$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: PgxFx7gsKXVApL3zb7hSQMPRckHdETe8SWEjVgehGeU= Subject key identifier: 25:DF:2F:1D:29:E3:C9:60:19:8F:B6:BE:0E:78:FA:68:0A:64:B4:A0 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0ED3 Signing time: Tue 28 Jul 2026 17:49:57 +0000 Manifest this update: Tue 28 Jul 2026 17:49:57 +0000 Manifest next update: Tue 04 Aug 2026 17:49:57 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: 9ejaiDNX0BIb9RA4pw/mWuw4FOLuba+9SIJKEFcMq4o=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3823 (0xeef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Jul 28 17:49:57 2026 GMT Not After : Aug 4 17:49:57 2026 GMT Subject: CN=6a68ebc5-a6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:b0:9b:b9:07:72:05:d4:69:a6:57:21:b3: ca:4f:0e:28:ef:29:37:7b:ba:90:98:68:c3:26:37: 64:b2:85:ec:56:4a:5e:d9:fb:ac:92:cd:68:4a:74: 18:88:0b:c7:5f:2f:48:28:9f:15:c7:68:49:fa:ab: 1e:67:45:ff:2e:00:16:85:56:7d:0d:8c:3d:c4:ee: 02:9c:08:c7:c7:7c:31:4f:8b:78:da:b2:10:44:3d: 05:8f:6b:45:0d:ce:33:7c:94:df:ad:7b:3b:e2:a0: f0:83:75:9e:c7:f2:fd:37:69:7e:92:d6:92:36:4b: 1d:0d:82:73:20:77:80:a7:ab:21:3b:6d:30:d8:73: 86:48:4b:94:59:ef:a9:dd:bc:d2:e3:4a:f1:7f:99: 47:2f:64:3a:88:fa:9c:54:34:f3:c5:8d:c1:82:00: 64:1f:57:a5:61:55:48:0b:04:69:1a:ec:21:fb:0e: c3:f4:be:50:93:ea:b9:c6:31:3e:92:ff:dc:30:76: a2:8b:bf:cc:60:48:cd:f1:33:8f:56:49:d1:c9:3c: 8b:aa:5c:06:94:11:4f:40:f3:80:be:b9:b9:b0:46: 69:d6:e4:b0:5a:bb:42:36:f5:f4:54:39:f6:50:04: 2a:a5:3d:39:dc:05:8c:5c:a1:dd:d6:1b:cc:03:11: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:2F:1D:29:E3:C9:60:19:8F:B6:BE:0E:78:FA:68:0A:64:B4:A0 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:4d:fd:c4:80:8c:3d:a0:7a:25:7f:52:8e:61:e5:c9:a2: 22:42:7a:07:0d:97:e0:75:40:75:4a:2a:2d:5f:78:99:22:00: 63:40:c2:00:df:7c:48:91:c9:6d:54:1f:94:33:74:b3:da:48: d3:52:94:8d:2a:bf:1d:bb:27:75:5b:95:cb:b6:58:03:81:62: f8:6c:0c:15:e9:0e:bf:6f:b8:08:d0:18:38:f7:3c:96:3b:dc: 8e:ce:dd:34:b7:c3:0a:d2:20:9d:9c:cb:50:4d:5f:8e:5b:9f: a8:23:95:c8:83:74:b1:65:d9:2c:ac:d7:61:6e:25:a6:75:e6: ac:ea:da:5a:3e:e0:13:45:19:2c:47:9c:57:71:2d:5a:81:0d: 4a:bf:c8:fc:e8:27:62:e7:e2:ad:32:54:5f:48:7e:1f:67:8c: e5:41:c1:10:d0:b6:72:bb:ec:ec:c3:1b:4d:de:f7:b4:5f:18: 86:04:79:bb:22:b9:56:ab:a6:d6:8b:ed:97:b7:e0:73:6d:33: 1a:78:0b:b4:fb:38:16:fd:b4:1e:1e:75:3c:36:e6:b7:cd:44: f1:d0:f0:16:e3:1b:f1:9b:2a:4e:ca:47:82:af:ec:9a:bd:a4: 71:4a:f1:a6:33:64:49:03:13:a0:a0:c0:2c:f0:47:aa:7e:75: 38:94:4d:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwNzI4MTc0OTU3WhcNMjYwODA0MTc0OTU3WjAYMRYwFAYD VQQDEw02YTY4ZWJjNS1hNmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11mwm7kHcgXUaaZXIbPKTw4o7yk3e7qQmGjDJjdksoXsVkpe2fusks1oSnQY iAvHXy9IKJ8Vx2hJ+qseZ0X/LgAWhVZ9DYw9xO4CnAjHx3wxT4t42rIQRD0Fj2tF Dc4zfJTfrXs74qDwg3Wex/L9N2l+ktaSNksdDYJzIHeAp6shO20w2HOGSEuUWe+p 3bzS40rxf5lHL2Q6iPqcVDTzxY3BggBkH1elYVVICwRpGuwh+w7D9L5Qk+q5xjE+ kv/cMHaii7/MYEjN8TOPVknRyTyLqlwGlBFPQPOAvrm5sEZp1uSwWrtCNvX0VDn2 UAQqpT053AWMXKHd1hvMAxG1AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXfLx0p 48lgGY+2vg54+mgKZLSgMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABU5N/cSAjD2geiV/Uo5h5cmiIkJ6Bw2X4HVAdUoqLV94mSIAY0DCAN98SJHJ bVQflDN0s9pI01KUjSq/HbsndVuVy7ZYA4Fi+GwMFekOv2+4CNAYOPc8ljvcjs7d NLfDCtIgnZzLUE1fjlufqCOVyIN0sWXZLKzXYW4lpnXmrOraWj7gE0UZLEecV3Et WoENSr/I/OgnYufirTJUX0h+H2eM5UHBENC2crvs7MMbTd73tF8YhgR5uyK5Vqum 1ovtl7fgc20zGngLtPs4Fv20Hh51PDbmt81E8dDwFuMb8ZsqTspHgq/smr2kcUrx pjNkSQMToKDALPBHqn51OJRN2w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:45 2026 by rpki-client