$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft File: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft (raw, json) Hash identifier: 8qSCTAZHu5tx8HXWpLaKxrma/8O1NhWd9mvianAAsXU= Subject key identifier: 21:66:B0:5F:4B:CD:4A:1B:2B:A6:C1:E8:BD:42:FB:FF:FD:63:06:30 Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64 Certificate issuer: /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft Manifest number: 32 Signing time: Thu 23 Jul 2026 08:41:13 +0000 Manifest this update: Thu 23 Jul 2026 08:41:12 +0000 Manifest next update: Thu 30 Jul 2026 08:41:12 +0000 Files and hashes: 1: 8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl (hash: NcF5m8yhVKRH6GZHQrP4WLr8qE9mGkhBBqLUo4Gh4kw=) 2: 6F13D28C800011F19BCC74A193A30FBC.roa (hash: JbG8q6JjjsJ2n3ruXdd0BwiY3W779OH5hygQMPGKX7k=) 3: 18A7CF4C7F7F11F1926520B96AA30FBC.roa (hash: cFqSN+xOoQ5ItHDMbCq7Pw48ndLMAZLAvgo2kqKhhgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64 Validity Not Before: Jul 23 08:41:12 2026 GMT Not After : Jul 30 08:41:12 2026 GMT Subject: CN=6a61d3a9-bfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:6d:87:f8:f7:fe:ac:59:a5:94:6d:eb:81: a1:06:6b:6d:41:2e:19:98:d3:2f:61:a3:f7:e9:93: ec:75:aa:65:13:96:9a:3d:9e:e3:29:00:38:c1:63: cf:3a:92:b7:ed:46:84:ba:de:7a:9c:89:90:ce:d0: 25:f8:64:6d:a7:53:53:62:be:cb:41:86:5c:63:f0: 6d:4b:ad:91:e6:80:0c:99:48:df:c7:3f:1c:48:8d: ff:c1:2f:47:90:d3:3f:d6:2a:50:bb:06:85:7f:67: c1:eb:af:99:61:3c:c2:e4:f0:04:cf:71:d8:0f:c9: 7d:6c:51:21:e0:dd:83:ac:4f:67:b0:8e:6e:73:b6: 55:bf:d3:86:4a:3b:ea:ff:f4:c4:df:81:1e:1a:59: a1:f0:e2:df:c0:0a:31:4b:ef:ff:ea:b8:1f:3b:fa: 43:bd:7d:d8:09:92:61:09:2f:b1:e3:67:c4:22:69: 9e:ae:16:37:ed:c2:4a:fe:10:5a:ec:dd:16:ea:8f: 40:43:54:0b:8b:a9:95:b8:62:6f:20:04:bb:3c:63: 86:1c:41:fa:63:4d:26:c6:32:bf:b1:37:56:37:93: f9:b9:34:81:d2:2c:27:f9:c9:b6:3a:50:51:47:f7: fe:61:2f:8f:9a:e8:cb:96:fb:3e:e1:fd:cd:62:b6: df:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:66:B0:5F:4B:CD:4A:1B:2B:A6:C1:E8:BD:42:FB:FF:FD:63:06:30 X509v3 Authority Key Identifier: keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c9:78:ba:ad:bb:8b:e0:34:65:b9:b4:95:aa:14:b9:8c:94: e1:3b:11:e1:ba:39:34:e5:f2:a6:86:76:51:8f:a4:86:6e:b5: c7:98:ac:50:0e:06:6b:fb:aa:15:14:1d:3a:09:38:e6:94:26: fa:86:c4:57:ff:c4:17:30:b0:83:2c:30:56:26:f5:3c:5c:19: 10:e6:98:e1:87:a1:cd:63:76:f9:93:f9:fa:1c:84:a5:89:0e: 24:0b:74:d1:b8:64:ad:3d:74:69:3f:15:64:d5:fc:3a:23:00: 07:d1:40:3a:c9:eb:14:bf:92:6e:a3:e0:84:b7:ef:e5:94:97: e2:ea:a1:61:87:3e:86:5b:7f:4e:63:bf:1d:c5:ec:0a:9f:1d: 87:ca:2c:98:4a:d3:d9:85:9a:bb:02:1e:bf:cb:d0:b6:60:3e: 7d:ee:a6:6a:95:0b:0b:71:59:ba:38:5d:11:12:0c:9e:5a:22: 08:4b:b8:2f:ce:62:b1:c5:09:13:3e:7b:6e:a1:37:d3:23:84: d2:68:7b:ab:7d:a6:97:31:8e:2c:9d:d9:57:38:6b:6e:b0:c3: 47:61:7a:77:6f:71:bd:b1:3f:5e:b7:80:55:4f:73:91:4d:e2: 58:3a:e3:42:b2:71:65:e3:41:84:53:21:0d:9c:b5:ad:f4:32: 44:a8:66:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoRjBDQ0Y0OTIwNjVFOTMzMDZEM0JGM0JFQTM0MTFBRTRC Njg3Q0Y2NDAeFw0yNjA3MjMwODQxMTJaFw0yNjA3MzAwODQxMTJaMBgxFjAUBgNV BAMTDTZhNjFkM2E5LWJmYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoTW2H+Pf+rFmllG3rgaEGa21BLhmY0y9ho/fpk+x1qmUTlpo9nuMpADjBY886 krftRoS63nqciZDO0CX4ZG2nU1NivstBhlxj8G1LrZHmgAyZSN/HPxxIjf/BL0eQ 0z/WKlC7BoV/Z8Hrr5lhPMLk8ATPcdgPyX1sUSHg3YOsT2ewjm5ztlW/04ZKO+r/ 9MTfgR4aWaHw4t/ACjFL7//quB87+kO9fdgJkmEJL7HjZ8QiaZ6uFjftwkr+EFrs 3Rbqj0BDVAuLqZW4Ym8gBLs8Y4YcQfpjTSbGMr+xN1Y3k/m5NIHSLCf5ybY6UFFH 9/5hL4+a6MuW+z7h/c1itt+FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIWawX0vN ShsrpsHovUL7//1jBjAwHwYDVR0jBBgwFoAU8Mz0kgZekzBtO/O+o0Ea5LaHz2Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDL0YzQjhDRjAwM0VF MzExRjFBNTNGRDIwQkIyRUU1MjhFLzhNejBrZ1pla3pCdE9fTy1vMEVhNUxhSHoy US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOE16MGtnWmVrekJ0T19PLW8wRWE1TGFIejJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NUJDL0YzQjhDRjAwM0VFMzExRjFBNTNGRDIwQkIyRUU1MjhFLzhNejBrZ1pla3pC dE9fTy1vMEVhNUxhSHoyUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuyXi6rbuL4DRlubSVqhS5jJThOxHhujk05fKmhnZRj6SGbrXHmKxQDgZr+6oV FB06CTjmlCb6hsRX/8QXMLCDLDBWJvU8XBkQ5pjhh6HNY3b5k/n6HISliQ4kC3TR uGStPXRpPxVk1fw6IwAH0UA6yesUv5Juo+CEt+/llJfi6qFhhz6GW39OY78dxewK nx2HyiyYStPZhZq7Ah6/y9C2YD597qZqlQsLcVm6OF0REgyeWiIIS7gvzmKxxQkT PntuoTfTI4TSaHurfaaXMY4sndlXOGtusMNHYXp3b3G9sT9et4BVT3ORTeJYOuNC snFl40GEUyENnLWt9DJEqGbV -----END CERTIFICATE-----Generated at Fri Jul 24 16:42:36 2026 by rpki-client