$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: 1Nt8aH3Wh4qqdzmExNTGKQnOG0niiybUKA3oe7YDfpE= Subject key identifier: A2:0A:70:AE:87:CE:75:10:3A:93:7A:69:84:01:06:39:77:76:A7:FC Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 0685 Signing time: Tue 28 Jul 2026 23:08:16 +0000 Manifest this update: Tue 28 Jul 2026 23:08:16 +0000 Manifest next update: Tue 04 Aug 2026 23:08:16 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: GwELweaGWnV7MrLw3f1sD3qD/nz/1/Q2n1V3md+TIF0=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: xrF9iYxFLm8QoyPwPp1CEUu5X+bl6oRWL8LFw8EK9r8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Jul 28 23:08:16 2026 GMT Not After : Aug 4 23:08:16 2026 GMT Subject: CN=6a693660-daf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:66:b2:f8:bb:c0:99:15:47:f7:d2:0a:ea: 19:88:cd:ed:a0:ba:de:1b:dd:81:91:46:c3:f2:f1: cd:f5:88:be:42:99:04:c4:18:eb:13:72:07:19:75: 19:11:44:40:2a:2e:ca:76:e5:30:1d:10:08:b9:9e: df:65:d3:da:c2:42:fb:14:08:21:67:9b:fa:34:51: 8b:8d:6b:38:34:2f:d7:9b:a6:b5:5f:ed:65:20:5d: 70:05:80:a8:28:11:f6:7e:48:0e:54:f1:8a:77:1f: 15:55:d9:fa:64:4d:d3:72:b5:bb:7d:70:bf:3e:f8: e3:02:bf:66:2c:c3:81:7f:f2:7d:64:0c:33:04:d2: 1f:30:ec:0d:d2:3a:01:f7:9a:19:b3:aa:0f:ce:0a: aa:87:4c:ab:04:bd:81:c4:72:23:6c:1e:44:fb:8b: b1:8d:9d:de:14:e0:03:76:89:ba:83:b1:ea:f1:b7: 09:b8:59:60:84:8b:58:e6:02:2e:50:ec:2c:d5:85: c0:9b:9e:28:ee:51:06:1c:72:5b:c1:00:07:7c:e5: b0:75:f7:2a:e6:60:3b:db:05:22:8b:7d:81:24:56: 8e:df:17:5f:ee:0c:07:2b:cf:3a:ac:a9:3f:2a:31: e3:e0:04:33:67:5e:79:5c:07:32:fd:f0:04:7c:20: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:70:AE:87:CE:75:10:3A:93:7A:69:84:01:06:39:77:76:A7:FC X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e7:e2:dd:c4:b9:38:b3:31:be:55:42:c7:27:32:ac:ab:dd: 7b:a9:b8:f6:6d:e5:72:1a:42:69:88:2d:da:ce:2d:aa:d5:b5: e2:01:d2:aa:0d:21:d3:6d:58:8a:41:c5:8e:14:28:54:8a:3c: d1:31:1d:8a:1a:6f:dc:9b:36:7f:f7:3a:30:a0:a6:87:c3:61: 41:66:f0:2f:e6:55:73:43:f6:69:a4:9a:2b:a9:83:90:a9:61: b7:2d:af:5c:be:2c:66:37:40:1c:45:72:d4:4c:99:ad:c7:34: 28:cc:3c:ca:3c:74:6c:3f:14:1e:1d:64:30:e5:8d:2e:32:4a: 09:ac:36:76:c2:25:14:ad:6a:6c:b1:c5:28:26:38:6c:c7:7c: b3:f0:21:92:af:31:2d:6a:b7:ac:55:96:9c:d6:7b:48:d5:2d: 6d:fa:a7:84:c4:22:bd:c5:39:ad:3c:6e:09:6e:6a:6b:aa:e6: 26:de:96:cc:a5:ba:ac:9e:44:cb:0e:6e:df:39:ab:e5:14:54: 04:18:70:57:e1:fb:3c:62:e7:c5:e7:d5:85:ca:06:cd:3b:1c: 13:c0:8a:64:d7:50:ca:25:20:40:33:88:fe:b1:6c:42:ec:cb: 64:e6:e9:2b:ba:55:41:f0:24:41:54:33:55:90:be:57:59:0f: 93:17:65:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjYwNzI4MjMwODE2WhcNMjYwODA0MjMwODE2WjAYMRYwFAYD VQQDEw02YTY5MzY2MC1kYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjhmsvi7wJkVR/fSCuoZiM3toLreG92BkUbD8vHN9Yi+QpkExBjrE3IHGXUZ EURAKi7KduUwHRAIuZ7fZdPawkL7FAghZ5v6NFGLjWs4NC/Xm6a1X+1lIF1wBYCo KBH2fkgOVPGKdx8VVdn6ZE3TcrW7fXC/PvjjAr9mLMOBf/J9ZAwzBNIfMOwN0joB 95oZs6oPzgqqh0yrBL2BxHIjbB5E+4uxjZ3eFOADdom6g7Hq8bcJuFlghItY5gIu UOws1YXAm54o7lEGHHJbwQAHfOWwdfcq5mA72wUii32BJFaO3xdf7gwHK886rKk/ KjHj4AQzZ155XAcy/fAEfCD2QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIKcK6H znUQOpN6aYQBBjl3dqf8MB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfefi3cS5OLMxvlVCxycyrKvde6m49m3lchpCaYgt2s4tqtW14gHSqg0h021Y ikHFjhQoVIo80TEdihpv3Js2f/c6MKCmh8NhQWbwL+ZVc0P2aaSaK6mDkKlhty2v XL4sZjdAHEVy1EyZrcc0KMw8yjx0bD8UHh1kMOWNLjJKCaw2dsIlFK1qbLHFKCY4 bMd8s/Ahkq8xLWq3rFWWnNZ7SNUtbfqnhMQivcU5rTxuCW5qa6rmJt6WzKW6rJ5E yw5u3zmr5RRUBBhwV+H7PGLnxefVhcoGzTscE8CKZNdQyiUgQDOI/rFsQuzLZObp K7pVQfAkQVQzVZC+V1kPkxdlnA== -----END CERTIFICATE-----Generated at Wed Jul 29 16:10:28 2026 by rpki-client