$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft File: r8_0bpt9aQ0-itnal3CgDiHeQUs.mft (raw, json) Hash identifier: DOtapR0p+9etpQ1QD8hjdichDZUEXSTq/KKLcvy+9/c= Subject key identifier: BB:82:40:AC:C2:82:F4:0A:62:F5:61:74:1D:A2:05:1B:90:BD:D2:0F Authority key identifier: AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B Certificate issuer: /CN=A91ED65C/serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 10:26:30 +0000 Manifest this update: Thu 23 Jul 2026 10:26:29 +0000 Manifest next update: Thu 30 Jul 2026 10:26:29 +0000 Files and hashes: 1: r8_0bpt9aQ0-itnal3CgDiHeQUs.crl (hash: QjoQRxolg2dbIYwZJB4SYru50w3ue+XQerqwmUVVkj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AFCFF46E9B7D690D3E8AD9DA9770A00E21DE414B Validity Not Before: Jul 23 10:26:29 2026 GMT Not After : Jul 30 10:26:29 2026 GMT Subject: CN=6a61ec56-5549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:d6:36:4c:10:38:32:e6:80:aa:96:65:07: 8f:21:8a:c1:3f:db:0f:73:1f:92:fd:d4:65:10:83: 63:90:7c:00:74:8d:2a:d5:71:39:37:92:5c:4d:a0: 53:d3:da:9b:75:b0:0c:5b:50:12:10:03:45:c4:25: 6a:0f:6e:63:39:e3:47:12:b2:1e:dc:71:eb:b6:6e: ff:39:84:1e:45:1e:51:6a:fd:cb:80:af:8a:7f:9e: fc:df:d5:7b:8c:19:de:d5:72:e7:52:c8:14:5b:d2: 00:7a:38:d9:a7:6a:b1:b3:13:81:18:3f:b0:a9:7c: 95:50:bf:da:d8:c6:1e:61:ac:28:6a:f6:52:a0:ff: b5:4e:5c:ba:dc:1d:6d:1f:9c:be:be:1c:2e:85:d6: fd:76:b4:a0:3d:d1:39:f0:e9:e9:bc:64:c1:ce:a2: 9e:a1:8e:6a:33:2c:ae:29:31:d7:ee:92:99:a5:78: 89:7e:24:92:5f:b0:29:7e:ee:ae:94:06:a8:5f:8f: 60:e0:e1:6c:ea:37:6b:47:8e:a9:34:f8:e6:a3:a5: d7:34:58:01:fd:92:1c:1c:01:7a:00:b6:62:1f:65: dc:dc:a5:73:86:e2:92:d3:68:5d:90:5e:bc:46:ca: 44:9b:30:8f:c8:14:7a:34:3d:e6:9d:9e:a0:77:ff: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:82:40:AC:C2:82:F4:0A:62:F5:61:74:1D:A2:05:1B:90:BD:D2:0F X509v3 Authority Key Identifier: keyid:AF:CF:F4:6E:9B:7D:69:0D:3E:8A:D9:DA:97:70:A0:0E:21:DE:41:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8_0bpt9aQ0-itnal3CgDiHeQUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/01497E481E3D11F1BFB5EA1C2F3D8C67/r8_0bpt9aQ0-itnal3CgDiHeQUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:05:91:fb:9b:31:14:5b:44:a1:d8:8c:84:27:99:8d:04:7c: 57:fc:0a:cb:7f:84:fa:3e:09:0f:df:3a:77:be:10:62:8b:e5: d2:40:8d:d4:5e:ed:ef:ba:ae:c2:cd:f6:d7:57:bc:56:7b:2e: f6:2d:d8:32:b5:6d:7e:06:0a:3d:1c:76:0c:b9:ba:9d:e5:11: d5:f8:06:d6:87:41:ac:60:3c:9a:48:55:df:c5:17:15:80:39: 0e:bd:f6:aa:23:ea:a3:60:4b:3b:4f:7d:3d:61:57:79:0d:c3: 64:9d:43:c2:c8:6c:5f:98:df:29:f6:fb:ec:3f:bc:da:44:3a: cd:72:d0:d7:d2:15:41:d5:9a:4f:89:9b:e8:e6:64:c5:8f:f6: 43:7e:ec:9b:d7:04:28:7d:03:10:a5:08:52:9b:96:19:4d:ca: de:e9:fc:24:35:de:1f:60:b4:35:83:e6:3e:fe:f4:2f:6a:de: 60:d1:c1:f9:ff:12:76:b5:6c:b2:ba:41:a7:71:87:f9:a1:82: 1d:ff:5f:38:b3:5f:5d:03:0c:a2:35:0a:bc:92:61:f1:92:e4: 4e:e7:0c:32:c8:d1:26:4d:63:e7:a5:68:17:15:8a:0f:c5:17: 17:da:aa:f0:c2:57:d7:2d:13:2c:ff:8a:46:bf:35:3c:3c:5a: 34:91:bb:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUZDRkY0NkU5QjdENjkwRDNFOEFEOURBOTc3MEEwMEUy MURFNDE0QjAeFw0yNjA3MjMxMDI2MjlaFw0yNjA3MzAxMDI2MjlaMBgxFjAUBgNV BAMTDTZhNjFlYzU2LTU1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/x9Y2TBA4MuaAqpZlB48hisE/2w9zH5L91GUQg2OQfAB0jSrVcTk3klxNoFPT 2pt1sAxbUBIQA0XEJWoPbmM540cSsh7cceu2bv85hB5FHlFq/cuAr4p/nvzf1XuM Gd7VcudSyBRb0gB6ONmnarGzE4EYP7CpfJVQv9rYxh5hrChq9lKg/7VOXLrcHW0f nL6+HC6F1v12tKA90Tnw6em8ZMHOop6hjmozLK4pMdfukpmleIl+JJJfsCl+7q6U Bqhfj2Dg4WzqN2tHjqk0+Oajpdc0WAH9khwcAXoAtmIfZdzcpXOG4pLTaF2QXrxG ykSbMI/IFHo0PeadnqB3/5X9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu4JArMKC 9Api9WF0HaIFG5C90g8wHwYDVR0jBBgwFoAUr8/0bpt9aQ0+itnal3CgDiHeQUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDLzAxNDk3RTQ4MUUz RDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEwLWl0bmFsM0NnRGlIZVFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjhfMGJwdDlhUTAtaXRuYWwzQ2dEaUhlUVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDLzAxNDk3RTQ4MUUzRDExRjFCRkI1RUExQzJGM0Q4QzY3L3I4XzBicHQ5YVEw LWl0bmFsM0NnRGlIZVFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfBZH7mzEUW0Sh2IyEJ5mNBHxX/ArLf4T6PgkP3zp3vhBii+XSQI3UXu3vuq7C zfbXV7xWey72LdgytW1+Bgo9HHYMubqd5RHV+AbWh0GsYDyaSFXfxRcVgDkOvfaq I+qjYEs7T309YVd5DcNknUPCyGxfmN8p9vvsP7zaRDrNctDX0hVB1ZpPiZvo5mTF j/ZDfuyb1wQofQMQpQhSm5YZTcre6fwkNd4fYLQ1g+Y+/vQvat5g0cH5/xJ2tWyy ukGncYf5oYId/184s19dAwyiNQq8kmHxkuRO5wwyyNEmTWPnpWgXFYoPxRcX2qrw wlfXLRMs/4pGvzU8PFo0kbs2 -----END CERTIFICATE-----Generated at Fri Jul 24 10:54:00 2026 by rpki-client