$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: uyqvCxLMQPhFaXoUz1UJBkFjWsp8pzMS7BGSpOBKZhI= Subject key identifier: E9:DA:D1:65:55:0F:B6:76:42:30:B5:17:1E:22:62:E4:92:CB:93:42 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 0159 Signing time: Thu 23 Jul 2026 06:40:18 +0000 Manifest this update: Thu 23 Jul 2026 06:40:17 +0000 Manifest next update: Thu 30 Jul 2026 06:40:17 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: BmitaHAgOAra11S9j0jv2GM6tSg+40stCGakiJoh7Rk=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Jul 23 06:40:17 2026 GMT Not After : Jul 30 06:40:17 2026 GMT Subject: CN=6a61b752-3d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:fd:f0:b7:56:43:24:21:33:c7:7c:f1:0c: ec:48:f6:fc:de:9b:c5:17:e1:50:d4:84:90:a1:c9: fe:fc:6c:70:2f:a6:bb:80:4c:f5:e2:b9:c0:3d:eb: c8:36:78:13:95:3c:61:d4:26:84:d3:5d:91:89:c5: a0:5e:1d:40:97:ac:2e:ef:c8:c1:dc:52:94:be:7c: 98:95:72:a0:47:d3:70:df:71:93:2f:9f:bd:83:cb: f0:31:81:e7:9d:37:1d:e2:e4:7d:3b:e0:00:49:0c: d3:fc:c4:6e:aa:44:01:e8:f5:96:a0:1d:cb:3a:bd: 9a:8a:0e:ca:83:e2:7b:d5:ac:58:6c:43:b6:42:01: 28:a8:87:f0:95:86:b8:a9:2d:db:7b:90:af:db:73: eb:a6:ed:7d:ef:a0:a2:8e:58:87:77:77:5f:34:0d: ed:e5:34:31:2a:5c:04:36:03:cf:4d:a6:01:58:ec: 00:45:72:f8:a4:c9:66:47:93:59:25:73:2c:ab:45: 9e:da:e8:2a:68:81:9e:c3:d2:6f:69:52:40:f5:18: c2:f1:b3:96:dc:44:95:9a:44:19:12:35:0c:e8:e7: c3:a8:e4:4a:81:d2:68:ec:f7:a6:ea:e9:48:a9:3e: 8b:7e:ce:47:01:a9:91:ca:2a:4d:67:4f:1a:85:20: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:D1:65:55:0F:B6:76:42:30:B5:17:1E:22:62:E4:92:CB:93:42 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:2b:df:1e:18:fc:9c:b2:67:51:37:b3:c5:4b:dc:68:61: e7:11:4f:f3:d2:f6:de:03:b4:31:fc:5e:5e:ee:09:73:f3:cc: 17:9b:0c:90:47:b6:7f:fe:a7:4c:26:8a:f1:77:a3:80:50:dd: 20:2f:06:db:6c:04:a7:e3:e7:17:49:51:61:db:ec:02:00:fd: cb:cd:37:04:fe:17:b4:3a:15:6d:6c:88:d1:2c:b3:ca:17:4e: 9c:29:c7:02:91:2a:dc:99:90:6e:a1:ad:f4:b3:2e:91:1a:69: 5e:c6:16:57:62:81:ab:67:60:aa:c8:be:65:8b:d8:2d:96:a8: 29:57:6f:6d:70:43:bb:24:20:bf:ae:15:c4:11:2e:bc:f4:b4: e2:1c:ec:50:03:b8:9d:7c:50:00:28:6a:d6:04:48:55:61:7c: 46:05:1e:70:0d:7e:98:b1:4d:66:51:f1:6e:b1:a7:14:42:af: 24:20:a0:5b:09:b9:16:49:97:45:ed:c9:60:ad:c9:5b:91:12: af:ae:e7:fd:59:6e:32:38:dd:98:ce:66:b4:a3:ea:bf:9b:93: a2:d5:96:a2:e0:66:72:07:ce:37:73:58:ed:e7:7b:5b:86:f5: b3:70:26:99:56:b9:81:fe:6c:ff:8f:45:52:c0:12:02:53:be: 83:02:0b:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwNzIzMDY0MDE3WhcNMjYwNzMwMDY0MDE3WjAYMRYwFAYD VQQDEw02YTYxYjc1Mi0zZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1V398LdWQyQhM8d88QzsSPb83pvFF+FQ1ISQocn+/GxwL6a7gEz14rnAPevI NngTlTxh1CaE012RicWgXh1Al6wu78jB3FKUvnyYlXKgR9Nw33GTL5+9g8vwMYHn nTcd4uR9O+AASQzT/MRuqkQB6PWWoB3LOr2aig7Kg+J71axYbEO2QgEoqIfwlYa4 qS3be5Cv23Prpu1976CijliHd3dfNA3t5TQxKlwENgPPTaYBWOwARXL4pMlmR5NZ JXMsq0We2ugqaIGew9JvaVJA9RjC8bOW3ESVmkQZEjUM6OfDqORKgdJo7Pem6ulI qT6Lfs5HAamRyipNZ08ahSD6VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOna0WVV D7Z2QjC1Fx4iYuSSy5NCMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcYcr3x4Y/JyyZ1E3s8VL3Ghh5xFP89L23gO0MfxeXu4Jc/PMF5sMkEe2f/6n TCaK8XejgFDdIC8G22wEp+PnF0lRYdvsAgD9y803BP4XtDoVbWyI0SyzyhdOnCnH ApEq3JmQbqGt9LMukRppXsYWV2KBq2dgqsi+ZYvYLZaoKVdvbXBDuyQgv64VxBEu vPS04hzsUAO4nXxQAChq1gRIVWF8RgUecA1+mLFNZlHxbrGnFEKvJCCgWwm5FkmX Re3JYK3JW5ESr67n/VluMjjdmM5mtKPqv5uTotWWouBmcgfON3NY7ed7W4b1s3Am mVa5gf5s/49FUsASAlO+gwILUQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:10:59 2026 by rpki-client