$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: mzKZCXZs1e7+FyJZNlfZMmFuGjZBCr8myt1YI1lFTTM= Subject key identifier: F3:70:3F:7B:DD:3A:C5:33:9B:10:F6:2A:8E:2B:3E:F2:A8:BF:6F:E3 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08BB Signing time: Tue 28 Jul 2026 21:01:09 +0000 Manifest this update: Tue 28 Jul 2026 21:01:08 +0000 Manifest next update: Tue 04 Aug 2026 21:01:08 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: VAfMx1vBOXE6p8R6WxciuqrCXijlhpaaNG8ugrmAI0k=) 2: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 3: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 4: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 6: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 7: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 8: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 9: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 10: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jul 28 21:01:08 2026 GMT Not After : Aug 4 21:01:08 2026 GMT Subject: CN=6a691895-8c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:0b:05:de:3f:ce:05:d3:3b:0f:a8:b3:a1: 8b:ff:07:00:b2:a4:16:34:a3:97:5f:cc:96:41:68: 1e:1e:5d:f7:42:73:55:1b:a0:71:83:1d:a8:61:9b: 66:05:14:fb:9a:ba:67:b1:87:48:74:2e:1f:7d:d8: e8:fc:f4:32:a3:c6:7e:6c:28:3e:55:60:57:44:2b: df:07:a6:32:06:be:f6:9e:5a:4a:83:75:03:17:01: 41:60:53:6c:6a:bf:f9:77:53:00:ae:fe:2b:14:4c: 8e:bf:26:8b:52:2e:b4:61:71:7e:a4:23:c6:94:be: 39:aa:8f:5e:19:39:45:12:ae:e4:2b:d2:34:ff:46: ad:aa:8f:24:90:b1:b7:6f:c1:8f:ff:29:cf:4d:3b: 35:7c:f3:44:fa:de:9c:07:20:82:dd:7f:77:10:96: 6c:9a:97:98:29:62:5c:61:dd:32:87:a2:e2:b6:32: af:19:b3:f4:16:6f:8c:84:6e:7f:02:50:c2:ba:91: 13:20:ed:e5:45:53:9c:d4:1d:c9:d0:04:93:f9:20: f3:88:ce:17:68:5a:12:70:25:eb:81:d3:b1:bf:33: 40:b8:7a:26:ea:06:98:27:01:4c:bd:31:0a:22:30: cc:e8:57:6e:85:a3:f6:5a:6e:df:3a:20:c5:61:12: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:70:3F:7B:DD:3A:C5:33:9B:10:F6:2A:8E:2B:3E:F2:A8:BF:6F:E3 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:57:9e:88:69:40:cb:dd:93:ad:07:bc:a4:ce:5d:e4:84:73: d2:d6:f0:a0:e8:f0:32:ec:50:54:7c:7b:7a:aa:26:f3:d3:b7: 27:95:9a:8f:0b:72:8e:4c:4a:d1:6d:4b:9a:df:de:e6:0d:61: 35:18:30:87:5e:44:98:63:4d:7b:95:89:8f:b5:46:50:e8:dc: f1:82:e3:61:e2:a5:24:50:92:41:94:a2:66:dd:28:44:54:a0: 04:37:00:06:53:4a:11:4b:38:bb:74:1d:4c:9f:ca:00:8c:9e: 5f:e0:39:f7:e0:c6:51:3d:53:55:17:df:5f:cc:9f:cb:39:8f: d8:bf:db:5b:8d:13:7a:c7:77:ac:e1:a8:23:b0:83:3d:86:45: 28:eb:b3:3e:76:c4:6e:1c:46:c0:c7:ab:8b:98:07:4c:9f:76: 51:a9:3a:c1:fc:04:bc:fe:63:b7:ea:36:bc:a3:aa:54:09:94: b7:eb:de:1d:6b:74:69:f4:23:fb:de:1e:6e:9f:5c:1a:f4:70: 4a:b0:8a:bd:dd:69:0a:9c:57:98:e9:2e:64:ce:67:a7:fc:0a: 01:c7:6f:6e:16:e7:7a:f9:af:bb:77:ce:7d:08:a8:a3:73:3d: 50:0e:f8:e3:d1:87:08:cf:74:9a:ed:4a:15:18:b4:e1:d6:9f: e8:d0:ee:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNzI4MjEwMTA4WhcNMjYwODA0MjEwMTA4WjAYMRYwFAYD VQQDEw02YTY5MTg5NS04Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsMLBd4/zgXTOw+os6GL/wcAsqQWNKOXX8yWQWgeHl33QnNVG6Bxgx2oYZtm BRT7mrpnsYdIdC4ffdjo/PQyo8Z+bCg+VWBXRCvfB6YyBr72nlpKg3UDFwFBYFNs ar/5d1MArv4rFEyOvyaLUi60YXF+pCPGlL45qo9eGTlFEq7kK9I0/0atqo8kkLG3 b8GP/ynPTTs1fPNE+t6cByCC3X93EJZsmpeYKWJcYd0yh6LitjKvGbP0Fm+MhG5/ AlDCupETIO3lRVOc1B3J0AST+SDziM4XaFoScCXrgdOxvzNAuHom6gaYJwFMvTEK IjDM6FduhaP2Wm7fOiDFYRIVJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNwP3vd OsUzmxD2Ko4rPvKov2/jMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABVeeiGlAy92TrQe8pM5d5IRz0tbwoOjwMuxQVHx7eqom89O3J5WajwtyjkxK 0W1Lmt/e5g1hNRgwh15EmGNNe5WJj7VGUOjc8YLjYeKlJFCSQZSiZt0oRFSgBDcA BlNKEUs4u3QdTJ/KAIyeX+A59+DGUT1TVRffX8yfyzmP2L/bW40Tesd3rOGoI7CD PYZFKOuzPnbEbhxGwMeri5gHTJ92Uak6wfwEvP5jt+o2vKOqVAmUt+veHWt0afQj +94ebp9cGvRwSrCKvd1pCpxXmOkuZM5np/wKAcdvbhbnevmvu3fOfQioo3M9UA74 49GHCM90mu1KFRi04daf6NDuxw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:34 2026 by rpki-client