$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: 7vjLkNztWiNO+0L3WmDlXIkCFQNYJamYrUlWJj1nbHQ= Subject key identifier: EC:D4:6D:6B:3A:09:B0:38:80:E7:A3:F6:EE:AE:C4:2B:DC:D9:96:2A Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E11 Signing time: Tue 28 Jul 2026 17:59:19 +0000 Manifest this update: Tue 28 Jul 2026 17:59:19 +0000 Manifest next update: Tue 04 Aug 2026 17:59:19 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: zEN5IBilrvh9lAxRfcCsoGJwzC9u6psPCads50vfqfA=) 2: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) 3: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Jul 28 17:59:19 2026 GMT Not After : Aug 4 17:59:19 2026 GMT Subject: CN=6a68edf7-0dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:5a:ce:43:c9:ca:96:15:73:1e:15:b5:24: fa:3a:f8:d8:2c:45:91:e9:d8:a7:5d:15:e1:0a:28: e4:1d:33:10:f3:76:91:a7:f6:6c:af:cc:ff:bd:af: 86:ef:e2:5f:4c:69:ab:42:5b:3f:d7:45:0e:e6:ac: 5a:ff:c1:87:25:4d:f1:53:2d:fd:04:11:97:50:70: d3:3e:9b:96:ee:b0:c1:9a:d8:3e:4d:af:a1:53:21: b7:fe:72:5b:97:ef:26:d0:ba:42:45:f6:59:5c:7e: e2:2a:73:25:f5:8f:b1:07:2a:64:22:ea:36:37:80: 9b:2c:2d:e4:b8:af:72:64:00:66:ad:fd:8b:45:63: 8b:d2:e9:77:73:fc:14:5c:b3:1c:9f:07:09:3b:e5: 1e:7b:d9:de:1b:9a:e9:54:f1:6f:5d:c1:c4:7b:f9: 03:66:84:65:0c:d8:3b:b2:4e:77:d8:56:3a:40:58: 37:34:8a:26:40:19:93:fa:63:ff:3d:09:bc:e2:46: 54:85:8c:28:19:05:bd:81:5c:9b:87:f2:a6:e6:dd: ee:30:46:bb:2f:eb:0c:2a:09:8d:10:38:22:3c:d9: 81:3e:0f:f9:96:96:d6:41:26:8f:0c:df:68:21:33: b7:43:4d:1d:e5:93:e7:36:53:0e:39:b9:cf:c7:df: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D4:6D:6B:3A:09:B0:38:80:E7:A3:F6:EE:AE:C4:2B:DC:D9:96:2A X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:00:82:23:a6:23:56:11:c3:a0:8d:dd:41:b5:99:4b:99:71: 4e:a1:02:c4:9e:ac:99:5a:94:52:d3:14:28:c4:f2:b9:91:b9: ee:46:85:7b:f3:03:19:ac:1d:24:b0:f2:b3:78:d1:61:d2:4f: 07:01:9c:53:e1:88:b8:ce:9e:58:af:11:65:54:9a:4c:5b:ba: 5c:2f:6d:6c:02:d5:84:81:4e:de:af:22:d9:8f:8d:8d:41:f9: 06:f8:14:48:1f:60:c9:41:ba:15:c6:53:2f:b3:65:ca:ed:c4: f9:26:3f:bc:24:71:80:17:c7:0b:62:d3:b2:2e:f9:73:85:95: e5:c7:3d:18:bf:0a:27:50:49:65:92:83:f1:33:88:e6:e9:31: 33:75:55:c6:f7:b4:27:d4:c6:0e:0d:b4:91:c0:83:ee:ec:b5: 06:30:1c:a4:b8:3f:f7:4c:ca:49:d0:0b:20:84:c5:09:74:a7: 86:96:7e:6b:9c:bc:be:a4:67:97:56:7a:a5:81:6b:ea:65:4a: ee:14:a9:dc:05:d1:71:9f:58:ab:0e:39:dc:dc:30:a0:2b:01: 86:d5:df:d4:a4:b9:38:79:68:24:f8:71:b6:09:86:79:31:3e: 58:0b:77:96:ea:7a:7a:03:23:07:c2:fd:16:67:e0:ed:d8:6b: 9d:24:33:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYwNzI4MTc1OTE5WhcNMjYwODA0MTc1OTE5WjAYMRYwFAYD VQQDEw02YTY4ZWRmNy0wZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr69azkPJypYVcx4VtST6OvjYLEWR6dinXRXhCijkHTMQ83aRp/Zsr8z/va+G 7+JfTGmrQls/10UO5qxa/8GHJU3xUy39BBGXUHDTPpuW7rDBmtg+Ta+hUyG3/nJb l+8m0LpCRfZZXH7iKnMl9Y+xBypkIuo2N4CbLC3kuK9yZABmrf2LRWOL0ul3c/wU XLMcnwcJO+Uee9neG5rpVPFvXcHEe/kDZoRlDNg7sk532FY6QFg3NIomQBmT+mP/ PQm84kZUhYwoGQW9gVybh/Km5t3uMEa7L+sMKgmNEDgiPNmBPg/5lpbWQSaPDN9o ITO3Q00d5ZPnNlMOObnPx9/KjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzUbWs6 CbA4gOej9u6uxCvc2ZYqMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUgCCI6YjVhHDoI3dQbWZS5lxTqECxJ6smVqUUtMUKMTyuZG57kaFe/MDGawd JLDys3jRYdJPBwGcU+GIuM6eWK8RZVSaTFu6XC9tbALVhIFO3q8i2Y+NjUH5BvgU SB9gyUG6FcZTL7Nlyu3E+SY/vCRxgBfHC2LTsi75c4WV5cc9GL8KJ1BJZZKD8TOI 5ukxM3VVxve0J9TGDg20kcCD7uy1BjAcpLg/90zKSdALIITFCXSnhpZ+a5y8vqRn l1Z6pYFr6mVK7hSp3AXRcZ9Yqw453NwwoCsBhtXf1KS5OHloJPhxtgmGeTE+WAt3 lup6egMjB8L9Fmfg7dhrnSQzbg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:14:55 2026 by rpki-client