$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft File: lol8zXHJvUMVr4FaYvp6Ii1teFg.mft (raw, json) Hash identifier: vpWcMruWuoKbN1SOBIgn20SYOkhMgNgFV/wViw+O7bw= Subject key identifier: BB:5B:3A:4D:10:D5:22:86:88:B3:CE:01:F7:CE:BD:34:DB:11:77:06 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft Manifest number: 42 Signing time: Thu 23 Jul 2026 10:35:14 +0000 Manifest this update: Thu 23 Jul 2026 10:35:13 +0000 Manifest next update: Thu 30 Jul 2026 10:35:13 +0000 Files and hashes: 1: lol8zXHJvUMVr4FaYvp6Ii1teFg.crl (hash: p8lK7OwreHQ27OuC8fbOc4wevo8DxHS0ad4vCEbEc14=) 2: 3987426E53AC11F1A96C853AB4833773.roa (hash: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=) 3: 0A1C4E5C53AC11F19DB1C139B4833773.roa (hash: u+mOL6p14fYJ42VLhe7ZTS6oNzz6YUYqHu2z8DUWqD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Jul 23 10:35:13 2026 GMT Not After : Jul 30 10:35:13 2026 GMT Subject: CN=6a61ee62-6394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:58:9a:59:15:4c:ba:6f:06:c3:a3:77:3c: 31:1d:65:58:95:e9:f6:49:82:b3:a1:b6:bc:4d:54: 92:c0:21:57:4b:59:35:d2:65:7b:26:48:f1:6b:85: 9d:8a:a4:82:a7:36:fb:bb:ca:8b:23:10:85:bd:3e: 3d:5e:d4:6c:76:e8:0f:82:9c:31:d2:f2:57:a2:64: 7d:97:22:d7:12:55:33:fe:00:b6:cf:9f:d7:87:3c: 73:34:73:5d:14:2e:2f:67:58:73:da:85:f2:83:4c: f1:fb:d4:36:42:68:19:2c:8c:2c:a4:ab:07:b1:12: 82:b9:19:09:44:7a:97:8b:08:26:29:82:63:a3:24: f3:41:64:6b:28:e8:b7:8d:18:38:d5:a0:c7:ed:eb: e3:f4:9f:56:e6:2f:0b:23:ea:70:ba:f3:8e:04:ee: 36:cf:76:7f:e2:bf:9b:94:3c:17:5f:b9:a8:f4:be: 3e:94:ba:49:53:89:dd:3f:33:9e:d0:24:63:4f:09: d1:ed:69:0c:33:60:2b:b6:42:ae:e0:65:1f:d8:ce: 49:b9:78:ba:4c:83:2b:85:99:1c:19:d4:62:41:2a: 48:74:66:25:8c:5a:34:fd:7c:53:84:90:e5:cc:aa: 86:a6:e1:e6:61:46:98:14:ac:40:5f:39:e7:28:72: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:3A:4D:10:D5:22:86:88:B3:CE:01:F7:CE:BD:34:DB:11:77:06 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:ff:30:12:b5:64:4d:0d:66:58:11:2f:fe:78:33:22:eb: 12:46:7d:d8:a0:cb:df:54:71:bc:a2:d4:02:73:88:fa:c4:e8: 2b:e2:16:5b:8a:18:15:85:a8:22:94:39:4e:8a:28:c7:04:ff: 54:91:49:79:c8:61:88:c8:ba:64:f5:a0:91:6e:f1:f2:47:f4: 85:52:2c:50:43:af:82:6e:14:bf:94:9a:69:dd:f9:08:1c:77: ca:40:38:95:9f:b7:42:da:77:12:da:09:87:ae:03:b6:13:c2: 86:66:27:91:f5:c3:09:d0:5f:7d:44:52:9a:84:c3:85:0c:bb: c7:b6:16:81:09:e0:aa:aa:6b:3b:e3:86:69:74:aa:ed:9e:52: 1f:82:e0:0c:ca:73:19:b3:d3:57:b2:e8:ad:7f:67:fd:71:b5: 3c:25:a2:c7:e6:3c:f7:64:bc:62:c5:ed:85:e5:c3:17:fd:e6: ae:d5:fe:07:c0:88:02:fe:10:ca:d6:47:08:27:46:6f:0c:c4: 6a:d4:2c:76:57:a9:c0:34:95:f7:b8:d5:13:15:b8:a5:9a:55: fb:c9:dc:66:c9:70:28:eb:7c:1c:45:c4:d2:86:12:f7:a9:c2: ac:b9:45:10:dc:42:b9:56:32:f5:8a:35:3e:4c:a1:40:6e:ad: aa:76:42:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA3MjMxMDM1MTNaFw0yNjA3MzAxMDM1MTNaMBgxFjAUBgNV BAMTDTZhNjFlZTYyLTYzOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCweViaWRVMum8Gw6N3PDEdZViV6fZJgrOhtrxNVJLAIVdLWTXSZXsmSPFrhZ2K pIKnNvu7yosjEIW9Pj1e1Gx26A+CnDHS8leiZH2XItcSVTP+ALbPn9eHPHM0c10U Li9nWHPahfKDTPH71DZCaBksjCykqwexEoK5GQlEepeLCCYpgmOjJPNBZGso6LeN GDjVoMft6+P0n1bmLwsj6nC6844E7jbPdn/iv5uUPBdfuaj0vj6UuklTid0/M57Q JGNPCdHtaQwzYCu2Qq7gZR/Yzkm5eLpMgyuFmRwZ1GJBKkh0ZiWMWjT9fFOEkOXM qoam4eZhRpgUrEBfOecocstNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu1s6TRDV IoaIs84B9869NNsRdwYwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 RkM4L0IzRENGMUI2MkQ5NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVN VnI0RmFZdnA2SWkxdGVGZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAurf8wErVkTQ1mWBEv/ngzIusSRn3YoMvfVHG8otQCc4j6xOgr4hZbihgVhagi lDlOiijHBP9UkUl5yGGIyLpk9aCRbvHyR/SFUixQQ6+CbhS/lJpp3fkIHHfKQDiV n7dC2ncS2gmHrgO2E8KGZieR9cMJ0F99RFKahMOFDLvHthaBCeCqqms744ZpdKrt nlIfguAMynMZs9NXsuitf2f9cbU8JaLH5jz3ZLxixe2F5cMX/eau1f4HwIgC/hDK 1kcIJ0ZvDMRq1Cx2V6nANJX3uNUTFbilmlX7ydxmyXAo63wcRcTShhL3qcKsuUUQ 3EK5VjL1ijU+TKFAbq2qdkIL -----END CERTIFICATE-----Generated at Thu Jul 23 22:01:18 2026 by rpki-client