Subject key identifier: 55:A4:1E:B8:16:5C:9C:16:B0:47:D1:48:2C:C9:AC:75:B8:DC:4D:E3 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 08AA Signing time: Tue 28 Jul 2026 20:57:14 +0000 Manifest this update: Tue 28 Jul 2026 20:57:14 +0000 Manifest next update: Tue 04 Aug 2026 20:57:14 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: qFZ0m95XiDoNaeylKRM4yMWE9pDbfpbcRfYtX9Qr1pE=) 2: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek=) 3: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=) 4: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Jul 28 20:57:14 2026 GMT Not After : Aug 4 20:57:14 2026 GMT Subject: CN=6a6917aa-e726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:92:4f:0c:65:86:84:1b:53:9e:66:79:83: a1:af:07:bf:a5:f9:82:0d:5f:19:76:06:4e:5f:d2: 21:75:55:17:67:e6:40:5d:f0:61:2e:49:15:f5:d7: 1b:a9:3f:38:dd:f3:3b:92:be:39:1f:09:de:4c:c4: b7:af:c5:0b:22:48:6b:45:43:37:62:90:d1:e5:13: 47:34:0a:e3:85:c3:d5:b2:1a:3c:86:d6:e9:5a:33: 11:86:23:8e:aa:37:f9:bb:28:28:89:7e:c7:cf:af: f8:5f:d1:a7:f4:09:70:fb:38:48:d4:f6:86:39:54: 85:6e:25:26:18:a9:73:1f:a3:ac:99:f4:8e:18:c4: 56:c4:2b:94:a2:0e:9f:f4:6e:4c:fd:fb:5e:70:ef: 60:75:27:77:03:67:b9:2a:21:09:e8:3b:1f:a1:8f: 0b:e4:60:19:b4:00:54:3c:d1:63:d2:84:8a:01:26: 6f:d9:c8:15:4a:24:e2:b9:40:70:e9:a1:fa:b8:df: 5a:11:e2:3d:a2:e4:8b:6f:5a:0b:5e:84:d1:91:7d: 1f:29:2c:ae:cb:91:fc:d2:98:dc:49:d0:b7:e5:05: 2a:c0:0f:f6:af:f3:6c:0d:7b:4b:3d:f7:b5:51:1a: 25:30:ec:f1:0f:a1:da:37:fc:bc:77:d4:af:2d:bc: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:1E:B8:16:5C:9C:16:B0:47:D1:48:2C:C9:AC:75:B8:DC:4D:E3 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5f:7d:10:3a:e4:b5:66:93:49:b1:79:b8:3d:65:19:58:e5: a5:3f:80:ab:58:79:8a:fd:3c:c0:45:dd:52:a5:69:7e:6f:50: 1b:d2:1e:3b:81:bd:1e:9e:a1:1a:81:94:a0:d7:25:0e:6d:a1: 25:44:aa:95:f7:7c:3c:77:c6:2f:d0:12:a9:8b:51:e1:25:57: 66:83:c5:60:90:10:e8:26:a6:f0:85:8f:89:6e:55:5c:20:86: c9:55:1e:ab:4a:76:f9:23:b0:6c:1a:3a:9e:8e:dc:98:94:12: 64:ac:b1:fe:93:24:ba:59:e1:7d:a4:3e:36:3c:52:84:d4:2c: 2c:7f:67:54:3f:16:84:32:b3:e9:38:c3:d8:4b:a1:6b:72:fe: 4f:13:17:af:d1:60:b0:51:34:b7:53:33:45:b6:58:0e:28:65: 68:14:bb:fa:8b:bd:32:02:ea:6b:0a:14:29:43:a4:13:e1:ac: c3:b6:c5:3a:97:54:56:a3:cf:5d:24:ec:e0:d3:50:5d:57:3b: cc:d1:4c:5f:2e:06:92:45:77:f6:43:64:38:8d:6a:07:70:eb: 38:7b:4f:04:d6:de:cb:bb:df:f2:1a:c8:78:26:47:23:9b:33: 55:3e:fe:4d:dc:ac:b6:41:ed:8b:55:a8:9d:75:c2:b8:5f:b4: 48:f2:3c:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwNzI4MjA1NzE0WhcNMjYwODA0MjA1NzE0WjAYMRYwFAYD VQQDEw02YTY5MTdhYS1lNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn++STwxlhoQbU55meYOhrwe/pfmCDV8ZdgZOX9IhdVUXZ+ZAXfBhLkkV9dcb qT843fM7kr45HwneTMS3r8ULIkhrRUM3YpDR5RNHNArjhcPVsho8htbpWjMRhiOO qjf5uygoiX7Hz6/4X9Gn9Alw+zhI1PaGOVSFbiUmGKlzH6OsmfSOGMRWxCuUog6f 9G5M/ftecO9gdSd3A2e5KiEJ6DsfoY8L5GAZtABUPNFj0oSKASZv2cgVSiTiuUBw 6aH6uN9aEeI9ouSLb1oLXoTRkX0fKSyuy5H80pjcSdC35QUqwA/2r/NsDXtLPfe1 URolMOzxD6HaN/y8d9SvLbyugQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWkHrgW XJwWsEfRSCzJrHW43E3jMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARl99EDrktWaTSbF5uD1lGVjlpT+Aq1h5iv08wEXdUqVpfm9QG9IeO4G9Hp6h GoGUoNclDm2hJUSqlfd8PHfGL9ASqYtR4SVXZoPFYJAQ6Cam8IWPiW5VXCCGyVUe q0p2+SOwbBo6no7cmJQSZKyx/pMkulnhfaQ+NjxShNQsLH9nVD8WhDKz6TjD2Euh a3L+TxMXr9FgsFE0t1MzRbZYDihlaBS7+ou9MgLqawoUKUOkE+Gsw7bFOpdUVqPP XSTs4NNQXVc7zNFMXy4GkkV39kNkOI1qB3DrOHtPBNbey7vf8hrIeCZHI5szVT7+ TdystkHti1WonXXCuF+0SPI89g== -----END CERTIFICATE-----Generated at Tue Jul 28 23:43:10 2026 by rpki-client