$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: PoWj0yAOx+40awyk4MfREvjatI1/KFG3s0zsU+2/xRU= Subject key identifier: 73:C8:71:8E:B7:BD:DA:2C:89:6B:DC:EC:31:5E:91:2C:D7:B0:66:6D Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 08E8 Signing time: Sun 26 Jul 2026 20:53:10 +0000 Manifest this update: Sun 26 Jul 2026 20:53:09 +0000 Manifest next update: Sun 02 Aug 2026 20:53:09 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: mVLFmW/2rZnvoYvbvT5uOynGjHCpYLPR0tttA7BXh54=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: D05It9UAiO51r8ILKVDfdiFJE2qz6LfsL6XWmNrhCuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Jul 26 20:53:09 2026 GMT Not After : Aug 2 20:53:09 2026 GMT Subject: CN=6a6673b6-ac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:80:9e:fd:cb:fc:66:4f:d7:8e:51:09:16: 3d:65:8f:a8:5d:4c:b0:08:55:b9:35:0b:20:2c:54: 2e:73:78:7c:b9:be:38:c7:70:87:53:43:d6:72:07: 49:bc:14:c0:67:80:a9:17:65:cf:f5:6a:b7:8a:04: 20:d2:09:b9:a3:73:8d:7a:98:36:d6:2c:f8:c7:31: 24:16:54:b5:0f:59:f3:fc:4a:36:5b:d8:cb:a8:5e: d8:25:65:27:95:7c:8e:c9:54:ed:67:cc:ba:1f:36: 52:17:6f:6b:6a:b7:a3:27:79:d1:55:86:b2:85:31: 9d:ca:48:63:fd:0c:d9:12:83:26:d0:09:d1:0f:b6: 2f:ed:b2:8c:0b:c2:f2:34:09:82:4a:dd:40:1c:0a: 3a:fd:72:98:68:f1:2d:ab:5e:b2:76:b4:9e:29:4d: cc:41:ba:74:6d:73:03:07:de:51:52:b3:c5:37:82: 79:41:13:1e:cd:8c:a3:05:1a:40:48:06:62:a9:bc: 02:39:fa:5a:46:9d:b6:57:44:f7:b5:20:43:13:1d: c6:ff:1b:c7:5d:86:1d:ec:9d:b7:7c:c7:37:f0:e1: e4:a4:8e:44:86:b7:8e:41:50:90:46:16:d7:69:b8: 08:64:cf:cb:2b:fe:cd:c3:de:db:cb:b6:6c:df:c6: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C8:71:8E:B7:BD:DA:2C:89:6B:DC:EC:31:5E:91:2C:D7:B0:66:6D X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ad:4b:9c:97:35:81:4a:40:be:fc:ff:75:35:95:be:66:5c: f4:71:f7:bd:ec:d0:89:2b:5c:33:85:6d:7a:12:66:06:f0:c3: ba:01:fb:e7:01:7f:a0:ad:ef:76:f2:ab:eb:36:42:cf:b2:fd: b3:74:05:c6:bd:bb:7d:a4:dd:5e:9c:51:8e:ac:93:d0:0d:e3: 56:be:4f:23:15:9f:c5:94:84:42:91:58:93:a8:b9:ac:0b:27: 1d:ec:b5:13:82:ac:d5:b8:d1:3c:15:c3:f4:87:f7:4b:3f:9e: fe:a7:37:6b:c8:37:de:01:3b:a3:b2:3c:cd:02:70:ee:49:78: 28:91:d1:4f:05:64:97:99:75:47:14:70:bb:ce:5f:40:59:c1: 2c:c4:5e:0c:3c:56:5d:c9:4d:d2:a3:f6:00:78:df:01:af:49: e1:bb:1d:e5:70:5a:04:b0:ae:6a:77:7e:48:3b:94:55:3c:66: c3:cf:4f:23:e6:f1:b5:e5:9e:f8:17:aa:a2:1f:34:0b:ac:45: 80:0f:df:07:4c:3e:27:43:0e:b8:c2:c3:e4:01:a2:76:dd:dd: 8f:96:d4:71:ac:06:5c:56:24:0f:d9:db:8c:e3:11:27:31:8c: 11:56:b5:59:e7:f2:96:de:7b:1b:c6:7c:bc:dc:19:c7:cc:6c: 24:ca:a1:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjYwNzI2MjA1MzA5WhcNMjYwODAyMjA1MzA5WjAYMRYwFAYD VQQDEw02YTY2NzNiNi1hYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjSAnv3L/GZP145RCRY9ZY+oXUywCFW5NQsgLFQuc3h8ub44x3CHU0PWcgdJ vBTAZ4CpF2XP9Wq3igQg0gm5o3ONepg21iz4xzEkFlS1D1nz/Eo2W9jLqF7YJWUn lXyOyVTtZ8y6HzZSF29rarejJ3nRVYayhTGdykhj/QzZEoMm0AnRD7Yv7bKMC8Ly NAmCSt1AHAo6/XKYaPEtq16ydrSeKU3MQbp0bXMDB95RUrPFN4J5QRMezYyjBRpA SAZiqbwCOfpaRp22V0T3tSBDEx3G/xvHXYYd7J23fMc38OHkpI5EhreOQVCQRhbX abgIZM/LK/7Nw97by7Zs38ajswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPIcY63 vdosiWvc7DFekSzXsGZtMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs61LnJc1gUpAvvz/dTWVvmZc9HH3vezQiStcM4VtehJmBvDDugH75wF/oK3v dvKr6zZCz7L9s3QFxr27faTdXpxRjqyT0A3jVr5PIxWfxZSEQpFYk6i5rAsnHey1 E4Ks1bjRPBXD9If3Sz+e/qc3a8g33gE7o7I8zQJw7kl4KJHRTwVkl5l1RxRwu85f QFnBLMReDDxWXclN0qP2AHjfAa9J4bsd5XBaBLCuand+SDuUVTxmw89PI+bxteWe +Beqoh80C6xFgA/fB0w+J0MOuMLD5AGidt3dj5bUcawGXFYkD9nbjOMRJzGMEVa1 Wefylt57G8Z8vNwZx8xsJMqhmg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:53 2026 by rpki-client