$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: fARf6Sd4l1a1hcgx8Qj+GT89FBGmDVLpuuyZzh8EF9E= Subject key identifier: 4E:FC:86:3D:0D:7C:A2:99:8B:4D:89:6B:6A:1F:B8:C2:51:C0:50:82 Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 47 Signing time: Mon 27 Jul 2026 10:43:54 +0000 Manifest this update: Mon 27 Jul 2026 10:43:53 +0000 Manifest next update: Mon 03 Aug 2026 10:43:53 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: V+ic+b5BzyFFdC60yh3ZvJ89cK8ILDbPARtS5r8KYSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Jul 27 10:43:53 2026 GMT Not After : Aug 3 10:43:53 2026 GMT Subject: CN=6a67366a-6cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:fb:33:f6:24:3c:db:b0:d2:c6:78:d8:49: 7c:a2:97:db:13:59:6c:d2:20:c7:dd:57:cf:f0:55: 6f:c5:e0:ba:c7:36:8d:ec:08:03:9a:e3:0a:07:92: 71:ce:24:af:45:02:11:7d:9f:9a:b0:f2:db:11:2c: c8:81:e1:dd:ee:c3:ab:49:34:eb:64:08:0c:7f:d8: 9b:ef:47:17:a3:e3:01:3e:e3:51:d6:b4:34:7f:ad: f3:61:51:ba:36:99:18:96:6b:cf:ec:d7:9a:96:c6: e9:67:ae:c7:c2:0b:cd:ae:b0:ce:28:11:bd:94:44: 94:df:73:3b:5a:a2:3e:19:22:2b:8e:9a:78:74:4b: 44:21:13:a2:85:eb:70:52:41:f6:77:bf:91:c9:46: 69:af:fd:2b:31:33:24:2f:07:8b:83:e2:01:65:2f: 62:8c:0d:9d:a9:b6:c3:ca:41:95:3f:1a:ac:37:76: 27:ed:e6:ff:0d:45:7b:38:8a:28:c7:83:be:69:54: 06:3a:1c:66:7c:66:fd:e5:12:a9:49:58:80:5b:b9: de:01:aa:9b:42:07:17:13:c8:52:30:e5:b3:17:52: 3a:71:c1:fb:ec:67:8c:e2:56:be:b1:56:b7:b1:84: a8:f9:64:a0:3a:7c:4b:c8:ab:ad:b3:00:fd:70:98: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:86:3D:0D:7C:A2:99:8B:4D:89:6B:6A:1F:B8:C2:51:C0:50:82 X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:33:f1:e2:72:85:0b:c3:9b:d3:bc:81:0e:43:82:95:e1:cd: 9b:9a:64:13:15:08:d2:03:48:fa:97:cd:7f:77:9b:a2:05:b4: cf:67:57:60:c6:7e:0b:92:e5:08:d6:30:04:a0:87:ef:40:bc: cb:ec:fc:47:2d:69:a4:a6:81:23:5b:25:64:f9:0d:e5:32:a5: 09:51:83:5d:0f:1f:e4:bd:66:09:57:1c:8d:c8:2e:5f:fa:37: f3:77:a4:00:9e:9f:7c:ce:cd:7f:28:54:4e:28:b6:7c:d8:83: 13:1b:c1:28:be:a4:0e:88:1e:ab:ae:69:51:71:08:2a:5e:7f: 57:90:12:49:91:11:b6:69:8f:11:01:18:fc:54:6f:36:4c:87: 0b:bf:fb:91:5d:40:07:37:fd:15:37:1f:8a:21:7f:d6:06:7f: d2:9b:b8:bc:a8:c1:86:1a:80:ec:3c:b6:6d:e8:18:55:37:e5: 0e:e1:2e:22:0f:3c:2f:30:60:ea:f3:bd:d0:47:55:53:5e:53: 53:69:21:d7:d8:8c:3c:cd:8f:4b:f0:49:52:1e:31:a5:cb:aa: 10:c0:42:24:96:f5:c4:a3:1e:96:cd:62:6f:dd:2a:04:38:ab: 83:3d:04:3e:e6:15:66:b8:8d:90:e6:b1:b0:04:17:42:ed:f2: 8d:2b:ba:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA3MjcxMDQzNTNaFw0yNjA4MDMxMDQzNTNaMBgxFjAUBgNV BAMTDTZhNjczNjZhLTZjZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjsPsz9iQ827DSxnjYSXyil9sTWWzSIMfdV8/wVW/F4LrHNo3sCAOa4woHknHO JK9FAhF9n5qw8tsRLMiB4d3uw6tJNOtkCAx/2JvvRxej4wE+41HWtDR/rfNhUbo2 mRiWa8/s15qWxulnrsfCC82usM4oEb2URJTfcztaoj4ZIiuOmnh0S0QhE6KF63BS QfZ3v5HJRmmv/SsxMyQvB4uD4gFlL2KMDZ2ptsPKQZU/Gqw3dift5v8NRXs4iijH g75pVAY6HGZ8Zv3lEqlJWIBbud4BqptCBxcTyFIw5bMXUjpxwfvsZ4ziVr6xVrex hKj5ZKA6fEvIq62zAP1wmDfBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTvyGPQ18 opmLTYlrah+4wlHAUIIwHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBlM/HicoULw5vTvIEOQ4KV4c2bmmQTFQjSA0j6l81/d5uiBbTPZ1dgxn4LkuUI 1jAEoIfvQLzL7PxHLWmkpoEjWyVk+Q3lMqUJUYNdDx/kvWYJVxyNyC5f+jfzd6QA np98zs1/KFROKLZ82IMTG8EovqQOiB6rrmlRcQgqXn9XkBJJkRG2aY8RARj8VG82 TIcLv/uRXUAHN/0VNx+KIX/WBn/Sm7i8qMGGGoDsPLZt6BhVN+UO4S4iDzwvMGDq 873QR1VTXlNTaSHX2Iw8zY9L8ElSHjGly6oQwEIklvXEox6WzWJv3SoEOKuDPQQ+ 5hVmuI2Q5rGwBBdC7fKNK7p0 -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:13 2026 by rpki-client