$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: D1OhggBxIfg67aFwyIzcRqsrbIWDh7fc2Ux/aOe6oUc= Subject key identifier: 9F:7D:33:6B:53:BC:FB:63:22:6E:68:C0:66:81:0B:F7:59:AF:07:C3 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: EE Signing time: Tue 21 Jul 2026 08:04:49 +0000 Manifest this update: Tue 21 Jul 2026 08:04:49 +0000 Manifest next update: Tue 28 Jul 2026 08:04:49 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: /Dhk6I5EkdoEkdj1x1Vn/A3AeTN2htOKZCypdN0ldL0=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: 5D5ovIuJv1jnZ/Pc8OvAEOVclNhv4nrz5vQYCTyXvvI=) 3: E8EA66103BDC11F1A0F6729AA5833773.roa (hash: tECE+9B2D7TmvMWbzHOk6z9VaQFfbh8pZao3qlnbgxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Jul 21 08:04:49 2026 GMT Not After : Jul 28 08:04:49 2026 GMT Subject: CN=6a5f2821-2746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:6d:c1:f2:db:c6:ff:04:b5:17:1c:cf:4e: ab:66:7e:7f:46:51:d7:be:d1:5d:80:11:e6:9f:7f: 6b:15:24:6b:a6:95:92:7c:ec:ab:57:b7:5a:86:de: ba:f5:b5:a8:a8:67:a6:65:0c:37:5c:73:a8:e7:3d: c2:c9:35:2d:fb:bb:4b:6f:02:61:f3:d2:43:03:0a: f6:06:58:ae:49:06:a0:52:83:ee:d5:cf:e3:4b:76: 43:ff:5c:d1:82:57:5a:0a:7d:c4:78:d5:10:17:62: a2:ae:f0:68:b5:6f:af:4b:95:b1:a0:c5:e5:3a:6b: ce:12:0f:16:34:47:4b:f1:8d:ad:5c:cb:64:1f:ab: 1d:8a:1d:ba:a3:44:b3:b5:98:50:a3:a9:9f:14:49: 15:be:38:59:f4:b7:68:dc:d8:ba:ce:98:72:94:a7: af:45:13:fd:bc:40:86:64:6c:ce:76:b6:48:7d:da: d4:47:21:42:c9:a0:73:46:29:50:bf:db:3a:98:24: 83:25:91:05:e2:d1:64:58:8c:9c:3a:c8:5e:2b:cb: ed:a2:35:8a:9b:87:36:81:ba:d7:f7:33:15:06:6b: 9f:d8:89:ca:34:76:da:84:e8:56:1b:c2:b0:ce:04: bc:c1:c3:d5:96:a7:41:7f:6c:ae:ae:02:c0:17:6a: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:33:6B:53:BC:FB:63:22:6E:68:C0:66:81:0B:F7:59:AF:07:C3 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fd:e4:d9:0c:cf:06:e3:7c:17:ca:25:86:eb:04:62:7d:79: ab:a2:93:75:4b:7e:37:90:b2:df:9a:09:7b:c0:bf:cd:cb:d4: b3:87:23:98:24:3d:cc:36:dc:3b:27:22:31:58:eb:d6:46:0e: c9:a9:d3:a1:e8:84:e7:80:42:18:e0:ce:e2:74:cd:fa:df:ad: 16:43:95:59:54:a7:dc:d1:d0:81:43:cc:d2:1a:ea:82:3a:6a: a6:79:c7:13:21:3f:ef:ba:83:a2:51:db:0e:0b:f9:a4:c0:16: 6e:c4:17:3b:55:39:b7:58:88:43:9a:9d:30:b0:56:cc:a0:0e: e3:7c:db:41:0b:14:92:55:19:ad:71:d5:ba:c1:12:48:bc:3b: 85:98:e5:fa:2f:7b:73:24:3c:76:42:b0:25:5d:62:bd:a5:3f: 43:27:fc:87:5d:c0:fd:cf:07:78:dd:54:1f:4d:41:27:b2:5d: df:59:2a:f6:d5:27:23:8a:99:39:f3:83:5e:af:53:bd:58:ab: b8:f6:96:c3:30:3c:ed:c2:a9:ea:35:20:c3:5b:a3:cd:ae:ea: d2:99:3a:e2:33:69:38:2f:dc:a0:8e:12:ac:35:14:c3:3f:8d: c3:98:0d:d6:21:18:08:35:73:fd:b5:12:24:cd:db:33:61:94: de:9d:fa:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJBQ0IxMTAvBgNVBAUTKEYwMDkyMzNEOEQwODdGQzFEMEY2NDI1NzgwRTNBNEQ4 NDRBMzRGODEwHhcNMjYwNzIxMDgwNDQ5WhcNMjYwNzI4MDgwNDQ5WjAYMRYwFAYD VQQDEw02YTVmMjgyMS0yNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sJtwfLbxv8EtRccz06rZn5/RlHXvtFdgBHmn39rFSRrppWSfOyrV7daht66 9bWoqGemZQw3XHOo5z3CyTUt+7tLbwJh89JDAwr2BliuSQagUoPu1c/jS3ZD/1zR gldaCn3EeNUQF2KirvBotW+vS5WxoMXlOmvOEg8WNEdL8Y2tXMtkH6sdih26o0Sz tZhQo6mfFEkVvjhZ9Ldo3Ni6zphylKevRRP9vECGZGzOdrZIfdrURyFCyaBzRilQ v9s6mCSDJZEF4tFkWIycOsheK8vtojWKm4c2gbrX9zMVBmuf2InKNHbahOhWG8Kw zgS8wcPVlqdBf2yurgLAF2rPkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ99M2tT vPtjIm5owGaBC/dZrwfDMB8GA1UdIwQYMBaAFPAJIz2NCH/B0PZCV4DjpNhEo0+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkFDQi83NEJEODU4QTFC M0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4SFE5a0pYZ09PazJFU2pU NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi84QWtqUFkwSWY4 SFE5a0pYZ09PazJFU2pUNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/3k2QzPBuN8F8olhusEYn15q6KTdUt+N5Cy35oJe8C/zcvUs4cjmCQ9zDbc OyciMVjr1kYOyanToeiE54BCGODO4nTN+t+tFkOVWVSn3NHQgUPM0hrqgjpqpnnH EyE/77qDolHbDgv5pMAWbsQXO1U5t1iIQ5qdMLBWzKAO43zbQQsUklUZrXHVusES SLw7hZjl+i97cyQ8dkKwJV1ivaU/Qyf8h13A/c8HeN1UH01BJ7Jd31kq9tUnI4qZ OfODXq9TvViruPaWwzA87cKp6jUgw1ujza7q0pk64jNpOC/coI4SrDUUwz+Nw5gN 1iEYCDVz/bUSJM3bM2GU3p367A== -----END CERTIFICATE-----Generated at Tue Jul 21 17:02:16 2026 by rpki-client