$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: qY1mMHeLnbddbYP1TQcBqqXo7yjLQng7F3SKUmf2+hU= Subject key identifier: 76:00:E4:0B:2A:0A:98:F5:32:76:3C:A0:64:8A:AE:5E:7A:0D:39:A7 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0972 Signing time: Wed 22 Jul 2026 20:31:03 +0000 Manifest this update: Wed 22 Jul 2026 20:31:02 +0000 Manifest next update: Wed 29 Jul 2026 20:31:02 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: WdKMiIieoNtXL42owQwnCxP30BYxXMaMiju9VeIiudA=) 2: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: P0LfgNEy7CqKh9pIHhj4qcJ24rvxzx8Qqj45ZPVVKg0=) 3: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: ul9W/1RlUrao2bUQHEAmxw4LEk3UxsOyixNynrFr2rQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Jul 22 20:31:02 2026 GMT Not After : Jul 29 20:31:02 2026 GMT Subject: CN=6a612887-558f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8f:a5:24:3b:ed:fe:59:6f:41:e3:70:5d:de: d9:0d:30:98:a3:ef:34:d3:0e:45:fd:17:b9:3d:47: 66:92:0a:07:3c:c5:40:d1:3b:56:ac:8b:96:e5:76: f3:4d:98:0d:dd:4d:38:ea:43:b4:4b:52:30:23:7b: 7c:7c:28:64:19:b1:2e:2d:d9:78:5e:ae:03:ea:7e: 2c:19:f3:70:5c:d3:4e:30:6e:71:a1:1e:1d:65:b7: 32:ee:dc:0a:16:14:a9:d4:91:54:c1:96:af:55:f5: 8d:cc:e6:bc:38:dc:17:84:36:e9:17:50:89:8d:ce: 05:b9:02:9a:1a:44:a7:db:e5:70:2d:7e:d7:d9:eb: 90:27:e0:87:82:81:ca:72:4a:29:aa:7f:bb:00:48: 8f:78:13:9b:22:7e:6d:3f:49:c8:c0:62:e0:78:f6: ed:cc:96:a4:cd:2b:09:c2:9b:51:71:86:62:5c:a5: 97:cd:69:e2:31:df:42:c0:a4:59:9e:bd:85:69:2f: fa:0e:62:d0:78:b0:75:4e:49:83:ce:e8:98:83:eb: 05:98:e2:fd:a0:e0:06:c4:31:f9:7b:f3:aa:42:bd: 43:57:9d:14:8a:4b:58:c7:74:0f:c1:33:40:84:3c: 50:4c:35:b4:9a:f0:0a:d9:59:36:4b:2b:b6:af:3a: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:E4:0B:2A:0A:98:F5:32:76:3C:A0:64:8A:AE:5E:7A:0D:39:A7 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a6:88:79:68:a6:93:98:c3:07:e3:37:20:85:a5:6f:62:83: aa:cb:75:98:c8:0e:77:a9:3e:04:05:8b:e8:ad:76:f2:58:c1: 98:5d:58:fb:d2:7f:6f:06:d6:3f:9c:00:d8:15:c7:fa:17:f0: ce:2d:e1:1e:a6:38:c3:ed:99:48:e8:bf:b2:bb:dc:43:91:99: a1:1d:f1:09:91:a6:67:9f:0e:ee:7a:08:ef:c0:3d:d9:e1:1c: b6:22:c2:cf:0a:ac:03:00:a4:c9:d6:90:d7:d5:60:e5:7f:6f: 05:f8:99:a4:8a:91:59:7c:eb:e0:c3:1d:b1:3e:29:46:03:8f: ab:23:4d:b8:76:27:14:70:57:11:e0:3a:ef:5d:9f:b7:bf:d0: d5:df:38:8c:d1:3a:0a:7d:f1:65:a6:4b:5a:14:b1:c0:e7:ce: be:c5:41:9b:17:56:79:6d:08:75:38:d6:fe:da:e1:a4:61:f7: 25:64:7c:50:ba:60:81:f1:e7:3d:ae:dd:3d:dd:1c:91:4b:c6: ec:2a:bf:c4:61:9b:b1:56:02:02:20:e9:84:cb:d3:ba:0d:6b: dd:44:83:6d:d3:13:06:7b:57:ab:cf:8e:43:8f:31:ed:cb:d0: 14:85:ec:6c:a7:65:9b:3d:6d:e7:3e:d3:70:89:a6:13:6b:ee: dc:f3:f9:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjYwNzIyMjAzMTAyWhcNMjYwNzI5MjAzMTAyWjAYMRYwFAYD VQQDEw02YTYxMjg4Ny01NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Y+lJDvt/llvQeNwXd7ZDTCYo+800w5F/Re5PUdmkgoHPMVA0TtWrIuW5Xbz TZgN3U046kO0S1IwI3t8fChkGbEuLdl4Xq4D6n4sGfNwXNNOMG5xoR4dZbcy7twK FhSp1JFUwZavVfWNzOa8ONwXhDbpF1CJjc4FuQKaGkSn2+VwLX7X2euQJ+CHgoHK ckopqn+7AEiPeBObIn5tP0nIwGLgePbtzJakzSsJwptRcYZiXKWXzWniMd9CwKRZ nr2FaS/6DmLQeLB1TkmDzuiYg+sFmOL9oOAGxDH5e/OqQr1DV50UiktYx3QPwTNA hDxQTDW0mvAK2Vk2Syu2rzpT5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYA5Asq Cpj1MnY8oGSKrl56DTmnMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPqaIeWimk5jDB+M3IIWlb2KDqst1mMgOd6k+BAWL6K128ljBmF1Y+9J/bwbW P5wA2BXH+hfwzi3hHqY4w+2ZSOi/srvcQ5GZoR3xCZGmZ58O7noI78A92eEctiLC zwqsAwCkydaQ19Vg5X9vBfiZpIqRWXzr4MMdsT4pRgOPqyNNuHYnFHBXEeA6712f t7/Q1d84jNE6Cn3xZaZLWhSxwOfOvsVBmxdWeW0IdTjW/trhpGH3JWR8ULpggfHn Pa7dPd0ckUvG7Cq/xGGbsVYCAiDphMvTug1r3USDbdMTBntXq8+OQ48x7cvQFIXs bKdlmz1t5z7TcImmE2vu3PP5nA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:51 2026 by rpki-client