$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: SP1EqfatThCJGKVqgC3owE6y1RQV8MSq+LMSal/EVmI= Subject key identifier: FF:41:8B:34:C2:61:6B:E3:49:58:E0:E9:47:31:ED:28:C4:B1:5D:9F Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 017B Signing time: Thu 23 Jul 2026 07:06:19 +0000 Manifest this update: Thu 23 Jul 2026 07:06:18 +0000 Manifest next update: Thu 30 Jul 2026 07:06:18 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: MTOr1I0lkJMVh3OepW3d8sB6Y7RRwSPTT8s+DwYFQmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Jul 23 07:06:18 2026 GMT Not After : Jul 30 07:06:18 2026 GMT Subject: CN=6a61bd6a-8b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:b3:04:5d:00:27:20:25:9d:71:d2:70:97: 73:ef:4f:4b:3e:05:36:b5:e7:b0:25:c2:b6:bc:e2: 73:a0:06:70:4f:82:15:24:50:02:26:51:44:21:44: 6d:1c:48:29:9a:31:dd:a9:e3:ad:90:f2:4a:30:2f: e5:69:46:2a:eb:c9:c9:1d:f9:6b:de:8b:c2:b9:6a: a6:d0:6e:81:37:e6:02:52:d5:13:5f:10:bf:af:0c: b4:b3:1e:e3:3a:95:d6:77:24:b5:7f:26:74:8b:84: 94:4d:b0:fa:1e:67:31:be:fe:9b:77:8e:6b:00:db: c7:43:a9:4e:cd:59:42:0a:77:5c:b2:c8:5c:ad:e6: 47:82:7b:d6:71:83:3c:96:db:c6:33:97:84:c5:e1: 4b:79:35:58:f4:05:5f:d3:e9:d9:7d:53:cf:da:38: 47:13:f9:f1:7c:8b:41:04:b0:e3:95:5f:df:f0:99: aa:7a:c1:cb:01:9a:c5:41:90:55:d4:b4:8e:fb:a9: 7b:66:af:4e:59:43:ed:ee:93:ac:53:01:63:47:37: a7:6e:1b:a5:1e:38:a0:5f:a7:90:9b:98:3c:30:2b: 78:67:26:c5:25:47:ae:14:08:e9:8e:8c:d2:90:fe: 18:c7:d9:7a:0f:d3:33:6b:11:7f:7f:5b:3f:c5:cf: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:41:8B:34:C2:61:6B:E3:49:58:E0:E9:47:31:ED:28:C4:B1:5D:9F X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:80:41:62:4b:12:5f:7e:3d:da:80:a8:d9:36:36:74:81:d7: 89:37:b0:6c:e8:ca:a2:ea:37:0d:95:ea:9a:cf:31:eb:32:26: 36:7f:79:ef:b5:34:31:30:2e:ff:e3:22:28:2d:87:b6:20:4a: 9e:87:69:b2:06:cc:c5:f3:08:d4:7d:d9:54:0a:f4:52:24:58: c3:de:6b:45:ec:26:22:e3:8d:aa:a7:ff:d7:d5:e3:a3:f0:29: f3:92:5a:30:9a:64:28:1f:1c:cd:0e:6d:f0:f7:47:fe:bb:db: 70:7f:da:42:51:ca:f5:72:44:92:71:94:44:4e:47:14:1f:76: 76:1f:32:6c:4f:05:e5:6c:16:d1:00:aa:57:5c:a1:77:cf:d2: 0e:2c:d2:e3:9f:33:67:5c:1d:74:0e:56:cd:28:c4:40:9c:5d: c8:64:f7:a6:c9:0e:f5:fb:3a:ec:b1:41:ac:27:ba:ab:4e:e0: b7:98:1e:35:ae:c0:46:ed:11:c4:ae:08:9e:92:02:c8:97:21: 7c:e4:3e:22:4d:c4:1a:8a:07:e6:b1:8e:b0:ec:b6:5c:dc:72: 14:ac:06:5c:34:81:11:db:13:10:a7:ed:1f:e8:fd:8b:b6:0f: 03:19:b0:f0:99:3c:22:5b:c9:9e:46:9d:44:11:af:e2:28:25: a6:cc:3d:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjYwNzIzMDcwNjE4WhcNMjYwNzMwMDcwNjE4WjAYMRYwFAYD VQQDEw02YTYxYmQ2YS04YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUGzBF0AJyAlnXHScJdz709LPgU2teewJcK2vOJzoAZwT4IVJFACJlFEIURt HEgpmjHdqeOtkPJKMC/laUYq68nJHflr3ovCuWqm0G6BN+YCUtUTXxC/rwy0sx7j OpXWdyS1fyZ0i4SUTbD6Hmcxvv6bd45rANvHQ6lOzVlCCndcsshcreZHgnvWcYM8 ltvGM5eExeFLeTVY9AVf0+nZfVPP2jhHE/nxfItBBLDjlV/f8JmqesHLAZrFQZBV 1LSO+6l7Zq9OWUPt7pOsUwFjRzenbhulHjigX6eQm5g8MCt4ZybFJUeuFAjpjozS kP4Yx9l6D9MzaxF/f1s/xc+JSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9BizTC YWvjSVjg6Ucx7SjEsV2fMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcIBBYksSX3492oCo2TY2dIHXiTewbOjKouo3DZXqms8x6zImNn9577U0MTAu /+MiKC2HtiBKnodpsgbMxfMI1H3ZVAr0UiRYw95rRewmIuONqqf/19Xjo/Ap85Ja MJpkKB8czQ5t8PdH/rvbcH/aQlHK9XJEknGURE5HFB92dh8ybE8F5WwW0QCqV1yh d8/SDizS458zZ1wddA5WzSjEQJxdyGT3pskO9fs67LFBrCe6q07gt5geNa7ARu0R xK4InpICyJchfOQ+Ik3EGooH5rGOsOy2XNxyFKwGXDSBEdsTEKftH+j9i7YPAxmw 8Jk8IlvJnkadRBGv4iglpsw9lw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:01 2026 by rpki-client