$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: HrnsjUp6bRs3xoynsFVwlk1WidKeHgqlct6vUgmdpJw= Subject key identifier: 69:1A:24:28:61:28:B1:B4:76:E8:6E:07:C8:43:13:B7:13:E6:46:F9 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 27A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2717 Signing time: Wed 22 Jul 2026 15:46:13 +0000 Manifest this update: Wed 22 Jul 2026 15:46:12 +0000 Manifest next update: Wed 29 Jul 2026 15:46:12 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: OYpM2MgwbT6kB/AhPxxqx1KSMEmoXe3kSlGC7oStPYg=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=) 3: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 8bcJT2SUfJvBhjjxVcOLkV67/1UHWnWs/wyeZ8062Mk=) 4: 8ZyB5Nc2gIY5ylh7rhnl6Cy2gbw.asa (hash: +Pjl1MLAprkwiqwhT673Q9jFse4Elz7TYi7+ZiBgGbI=) 5: 9qAcg6cCriNo_EL5rFif8L2qvyQ.asa (hash: GDoXzuebgCv+n7JB5o6wM41UcS8TK2ToFJTNzWZ7MQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10148 (0x27a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Jul 22 15:46:12 2026 GMT Not After : Jul 29 15:46:12 2026 GMT Subject: CN=6a60e5c5-b2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:2e:07:97:04:69:b1:38:a0:26:59:ec:b4: 9b:20:06:e4:85:00:f4:8d:6e:e7:6a:20:ba:a4:fd: 94:2f:d5:cb:87:49:a1:78:1a:b3:a2:8f:a9:82:10: dc:d8:61:ea:15:34:10:dc:ba:12:c1:54:1e:94:d8: d1:81:43:a3:0e:fe:83:2c:26:ba:93:10:65:bd:a5: 01:f9:d1:25:74:ae:16:11:60:1c:a2:f4:ee:fa:f3: cc:af:53:80:82:9e:2b:98:2e:34:36:00:c7:41:e8: 58:e5:be:71:45:15:3b:9a:3b:c0:fb:d6:29:d0:52: e2:52:31:33:74:34:fe:0b:4f:9a:68:e1:ef:f0:3c: 5f:be:ce:ae:c7:31:2d:41:3f:93:32:d0:1f:1f:ef: 6e:57:9b:d8:df:d7:0a:6c:91:9d:dc:ee:24:a2:5d: e9:a4:6a:b3:02:00:79:05:89:dc:71:8a:d2:a6:a9: 81:01:9e:c9:ae:c4:90:22:5d:9c:29:15:e0:88:fa: 75:eb:0b:b7:d4:b0:4d:04:31:ce:6a:c9:6e:2d:cf: a0:86:1e:59:29:31:ef:9d:21:f6:26:77:8d:94:5b: f0:b5:b1:95:b7:3d:c0:1c:70:b8:a1:67:d0:f8:0c: 68:fe:4e:77:6d:11:03:7a:27:8a:7b:d8:03:42:ef: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:24:28:61:28:B1:B4:76:E8:6E:07:C8:43:13:B7:13:E6:46:F9 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0d:cc:da:38:1c:e7:47:0f:6a:3c:ed:28:7f:69:25:85:53: 11:57:5b:8e:c4:c9:75:76:cb:b4:7f:0c:4a:20:11:2f:59:d0: 8a:b6:c2:30:4a:f3:0e:0f:e8:34:77:f5:3e:de:b3:81:9e:04: 4c:f2:b5:92:9d:96:c2:ca:a0:7a:48:72:2c:bc:19:78:6a:a1: 77:4a:89:1d:b7:4a:1f:ea:c8:9a:31:fa:a5:e9:1e:02:e9:58: 4b:9b:89:3d:75:b5:d9:49:a2:80:66:ed:ca:5d:a3:ef:26:a1: db:09:9e:25:8e:f1:ea:1f:b0:5d:56:e3:6a:48:ae:0a:d5:56: c7:77:2c:36:04:92:75:d0:f5:ad:f6:96:69:6b:c6:be:9f:f8: fc:82:74:8c:d2:1a:72:8e:62:be:b8:d1:eb:17:36:35:cf:fa: 72:a0:57:a6:1d:37:1a:02:a0:fe:62:32:b7:dc:23:a8:14:4c: e3:93:95:31:f4:d3:f4:dc:cc:99:6a:47:7b:d1:7a:c7:49:4b: ef:92:0c:a4:96:f3:39:e0:3b:7f:f4:a7:29:e3:93:df:63:c8: b1:0f:df:a2:cf:4c:9e:df:e3:2d:b7:ad:ab:ff:9f:8b:cc:30: ca:16:b5:43:f3:4a:b8:be:f5:25:b9:d5:dd:ab:b1:50:e5:02: 38:00:82:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjYwNzIyMTU0NjEyWhcNMjYwNzI5MTU0NjEyWjAYMRYwFAYD VQQDEw02YTYwZTVjNS1iMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+YuB5cEabE4oCZZ7LSbIAbkhQD0jW7naiC6pP2UL9XLh0mheBqzoo+pghDc 2GHqFTQQ3LoSwVQelNjRgUOjDv6DLCa6kxBlvaUB+dEldK4WEWAcovTu+vPMr1OA gp4rmC40NgDHQehY5b5xRRU7mjvA+9Yp0FLiUjEzdDT+C0+aaOHv8Dxfvs6uxzEt QT+TMtAfH+9uV5vY39cKbJGd3O4kol3ppGqzAgB5BYnccYrSpqmBAZ7JrsSQIl2c KRXgiPp16wu31LBNBDHOasluLc+ghh5ZKTHvnSH2JneNlFvwtbGVtz3AHHC4oWfQ +Axo/k53bREDeieKe9gDQu/RxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkaJChh KLG0duhuB8hDE7cT5kb5MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZw3M2jgc50cPajztKH9pJYVTEVdbjsTJdXbLtH8MSiARL1nQirbCMErzDg/o NHf1Pt6zgZ4ETPK1kp2WwsqgekhyLLwZeGqhd0qJHbdKH+rImjH6pekeAulYS5uJ PXW12UmigGbtyl2j7yah2wmeJY7x6h+wXVbjakiuCtVWx3csNgSSddD1rfaWaWvG vp/4/IJ0jNIaco5ivrjR6xc2Nc/6cqBXph03GgKg/mIyt9wjqBRM45OVMfTT9NzM mWpHe9F6x0lL75IMpJbzOeA7f/SnKeOT32PIsQ/fos9Mnt/jLbetq/+fi8wwyha1 Q/NKuL71JbnV3auxUOUCOACCsg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:44:25 2026 by rpki-client