$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: B38RH9/JQToxrmtZDVduVWMlBmBLDtQMx7BU/9w9OKQ= Subject key identifier: 7E:44:FB:2B:02:E1:B0:9A:50:E7:39:42:8E:88:DC:AE:45:CC:F5:73 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0EC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0EB8 Signing time: Tue 28 Jul 2026 17:49:29 +0000 Manifest this update: Tue 28 Jul 2026 17:49:28 +0000 Manifest next update: Tue 04 Aug 2026 17:49:28 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: c9duJT/AsHYB+KQ5vEZ/3U2lY8io+U83XvTp27MuX/s=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: nJme4FS5TjDqEzw/rX+GR8DJngobRbIcTTRzcDy5qYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3776 (0xec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Jul 28 17:49:28 2026 GMT Not After : Aug 4 17:49:28 2026 GMT Subject: CN=6a68eba9-7dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:65:22:71:dc:48:7f:80:91:8e:be:71:2f: bb:4d:56:2b:4c:0c:a9:26:01:34:e2:44:ce:64:ea: 75:8c:bb:d9:98:79:f9:b4:ef:63:4e:1d:31:ae:92: 16:c5:58:29:c6:16:1c:47:38:4b:b6:08:49:8f:0a: be:e1:ad:4d:da:bb:1b:54:80:ff:98:23:32:f0:27: 47:9c:a6:87:14:5d:99:c7:49:82:00:ff:9c:00:c1: 85:10:87:46:13:92:9f:4a:a7:76:28:bf:be:ec:33: 5c:13:a2:3b:67:84:59:22:5b:88:54:89:ed:dc:8d: aa:21:14:a4:b5:8f:61:8d:b5:8f:d0:6b:e6:1d:8f: 05:63:d0:7f:93:0d:09:3d:66:55:bc:1f:37:44:62: 29:28:d2:c7:55:64:20:9a:aa:b6:0f:50:12:b8:a6: ff:cd:86:94:9a:e9:ce:e7:c5:fc:23:85:ed:09:7d: b5:59:b6:35:f2:94:ab:d4:6c:11:ac:14:46:6c:be: 8c:d0:d1:8a:00:95:68:43:7f:e2:bd:42:b2:1c:63: 09:3d:4f:ef:9d:55:55:24:11:ca:20:58:08:1a:0d: 27:e8:fa:7a:9c:9a:81:6c:f5:02:b6:42:81:76:79: de:0b:11:dc:a0:a8:ef:ec:b1:88:23:ca:55:49:9b: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:44:FB:2B:02:E1:B0:9A:50:E7:39:42:8E:88:DC:AE:45:CC:F5:73 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:34:ac:60:35:5d:14:d7:6e:00:1b:7b:31:e0:54:ca:b3:a3: d3:f0:d3:23:31:2b:72:ff:f5:d3:8b:04:b6:48:02:2b:15:05: 0e:aa:d0:cf:e5:98:8b:d1:2f:31:e5:59:f9:02:82:3d:e3:cf: e5:1e:eb:ab:7a:66:32:43:6e:31:55:c4:90:0c:61:fa:af:0e: 17:56:3c:59:56:7e:00:2b:30:ca:8d:e8:b9:bb:55:f8:3f:71: 97:38:b9:1e:31:13:58:46:cb:1d:5f:2b:c6:aa:f6:17:55:c0: c5:d6:c2:8a:0c:00:37:f0:6b:28:f8:2d:42:db:84:6e:70:fe: 49:be:61:e8:20:79:14:0b:fa:07:c8:24:43:4d:3f:24:fa:a3: a5:8e:ac:37:74:96:51:96:3c:f4:18:3e:11:58:ba:1f:5b:fe: 5f:65:6d:b8:f2:c1:54:4b:a6:b6:95:e0:fe:b4:c8:06:d7:3b: 08:af:1c:22:e9:c4:bf:f5:4e:49:3a:8f:6f:1c:c1:92:f4:24: a7:c3:a7:99:74:28:13:bd:23:ef:d7:cb:46:37:de:d1:71:24: da:7e:01:1b:65:7d:b5:d7:d3:35:aa:c3:8e:c8:23:af:e8:b1: cb:d5:40:fd:73:ea:9d:d7:d6:63:d7:a8:52:cc:3d:74:75:45: 04:d4:cc:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjYwNzI4MTc0OTI4WhcNMjYwODA0MTc0OTI4WjAYMRYwFAYD VQQDEw02YTY4ZWJhOS03ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHVlInHcSH+AkY6+cS+7TVYrTAypJgE04kTOZOp1jLvZmHn5tO9jTh0xrpIW xVgpxhYcRzhLtghJjwq+4a1N2rsbVID/mCMy8CdHnKaHFF2Zx0mCAP+cAMGFEIdG E5KfSqd2KL++7DNcE6I7Z4RZIluIVInt3I2qIRSktY9hjbWP0GvmHY8FY9B/kw0J PWZVvB83RGIpKNLHVWQgmqq2D1ASuKb/zYaUmunO58X8I4XtCX21WbY18pSr1GwR rBRGbL6M0NGKAJVoQ3/ivUKyHGMJPU/vnVVVJBHKIFgIGg0n6Pp6nJqBbPUCtkKB dnneCxHcoKjv7LGII8pVSZvEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5E+ysC 4bCaUOc5Qo6I3K5FzPVzMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVjSsYDVdFNduABt7MeBUyrOj0/DTIzErcv/104sEtkgCKxUFDqrQz+WYi9Ev MeVZ+QKCPePP5R7rq3pmMkNuMVXEkAxh+q8OF1Y8WVZ+ACswyo3oubtV+D9xlzi5 HjETWEbLHV8rxqr2F1XAxdbCigwAN/BrKPgtQtuEbnD+Sb5h6CB5FAv6B8gkQ00/ JPqjpY6sN3SWUZY89Bg+EVi6H1v+X2VtuPLBVEumtpXg/rTIBtc7CK8cIunEv/VO STqPbxzBkvQkp8OnmXQoE70j79fLRjfe0XEk2n4BG2V9tdfTNarDjsgjr+ixy9VA /XPqndfWY9eoUsw9dHVFBNTM7g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:05:27 2026 by rpki-client