$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: iFL7tHs7/DmKwDuctsuDt3SG7XsXhiOvLAAxCGzI3HE= Subject key identifier: 67:D8:C5:89:DE:DC:BA:CF:1B:BE:FD:67:5D:3C:50:81:5E:FA:74:C5 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 08A9 Signing time: Sun 26 Jul 2026 21:10:08 +0000 Manifest this update: Sun 26 Jul 2026 21:10:07 +0000 Manifest next update: Sun 02 Aug 2026 21:10:07 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: l77aQrsBCruhhbXfMPwUw5CSSsC6fzo/Ps/baGQlnsw=) 2: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: yYK7V7dW/D0eC17jG/LycZEBlM7X3W0O8v5bUzFm2dA=) 3: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: xE0G8jy0x1aFTqJiiedpm0HY07HDA+9aAMGkr13aJlo=) 4: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Jul 26 21:10:07 2026 GMT Not After : Aug 2 21:10:07 2026 GMT Subject: CN=6a6677af-3d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:97:ad:a1:53:46:29:e4:64:4d:15:96:1e: ea:08:ac:30:18:5e:8e:55:0c:29:14:95:32:ff:ab: 35:5e:5a:73:20:78:1f:a7:d1:3a:f5:a9:77:8f:d2: f0:21:67:99:80:66:fd:10:b9:1a:bd:4c:a9:63:b4: 2e:6c:88:cf:d5:df:7a:07:22:37:38:0b:77:f8:47: 93:04:f1:4b:a9:f5:49:4c:b9:15:7d:ac:e1:13:1b: 0f:1e:92:00:c6:1a:fb:21:71:36:ad:af:eb:6e:c8: 0b:26:07:fd:d7:e5:3e:f1:23:a1:0a:b0:c3:99:0a: 6b:64:5d:18:30:da:0d:25:f9:5a:2f:c0:5e:62:56: dc:1e:32:f4:29:01:1c:e3:4f:3c:31:3d:5b:16:ac: 26:d5:37:63:f2:83:2d:53:7b:cf:35:72:6d:a7:0d: d8:f1:56:67:e3:72:d7:b8:ac:e8:7b:2a:25:d9:dd: db:11:1a:e5:c5:c5:a1:af:c0:b5:2b:3c:df:88:ce: f0:d1:8a:0c:73:83:c4:88:4f:d9:bf:51:a6:60:49: 71:3b:53:d5:2b:e5:57:2a:55:1d:65:86:9d:52:c6: dc:1e:ee:4a:ba:4b:54:12:dd:2e:38:d8:be:c0:3a: 3b:2c:cb:21:b4:cc:37:81:68:01:93:63:7f:0d:eb: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D8:C5:89:DE:DC:BA:CF:1B:BE:FD:67:5D:3C:50:81:5E:FA:74:C5 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:22:d9:ee:63:dd:ce:04:e1:7f:f2:2d:e6:17:57:89:75:9f: 1d:e3:fd:87:70:92:22:f5:27:fb:a6:39:32:ab:d2:55:ad:f2: f0:a6:9d:55:26:61:a9:33:8b:5c:90:6a:b4:09:df:01:e0:d1: f1:03:d5:d8:a4:0f:f1:b4:14:36:6a:58:f5:2c:46:c7:06:dc: 79:62:3c:dc:55:61:3f:85:a5:70:02:72:1f:82:a7:07:8b:43: 30:fd:77:21:6d:05:f6:16:14:0a:6e:a0:fd:cc:63:e6:3e:25: bc:17:a8:79:0c:1d:f8:dd:3f:c9:44:62:38:c6:c4:c1:b7:aa: e4:3e:b9:17:51:60:b3:43:ea:2b:60:36:e6:a3:d9:21:a5:c8: a9:e8:d3:04:52:84:16:d1:6a:f0:86:a4:fe:60:b0:25:b8:a7: 41:58:ab:c5:14:8b:66:31:c6:b8:ac:73:91:03:9d:7b:6c:c7: 5c:96:87:d3:7f:60:bc:73:02:0f:02:f1:ff:b7:26:f8:68:9c: 67:e0:d6:ff:0d:ed:e6:3f:de:12:bc:91:3c:78:8e:e6:b1:ec: 0f:a3:7f:84:cd:a4:e2:bb:76:b9:1e:b7:5e:4e:a4:c5:e1:ea: e4:6c:dc:31:d5:00:bd:dc:ac:35:35:bd:8c:bc:a7:a0:56:66: 1d:2b:25:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjYwNzI2MjExMDA3WhcNMjYwODAyMjExMDA3WjAYMRYwFAYD VQQDEw02YTY2NzdhZi0zZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XyXraFTRinkZE0Vlh7qCKwwGF6OVQwpFJUy/6s1XlpzIHgfp9E69al3j9Lw IWeZgGb9ELkavUypY7QubIjP1d96ByI3OAt3+EeTBPFLqfVJTLkVfazhExsPHpIA xhr7IXE2ra/rbsgLJgf91+U+8SOhCrDDmQprZF0YMNoNJflaL8BeYlbcHjL0KQEc 4088MT1bFqwm1Tdj8oMtU3vPNXJtpw3Y8VZn43LXuKzoeyol2d3bERrlxcWhr8C1 KzzfiM7w0YoMc4PEiE/Zv1GmYElxO1PVK+VXKlUdZYadUsbcHu5KuktUEt0uONi+ wDo7LMshtMw3gWgBk2N/Det4UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfYxYne 3LrPG779Z108UIFe+nTFMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArSLZ7mPdzgThf/It5hdXiXWfHeP9h3CSIvUn+6Y5MqvSVa3y8KadVSZhqTOL XJBqtAnfAeDR8QPV2KQP8bQUNmpY9SxGxwbceWI83FVhP4WlcAJyH4KnB4tDMP13 IW0F9hYUCm6g/cxj5j4lvBeoeQwd+N0/yURiOMbEwbeq5D65F1Fgs0PqK2A25qPZ IaXIqejTBFKEFtFq8Iak/mCwJbinQVirxRSLZjHGuKxzkQOde2zHXJaH039gvHMC DwLx/7cm+GicZ+DW/w3t5j/eEryRPHiO5rHsD6N/hM2k4rt2uR63Xk6kxeHq5Gzc MdUAvdysNTW9jLynoFZmHSslug== -----END CERTIFICATE-----Generated at Tue Jul 28 06:43:50 2026 by rpki-client