$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft File: l8hXp1yabimLCaBh2PfOEHv50zM.mft (raw, json) Hash identifier: NWdhQk4cbUVDm9aRbjKkKUolUTmwWDvqVcumwTxqnOw= Subject key identifier: D3:E8:09:48:6D:01:A1:95:38:19:24:9F:2A:49:FC:69:50:2E:55:94 Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 Certificate issuer: /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft Manifest number: 98 Signing time: Mon 20 Jul 2026 23:54:06 +0000 Manifest this update: Mon 20 Jul 2026 23:54:06 +0000 Manifest next update: Mon 27 Jul 2026 23:54:06 +0000 Files and hashes: 1: l8hXp1yabimLCaBh2PfOEHv50zM.crl (hash: Ag1KSjUxXs2CknGNtPoCh3QXjlv9a3BVR9j+cAsN3EE=) 2: B8E35E8AD8C811F08AAE626967D3641D.roa (hash: wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333 Validity Not Before: Jul 20 23:54:06 2026 GMT Not After : Jul 27 23:54:06 2026 GMT Subject: CN=6a5eb51e-906b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:ee:26:42:7a:4b:55:0d:84:c0:10:a4:c9: a2:b9:aa:37:c6:33:e7:0d:53:71:35:40:12:00:f3: a2:8c:31:fe:3e:b7:0d:8e:08:50:d9:1b:91:ab:4c: 27:0b:0a:bb:5d:04:6c:64:69:f5:8b:00:8f:34:6a: 7d:06:dd:9f:1f:c8:70:11:78:81:50:26:af:04:9a: b4:75:9d:24:32:cc:8d:1c:27:a5:18:0e:9a:79:f1: cb:c9:b3:06:96:49:8b:5d:4d:a5:39:b9:d0:28:f3: 27:f1:95:f0:b8:d3:49:5f:b5:67:26:3f:5c:92:d5: ce:38:a9:31:05:8a:60:cf:f5:90:a9:78:2b:4d:fa: 38:7f:82:0a:a1:14:ae:19:88:f4:0c:05:a3:c6:0d: ac:f2:82:16:af:bf:0f:6f:b8:59:1c:e1:68:55:32: 13:26:1e:ea:db:aa:94:75:63:89:c7:1d:5b:28:69: 68:13:ce:27:04:6e:38:16:e0:d8:3c:64:63:f5:f5: c7:08:3e:29:e8:d6:8c:ff:07:11:f6:b3:90:86:1c: ca:5b:08:09:c0:51:26:bd:3d:06:c5:4f:1f:6b:35: 1a:b6:c2:e9:5c:9d:c0:d3:a6:24:58:fd:98:15:73: f1:11:41:fc:f9:ee:7f:bb:71:03:84:ad:88:79:95: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:09:48:6D:01:A1:95:38:19:24:9F:2A:49:FC:69:50:2E:55:94 X509v3 Authority Key Identifier: keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e3:7a:d3:45:6c:cb:79:4f:b9:ea:7e:1b:dc:4d:92:92:b5: 3a:5b:30:a8:51:f8:d5:d4:fd:39:27:1b:fa:71:32:bd:bd:6e: 2c:5a:06:9b:12:b0:87:f7:fb:b2:9b:89:76:66:09:35:8b:81: 16:82:a1:49:aa:db:6f:79:3a:44:5b:38:52:52:f1:bc:3a:ff: f8:91:31:a7:e6:79:34:5e:a0:1b:c8:a3:df:92:f3:1b:e5:cc: 2e:95:a7:69:0a:09:76:fa:59:11:47:18:93:f8:b0:5c:ec:2b: eb:06:55:f4:e4:2b:64:65:b1:70:e6:53:27:d4:33:b6:80:7f: 19:33:0c:40:1a:dd:69:cb:1a:c2:32:e0:07:35:a6:f5:38:8b: 98:da:f9:da:06:e5:48:59:53:e4:30:3d:a5:5f:26:86:15:0f: 0e:a8:08:eb:60:35:f3:25:2a:3b:00:8e:e8:c7:8a:56:4a:e7: f1:42:42:db:2d:3b:ff:69:79:b3:13:ec:5f:5b:02:a2:b1:a4: 93:94:6c:15:58:d0:b0:3b:d2:30:f2:52:86:b6:c9:5f:04:ec: d8:cc:e6:43:32:1f:8c:4a:c1:56:5b:70:7e:ee:b0:5d:57:58: 85:78:6d:06:db:f8:26:01:a1:47:c9:89:3b:17:ad:06:c6:90: 28:5f:11:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDk3Qzg1N0E3NUM5QTZFMjk4QjA5QTA2MUQ4RjdDRTEw N0JGOUQzMzMwHhcNMjYwNzIwMjM1NDA2WhcNMjYwNzI3MjM1NDA2WjAYMRYwFAYD VQQDEw02YTVlYjUxZS05MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE3uJkJ6S1UNhMAQpMmiuao3xjPnDVNxNUASAPOijDH+PrcNjghQ2RuRq0wn Cwq7XQRsZGn1iwCPNGp9Bt2fH8hwEXiBUCavBJq0dZ0kMsyNHCelGA6aefHLybMG lkmLXU2lObnQKPMn8ZXwuNNJX7VnJj9cktXOOKkxBYpgz/WQqXgrTfo4f4IKoRSu GYj0DAWjxg2s8oIWr78Pb7hZHOFoVTITJh7q26qUdWOJxx1bKGloE84nBG44FuDY PGRj9fXHCD4p6NaM/wcR9rOQhhzKWwgJwFEmvT0GxU8fazUatsLpXJ3A06YkWP2Y FXPxEUH8+e5/u3EDhK2IeZWEWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPoCUht AaGVOBkknypJ/GlQLlWUMB8GA1UdIwQYMBaAFJfIV6dcmm4piwmgYdj3zhB7+dMz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9CRDhBRUQwOEE2 NDIxMUYwQUM5OTU4MzNDNEY5QUUwMi9sOGhYcDF5YWJpbUxDYUJoMlBmT0VIdjUw ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2w4aFhwMXlhYmltTENhQmgyUGZPRUh2NTB6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9CRDhBRUQwOEE2NDIxMUYwQUM5OTU4MzNDNEY5QUUwMi9sOGhYcDF5YWJp bUxDYUJoMlBmT0VIdjUwek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV+N600Vsy3lPuep+G9xNkpK1OlswqFH41dT9OScb+nEyvb1uLFoGmxKwh/f7 spuJdmYJNYuBFoKhSarbb3k6RFs4UlLxvDr/+JExp+Z5NF6gG8ij35LzG+XMLpWn aQoJdvpZEUcYk/iwXOwr6wZV9OQrZGWxcOZTJ9QztoB/GTMMQBrdacsawjLgBzWm 9TiLmNr52gblSFlT5DA9pV8mhhUPDqgI62A18yUqOwCO6MeKVkrn8UJC2y07/2l5 sxPsX1sCorGkk5RsFVjQsDvSMPJShrbJXwTs2MzmQzIfjErBVltwfu6wXVdYhXht Btv4JgGhR8mJOxetBsaQKF8RJA== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:36 2026 by rpki-client