$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 30DMJlf6K6eczNVYZYN5aIGvA78TOpQ8lOW5BXL0XjQ= Subject key identifier: 14:72:58:3E:01:EA:F5:F8:8C:62:C3:6D:AD:74:37:3C:7F:DB:AF:A7 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A89 Signing time: Wed 22 Jul 2026 20:01:18 +0000 Manifest this update: Wed 22 Jul 2026 20:01:17 +0000 Manifest next update: Wed 29 Jul 2026 20:01:17 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 1fhVCvMZ6ZJHiTS2zSaLA/9FT+Ju0mX+TGQV01PfDxw=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Jul 22 20:01:17 2026 GMT Not After : Jul 29 20:01:17 2026 GMT Subject: CN=6a61218d-c05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:ba:86:2b:c1:dd:e3:53:67:9e:ab:0f:24: e4:fd:5d:72:1b:5b:90:25:1c:c4:e3:f2:f2:51:f4: ab:78:5a:90:b6:3a:59:bf:fb:a5:3e:26:37:59:36: 4b:57:b5:db:ef:14:ca:a7:17:2e:0a:30:de:18:14: fc:cc:7b:94:c9:a6:83:6d:97:b7:da:9e:5f:90:ec: 53:8c:93:44:82:f3:da:f2:db:8c:71:f6:04:df:bb: ce:9c:13:00:21:e4:86:ef:f6:8a:51:b8:40:f5:8b: 76:6e:de:89:94:d5:d2:38:9d:32:92:ee:3d:0b:f1: 19:33:3c:e1:8b:03:00:7c:43:11:54:54:a9:74:da: c9:50:6f:48:bc:8a:1b:a0:76:17:4b:07:e5:32:c1: 69:7c:57:c2:b2:78:1f:35:c6:70:8e:1f:82:b0:0d: 29:07:0a:8a:40:e1:96:a5:70:ba:7c:ef:a4:c3:95: 9a:b7:b5:63:8e:4e:23:2f:6b:3a:63:03:11:65:80: d6:e1:0b:89:13:a6:eb:32:8a:5e:f5:21:6d:31:45: 51:4b:16:fb:8c:30:2e:4c:3b:9e:f2:35:e3:89:57: e1:2d:40:0e:33:d2:e5:e9:1c:0e:d4:cf:5f:7b:3d: b0:6c:cf:73:e4:ff:e5:be:82:62:43:99:15:f5:16: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:72:58:3E:01:EA:F5:F8:8C:62:C3:6D:AD:74:37:3C:7F:DB:AF:A7 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:33:40:27:73:9e:d9:ca:8d:fe:ef:07:5d:6e:5f:77:bc:8b: 5b:78:d5:7e:32:6e:6b:79:b1:ba:2c:57:2d:52:74:0a:1b:8f: 14:d0:e1:19:22:7b:5c:3f:63:5c:53:f1:ea:23:bc:77:76:5a: 73:48:5b:01:98:6f:a0:07:8f:84:67:21:5c:ca:c8:94:af:dd: 44:bf:1d:20:e6:7d:ee:7a:e2:32:45:ae:e1:fb:04:5e:0c:fc: 3a:35:61:aa:1b:17:00:d2:14:40:24:63:14:3d:23:0c:2c:4f: bd:89:47:4b:18:ac:68:73:d7:33:62:a8:75:2b:6b:75:22:54: 5b:0f:43:02:83:52:44:db:1e:93:67:e1:bb:18:ae:ad:f9:e5: a4:6b:83:a5:96:b5:f3:66:16:36:5f:b1:1d:07:f3:d4:85:43: c1:93:aa:58:36:a7:d6:45:94:e3:24:be:20:f0:26:8b:20:e6: 84:04:07:c1:2c:88:1a:f2:a4:fa:72:d4:71:ac:df:b7:8e:e5: 49:41:13:1f:66:e8:cb:13:06:7f:31:09:72:bd:9c:23:16:10: b7:f4:26:15:e0:25:b5:10:6a:0b:a4:96:61:cd:8a:90:07:38: cd:b1:98:9d:87:ac:2e:df:54:82:1d:66:56:8d:36:17:82:6e: 83:b6:3c:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwNzIyMjAwMTE3WhcNMjYwNzI5MjAwMTE3WjAYMRYwFAYD VQQDEw02YTYxMjE4ZC1jMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUe6hivB3eNTZ56rDyTk/V1yG1uQJRzE4/LyUfSreFqQtjpZv/ulPiY3WTZL V7Xb7xTKpxcuCjDeGBT8zHuUyaaDbZe32p5fkOxTjJNEgvPa8tuMcfYE37vOnBMA IeSG7/aKUbhA9Yt2bt6JlNXSOJ0yku49C/EZMzzhiwMAfEMRVFSpdNrJUG9IvIob oHYXSwflMsFpfFfCsngfNcZwjh+CsA0pBwqKQOGWpXC6fO+kw5Wat7Vjjk4jL2s6 YwMRZYDW4QuJE6brMope9SFtMUVRSxb7jDAuTDue8jXjiVfhLUAOM9Ll6RwO1M9f ez2wbM9z5P/lvoJiQ5kV9RZaYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRyWD4B 6vX4jGLDba10Nzx/26+nMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGzNAJ3Oe2cqN/u8HXW5fd7yLW3jVfjJua3mxuixXLVJ0ChuPFNDhGSJ7XD9j XFPx6iO8d3Zac0hbAZhvoAePhGchXMrIlK/dRL8dIOZ97nriMkWu4fsEXgz8OjVh qhsXANIUQCRjFD0jDCxPvYlHSxisaHPXM2KodStrdSJUWw9DAoNSRNsek2fhuxiu rfnlpGuDpZa182YWNl+xHQfz1IVDwZOqWDan1kWU4yS+IPAmiyDmhAQHwSyIGvKk +nLUcazft47lSUETH2boyxMGfzEJcr2cIxYQt/QmFeAltRBqC6SWYc2KkAc4zbGY nYesLt9Ugh1mVo02F4Jug7Y8og== -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:10 2026 by rpki-client