$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 3mBTmrhnHmXAgXpDNbXnFV2vOgAvYT2Iq8J3VdcnZ1w= Subject key identifier: 55:95:A4:AC:D9:EB:DD:F6:4B:65:20:BD:01:B7:09:D9:61:3E:D5:35 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A8C Signing time: Tue 28 Jul 2026 19:55:55 +0000 Manifest this update: Tue 28 Jul 2026 19:55:55 +0000 Manifest next update: Tue 04 Aug 2026 19:55:55 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: SjJ0/wvStLRVrGJYfqFKZVWTjEYFSX9cqXD/8K6jocY=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Jul 28 19:55:55 2026 GMT Not After : Aug 4 19:55:55 2026 GMT Subject: CN=6a69094b-7830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:04:e6:0f:01:72:cf:96:c3:a8:f7:82:f5: 18:dd:8e:3f:1f:09:90:ef:ea:12:ed:96:fd:4c:b4: 4b:c4:6e:1d:5f:ba:47:a3:5a:87:22:13:f5:bc:6e: a4:6d:f8:65:14:95:73:8a:95:06:ba:e1:42:08:f1: 0c:23:6b:2f:10:ff:e6:c9:2b:10:b7:08:a7:85:9a: 60:c9:fc:b7:ab:45:b8:bc:47:49:a1:19:82:f6:7d: eb:c0:5b:8e:4d:86:d8:b6:74:f2:be:30:f3:b0:1e: 63:e6:ea:3a:5a:4b:be:ef:48:a3:54:8e:29:cb:4c: 9b:e8:4e:c8:17:c6:09:f1:fb:a9:ab:00:3f:f8:9b: 1d:ca:9b:f5:8e:3b:b3:f9:ca:e6:70:d8:8c:3e:0c: 17:cf:fd:fe:8d:41:ea:e3:44:e5:83:87:9e:6f:d9: b9:2a:d3:7e:3b:95:4b:dc:8b:bf:a7:a8:56:65:e2: b4:75:bc:9e:c7:f3:eb:ab:24:04:21:29:e3:d8:9f: 22:5a:d5:33:da:29:ee:11:08:7e:b0:4d:3c:32:65: af:ae:83:e9:e8:f7:63:54:90:2b:ee:75:96:be:a3: 0c:77:4b:76:ac:e7:42:c5:76:98:ae:ce:7e:a2:65: 46:87:f2:59:a1:11:fc:27:7e:2c:45:86:93:84:5d: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:95:A4:AC:D9:EB:DD:F6:4B:65:20:BD:01:B7:09:D9:61:3E:D5:35 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5c:e6:da:85:15:e4:e1:f8:84:63:4b:a4:3f:98:63:71:24: 64:da:b2:5b:4e:4f:a2:b8:4b:99:16:15:d5:c9:13:7f:33:7c: c8:c9:18:38:37:6d:52:06:e5:06:47:b4:2d:e4:5b:6c:3f:36: 52:66:ea:b5:a7:33:63:5e:ae:ad:40:27:65:3f:d8:8c:54:e9: 4f:c4:a5:16:d8:63:85:78:1e:d9:69:70:24:df:b2:5a:f9:9e: 37:22:80:ff:89:27:5c:8d:85:37:fe:d9:36:21:a3:6c:36:4f: a8:ee:93:2c:84:8b:69:ec:85:29:e1:49:23:67:33:d0:57:b8: fe:9c:a1:d3:3b:ad:c9:36:92:f8:cb:d0:d7:12:67:34:f8:b2: e8:98:4b:9e:12:12:5d:51:81:71:cd:78:dd:ca:33:fa:58:3d: 3d:24:95:14:2e:db:93:37:6f:6a:8c:6e:d7:ea:74:c5:a7:24: e7:98:3e:c9:83:38:12:81:55:d7:63:22:c1:9c:7c:92:45:17: 94:10:61:ad:9e:26:8f:16:fc:94:4a:bd:86:fe:0a:15:e9:3e: 71:a0:f2:85:9a:39:b6:30:63:af:a1:73:2c:ae:e4:9c:0d:44: e6:5b:85:fc:d9:20:5b:ca:3a:a5:b5:e3:21:30:41:c5:b8:8c: 94:70:05:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwNzI4MTk1NTU1WhcNMjYwODA0MTk1NTU1WjAYMRYwFAYD VQQDEw02YTY5MDk0Yi03ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/ME5g8Bcs+Ww6j3gvUY3Y4/HwmQ7+oS7Zb9TLRLxG4dX7pHo1qHIhP1vG6k bfhlFJVzipUGuuFCCPEMI2svEP/mySsQtwinhZpgyfy3q0W4vEdJoRmC9n3rwFuO TYbYtnTyvjDzsB5j5uo6Wku+70ijVI4py0yb6E7IF8YJ8fupqwA/+Jsdypv1jjuz +crmcNiMPgwXz/3+jUHq40Tlg4eeb9m5KtN+O5VL3Iu/p6hWZeK0dbyex/PrqyQE ISnj2J8iWtUz2inuEQh+sE08MmWvroPp6PdjVJAr7nWWvqMMd0t2rOdCxXaYrs5+ omVGh/JZoRH8J34sRYaThF1f7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWVpKzZ 6932S2UgvQG3CdlhPtU1MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg1zm2oUV5OH4hGNLpD+YY3EkZNqyW05PorhLmRYV1ckTfzN8yMkYODdtUgbl Bke0LeRbbD82UmbqtaczY16urUAnZT/YjFTpT8SlFthjhXge2WlwJN+yWvmeNyKA /4knXI2FN/7ZNiGjbDZPqO6TLISLaeyFKeFJI2cz0Fe4/pyh0zutyTaS+MvQ1xJn NPiy6JhLnhISXVGBcc143coz+lg9PSSVFC7bkzdvaoxu1+p0xack55g+yYM4EoFV 12MiwZx8kkUXlBBhrZ4mjxb8lEq9hv4KFek+caDyhZo5tjBjr6FzLK7knA1E5luF /NkgW8o6pbXjITBBxbiMlHAFCA== -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:54 2026 by rpki-client