$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: PCLmGGGLhL28wj75RA0ZRFMKnNsJ6d2lqzk7ic9PWak= Subject key identifier: 79:3C:20:7C:FC:07:84:52:71:96:63:8D:D2:F9:F1:06:F2:B3:27:06 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0D8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0D85 Signing time: Tue 28 Jul 2026 18:04:23 +0000 Manifest this update: Tue 28 Jul 2026 18:04:23 +0000 Manifest next update: Tue 04 Aug 2026 18:04:23 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: QayYtgJZkj4wR8EwIMTOYNt/g64RgSTLIe/UPVfA7mo=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Jul 28 18:04:23 2026 GMT Not After : Aug 4 18:04:23 2026 GMT Subject: CN=6a68ef27-80ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:bd:6b:09:c9:86:a2:8b:28:51:b0:a6:f6: 59:a2:fd:0e:4d:bb:32:2a:66:4f:ab:4c:e6:14:47: 4d:14:9f:b0:3f:9a:e4:b5:04:37:51:2c:c9:58:38: c0:33:79:58:c5:48:c6:f4:26:7e:03:1e:17:a4:a8: 05:b9:9f:99:c7:f3:d4:b0:e9:d4:d3:7c:dd:6a:25: bf:bb:ba:67:a0:97:f8:6e:8a:c1:f3:94:8b:6c:92: 2f:6d:2d:88:a6:50:d6:c2:06:a9:c9:6f:4a:c1:f4: fc:d5:c5:97:42:80:2a:ea:42:39:75:8d:1c:2a:e3: 7a:41:48:4f:06:3c:36:99:02:ba:4d:40:85:c0:d6: ac:ff:c9:00:cf:fb:dc:a1:2f:65:35:af:2e:42:e5: b0:58:0e:9a:ec:64:4c:5e:3f:82:20:a5:cb:35:88: df:f6:46:e5:01:57:07:74:b8:e2:ff:fa:28:ab:d4: 91:d3:88:25:98:57:df:77:9f:8c:1c:06:5e:d1:3a: c5:b9:d9:5d:b0:04:ec:4e:83:db:89:5d:19:62:70: 11:3a:ad:28:39:7b:cc:66:72:a4:ee:cd:14:bc:7a: 43:4c:e0:cd:bf:c1:55:f7:2e:f2:d6:18:b6:93:e4: 09:ed:d6:e4:4f:55:ad:35:09:6f:bc:14:5f:81:52: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3C:20:7C:FC:07:84:52:71:96:63:8D:D2:F9:F1:06:F2:B3:27:06 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a2:04:ad:f9:3a:86:bc:b5:dd:05:22:95:49:c3:65:d4:d7: 3d:e8:01:4d:17:3d:0a:48:8a:10:93:59:48:7d:dc:69:1f:d9: 52:59:b3:1b:b5:16:64:c7:3e:ac:36:87:bc:81:11:1a:bf:e0: 18:03:ae:66:db:46:c5:59:4c:0b:d6:f5:58:88:ea:2d:73:68: 9d:76:91:4f:2b:1f:5c:48:db:1a:38:df:d6:53:c8:90:fa:74: d2:dc:4d:f7:d6:c4:66:13:b8:e3:0c:1b:79:4e:6a:0b:66:22: c5:aa:4b:d9:e7:2d:70:b2:18:fa:4b:8a:21:f0:f6:e9:a7:02: 47:a9:fd:2b:f6:ab:b8:6c:2e:73:c7:dc:c8:0c:64:00:7c:2d: 67:28:8f:de:3e:5a:df:35:a5:96:6d:6a:42:37:7a:1f:a8:33: 1c:2b:9c:1d:4b:91:5d:fb:e6:7f:be:4e:99:d7:97:5b:21:87: 4d:49:69:1f:29:d7:fc:fe:00:ed:95:4f:7b:4c:f4:9a:47:b0: 35:4b:29:ad:d4:59:79:ba:8b:75:2a:84:27:3f:af:6d:e5:8b: 88:f9:e0:f4:b3:1d:3c:97:c8:90:1c:26:ff:1a:85:53:19:83: 4f:c3:09:59:0d:fe:dc:02:1c:6c:13:02:80:12:9e:39:7e:7e: ef:2c:b3:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjYwNzI4MTgwNDIzWhcNMjYwODA0MTgwNDIzWjAYMRYwFAYD VQQDEw02YTY4ZWYyNy04MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3q9awnJhqKLKFGwpvZZov0OTbsyKmZPq0zmFEdNFJ+wP5rktQQ3USzJWDjA M3lYxUjG9CZ+Ax4XpKgFuZ+Zx/PUsOnU03zdaiW/u7pnoJf4borB85SLbJIvbS2I plDWwgapyW9KwfT81cWXQoAq6kI5dY0cKuN6QUhPBjw2mQK6TUCFwNas/8kAz/vc oS9lNa8uQuWwWA6a7GRMXj+CIKXLNYjf9kblAVcHdLji//ooq9SR04glmFffd5+M HAZe0TrFudldsATsToPbiV0ZYnAROq0oOXvMZnKk7s0UvHpDTODNv8FV9y7y1hi2 k+QJ7dbkT1WtNQlvvBRfgVLUrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk8IHz8 B4RScZZjjdL58QbysycGMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqIErfk6hry13QUilUnDZdTXPegBTRc9CkiKEJNZSH3caR/ZUlmzG7UWZMc+ rDaHvIERGr/gGAOuZttGxVlMC9b1WIjqLXNonXaRTysfXEjbGjjf1lPIkPp00txN 99bEZhO44wwbeU5qC2YixapL2ectcLIY+kuKIfD26acCR6n9K/aruGwuc8fcyAxk AHwtZyiP3j5a3zWllm1qQjd6H6gzHCucHUuRXfvmf75OmdeXWyGHTUlpHynX/P4A 7ZVPe0z0mkewNUsprdRZebqLdSqEJz+vbeWLiPng9LMdPJfIkBwm/xqFUxmDT8MJ WQ3+3AIcbBMCgBKeOX5+7yyzkg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:53:06 2026 by rpki-client