$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: Ql++spxe7UEbvbcRtd5HEJQu4NSs6+v5d3QS7SxI9Pg= Subject key identifier: B7:21:DC:65:0E:04:5F:1D:3E:DC:26:D3:99:3C:9F:FF:E1:46:A3:F6 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E0E Signing time: Wed 22 Jul 2026 18:04:10 +0000 Manifest this update: Wed 22 Jul 2026 18:04:09 +0000 Manifest next update: Wed 29 Jul 2026 18:04:09 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: M++WwvjCQcOz10bKGT65YDLb/0cVuJFeHlqFRWXQCSA=) 2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) 3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3647 (0xe3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Jul 22 18:04:09 2026 GMT Not After : Jul 29 18:04:09 2026 GMT Subject: CN=6a610619-3889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:ad:14:f7:4c:7e:35:a4:9e:67:a3:b2:d0: 74:72:47:09:16:24:cc:46:50:83:63:15:6d:12:0c: 2a:78:5a:40:1c:ef:60:f2:f1:14:71:a4:76:88:3f: b5:4a:6e:b4:99:2f:a7:92:cc:14:13:e2:32:46:02: a4:95:e0:36:7d:67:0f:85:c2:e4:a3:aa:49:e2:ed: 87:15:92:c5:68:ed:c9:0e:78:e1:71:6d:a0:d2:23: ba:c1:7f:d8:ff:96:b9:f1:52:00:fd:02:c6:04:ca: 0d:48:2c:a2:f2:26:6b:78:2f:33:f7:73:1d:b1:56: 51:31:af:9f:c2:88:43:43:9d:99:5f:8f:10:81:d9: 69:d8:09:b0:29:df:5b:5a:91:d8:fa:98:c3:59:74: 82:4e:b1:fa:d0:28:87:19:58:b3:52:15:4b:76:34: a3:b8:49:03:64:c7:2c:6b:45:9b:35:a5:06:63:99: ec:e9:67:63:d6:50:a1:d9:3e:2b:75:73:9c:77:29: 4e:91:2c:6c:7d:59:72:44:32:e1:53:8c:d5:d0:f2: f8:79:c6:fd:1a:e7:f4:50:3f:b7:6c:71:9f:37:45: eb:b8:5f:c0:0b:1c:d2:3a:b7:7f:16:5e:d3:fe:4b: 41:a2:f9:c7:2a:09:54:4a:f9:5f:e5:e2:da:24:9c: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:DC:65:0E:04:5F:1D:3E:DC:26:D3:99:3C:9F:FF:E1:46:A3:F6 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:39:ae:b7:0f:c7:d9:37:17:7e:ef:02:a0:61:86:81:c4: a9:30:41:5d:67:87:e4:9a:1b:1a:64:40:38:a0:03:b6:4f:f3: d3:85:b4:c4:4a:fc:85:d6:ca:ec:7e:ad:bf:5d:c3:f2:d7:d1: 3e:41:3b:dd:bb:ad:9b:ad:ca:64:f6:69:6a:8a:5e:07:1e:3f: dd:57:74:16:f9:9b:55:96:38:43:13:72:6f:54:19:23:bd:b2: 28:c8:d1:20:31:fa:21:07:4a:da:d1:49:3b:0f:71:e0:b1:b2: 46:fb:11:28:78:0f:83:7c:1a:27:9b:ea:86:1c:51:df:28:39: f3:00:59:0e:98:10:df:8b:ed:2c:5c:1b:b4:53:5d:04:de:0a: 04:ff:ab:b5:fb:2e:e3:2e:02:a4:c7:40:68:31:c3:73:1c:d2: b6:1d:cf:3d:e0:37:37:ea:85:8a:2b:f7:ae:b5:4c:55:26:84: db:f6:22:b4:5c:5e:8d:0a:fe:fa:89:eb:04:6b:0b:4d:ae:fd: 50:38:05:16:df:2d:89:77:8a:f1:4a:36:57:a1:b2:fa:44:84: 7b:f8:87:92:31:7e:1e:20:82:28:98:62:cb:72:65:cf:ce:77: ba:45:76:3c:5e:9a:c7:58:88:aa:dd:f4:f8:ae:59:ac:eb:6e: 21:ff:79:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYwNzIyMTgwNDA5WhcNMjYwNzI5MTgwNDA5WjAYMRYwFAYD VQQDEw02YTYxMDYxOS0zODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiaitFPdMfjWknmejstB0ckcJFiTMRlCDYxVtEgwqeFpAHO9g8vEUcaR2iD+1 Sm60mS+nkswUE+IyRgKkleA2fWcPhcLko6pJ4u2HFZLFaO3JDnjhcW2g0iO6wX/Y /5a58VIA/QLGBMoNSCyi8iZreC8z93MdsVZRMa+fwohDQ52ZX48Qgdlp2AmwKd9b WpHY+pjDWXSCTrH60CiHGVizUhVLdjSjuEkDZMcsa0WbNaUGY5ns6Wdj1lCh2T4r dXOcdylOkSxsfVlyRDLhU4zV0PL4ecb9Guf0UD+3bHGfN0XruF/ACxzSOrd/Fl7T /ktBovnHKglUSvlf5eLaJJxibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLch3GUO BF8dPtwm05k8n//hRqP2MB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoE5rrcPx9k3F37vAqBhhoHEqTBBXWeH5JobGmRAOKADtk/z04W0xEr8hdbK 7H6tv13D8tfRPkE73butm63KZPZpaopeBx4/3Vd0FvmbVZY4QxNyb1QZI72yKMjR IDH6IQdK2tFJOw9x4LGyRvsRKHgPg3waJ5vqhhxR3yg58wBZDpgQ34vtLFwbtFNd BN4KBP+rtfsu4y4CpMdAaDHDcxzSth3PPeA3N+qFiiv3rrVMVSaE2/YitFxejQr+ +onrBGsLTa79UDgFFt8tiXeK8Uo2V6Gy+kSEe/iHkjF+HiCCKJhiy3Jlz853ukV2 PF6ax1iIqt30+K5ZrOtuIf95gg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:03:34 2026 by rpki-client