$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: vbbdgtgf0MWZo056IqSOBxD/mX6YTmFL6pmlVzMPu4Y= Subject key identifier: 10:23:5A:A2:B3:78:75:19:F4:32:B2:53:4E:B1:A6:7E:4C:5B:BF:3E Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 0129 Signing time: Thu 23 Jul 2026 07:21:35 +0000 Manifest this update: Thu 23 Jul 2026 07:21:35 +0000 Manifest next update: Thu 30 Jul 2026 07:21:35 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: smD7RFZoaD6qP7Jr6TYxn9CZ3N49/PvtfHZbAz7J7xE=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: QYBewwq2Jnoq3XiFtkZ6uq7GsNeS7PlzqiYcUXNMoXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Jul 23 07:21:35 2026 GMT Not After : Jul 30 07:21:35 2026 GMT Subject: CN=6a61c0ff-6c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:3e:49:95:d6:89:4f:f2:d1:86:a2:31:d9: f9:ea:67:6a:f5:b5:20:ac:81:c8:3e:06:78:6d:df: 36:85:a4:47:71:f9:1a:ed:2c:8d:2d:f1:36:ba:7d: 35:48:d4:07:39:77:7c:7a:35:ec:b2:99:39:8e:2c: 68:eb:c9:74:cf:8b:37:92:8e:84:8d:68:b0:5a:f6: b8:90:15:0f:97:34:d9:5a:32:2c:2f:4a:cb:1f:80: f0:c7:da:f4:a0:dd:cc:c1:85:1e:b5:f7:4b:37:96: 64:64:9a:36:d4:ce:af:44:14:bb:83:fa:d5:f2:d0: 0b:1c:e7:bb:ec:b6:51:7f:cc:5c:a9:56:b2:06:b2: 56:9b:11:b6:3c:bc:0d:46:14:69:d0:c4:18:85:aa: 61:4f:66:eb:ba:7a:95:a5:a8:0b:cd:e4:a9:0c:29: bf:ee:8a:ae:76:3f:d5:e9:69:43:91:65:f8:ea:a6: 7e:5a:0f:a5:d3:53:5e:c1:ff:16:83:ce:22:81:b9: 27:22:63:87:fa:9b:07:54:f3:f2:07:04:3b:93:9f: 3f:89:65:b5:4c:18:02:04:18:ee:70:ca:a1:86:1e: 4b:01:a0:a7:0a:a7:4d:65:bd:ba:73:e5:7a:f5:a9: 0e:f9:34:87:81:5b:90:1f:88:37:61:7b:e7:85:65: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:23:5A:A2:B3:78:75:19:F4:32:B2:53:4E:B1:A6:7E:4C:5B:BF:3E X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7d:68:f5:8a:f7:bc:5f:19:12:d7:e6:2f:17:d6:5b:c2:43: d4:b7:4d:be:4b:28:b6:c9:2c:09:51:d6:54:eb:b5:7f:dd:be: 64:5a:61:47:1a:33:29:53:d7:1c:38:5f:08:cb:25:38:ac:08: 21:61:40:d1:85:3e:5d:5f:69:e6:98:85:be:a9:b0:9f:a5:89: 61:36:95:26:f8:a5:f3:be:92:c1:75:9d:fb:ab:8a:a1:ec:7b: 64:c7:5f:72:e7:3b:3f:e7:b4:97:f7:86:84:9d:1d:c6:84:d9: 27:4a:6a:d8:13:6c:01:2c:cf:4d:fd:f3:c7:03:1f:79:e3:60: 1e:3f:25:41:b5:7a:da:52:55:7c:d1:7e:1c:2b:ee:ef:d5:e5: 46:41:0f:ce:0f:72:35:ad:67:d1:d1:90:12:80:d2:68:a0:db: 20:4d:aa:eb:85:20:d9:3e:5c:b6:5b:38:3f:52:7b:c3:5f:f4: c4:58:71:57:26:c3:d3:8a:ab:b6:c2:ad:55:4b:f6:1e:ac:72: 7f:1e:c1:07:9c:7b:5e:c7:24:8b:0a:10:8d:1f:03:50:3a:8c: 6e:91:09:16:80:2b:e5:9f:27:8a:5c:bb:52:d5:90:55:79:c7: 68:89:32:0f:c5:8c:1f:bd:88:4d:a3:79:60:41:3f:e4:7c:66: 20:c2:3a:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD QjA3M0RDNDUwHhcNMjYwNzIzMDcyMTM1WhcNMjYwNzMwMDcyMTM1WjAYMRYwFAYD VQQDEw02YTYxYzBmZi02YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbI+SZXWiU/y0YaiMdn56mdq9bUgrIHIPgZ4bd82haRHcfka7SyNLfE2un01 SNQHOXd8ejXsspk5jixo68l0z4s3ko6EjWiwWva4kBUPlzTZWjIsL0rLH4Dwx9r0 oN3MwYUetfdLN5ZkZJo21M6vRBS7g/rV8tALHOe77LZRf8xcqVayBrJWmxG2PLwN RhRp0MQYhaphT2brunqVpagLzeSpDCm/7oqudj/V6WlDkWX46qZ+Wg+l01Newf8W g84igbknImOH+psHVPPyBwQ7k58/iWW1TBgCBBjucMqhhh5LAaCnCqdNZb26c+V6 9akO+TSHgVuQH4g3YXvnhWUyDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAjWqKz eHUZ9DKyU06xpn5MW78+MB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj MzVLa2ZRVExkV3JMQnozRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgX1o9Yr3vF8ZEtfmLxfWW8JD1LdNvksotsksCVHWVOu1f92+ZFphRxozKVPX HDhfCMslOKwIIWFA0YU+XV9p5piFvqmwn6WJYTaVJvil876SwXWd+6uKoex7ZMdf cuc7P+e0l/eGhJ0dxoTZJ0pq2BNsASzPTf3zxwMfeeNgHj8lQbV62lJVfNF+HCvu 79XlRkEPzg9yNa1n0dGQEoDSaKDbIE2q64Ug2T5ctls4P1J7w1/0xFhxVybD04qr tsKtVUv2Hqxyfx7BB5x7XsckiwoQjR8DUDqMbpEJFoAr5Z8nily7UtWQVXnHaIky D8WMH72ITaN5YEE/5HxmIMI6hg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:06:42 2026 by rpki-client