$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: AKj+vsaSDu8G4jpwzZWXXT3IAko5U9Zq5DwgDMk65eI= Subject key identifier: 72:1E:66:82:ED:5B:42:14:05:2B:CF:8A:3B:32:14:A7:40:63:F6:6D Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 08A7 Signing time: Wed 22 Jul 2026 21:03:39 +0000 Manifest this update: Wed 22 Jul 2026 21:03:39 +0000 Manifest next update: Wed 29 Jul 2026 21:03:39 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: XLVN5Wg7SJ/mqqnL1HF1vcA2oD5RiV+8e8hgcqDtCPM=) 2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=) 3: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=) 4: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Jul 22 21:03:39 2026 GMT Not After : Jul 29 21:03:39 2026 GMT Subject: CN=6a61302b-a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:f4:fe:33:bf:02:4a:b7:3d:2d:b2:6f:b0: 11:96:32:ed:2c:51:2c:5b:83:e2:11:9c:2e:74:fe: 81:10:0e:34:fc:f4:aa:23:ce:18:bc:6a:50:9b:1a: fc:22:3a:ca:76:f8:02:df:13:05:81:c9:d6:27:80: 12:5c:da:62:86:bf:b4:44:d3:65:c6:07:77:4d:11: d5:33:ed:90:bb:b7:0f:00:ec:57:50:b1:4a:57:5e: 4f:de:5b:d2:78:fc:08:2e:87:59:7d:9a:a2:82:ae: f9:a6:e5:7c:6a:97:4b:16:e3:3a:4d:68:27:23:98: fc:97:1b:a9:36:70:d1:fb:e1:47:c4:98:25:f8:32: bd:70:a8:58:26:68:67:b3:d9:f9:04:68:6f:d9:3d: ae:f2:3e:c7:91:6f:ce:86:79:0f:97:22:21:0a:52: 98:e0:93:78:f3:7f:d2:fa:05:9b:18:a3:30:a1:9b: 14:89:0f:f4:e3:c3:5a:d0:ea:4b:0b:8d:3a:44:49: 9f:4f:45:93:76:36:ed:ac:97:5a:b4:2b:45:22:ec: a5:30:ae:ac:11:41:c2:fb:d6:61:7e:bd:6f:a4:8a: 8d:22:b1:28:19:0c:ba:8b:2c:ac:91:39:6a:08:ff: f4:ba:ec:e7:9d:13:b9:c6:8c:d0:f1:18:0e:95:a2: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:66:82:ED:5B:42:14:05:2B:CF:8A:3B:32:14:A7:40:63:F6:6D X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:9f:17:bf:7e:61:1c:fd:f7:a7:01:1f:ac:66:71:bb:fa:33: fd:ed:e2:30:6e:c9:4f:e1:b8:da:35:cb:f8:89:00:57:bd:5e: 6d:c7:69:cb:d7:1c:21:bb:62:5e:73:03:e7:12:ac:45:ad:f1: 56:62:a6:ef:cd:c6:e2:6d:0d:c4:e2:cb:85:3d:6e:7b:33:e9: d2:8a:17:71:9f:61:78:80:ff:53:ea:09:5c:b2:b0:00:fa:3d: ae:8c:11:6e:cc:1b:bd:ff:2a:af:4c:0d:61:0e:b5:f2:1f:4c: 16:06:b6:8b:a9:ae:0a:c3:e2:28:a4:7e:32:2e:bd:04:8a:dc: 29:b8:41:9b:96:ab:36:d1:f5:7b:b1:3a:68:7a:a7:3d:21:9c: 4a:56:67:8f:72:a3:d1:41:7e:cc:85:ea:3a:ba:a3:58:a0:36: ea:99:5d:eb:69:0c:7a:1c:d0:cf:04:46:da:94:2c:35:a1:27: 85:ef:a6:c0:d5:34:f3:95:70:87:23:6c:3e:89:00:ad:8f:d1: a5:8b:6b:28:aa:b1:11:03:5e:49:0b:3c:3e:e6:5d:53:cf:55: 92:59:80:8e:30:33:2e:2b:bd:2f:ab:dc:0c:2f:ae:7b:a7:4f: 86:5f:2a:ad:62:f3:bb:cd:52:85:36:ce:5f:12:96:14:df:29: f4:e2:0b:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwNzIyMjEwMzM5WhcNMjYwNzI5MjEwMzM5WjAYMRYwFAYD VQQDEw02YTYxMzAyYi1hMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJz0/jO/Akq3PS2yb7ARljLtLFEsW4PiEZwudP6BEA40/PSqI84YvGpQmxr8 IjrKdvgC3xMFgcnWJ4ASXNpihr+0RNNlxgd3TRHVM+2Qu7cPAOxXULFKV15P3lvS ePwILodZfZqigq75puV8apdLFuM6TWgnI5j8lxupNnDR++FHxJgl+DK9cKhYJmhn s9n5BGhv2T2u8j7HkW/OhnkPlyIhClKY4JN483/S+gWbGKMwoZsUiQ/048Na0OpL C406REmfT0WTdjbtrJdatCtFIuylMK6sEUHC+9Zhfr1vpIqNIrEoGQy6iyyskTlq CP/0uuznnRO5xozQ8RgOlaIvUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIeZoLt W0IUBSvPijsyFKdAY/ZtMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw58Xv35hHP33pwEfrGZxu/oz/e3iMG7JT+G42jXL+IkAV71ebcdpy9ccIbti XnMD5xKsRa3xVmKm783G4m0NxOLLhT1uezPp0ooXcZ9heID/U+oJXLKwAPo9rowR bswbvf8qr0wNYQ618h9MFga2i6muCsPiKKR+Mi69BIrcKbhBm5arNtH1e7E6aHqn PSGcSlZnj3Kj0UF+zIXqOrqjWKA26pld62kMehzQzwRG2pQsNaEnhe+mwNU085Vw hyNsPokArY/RpYtrKKqxEQNeSQs8PuZdU89VklmAjjAzLiu9L6vcDC+ue6dPhl8q rWLzu81ShTbOXxKWFN8p9OILjg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:32:42 2026 by rpki-client