$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: XBsKxXS0OzZ/QPG19b90WEf9JEJ6a9+OyCtu80mvqe0= Subject key identifier: B6:52:38:06:8C:BA:0F:C5:D7:C2:60:D5:F5:FB:45:CF:A0:15:01:E1 Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 3571 Signing time: Wed 22 Jul 2026 15:22:13 +0000 Manifest this update: Wed 22 Jul 2026 15:22:13 +0000 Manifest next update: Wed 29 Jul 2026 15:22:13 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: Ofx7btcOu/OKoeUSPxTpa7R39yMmtzsFqEZmESqXkQk=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: naU1L3sA/vwcpXLmBU/QE/974IoqN32UsdXdqlCcaP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Jul 22 15:22:13 2026 GMT Not After : Jul 29 15:22:13 2026 GMT Subject: CN=6a60e025-caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:ee:ee:02:7d:c6:cd:2a:4a:34:e1:06:6e: 77:41:17:0f:cd:12:a4:dd:c1:50:cb:aa:e7:60:22: 69:3c:03:bf:14:a2:85:2e:cb:6d:b1:74:3d:ab:a5: 20:9f:9c:df:f3:2b:b1:cd:3d:21:42:b3:5e:ef:60: 48:5b:bc:aa:24:7f:75:f6:82:9a:b0:df:55:fe:9c: cd:4e:f7:f2:79:40:d4:3d:90:55:a8:9c:0b:13:5b: 43:cd:7b:c1:d9:36:20:95:02:fe:62:84:87:25:01: da:28:33:52:e0:3b:e2:67:ff:92:16:f7:f2:0b:d7: c6:b7:24:ea:37:09:cb:f5:b1:b7:19:91:4e:ad:67: be:89:53:9d:05:61:8d:3b:82:e7:33:f4:ad:29:78: ac:92:b1:51:98:44:bd:89:dc:82:3b:56:39:52:bf: 3b:79:0d:ee:31:e5:8b:e8:6a:83:df:b8:de:a6:3b: 5e:8f:e7:0a:c0:7d:83:d0:f2:d3:7e:55:0c:e1:c7: bb:d6:a2:41:e7:24:0c:bc:7d:5a:75:27:32:cf:8d: 5d:cd:af:c7:e0:95:68:4a:6f:38:97:ca:2a:53:48: 10:e9:19:21:f5:40:08:26:ee:6d:d6:33:30:2c:57: fe:a6:7e:c0:9d:96:aa:1e:fb:ba:5a:c9:99:37:6d: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:52:38:06:8C:BA:0F:C5:D7:C2:60:D5:F5:FB:45:CF:A0:15:01:E1 X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:da:bf:a6:00:fd:f7:67:7d:55:20:f3:8f:47:c6:3c:89:fd: e3:98:ac:4c:43:18:15:66:67:7d:e7:13:34:95:5a:d6:82:52: f7:cf:33:2d:69:8c:3a:a8:70:4d:3a:5e:a3:d6:47:25:39:62: ec:ea:6a:a1:72:13:6a:3d:b1:e6:cc:a3:04:fb:a4:1c:99:79: e5:f0:bd:1c:dd:e3:58:ac:40:3c:34:a7:12:cb:3e:20:ac:5c: 6f:f3:3a:43:30:56:43:f6:38:3f:47:f7:ba:b7:70:e8:d8:58: 70:a0:3f:a7:75:c5:9a:5a:1b:69:44:de:3a:fc:fd:7d:90:27: a7:2f:a6:bf:c0:4b:9f:f0:f2:cd:fb:ca:1d:9c:d3:8b:7b:0b: a2:93:0e:da:c0:e9:4e:0a:8c:fb:5b:6b:04:80:aa:6f:5b:97: ff:67:d7:33:f4:12:9a:49:b9:7d:ca:ef:c7:b2:30:5a:32:df: 40:af:78:c2:97:92:0f:9f:c5:b1:9c:38:dc:52:37:6d:90:c8: 4d:be:a6:a0:9a:39:15:1f:5d:e6:44:d8:80:8c:df:1e:b6:7a: 03:10:64:4e:a3:d0:e2:8a:70:15:a8:12:62:87:9d:31:aa:6d: ed:ee:64:70:a8:94:9b:b5:a7:2e:de:ad:5f:c6:c9:1a:d7:99: d9:ce:72:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjYwNzIyMTUyMjEzWhcNMjYwNzI5MTUyMjEzWjAYMRYwFAYD VQQDEw02YTYwZTAyNS1jYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkZnu7gJ9xs0qSjThBm53QRcPzRKk3cFQy6rnYCJpPAO/FKKFLsttsXQ9q6Ug n5zf8yuxzT0hQrNe72BIW7yqJH919oKasN9V/pzNTvfyeUDUPZBVqJwLE1tDzXvB 2TYglQL+YoSHJQHaKDNS4DviZ/+SFvfyC9fGtyTqNwnL9bG3GZFOrWe+iVOdBWGN O4LnM/StKXiskrFRmES9idyCO1Y5Ur87eQ3uMeWL6GqD37jepjtej+cKwH2D0PLT flUM4ce71qJB5yQMvH1adScyz41dza/H4JVoSm84l8oqU0gQ6Rkh9UAIJu5t1jMw LFf+pn7AnZaqHvu6WsmZN20knwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZSOAaM ug/F18Jg1fX7Rc+gFQHhMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYNq/pgD992d9VSDzj0fGPIn945isTEMYFWZnfecTNJVa1oJS988zLWmMOqhw TTpeo9ZHJTli7OpqoXITaj2x5syjBPukHJl55fC9HN3jWKxAPDSnEss+IKxcb/M6 QzBWQ/Y4P0f3urdw6NhYcKA/p3XFmlobaUTeOvz9fZAnpy+mv8BLn/DyzfvKHZzT i3sLopMO2sDpTgqM+1trBICqb1uX/2fXM/QSmkm5fcrvx7IwWjLfQK94wpeSD5/F sZw43FI3bZDITb6moJo5FR9d5kTYgIzfHrZ6AxBkTqPQ4opwFagSYoedMapt7e5k cKiUm7WnLt6tX8bJGteZ2c5y5Q== -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:18 2026 by rpki-client