$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: h3AUq9pqM7iGayYU8bZehyeTlk34t+2PYNKWYrrdfmU= Subject key identifier: 81:EC:47:D8:BA:93:D4:A3:7A:A6:41:87:73:01:65:7A:1A:84:78:D2 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0B29 Signing time: Wed 22 Jul 2026 19:38:52 +0000 Manifest this update: Wed 22 Jul 2026 19:38:52 +0000 Manifest next update: Wed 29 Jul 2026 19:38:52 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: q90J7ZEwRWTgHwV5yC/ddXEFX4/9TUeRmHDNj86r5UY=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Jul 22 19:38:52 2026 GMT Not After : Jul 29 19:38:52 2026 GMT Subject: CN=6a611c4c-06b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:ec:a2:6d:9e:c3:a8:04:d3:ba:e3:d3:ea: ae:8b:4b:fa:9b:6f:5c:c8:35:3e:3c:c1:d9:e1:c0: 50:f5:1e:cd:95:ea:08:89:be:91:40:1b:9b:df:67: 92:cc:d4:f7:75:4e:c0:bc:dd:06:0e:d9:b1:66:2b: a5:2f:39:d7:82:a9:dc:26:03:ec:c4:ae:16:d7:05: c7:61:ac:6a:25:8d:6e:f2:a9:eb:d4:c2:5d:cf:66: 9d:b6:30:8a:ad:db:a7:6e:0f:b3:5f:9a:fc:f6:7a: 91:34:aa:92:c8:9e:3c:38:f6:21:03:9c:07:aa:4d: fa:8a:3e:65:c4:fd:f0:7a:06:c1:86:5b:35:5f:52: 43:87:d1:7b:60:6c:c7:23:82:a2:75:67:8c:2e:99: 6a:f5:dd:11:a7:01:80:13:cc:ab:62:39:c3:a6:f1: f6:22:f7:3d:7d:91:ec:fd:85:c1:be:7e:0e:2c:97: 70:e5:2a:ef:f0:ce:41:97:e5:03:b1:a9:7f:90:2c: 1c:9d:89:09:d6:aa:ca:ff:e7:4b:10:00:f7:ad:ad: 7b:b6:c7:9f:4f:15:d9:39:c9:ce:60:07:32:93:18: 93:4f:f9:83:3f:64:f8:d5:c8:c0:b8:2f:28:14:12: 77:cd:56:5f:73:e3:96:cb:38:84:ca:a9:7e:96:83: 55:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EC:47:D8:BA:93:D4:A3:7A:A6:41:87:73:01:65:7A:1A:84:78:D2 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b0:16:69:ad:e4:dc:db:72:9d:a5:29:8c:fe:72:58:dd:56: 39:8c:d4:86:e1:eb:34:69:40:8d:2f:a8:42:67:3b:a7:1e:e0: 9c:62:d4:32:af:0c:c9:94:27:40:30:99:90:bb:f6:36:a2:d0: ea:b5:e3:f4:65:de:76:fa:77:90:90:17:e3:8d:ec:06:4e:48: e9:24:f9:3a:dd:44:09:b6:c9:10:23:51:09:97:9b:19:c2:0a: 1f:2e:68:6d:80:59:48:5c:be:0e:a7:54:ce:11:c5:aa:7c:75: 26:70:20:a8:db:a0:8b:bf:3f:85:9d:a5:fc:a5:fe:01:19:72: 54:c6:dd:20:cf:ad:db:85:f4:01:f2:06:a0:d1:f4:fc:ef:4a: 15:ee:79:ae:b7:d5:23:4d:31:c9:14:12:ee:37:2a:c1:9c:48: 59:48:ae:7c:1a:04:6b:50:71:be:59:a1:2b:75:26:9d:9a:1a: 70:09:c5:ba:1d:e4:41:b0:2a:72:de:60:27:36:8e:c0:23:94: b9:cd:6e:bf:bd:62:20:6b:3e:3c:de:15:79:20:05:28:fe:41: db:ca:1f:88:74:58:61:3a:44:45:7a:bb:f1:81:ad:94:0f:28: 0c:4f:72:67:04:ff:bc:25:6e:6a:b5:6a:36:6c:97:84:dc:cf: 01:5b:a2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjYwNzIyMTkzODUyWhcNMjYwNzI5MTkzODUyWjAYMRYwFAYD VQQDEw02YTYxMWM0Yy0wNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjTsom2ew6gE07rj0+qui0v6m29cyDU+PMHZ4cBQ9R7NleoIib6RQBub32eS zNT3dU7AvN0GDtmxZiulLznXgqncJgPsxK4W1wXHYaxqJY1u8qnr1MJdz2adtjCK rdunbg+zX5r89nqRNKqSyJ48OPYhA5wHqk36ij5lxP3wegbBhls1X1JDh9F7YGzH I4KidWeMLplq9d0RpwGAE8yrYjnDpvH2Ivc9fZHs/YXBvn4OLJdw5Srv8M5Bl+UD sal/kCwcnYkJ1qrK/+dLEAD3ra17tsefTxXZOcnOYAcykxiTT/mDP2T41cjAuC8o FBJ3zVZfc+OWyziEyql+loNVawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHsR9i6 k9SjeqZBh3MBZXoahHjSMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeLAWaa3k3NtynaUpjP5yWN1WOYzUhuHrNGlAjS+oQmc7px7gnGLUMq8MyZQn QDCZkLv2NqLQ6rXj9GXedvp3kJAX443sBk5I6ST5Ot1ECbbJECNRCZebGcIKHy5o bYBZSFy+DqdUzhHFqnx1JnAgqNugi78/hZ2l/KX+ARlyVMbdIM+t24X0AfIGoNH0 /O9KFe55rrfVI00xyRQS7jcqwZxIWUiufBoEa1BxvlmhK3UmnZoacAnFuh3kQbAq ct5gJzaOwCOUuc1uv71iIGs+PN4VeSAFKP5B28ofiHRYYTpERXq78YGtlA8oDE9y ZwT/vCVuarVqNmyXhNzPAVuiLg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:54:19 2026 by rpki-client