$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json) Hash identifier: 3dx1wchrBdQUcs4AlT/X+yosgSt1umLSZvLRBb0/EB0= Subject key identifier: 44:A5:5D:12:D5:26:6D:8A:77:3F:F1:5A:02:BA:BA:B4:AD:0B:3C:35 Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft Manifest number: 24 Signing time: Mon 27 Jul 2026 11:13:49 +0000 Manifest this update: Mon 27 Jul 2026 11:13:48 +0000 Manifest next update: Mon 03 Aug 2026 11:13:48 +0000 Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: ZpeF4avrJ9xjAANH1uORQ86uW+mckj+V11q4wsCZ2qU=) 2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Validity Not Before: Jul 27 11:13:48 2026 GMT Not After : Aug 3 11:13:48 2026 GMT Subject: CN=6a673d6d-f436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:fa:c9:56:29:44:c1:17:01:87:47:4d:1e: 10:24:b7:5e:b4:ed:1a:9b:33:13:08:2e:47:98:9e: 05:b4:bc:5b:6d:8a:f9:60:22:3a:12:e7:ec:6b:72: 07:71:e6:63:e5:a1:64:91:83:dc:9a:60:01:3d:60: 8c:08:ef:85:f9:a4:d1:75:8b:e6:5f:2c:6d:8f:78: e8:6b:86:fc:08:70:3b:7f:85:33:7b:5e:4f:da:91: 4f:8c:e5:54:a4:53:91:07:9c:ce:05:c7:bd:34:5e: 95:ba:4d:83:58:31:8f:8f:2f:ec:d1:37:a3:1f:6f: 49:db:a0:63:b1:d2:cc:cf:0d:e0:cd:52:f5:81:7b: bf:6a:4d:89:f0:5b:11:87:2d:62:3c:37:03:51:46: f1:91:53:1b:9c:fa:3f:93:d2:a7:26:33:d2:71:d0: 44:9a:19:38:5b:a1:6b:dc:e1:be:61:d7:42:8a:6b: 6d:ed:ee:aa:0a:d5:15:c4:33:2b:91:da:9a:41:e7: 88:68:48:6f:cf:1d:77:bb:fa:b1:0f:01:54:94:49: 78:29:22:56:9f:9d:57:0e:b6:71:63:da:31:6e:76: 30:dd:03:e8:fa:0d:1b:72:ff:d3:1b:33:11:37:8d: 6f:b0:3e:18:49:bd:55:ba:b7:ba:d2:12:19:e1:8d: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A5:5D:12:D5:26:6D:8A:77:3F:F1:5A:02:BA:BA:B4:AD:0B:3C:35 X509v3 Authority Key Identifier: keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d8:e2:c9:02:59:68:b9:27:c2:4c:70:d2:11:95:c2:3d:f9: 21:59:8f:79:36:f2:52:dc:67:56:88:c9:60:83:b5:d8:5d:0d: 2c:86:3f:09:35:0d:ee:96:9d:01:90:4c:8f:25:0b:fe:d8:b0: a5:2a:29:f7:58:40:bd:87:b8:1b:b3:0f:2d:75:92:cc:54:b1: 05:ee:5f:83:ec:d1:73:2a:c5:df:78:e8:b3:6e:dc:8a:10:df: bf:b9:d1:e4:0c:13:e1:28:a7:70:51:f3:da:4c:02:cb:ce:46: 41:cc:6d:cc:07:ca:bc:3c:5d:20:31:db:5d:b2:33:00:96:13: 4f:82:eb:51:63:df:87:ad:54:9c:56:d3:2b:83:94:50:de:c4: ab:f0:3a:9d:e1:11:23:1c:8b:17:72:94:5f:30:b1:07:25:79: 7a:50:d4:ba:0a:a2:fc:7a:49:0c:f5:fb:88:dd:09:61:54:31: fd:10:5d:46:eb:58:45:09:21:d5:0a:6b:29:37:2c:1c:64:fa: fb:0c:b5:01:51:36:80:56:69:8e:67:33:28:8d:ee:d4:f9:3f: 2f:35:2c:c4:0f:9a:c2:f8:cd:75:0a:3b:02:a2:af:a6:9b:1a: 98:a1:e4:38:d0:3f:4e:fd:46:91:ac:70:fb:8d:28:32:11:1c: 74:31:bd:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVBMTExMC8GA1UEBRMoRjFBNDYxMkEwNkUxMEVGNUJEOTYzMTczRUMyNjUzOEI3 RDQwMzczNjAeFw0yNjA3MjcxMTEzNDhaFw0yNjA4MDMxMTEzNDhaMBgxFjAUBgNV BAMTDTZhNjczZDZkLWY0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoCfrJVilEwRcBh0dNHhAkt1607RqbMxMILkeYngW0vFttivlgIjoS5+xrcgdx 5mPloWSRg9yaYAE9YIwI74X5pNF1i+ZfLG2PeOhrhvwIcDt/hTN7Xk/akU+M5VSk U5EHnM4Fx700XpW6TYNYMY+PL+zRN6Mfb0nboGOx0szPDeDNUvWBe79qTYnwWxGH LWI8NwNRRvGRUxuc+j+T0qcmM9Jx0ESaGThboWvc4b5h10KKa23t7qoK1RXEMyuR 2ppB54hoSG/PHXe7+rEPAVSUSXgpIlafnVcOtnFj2jFudjDdA+j6DRty/9MbMxE3 jW+wPhhJvVW6t7rSEhnhjWDTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURKVdEtUm bYp3P/FaArq6tK0LPDUwHwYDVR0jBBgwFoAU8aRhKgbhDvW9ljFz7CZTi31ANzYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0U3MTM5OEM2NTRF NTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZXOWxqRno3Q1pUaTMxQU56 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGFSaEtnYmhEdlc5bGpGejdDWlRpMzFBTnpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RUExL0U3MTM5OEM2NTRFNTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZX OWxqRno3Q1pUaTMxQU56WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAr2OLJAllouSfCTHDSEZXCPfkhWY95NvJS3GdWiMlgg7XYXQ0shj8JNQ3ulp0B kEyPJQv+2LClKin3WEC9h7gbsw8tdZLMVLEF7l+D7NFzKsXfeOizbtyKEN+/udHk DBPhKKdwUfPaTALLzkZBzG3MB8q8PF0gMdtdsjMAlhNPgutRY9+HrVScVtMrg5RQ 3sSr8Dqd4REjHIsXcpRfMLEHJXl6UNS6CqL8ekkM9fuI3QlhVDH9EF1G61hFCSHV CmspNywcZPr7DLUBUTaAVmmOZzMoje7U+T8vNSzED5rC+M11CjsCoq+mmxqYoeQ4 0D9O/UaRrHD7jSgyERx0Mb2v -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:30 2026 by rpki-client