$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: ijgev0Oqlx6Y48/bFYNsVxrs1gIpVrOCqOK1m5lX74c= Subject key identifier: FD:5F:52:62:50:A3:31:17:B3:6A:AC:99:2B:05:90:11:D4:AE:F6:F9 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0B1F Signing time: Thu 02 Jul 2026 19:28:46 +0000 Manifest this update: Thu 02 Jul 2026 19:28:45 +0000 Manifest next update: Thu 09 Jul 2026 19:28:45 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: R6BdNk4nxgBVHGJcfpRj8pws20BEPJ18yYq4VZgSs0M=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 19:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Jul 2 19:28:45 2026 GMT Not After : Jul 9 19:28:45 2026 GMT Subject: CN=6a46bbed-8bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:de:1b:3a:41:0f:53:af:a3:ec:51:78:03: 53:37:90:4d:f5:4e:31:0b:94:ea:d6:7c:33:74:7e: ef:a0:ba:aa:dd:11:94:a6:40:92:4c:ff:59:f4:5a: 54:80:8b:42:d7:22:76:32:b0:67:2d:08:7a:05:4a: 77:86:8f:49:5e:17:f2:12:d4:54:12:34:1a:3a:a9: 66:d7:58:fb:da:72:29:14:59:ff:bc:65:31:39:fc: e6:65:38:3f:8e:bf:ae:0b:a7:0c:11:62:9f:24:9d: 78:f5:73:24:83:bc:45:15:b8:7d:9e:3f:c2:23:ab: f2:20:e6:ac:90:a7:81:bb:c5:6d:8b:0a:7a:da:13: 35:97:e5:b6:0b:10:7a:3c:25:0f:4d:ab:41:03:26: a3:0d:87:d4:58:38:8b:2e:9a:ee:25:70:f3:79:b1: 16:59:ee:c4:ae:80:30:f0:a7:5c:96:db:d8:17:08: 5f:1b:78:3f:ac:be:a1:5b:dd:53:f6:b2:08:e9:12: 59:d6:8a:a5:12:67:ce:a2:1b:fd:c3:1b:98:b4:e6: 48:30:dd:08:44:a2:fa:84:bc:d2:85:c6:9f:34:c1: d7:14:0a:59:d4:6f:99:95:f5:8d:2d:0f:c7:19:76: f5:37:11:c7:ad:61:d8:fc:fc:6b:63:76:c5:39:c2: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:52:62:50:A3:31:17:B3:6A:AC:99:2B:05:90:11:D4:AE:F6:F9 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:39:1f:06:c3:e8:df:7d:1b:66:38:4d:9e:83:9b:69:97:62: 43:a6:a0:e8:ca:ba:23:02:38:d9:99:af:57:ed:3e:7e:a4:6e: c1:28:cc:46:3f:b8:a9:33:09:4f:aa:d4:ef:6e:0c:2a:c6:71: 09:40:ed:01:3f:af:d3:7f:ab:a6:1a:33:b0:a2:84:85:ed:36: 38:61:0b:dd:35:aa:66:55:e7:44:93:ff:11:a5:d1:c6:13:53: 7d:3a:bf:2e:4c:0c:21:de:20:9d:c6:13:61:48:e6:df:2f:ed: 21:49:1d:a6:bf:70:63:0b:47:c3:8c:1c:4c:72:5d:a3:85:74: e5:81:32:14:58:37:89:6f:c6:e1:48:26:54:97:2d:6e:9b:66: 09:30:c4:09:5e:d2:2e:a2:c5:5d:bf:5d:63:f0:39:ae:cf:57: 38:ce:9a:1f:87:53:54:cc:f8:5a:5f:d2:43:df:d0:d2:ee:cb: 9b:2e:d7:04:d4:91:32:d0:81:75:3a:b3:a7:f1:a4:80:64:b3: 65:68:27:37:bc:65:84:11:31:bb:1e:17:68:47:a4:61:c4:bd: a7:d0:73:6d:32:12:24:f8:2a:fe:c9:58:fa:84:2f:c5:ad:cd: e9:92:eb:69:a4:07:a6:d8:ba:24:d4:7c:a2:b5:e0:2b:92:6d: 6c:08:20:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjYwNzAyMTkyODQ1WhcNMjYwNzA5MTkyODQ1WjAYMRYwFAYD VQQDEw02YTQ2YmJlZC04YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTPeGzpBD1Ovo+xReANTN5BN9U4xC5Tq1nwzdH7voLqq3RGUpkCSTP9Z9FpU gItC1yJ2MrBnLQh6BUp3ho9JXhfyEtRUEjQaOqlm11j72nIpFFn/vGUxOfzmZTg/ jr+uC6cMEWKfJJ149XMkg7xFFbh9nj/CI6vyIOaskKeBu8Vtiwp62hM1l+W2CxB6 PCUPTatBAyajDYfUWDiLLpruJXDzebEWWe7EroAw8KdcltvYFwhfG3g/rL6hW91T 9rII6RJZ1oqlEmfOohv9wxuYtOZIMN0IRKL6hLzShcafNMHXFApZ1G+ZlfWNLQ/H GXb1NxHHrWHY/PxrY3bFOcJHlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1fUmJQ ozEXs2qsmSsFkBHUrvb5MB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfzkfBsPo330bZjhNnoObaZdiQ6ag6Mq6IwI42ZmvV+0+fqRuwSjMRj+4qTMJ T6rU724MKsZxCUDtAT+v03+rphozsKKEhe02OGEL3TWqZlXnRJP/EaXRxhNTfTq/ LkwMId4gncYTYUjm3y/tIUkdpr9wYwtHw4wcTHJdo4V05YEyFFg3iW/G4UgmVJct bptmCTDECV7SLqLFXb9dY/A5rs9XOM6aH4dTVMz4Wl/SQ9/Q0u7Lmy7XBNSRMtCB dTqzp/GkgGSzZWgnN7xlhBExux4XaEekYcS9p9BzbTISJPgq/slY+oQvxa3N6ZLr aaQHpti6JNR8orXgK5JtbAggoA== -----END CERTIFICATE-----Generated at Sat Jul 4 16:09:43 2026 by rpki-client