$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json) Hash identifier: tnlUFRXMdnJNoKw3+o38jW/5n2h7I22rZtXBrY5LRwQ= Subject key identifier: 1B:3C:48:5A:BC:F7:27:20:3B:43:A8:63:91:09:B5:2E:12:35:69:3B Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft Manifest number: 072D Signing time: Mon 20 Jul 2026 22:32:33 +0000 Manifest this update: Mon 20 Jul 2026 22:32:33 +0000 Manifest next update: Mon 27 Jul 2026 22:32:33 +0000 Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: AL1AWgRSQ7acKyEAP5zaChHS3hVshTgnVPp2o6GqRkg=) 2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: ette4LAwg26M5pj2ePPXPSItzIGGrF3PbLrnLGwJk9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Validity Not Before: Jul 20 22:32:33 2026 GMT Not After : Jul 27 22:32:33 2026 GMT Subject: CN=6a5ea201-6466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:56:1e:54:f8:4a:38:1b:9b:74:58:a8:6c: 1a:46:2a:cb:0f:e4:1e:ce:2a:ec:c3:5a:d4:08:4b: 0d:e2:6e:b8:5e:b3:0a:52:3d:0a:7b:70:26:a9:fc: d0:00:88:3b:79:ec:2d:25:ac:2e:41:b3:5d:44:6d: 37:6d:f8:44:ed:ae:1e:46:c7:0a:d8:5e:09:64:4e: 58:9a:db:db:ca:4d:b6:75:f7:73:cc:3a:d8:ea:8b: 96:57:9f:e2:50:63:e0:37:4f:a1:8e:d8:c1:2b:03: 15:6c:ba:01:c9:fb:e0:21:4c:63:82:c0:96:97:a2: 57:5f:fc:f8:b7:32:42:e0:c5:c3:2b:f0:6e:3b:54: b7:47:50:64:1c:d0:54:c8:5c:54:62:7b:c1:80:dc: ef:86:eb:73:b3:0c:65:25:15:f7:a9:83:b3:d9:e0: 36:26:c7:42:bc:e7:bc:86:55:f9:05:ee:2d:c3:9a: 38:c0:4e:17:04:b2:80:70:59:95:76:6e:46:95:51: b1:48:06:b9:f6:da:2f:0a:04:4e:1f:ea:14:21:1d: 89:8f:7e:41:51:b1:a1:f3:85:43:47:2c:18:06:a0: b6:e8:95:f7:f0:a5:31:dc:c1:7e:d9:72:37:64:5b: 21:f3:29:22:02:06:0a:2b:4d:a9:55:12:8f:77:67: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3C:48:5A:BC:F7:27:20:3B:43:A8:63:91:09:B5:2E:12:35:69:3B X509v3 Authority Key Identifier: keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:76:6d:f6:d5:0f:e7:cd:cd:a1:b2:7b:d3:27:46:7e:27: 5c:6f:3d:64:57:ac:84:34:17:83:36:01:65:8a:40:11:77:02: 03:f8:21:1d:8e:f7:91:f3:e0:1f:19:39:ea:3d:a9:59:fa:c9: 2f:53:ec:83:78:7c:d3:4f:be:df:e4:18:01:50:21:8b:e3:d0: 1c:4b:73:cc:5d:d1:49:ac:d2:1f:5b:28:8d:80:45:55:45:63: 7b:07:b6:e3:fe:d8:b0:b3:14:d8:4d:1d:31:1a:e8:2b:60:b8: 17:86:93:59:d0:ac:fb:19:b3:3f:c0:00:0b:dd:2c:64:47:6d: 7a:fb:1f:fe:a1:7c:d1:88:3e:75:48:de:41:3c:53:5f:9f:95: b3:32:36:c3:67:a0:79:16:62:3b:71:9c:02:be:f8:5b:b7:7e: 5d:0b:22:a9:8e:e0:76:3f:31:4d:94:e1:c2:de:46:5a:a8:9d: 4d:aa:05:78:da:fa:f3:5a:6c:61:6a:6b:9d:77:be:5c:2b:68: 9c:3b:07:6e:c4:88:ca:b7:d6:d3:d1:07:4a:8c:19:26:b6:da: ea:ed:78:7a:77:14:f4:49:f6:b5:98:a5:5c:a4:96:50:48:fd: fe:12:2a:e9:86:9d:d6:8c:e3:2b:c8:88:f7:bf:14:f5:0d:df: 39:c5:a4:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG N0VDNkQ0NzAwHhcNMjYwNzIwMjIzMjMzWhcNMjYwNzI3MjIzMjMzWjAYMRYwFAYD VQQDEw02YTVlYTIwMS02NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO5WHlT4Sjgbm3RYqGwaRirLD+Qezirsw1rUCEsN4m64XrMKUj0Ke3AmqfzQ AIg7eewtJawuQbNdRG03bfhE7a4eRscK2F4JZE5Ymtvbyk22dfdzzDrY6ouWV5/i UGPgN0+hjtjBKwMVbLoByfvgIUxjgsCWl6JXX/z4tzJC4MXDK/BuO1S3R1BkHNBU yFxUYnvBgNzvhutzswxlJRX3qYOz2eA2JsdCvOe8hlX5Be4tw5o4wE4XBLKAcFmV dm5GlVGxSAa59tovCgROH+oUIR2Jj35BUbGh84VDRywYBqC26JX38KUx3MF+2XI3 ZFsh8ykiAgYKK02pVRKPd2cWIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs8SFq8 9ycgO0OoY5EJtS4SNWk7MB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2 MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y TlM3TDFLTEhkUHozN0cxSEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlPN2bfbVD+fNzaGye9MnRn4nXG89ZFeshDQXgzYBZYpAEXcCA/ghHY73kfPg Hxk56j2pWfrJL1Psg3h800++3+QYAVAhi+PQHEtzzF3RSazSH1sojYBFVUVjewe2 4/7YsLMU2E0dMRroK2C4F4aTWdCs+xmzP8AAC90sZEdtevsf/qF80Yg+dUjeQTxT X5+VszI2w2egeRZiO3GcAr74W7d+XQsiqY7gdj8xTZThwt5GWqidTaoFeNr681ps YWprnXe+XCtonDsHbsSIyrfW09EHSowZJrba6u14encU9En2tZilXKSWUEj9/hIq 6Yad1ozjK8iI978U9Q3fOcWkxQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:19:17 2026 by rpki-client