$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json) Hash identifier: lzAgZcKSacL9eAU1GF9jL6zUAwdSSCzWzTlm8PkFO50= Subject key identifier: 31:22:85:45:05:B8:05:2D:50:49:2C:07:69:44:E3:56:27:72:83:7A Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft Manifest number: 22 Signing time: Thu 23 Jul 2026 10:56:55 +0000 Manifest this update: Thu 23 Jul 2026 10:56:55 +0000 Manifest next update: Thu 30 Jul 2026 10:56:55 +0000 Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: ih4J79HzxJ8VytXxdIRiGBqEKs0pcoSoJxfqfxbTCO0=) 2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Validity Not Before: Jul 23 10:56:55 2026 GMT Not After : Jul 30 10:56:55 2026 GMT Subject: CN=6a61f377-c619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:a8:22:d2:5e:4f:fd:39:db:62:07:01:4e: 64:60:25:cc:ed:22:11:c0:bb:8e:10:1d:f9:00:aa: af:52:9d:39:3d:27:60:86:4f:d6:9f:11:11:fe:87: 3c:eb:aa:7e:15:4c:31:f0:47:01:97:3d:a4:14:0f: a2:fe:e7:4e:06:94:d4:d1:6c:15:cd:e3:db:41:ed: 03:10:0d:a2:ac:dd:12:bf:bf:33:90:9d:ca:63:4e: 92:d5:fc:28:f4:f4:66:04:e7:d7:09:81:df:58:53: c1:f6:96:07:fa:bd:b9:f8:9a:7a:21:d7:2a:10:66: 19:95:16:b5:d1:03:d1:3f:c4:ff:2d:5a:18:88:55: e7:bc:7d:51:46:93:27:10:b0:c5:6a:13:1d:de:63: 27:ee:a5:22:bd:dc:ad:b1:9e:38:85:5d:56:5f:23: 4b:f5:11:c7:ae:04:79:92:0b:8e:71:eb:74:cd:ce: 42:17:33:c3:d2:ca:a3:58:57:50:45:d3:21:7b:1a: 91:72:08:f0:f5:63:1a:de:aa:8f:85:e6:04:bf:db: 36:ca:5d:20:24:ad:3a:3f:d1:74:42:82:e8:25:07: e4:f5:7c:f7:7d:5f:35:32:c3:8a:00:0e:c2:ea:f7: 89:93:79:2b:85:45:c8:0e:44:73:22:1e:bf:b6:5e: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:22:85:45:05:B8:05:2D:50:49:2C:07:69:44:E3:56:27:72:83:7A X509v3 Authority Key Identifier: keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:3c:db:af:68:32:97:b8:54:d4:01:81:c8:ef:51:78:f6:d2: 59:c2:be:a8:32:8a:c1:06:2a:78:06:e7:45:9a:6f:2c:4a:91: df:92:e0:8e:b2:24:93:5a:39:2c:8d:fe:e4:44:3d:d8:a3:e2: d8:41:d4:dc:90:78:f4:9a:3c:ef:96:7a:38:ba:95:81:bf:6c: fd:af:92:35:35:85:b9:d4:28:4e:03:53:ce:7a:08:00:20:f6: b1:25:d7:b3:64:1e:67:f2:f7:ba:89:ad:6b:cf:ca:7b:3c:25: 00:6a:df:55:06:47:41:61:24:a7:5f:6d:71:e1:3b:e2:b2:b3: a6:5e:94:f4:35:40:77:a3:f1:73:1b:03:7c:82:44:0e:a9:02: 03:05:5b:22:b5:89:d9:a6:ed:4e:1c:42:a7:a1:f7:77:c6:83: b9:be:bb:d3:e7:86:55:4f:ef:bb:b3:46:31:38:59:13:c1:7d: 71:d6:8d:20:1e:d1:0b:7c:1a:1e:af:5b:f5:07:7d:cc:1b:4a: 32:4c:9d:88:37:cd:34:c5:50:86:bb:b9:0c:65:c7:b2:3e:3a: b5:ac:d4:f1:a8:f7:18:e3:40:fc:19:9f:45:bb:54:30:6a:bb: 09:43:ff:34:0e:ae:30:10:5a:97:4d:76:8a:53:ba:86:d6:9e: 4c:78:99:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVBMTExMC8GA1UEBRMoRjFBNDYxMkEwNkUxMEVGNUJEOTYzMTczRUMyNjUzOEI3 RDQwMzczNjAeFw0yNjA3MjMxMDU2NTVaFw0yNjA3MzAxMDU2NTVaMBgxFjAUBgNV BAMTDTZhNjFmMzc3LWM2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAzKgi0l5P/TnbYgcBTmRgJcztIhHAu44QHfkAqq9SnTk9J2CGT9afERH+hzzr qn4VTDHwRwGXPaQUD6L+504GlNTRbBXN49tB7QMQDaKs3RK/vzOQncpjTpLV/Cj0 9GYE59cJgd9YU8H2lgf6vbn4mnoh1yoQZhmVFrXRA9E/xP8tWhiIVee8fVFGkycQ sMVqEx3eYyfupSK93K2xnjiFXVZfI0v1EceuBHmSC45x63TNzkIXM8PSyqNYV1BF 0yF7GpFyCPD1Yxreqo+F5gS/2zbKXSAkrTo/0XRCguglB+T1fPd9XzUyw4oADsLq 94mTeSuFRcgORHMiHr+2XrUnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMSKFRQW4 BS1QSSwHaUTjVidyg3owHwYDVR0jBBgwFoAU8aRhKgbhDvW9ljFz7CZTi31ANzYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0U3MTM5OEM2NTRF NTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZXOWxqRno3Q1pUaTMxQU56 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGFSaEtnYmhEdlc5bGpGejdDWlRpMzFBTnpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RUExL0U3MTM5OEM2NTRFNTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZX OWxqRno3Q1pUaTMxQU56WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjPNuvaDKXuFTUAYHI71F49tJZwr6oMorBBip4BudFmm8sSpHfkuCOsiSTWjks jf7kRD3Yo+LYQdTckHj0mjzvlno4upWBv2z9r5I1NYW51ChOA1POeggAIPaxJdez ZB5n8ve6ia1rz8p7PCUAat9VBkdBYSSnX21x4TvisrOmXpT0NUB3o/FzGwN8gkQO qQIDBVsitYnZpu1OHEKnofd3xoO5vrvT54ZVT++7s0YxOFkTwX1x1o0gHtELfBoe r1v1B33MG0oyTJ2IN800xVCGu7kMZceyPjq1rNTxqPcY40D8GZ9Fu1QwarsJQ/80 Dq4wEFqXTXaKU7qG1p5MeJnL -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:12 2026 by rpki-client