$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: oxbMUPbL4XlHpCQkA3z0fIyRg9TpO/cJ6BeQIAekC9Q= Subject key identifier: 32:15:43:1E:AB:DD:81:B9:C7:A2:3A:5A:E0:AE:CB:80:80:D6:EE:5E Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 017F Signing time: Fri 17 Jul 2026 05:36:53 +0000 Manifest this update: Fri 17 Jul 2026 05:36:52 +0000 Manifest next update: Fri 24 Jul 2026 05:36:52 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: +QAk1qYATpI5rgy7SqeDHbUeyY51dpb1fcTuP1zUaPE=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: EdoKG/rO2TUcNqvrT3rmtowwCMBDjmlbd0wrAkkItCE=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: fXNyTYwGL5hwQV4+C/rGk2vU+rMPw5B8cRLeFXzc6ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 05:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Jul 17 05:36:52 2026 GMT Not After : Jul 24 05:36:52 2026 GMT Subject: CN=6a59bf75-004f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:78:e3:9c:16:e3:79:43:1f:22:79:57:29: ca:fd:32:e0:49:db:82:41:1e:de:a6:04:3b:58:10: 2d:44:c3:93:8a:b2:9c:3b:79:51:57:35:3e:93:1d: 79:cf:3f:ee:4d:91:6e:79:79:c8:f1:03:29:86:44: c4:6e:64:97:70:13:61:7e:7a:ac:87:c9:81:39:6d: 15:c9:4e:82:4c:7e:27:8c:0e:db:e3:e1:6a:9c:c2: 66:e7:8b:dc:69:da:26:e9:00:50:13:31:0d:9e:70: 00:5a:f9:dc:67:49:95:b0:88:6c:f9:a3:23:b2:e7: 52:b8:d0:09:c9:48:df:82:3e:48:b2:ed:8c:81:80: 8f:b8:6d:43:64:7d:b0:c5:8f:ff:88:88:61:97:14: 5e:49:0a:10:2f:6b:da:80:29:f9:04:c9:15:78:f8: 88:e1:76:9b:91:65:e1:0b:a3:e0:44:d8:3f:1b:91: b4:e3:a7:d0:d2:92:6f:ce:3d:93:bb:f6:f6:94:0a: 7b:14:5e:a3:d2:64:85:3b:49:1f:75:ab:b0:a4:ec: 8f:d7:a1:db:0d:b9:a0:0d:97:0d:5b:7a:48:5e:07: 7c:7f:c8:88:9e:83:c0:53:43:8b:89:9b:07:2a:6d: d8:fc:aa:2e:c3:eb:62:cd:bf:84:14:86:89:51:59: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:15:43:1E:AB:DD:81:B9:C7:A2:3A:5A:E0:AE:CB:80:80:D6:EE:5E X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:47:77:ef:8d:62:ee:84:f5:aa:c8:45:94:e5:f3:78:26: a0:e3:2c:2e:43:32:26:b1:74:96:45:46:7b:90:25:19:62:19: ec:25:a6:64:1a:29:14:da:cf:36:e3:ba:b0:4e:05:79:9b:03: 2a:22:3a:91:a6:68:5b:55:2c:72:9b:7c:75:00:14:68:c7:2f: c0:86:4e:2d:2b:a5:e3:85:1f:3e:b0:fc:2d:04:ee:54:fc:4f: aa:f7:82:48:39:b5:96:8a:2d:61:df:d8:97:d9:e0:51:5c:b0: 63:18:17:3f:ef:f7:0c:b4:ca:ea:90:1b:cc:4f:81:59:a6:0e: 4d:e3:da:81:06:a5:95:ea:59:37:52:5e:0c:e8:96:02:12:c7: 04:8c:78:c9:e8:99:9a:60:57:dc:45:dc:3e:15:73:27:8a:ea: f4:1c:23:25:4b:04:fd:62:16:7b:9b:b9:06:8f:dd:7f:f1:0f: fd:fb:7e:04:01:45:2b:52:9b:9e:ad:46:06:6e:80:95:8f:41: a2:be:7e:3f:64:24:8c:09:25:cd:21:64:bd:1f:b1:2b:19:7f: 47:f9:dc:52:5d:1d:74:4b:cb:ed:34:3d:06:f6:a1:5d:26:bd: 81:95:4d:17:52:14:ca:47:08:81:49:76:55:d2:5f:08:d9:21: 9d:d0:ea:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjYwNzE3MDUzNjUyWhcNMjYwNzI0MDUzNjUyWjAYMRYwFAYD VQQDEw02YTU5YmY3NS0wMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rB445wW43lDHyJ5VynK/TLgSduCQR7epgQ7WBAtRMOTirKcO3lRVzU+kx15 zz/uTZFueXnI8QMphkTEbmSXcBNhfnqsh8mBOW0VyU6CTH4njA7b4+FqnMJm54vc adom6QBQEzENnnAAWvncZ0mVsIhs+aMjsudSuNAJyUjfgj5Isu2MgYCPuG1DZH2w xY//iIhhlxReSQoQL2vagCn5BMkVePiI4XabkWXhC6PgRNg/G5G046fQ0pJvzj2T u/b2lAp7FF6j0mSFO0kfdauwpOyP16HbDbmgDZcNW3pIXgd8f8iInoPAU0OLiZsH Km3Y/Kouw+tizb+EFIaJUVloIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIVQx6r 3YG5x6I6WuCuy4CA1u5eMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOWNHd++NYu6E9arIRZTl83gmoOMsLkMyJrF0lkVGe5AlGWIZ7CWmZBopFNrP NuO6sE4FeZsDKiI6kaZoW1Uscpt8dQAUaMcvwIZOLSul44UfPrD8LQTuVPxPqveC SDm1lootYd/Yl9ngUVywYxgXP+/3DLTK6pAbzE+BWaYOTePagQallepZN1JeDOiW AhLHBIx4yeiZmmBX3EXcPhVzJ4rq9BwjJUsE/WIWe5u5Bo/df/EP/ft+BAFFK1Kb nq1GBm6AlY9Bor5+P2QkjAklzSFkvR+xKxl/R/ncUl0ddEvL7TQ9BvahXSa9gZVN F1IUykcIgUl2VdJfCNkhndDqaQ== -----END CERTIFICATE-----Generated at Sat Jul 18 04:34:57 2026 by rpki-client