$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: wMsE3zd0qsHKUbsL1MTJCFj1HogbechGH8CpcQiQCwY= Subject key identifier: B3:8B:9A:51:AC:F8:B6:72:C0:C4:90:3E:D0:16:E5:0C:99:D3:40:55 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 046F Signing time: Thu 23 Jul 2026 00:57:15 +0000 Manifest this update: Thu 23 Jul 2026 00:57:15 +0000 Manifest next update: Thu 30 Jul 2026 00:57:15 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: mez28u/fL49LJI0oHtQWrJbLldhMb7iP1rxgQhaXK6M=) 2: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: 8IoFb/TuJGa8f+hLPDSGTarCT7mkVKZq9W7cRCzmXZc=) 3: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=) 4: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: wPvXbMRDdeZ16YQAsG5yxXC1oVke0Is094fp9Wnssro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Jul 23 00:57:15 2026 GMT Not After : Jul 30 00:57:15 2026 GMT Subject: CN=6a6166eb-d8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:c8:d0:23:59:60:b0:f0:3c:06:01:ab:31: f0:18:95:9d:f3:5e:b6:ad:26:ac:f7:d9:32:a6:62: c9:b2:6b:78:c5:f2:35:ce:d7:f5:91:fe:f2:40:ea: 6f:61:ea:ad:32:5f:9e:fa:39:fb:c7:5f:0c:3e:01: c7:69:26:09:f8:51:d9:9d:17:89:a2:32:ab:fe:8a: 03:dc:48:93:da:a3:0d:99:ec:b0:c9:a1:6c:40:0f: 77:ec:1b:56:fa:2d:fd:d2:59:b8:b7:60:4a:43:a4: 47:2b:b2:f4:af:dd:65:72:79:d2:87:02:c0:46:ff: c8:6e:27:62:63:35:a7:f4:af:c0:3d:ba:57:23:3c: a0:3d:60:f2:74:ec:a9:97:38:12:b4:4b:35:03:53: 88:35:e4:ba:8b:15:1f:86:1a:77:0d:24:96:5f:06: 93:35:46:5e:62:e3:1f:cd:37:8c:3c:1b:b9:9d:11: 31:97:e8:5f:ac:21:0f:6e:0c:98:30:ef:e5:3e:2c: 7e:df:d4:a4:f0:38:b9:da:f3:38:d7:14:fa:97:24: 60:95:6a:05:5c:49:e7:7c:2b:9b:2c:a6:f6:60:99: ac:57:f2:40:89:ba:50:c1:aa:f5:1b:e9:29:f4:35: 42:06:95:46:17:04:44:5c:dc:20:3f:20:76:64:0d: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8B:9A:51:AC:F8:B6:72:C0:C4:90:3E:D0:16:E5:0C:99:D3:40:55 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f1:d9:6c:ef:26:f5:16:1f:ad:f9:13:f8:3f:ab:b1:88:f2: 8b:76:28:e8:39:7f:b3:9b:31:4a:1c:1b:12:ba:92:77:ca:74: c5:1c:fe:5a:53:eb:6b:12:11:58:ee:b8:b2:99:c2:e2:ba:90: 81:59:39:60:df:7b:12:f1:34:60:32:7c:75:c2:55:0a:1a:d1: 8c:53:33:ac:27:b5:84:b7:5f:c7:1d:29:bf:5a:b7:89:7f:4a: 1f:24:8d:1a:dd:d9:97:65:8a:6d:6d:23:26:0a:de:fa:a1:64: 3b:83:8b:db:50:f4:b0:13:57:0b:9c:50:fa:5d:eb:4e:de:96: 7f:6e:b3:bb:b0:41:d2:e9:04:ad:f3:29:67:09:a1:81:78:e2: 45:70:d7:c0:c6:5d:d6:f5:b5:bc:54:dd:ac:6c:7c:2e:45:af: 33:6f:1e:d8:75:7d:1e:6b:76:b0:06:b4:c2:d8:bd:0b:fd:ac: 0c:d4:7b:29:ce:55:29:c8:85:97:d3:59:32:71:e1:ec:1f:98: e7:fc:d5:16:f6:88:0c:a5:1d:99:e4:ab:67:36:3c:a2:0d:6a: 75:83:3e:57:a5:e5:06:69:3d:81:4a:86:4c:69:74:09:9e:fe: 0f:10:ae:5a:d7:b9:6c:17:96:95:89:80:95:3b:cd:a6:f3:be: 24:5c:e6:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjYwNzIzMDA1NzE1WhcNMjYwNzMwMDA1NzE1WjAYMRYwFAYD VQQDEw02YTYxNjZlYi1kOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs43I0CNZYLDwPAYBqzHwGJWd8162rSas99kypmLJsmt4xfI1ztf1kf7yQOpv YeqtMl+e+jn7x18MPgHHaSYJ+FHZnReJojKr/ooD3EiT2qMNmeywyaFsQA937BtW +i390lm4t2BKQ6RHK7L0r91lcnnShwLARv/IbidiYzWn9K/APbpXIzygPWDydOyp lzgStEs1A1OINeS6ixUfhhp3DSSWXwaTNUZeYuMfzTeMPBu5nRExl+hfrCEPbgyY MO/lPix+39Sk8Di52vM41xT6lyRglWoFXEnnfCubLKb2YJmsV/JAibpQwar1G+kp 9DVCBpVGFwREXNwgPyB2ZA1bnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOLmlGs +LZywMSQPtAW5QyZ00BVMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAvHZbO8m9RYfrfkT+D+rsYjyi3Yo6Dl/s5sxShwbErqSd8p0xRz+WlPraxIR WO64spnC4rqQgVk5YN97EvE0YDJ8dcJVChrRjFMzrCe1hLdfxx0pv1q3iX9KHySN Gt3Zl2WKbW0jJgre+qFkO4OL21D0sBNXC5xQ+l3rTt6Wf26zu7BB0ukErfMpZwmh gXjiRXDXwMZd1vW1vFTdrGx8LkWvM28e2HV9Hmt2sAa0wti9C/2sDNR7Kc5VKciF l9NZMnHh7B+Y5/zVFvaIDKUdmeSrZzY8og1qdYM+V6XlBmk9gUqGTGl0CZ7+DxCu Wte5bBeWlYmAlTvNpvO+JFzmKg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:03:51 2026 by rpki-client