$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json) Hash identifier: LadT+SDyD6iYXPQWF6xpJ647VC5GAvi/czOqC7yGvtE= Subject key identifier: 16:3F:45:B7:0B:18:6D:72:2A:78:26:24:76:74:98:C1:44:13:11:DA Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft Manifest number: 0564 Signing time: Sat 25 Jul 2026 00:13:44 +0000 Manifest this update: Sat 25 Jul 2026 00:13:44 +0000 Manifest next update: Sat 01 Aug 2026 00:13:44 +0000 Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: B8B/szrvs3DYnHcHrwVnNtamRhAV0uW6kA1qZcxaQ7c=) 2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Validity Not Before: Jul 25 00:13:44 2026 GMT Not After : Aug 1 00:13:44 2026 GMT Subject: CN=6a63ffb8-1c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:08:6b:69:40:ab:7e:b4:e9:25:d1:6f:44: b6:0f:24:56:a6:dd:4a:4b:b2:9d:ca:11:3e:ad:4f: 5d:89:4f:b5:f7:a6:4c:c6:d8:e8:29:71:1a:9a:9d: 41:03:12:40:73:d3:89:b1:16:3c:24:b3:51:ac:37: 9d:76:14:0e:cf:2b:c6:0f:c8:ce:12:6a:6e:9c:a9: 2f:b8:42:4f:3c:f3:c0:44:95:48:5d:cb:72:68:d4: 62:2b:73:37:7f:76:6d:19:ec:21:06:92:f5:ee:77: a4:eb:87:66:6c:07:1d:1c:ae:8d:3c:2c:83:6c:d0: dd:ea:98:90:c0:64:79:be:4e:4a:ae:f5:20:de:88: 37:f1:b1:4e:8a:a6:b3:cc:47:52:44:21:d3:33:2f: f8:0f:4e:44:17:0f:fa:49:da:65:52:5f:17:c4:4e: d2:66:c2:79:ba:96:6d:a7:55:9d:25:64:e2:34:52: bd:b3:22:67:d7:82:f3:58:36:d1:99:3e:90:fd:b1: 93:e3:d5:c3:89:aa:08:59:21:6a:07:7a:1e:c0:c5: 27:2f:2e:b9:73:1b:a1:5c:79:49:ce:37:a6:0b:98: 18:3b:dc:75:36:22:83:05:52:72:64:bc:87:f3:8a: 0f:32:69:fe:38:91:b7:4d:31:d8:0f:a9:50:0b:8b: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:45:B7:0B:18:6D:72:2A:78:26:24:76:74:98:C1:44:13:11:DA X509v3 Authority Key Identifier: keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d9:44:b8:7c:f1:e0:80:2b:f8:1d:32:39:d9:27:77:25:5a: de:7a:e5:3c:cd:87:f0:b2:ba:e2:28:ff:e0:69:0f:42:e5:26: aa:cf:14:00:f7:73:52:9d:b6:f9:90:b1:f2:b1:37:6b:2a:4d: 48:50:5f:05:28:9a:2c:c9:71:c5:1c:0b:cf:d2:23:d7:6c:e2: a4:69:b3:ec:81:2e:3e:3f:52:5f:33:22:11:a7:7e:3d:bb:98: 6e:a2:00:6f:6d:4e:e7:3d:96:2c:97:6a:c6:87:a3:3f:b4:bf: fb:de:a3:3c:c5:0c:04:fb:94:35:b7:20:38:49:97:d1:8d:a2: 1f:f4:01:e2:c5:e3:f5:18:b3:16:59:22:46:c6:a9:7d:74:60: 14:e8:68:82:33:bb:ff:fa:65:96:79:5f:86:61:b7:d5:f8:e9: ca:b1:41:db:27:5f:11:0e:67:a5:c6:f5:33:68:ba:ab:8f:e4: 07:70:46:82:e1:66:9b:ba:b4:98:e1:9d:f1:1b:fa:cb:b2:d7: c0:54:ee:e3:63:af:57:05:3c:65:8d:32:06:80:9b:ad:b4:7f: 42:9f:72:9a:da:57:b8:0a:08:3c:97:cd:9d:29:64:15:ec:2c: 43:61:10:f5:8a:eb:eb:87:a4:68:1e:0b:61:54:9a:15:34:2d: 5b:9e:2d:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD RDg4MkRBMDgwHhcNMjYwNzI1MDAxMzQ0WhcNMjYwODAxMDAxMzQ0WjAYMRYwFAYD VQQDEw02YTYzZmZiOC0xYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXAIa2lAq3606SXRb0S2DyRWpt1KS7KdyhE+rU9diU+196ZMxtjoKXEamp1B AxJAc9OJsRY8JLNRrDeddhQOzyvGD8jOEmpunKkvuEJPPPPARJVIXctyaNRiK3M3 f3ZtGewhBpL17nek64dmbAcdHK6NPCyDbNDd6piQwGR5vk5KrvUg3og38bFOiqaz zEdSRCHTMy/4D05EFw/6SdplUl8XxE7SZsJ5upZtp1WdJWTiNFK9syJn14LzWDbR mT6Q/bGT49XDiaoIWSFqB3oewMUnLy65cxuhXHlJzjemC5gYO9x1NiKDBVJyZLyH 84oPMmn+OJG3TTHYD6lQC4sZLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBY/RbcL GG1yKngmJHZ0mMFEExHaMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE aDVHUTNIRi1OTFROaUMyZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPtlEuHzx4IAr+B0yOdkndyVa3nrlPM2H8LK64ij/4GkPQuUmqs8UAPdzUp22 +ZCx8rE3aypNSFBfBSiaLMlxxRwLz9Ij12zipGmz7IEuPj9SXzMiEad+PbuYbqIA b21O5z2WLJdqxoejP7S/+96jPMUMBPuUNbcgOEmX0Y2iH/QB4sXj9RizFlkiRsap fXRgFOhogjO7//pllnlfhmG31fjpyrFB2ydfEQ5npcb1M2i6q4/kB3BGguFmm7q0 mOGd8Rv6y7LXwFTu42OvVwU8ZY0yBoCbrbR/Qp9ymtpXuAoIPJfNnSlkFewsQ2EQ 9Yrr64ekaB4LYVSaFTQtW54tNQ== -----END CERTIFICATE-----Generated at Sat Jul 25 20:52:17 2026 by rpki-client