$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft File: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft (raw, json) Hash identifier: 5sI5CKPDJgOsLE6Cs0Tv59FOvZdZ6uF8uT3qQ1x0AK8= Subject key identifier: D7:DC:16:E1:E7:96:56:35:0C:BF:FA:33:7B:25:1F:BC:5A:90:38:B4 Authority key identifier: F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F Certificate issuer: /CN=A91CFBCB/serialNumber=F2170630A014F8218FF3075649F41242003D446F Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft Manifest number: 5E Signing time: Thu 23 Jul 2026 10:07:07 +0000 Manifest this update: Thu 23 Jul 2026 10:07:06 +0000 Manifest next update: Thu 30 Jul 2026 10:07:06 +0000 Files and hashes: 1: 8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl (hash: RjZWnszHX33tmffKj02ttwmVpGh1yOQCQAaK5nl3+NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFBCB, serialNumber=F2170630A014F8218FF3075649F41242003D446F Validity Not Before: Jul 23 10:07:06 2026 GMT Not After : Jul 30 10:07:06 2026 GMT Subject: CN=6a61e7cb-f01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:36:14:d5:08:a5:6b:5d:43:6c:b6:3c:6e: 57:e7:79:88:4b:47:be:32:b3:47:e1:c1:37:60:7e: 58:6a:99:58:2e:1e:b8:aa:1a:ea:03:12:ca:54:da: f0:a7:f2:2c:b7:18:32:2e:11:9a:7c:5b:ff:c9:a7: 52:9e:71:ae:bd:25:7a:a4:fe:a9:04:9b:dc:83:28: 12:39:73:59:be:d1:87:44:51:7c:93:b6:38:15:a6: fc:e7:ab:8e:f8:f0:eb:22:13:42:75:b8:8f:e3:72: 18:5e:53:9a:27:77:74:ea:56:a0:05:7a:ee:9d:74: 3a:99:11:11:c6:26:d6:c0:80:af:b8:b2:45:b0:95: 47:8f:06:90:ba:28:9a:42:65:f3:cc:2d:43:ab:1c: 68:25:16:da:a4:a8:3e:8a:44:a7:45:bd:55:b5:51: 82:bc:46:55:8e:84:3a:f2:e7:64:e2:6a:c3:04:fa: 56:5a:37:3c:07:8a:c1:08:2a:a8:71:8a:fb:31:ac: 7d:3f:85:66:9b:6d:91:fc:52:ba:c9:76:d3:8f:4a: 0e:1c:e7:13:74:f3:88:b3:d2:f0:26:49:24:8d:67: 6e:ea:d6:5d:db:58:c7:1c:07:c5:3a:8f:5c:5f:c3: 41:89:10:1d:94:55:2a:05:dc:75:8a:f8:9f:97:88: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DC:16:E1:E7:96:56:35:0C:BF:FA:33:7B:25:1F:BC:5A:90:38:B4 X509v3 Authority Key Identifier: keyid:F2:17:06:30:A0:14:F8:21:8F:F3:07:56:49:F4:12:42:00:3D:44:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hcGMKAU-CGP8wdWSfQSQgA9RG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/B2DFF656FDBC11F0B93A5F71676F56BC/8hcGMKAU-CGP8wdWSfQSQgA9RG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5c:26:27:ec:47:9a:94:27:30:b1:ae:9c:63:02:78:fa:31: b7:2a:f7:76:75:70:6f:98:95:21:5b:f0:91:e6:4d:17:7d:de: 6c:06:99:8d:1f:01:dc:bf:b0:38:0e:6d:09:d2:76:4b:f7:fe: 1f:71:40:de:93:b4:ef:c1:47:6e:7d:e3:94:df:f3:54:69:e4: 19:57:04:ec:e7:a9:55:a4:f4:b7:89:76:c3:ba:a2:37:15:02: 93:ce:7d:e5:56:c4:d1:18:9e:b8:18:22:d0:bb:01:cd:0a:96: 91:54:8c:ce:e9:87:6f:70:47:1e:c5:85:ce:63:e7:4b:e4:57: 5a:ec:ce:bc:56:de:09:5c:26:f2:9e:2b:80:6d:bc:fd:e9:02: ab:ab:9a:05:f4:cc:1f:20:b8:55:98:81:1a:df:1d:24:b5:1f: 2c:08:6e:17:43:f0:15:64:0b:e5:07:4b:21:93:63:36:cc:2e: 6a:d9:9d:23:97:95:c1:4c:5c:d4:eb:ba:42:38:05:87:4f:ad: ea:55:06:f9:a0:bd:f2:72:e2:8f:ab:9a:64:e9:2c:f8:df:d6: 58:ab:b5:bf:a9:92:e8:4c:4a:19:74:b3:6a:d9:ac:65:9d:a2: 43:e9:ea:14:e1:ad:87:fc:2b:84:99:ca:9a:fb:a3:a7:5a:b6: 06:35:84:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkJDQjExMC8GA1UEBRMoRjIxNzA2MzBBMDE0RjgyMThGRjMwNzU2NDlGNDEyNDIw MDNENDQ2RjAeFw0yNjA3MjMxMDA3MDZaFw0yNjA3MzAxMDA3MDZaMBgxFjAUBgNV BAMTDTZhNjFlN2NiLWYwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE+jYU1Qila11DbLY8blfneYhLR74ys0fhwTdgflhqmVguHriqGuoDEspU2vCn 8iy3GDIuEZp8W//Jp1Keca69JXqk/qkEm9yDKBI5c1m+0YdEUXyTtjgVpvznq474 8OsiE0J1uI/jchheU5ond3TqVqAFeu6ddDqZERHGJtbAgK+4skWwlUePBpC6KJpC ZfPMLUOrHGglFtqkqD6KRKdFvVW1UYK8RlWOhDry52TiasME+lZaNzwHisEIKqhx ivsxrH0/hWabbZH8UrrJdtOPSg4c5xN084iz0vAmSSSNZ27q1l3bWMccB8U6j1xf w0GJEB2UVSoF3HWK+J+XiGv1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU19wW4eeW VjUMv/ozeyUfvFqQOLQwHwYDVR0jBBgwFoAU8hcGMKAU+CGP8wdWSfQSQgA9RG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQkNCL0IyREZGNjU2RkRC QzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNHUDh3ZFdTZlFTUWdBOVJH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGhjR01LQVUtQ0dQOHdkV1NmUVNRZ0E5Ukc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QkNCL0IyREZGNjU2RkRCQzExRjBCOTNBNUY3MTY3NkY1NkJDLzhoY0dNS0FVLUNH UDh3ZFdTZlFTUWdBOVJHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7XCYn7EealCcwsa6cYwJ4+jG3Kvd2dXBvmJUhW/CR5k0Xfd5sBpmNHwHcv7A4 Dm0J0nZL9/4fcUDek7TvwUdufeOU3/NUaeQZVwTs56lVpPS3iXbDuqI3FQKTzn3l VsTRGJ64GCLQuwHNCpaRVIzO6YdvcEcexYXOY+dL5Fda7M68Vt4JXCbyniuAbbz9 6QKrq5oF9MwfILhVmIEa3x0ktR8sCG4XQ/AVZAvlB0shk2M2zC5q2Z0jl5XBTFzU 67pCOAWHT63qVQb5oL3ycuKPq5pk6Sz439ZYq7W/qZLoTEoZdLNq2axlnaJD6eoU 4a2H/CuEmcqa+6OnWrYGNYSi -----END CERTIFICATE-----Generated at Thu Jul 23 22:48:57 2026 by rpki-client