$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: 5pV5Q8lOzXGBHCzBQHrfd+n57sVV3z2QEa20GBpRS6w= Subject key identifier: 36:03:0C:B1:D6:A8:31:55:8F:B0:DD:7D:84:2C:27:4C:5D:8B:65:0B Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 068C Signing time: Sun 26 Jul 2026 23:20:10 +0000 Manifest this update: Sun 26 Jul 2026 23:20:10 +0000 Manifest next update: Sun 02 Aug 2026 23:20:10 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: sSjJxse5BJ4X+Bk+Cvty3yti3shhByKFyeI5mLPdZIU=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: 0DdKz2dwlNQQLlFEjcuZMVHNGtOylU4qbdsXKkCH924=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Jul 26 23:20:10 2026 GMT Not After : Aug 2 23:20:10 2026 GMT Subject: CN=6a66962a-36d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c3:07:f3:cf:4e:03:f0:4c:c6:39:33:86:46: 8d:36:89:08:6f:c2:fa:ed:8f:a7:53:9b:f6:c0:aa: 84:fd:e3:60:60:66:66:1f:1c:2e:8f:56:14:67:c1: fc:8b:02:9d:6f:56:8d:f8:f8:b9:9a:da:20:61:33: 31:55:56:7b:58:40:6b:4d:c6:d8:df:a1:e4:53:02: a9:6a:85:b2:05:fd:8d:c4:5b:07:32:72:34:a6:28: ad:47:bc:14:73:56:88:36:9e:31:3a:83:c6:55:ed: 0c:6e:ee:cb:06:07:a4:c1:b9:ef:8b:2a:e6:76:8b: 07:08:be:04:e9:9c:15:06:07:af:a8:6e:07:69:eb: 3f:83:d7:f9:fd:f1:0a:ee:b9:1c:96:87:eb:d5:07: 30:d1:83:91:b0:6e:e9:b9:0f:8b:19:25:da:c4:9f: 7d:76:b2:c6:a4:1d:b5:2b:ad:b2:3d:00:b2:7f:a8: 03:4e:82:b3:47:19:09:31:40:fe:92:e1:b6:60:87: 3b:7c:bc:7e:e1:e6:1d:a2:28:0a:3d:15:db:c4:b1: 13:82:1b:0e:b8:09:07:0e:a8:bf:02:4a:fc:d6:da: 30:13:e9:c4:3c:38:ec:0c:6a:4a:78:56:30:ab:36: 40:96:99:95:2d:67:2d:f1:c3:b7:f1:52:ca:57:58: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:0C:B1:D6:A8:31:55:8F:B0:DD:7D:84:2C:27:4C:5D:8B:65:0B X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:68:72:c0:fa:46:7e:1e:6c:aa:3d:5e:0c:31:f9:57:90:2c: 5c:0f:34:c9:6e:24:f5:ae:4c:3d:b9:7f:77:42:3d:67:20:bb: eb:a8:af:2b:66:7c:78:ab:07:a7:17:07:6a:87:ee:7a:a6:d6: a0:72:82:63:50:ae:f8:c3:b4:ca:12:63:31:9f:c0:e3:c2:fe: a3:d5:a1:0b:5f:8c:93:cd:ad:7d:b5:6d:46:11:94:a5:fb:68: b3:0a:18:af:38:7a:ca:d2:65:de:b1:7e:92:7d:fc:09:fc:88: aa:e1:58:4d:5a:d5:11:99:5e:97:bb:20:ba:d1:8e:5a:18:cb: f5:5e:d1:ad:78:13:cc:bc:68:86:7d:00:cb:fa:e5:91:7d:3a: 9b:20:75:46:93:20:c8:4d:0c:95:2a:49:fd:b6:b5:e0:58:f6: ed:b1:ff:56:89:bb:71:36:ab:07:4a:e9:b3:1e:4c:a9:f7:c5: 49:9c:15:2d:8c:6e:66:3a:40:03:9e:a9:50:a9:fa:f8:59:5c: 3c:1c:59:04:13:20:0d:b3:33:b4:9a:a0:41:5e:a0:94:78:f9: ae:bc:53:db:7a:b2:4a:00:19:a7:24:b3:e5:24:40:63:cc:88: ab:f3:e0:39:73:81:52:25:63:0d:61:3f:d6:54:30:d2:2e:58: 32:b7:bf:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjYwNzI2MjMyMDEwWhcNMjYwODAyMjMyMDEwWjAYMRYwFAYD VQQDEw02YTY2OTYyYS0zNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28MH889OA/BMxjkzhkaNNokIb8L67Y+nU5v2wKqE/eNgYGZmHxwuj1YUZ8H8 iwKdb1aN+Pi5mtogYTMxVVZ7WEBrTcbY36HkUwKpaoWyBf2NxFsHMnI0piitR7wU c1aINp4xOoPGVe0Mbu7LBgekwbnviyrmdosHCL4E6ZwVBgevqG4Haes/g9f5/fEK 7rkclofr1Qcw0YORsG7puQ+LGSXaxJ99drLGpB21K62yPQCyf6gDToKzRxkJMUD+ kuG2YIc7fLx+4eYdoigKPRXbxLETghsOuAkHDqi/Akr81towE+nEPDjsDGpKeFYw qzZAlpmVLWct8cO38VLKV1hm8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYDDLHW qDFVj7DdfYQsJ0xdi2ULMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmhywPpGfh5sqj1eDDH5V5AsXA80yW4k9a5MPbl/d0I9ZyC766ivK2Z8eKsH pxcHaofueqbWoHKCY1Cu+MO0yhJjMZ/A48L+o9WhC1+Mk82tfbVtRhGUpftoswoY rzh6ytJl3rF+kn38CfyIquFYTVrVEZlel7sgutGOWhjL9V7RrXgTzLxohn0Ay/rl kX06myB1RpMgyE0MlSpJ/ba14Fj27bH/Vom7cTarB0rpsx5MqffFSZwVLYxuZjpA A56pUKn6+FlcPBxZBBMgDbMztJqgQV6glHj5rrxT23qySgAZpySz5SRAY8yIq/Pg OXOBUiVjDWE/1lQw0i5YMre/qw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:13 2026 by rpki-client