$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: gj+ePWoMkfCdGtxaEJx3kVAPQ3QGMUIInR5e0bg78FU= Subject key identifier: 37:7A:60:BC:6E:BE:93:CC:71:DE:8D:DE:CD:D0:0E:9D:A5:55:00:F0 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 089C Signing time: Sun 26 Jul 2026 21:20:42 +0000 Manifest this update: Sun 26 Jul 2026 21:20:41 +0000 Manifest next update: Sun 02 Aug 2026 21:20:41 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: kbRRkbCSYz37WOqomX3Mkc3V7/8Iir4EvXXOs6Pv3DQ=) 2: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=) 3: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Jul 26 21:20:41 2026 GMT Not After : Aug 2 21:20:41 2026 GMT Subject: CN=6a667a29-8eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:bd:8b:21:5d:cd:eb:ca:57:ae:77:67:8e: cc:a6:c1:fd:8d:32:ad:87:7c:ec:bd:bb:17:28:33: ca:63:9c:ee:67:3f:b0:2d:3e:f5:68:b1:23:29:6a: d9:20:19:e1:52:8f:5a:81:17:3e:2c:6a:85:65:9d: 4c:01:5b:2a:f2:47:b3:e4:93:e1:ee:28:5e:6a:5c: df:59:6a:3c:fd:8b:59:26:6f:07:82:63:3b:b0:71: 1e:98:e0:c9:2c:78:da:e9:9a:4b:fb:ff:de:6b:4f: 81:8c:c1:dd:05:2b:a6:2d:fa:7f:67:49:b2:34:cc: 07:b5:bf:de:0f:b1:3a:b7:71:93:ba:9b:d3:d8:af: b0:78:a1:99:f9:31:88:64:18:d7:84:f1:7f:1b:35: 6d:4b:aa:b7:65:78:ca:17:e9:81:5b:20:aa:7a:ab: d1:6b:f1:d2:2f:90:ca:78:9c:cc:d5:1d:db:e2:78: 9f:44:87:9f:32:54:a1:59:ad:a0:0e:f1:57:31:7d: e7:bb:95:5b:bf:92:ea:a8:7b:c2:cd:81:bd:31:ac: 80:ac:f3:eb:ad:cb:8b:a4:8d:65:39:0a:df:d4:fe: be:41:5e:eb:d5:b8:c1:6d:29:26:ed:86:ac:ce:5c: 21:c8:60:8d:2b:5b:bc:f3:4a:94:fc:ae:f5:bb:6b: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7A:60:BC:6E:BE:93:CC:71:DE:8D:DE:CD:D0:0E:9D:A5:55:00:F0 X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:28:59:dd:f4:9e:99:35:75:59:be:13:58:7b:5b:75:cb: b2:dc:3b:69:54:96:77:b8:19:c9:6a:bb:8a:5d:83:bf:73:d8: 83:30:ae:34:62:ea:43:2e:02:3d:fe:95:ee:4f:6c:4e:74:eb: 1e:3f:7f:72:4d:f3:bb:6d:63:3b:33:c2:c5:af:be:4a:a1:48: 6d:3e:1b:04:b9:a6:3a:59:cf:4f:a3:74:a0:8d:c3:76:1f:79: 93:77:16:86:20:f8:a8:18:17:cd:9a:d5:1f:3c:1f:96:b4:e0: c3:8b:65:28:4b:7d:a8:4d:10:86:0d:e8:86:85:66:33:44:59: df:75:d9:ec:33:4b:90:fd:33:b7:ad:1b:a6:63:1e:29:72:dd: 66:55:60:7e:fd:0e:56:5e:0e:3a:96:9a:41:54:a8:42:c3:82: 17:fc:fa:a6:97:3d:3e:05:f2:71:70:5a:d5:9e:26:de:e7:00: 8e:06:08:b0:05:7d:79:af:bf:2b:bc:01:ed:42:aa:74:f0:46: 95:81:cc:22:35:c2:9f:58:d2:7f:54:b5:2f:39:0b:63:4c:d2: 28:e3:e3:40:19:7f:85:8e:51:3d:6e:8f:cb:5e:a9:9c:6d:56: de:58:0c:64:d2:11:ab:a3:ab:78:9f:ff:23:46:52:9a:65:a2: 2e:14:a7:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjYwNzI2MjEyMDQxWhcNMjYwODAyMjEyMDQxWjAYMRYwFAYD VQQDEw02YTY2N2EyOS04ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dC9iyFdzevKV653Z47MpsH9jTKth3zsvbsXKDPKY5zuZz+wLT71aLEjKWrZ IBnhUo9agRc+LGqFZZ1MAVsq8kez5JPh7ihealzfWWo8/YtZJm8HgmM7sHEemODJ LHja6ZpL+//ea0+BjMHdBSumLfp/Z0myNMwHtb/eD7E6t3GTupvT2K+weKGZ+TGI ZBjXhPF/GzVtS6q3ZXjKF+mBWyCqeqvRa/HSL5DKeJzM1R3b4nifRIefMlShWa2g DvFXMX3nu5Vbv5LqqHvCzYG9MayArPPrrcuLpI1lOQrf1P6+QV7r1bjBbSkm7Yas zlwhyGCNK1u880qU/K71u2uITQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDd6YLxu vpPMcd6N3s3QDp2lVQDwMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWsoWd30npk1dVm+E1h7W3XLstw7aVSWd7gZyWq7il2Dv3PYgzCuNGLqQy4C Pf6V7k9sTnTrHj9/ck3zu21jOzPCxa++SqFIbT4bBLmmOlnPT6N0oI3Ddh95k3cW hiD4qBgXzZrVHzwflrTgw4tlKEt9qE0Qhg3ohoVmM0RZ33XZ7DNLkP0zt60bpmMe KXLdZlVgfv0OVl4OOpaaQVSoQsOCF/z6ppc9PgXycXBa1Z4m3ucAjgYIsAV9ea+/ K7wB7UKqdPBGlYHMIjXCn1jSf1S1LzkLY0zSKOPjQBl/hY5RPW6Py16pnG1W3lgM ZNIRq6OreJ//I0ZSmmWiLhSn0Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:00 2026 by rpki-client