$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: HflCjvf9BlEDL23iX14xiZuy+6RQdNYN6X8SeD6VhkA= Subject key identifier: 88:92:F5:54:36:1B:AF:A2:2D:AD:D6:31:B5:57:9F:13:B6:42:0C:5A Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DD4 Signing time: Tue 28 Jul 2026 18:01:20 +0000 Manifest this update: Tue 28 Jul 2026 18:01:20 +0000 Manifest next update: Tue 04 Aug 2026 18:01:20 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: E/QS8XxifUv961/eR7d3SaKKpAL/QimzjsvuNzRt0SY=) 2: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Jul 28 18:01:20 2026 GMT Not After : Aug 4 18:01:20 2026 GMT Subject: CN=6a68ee70-e3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:ea:47:2d:04:e9:59:cc:ac:6b:29:c8:16: a8:ba:0f:66:d5:5e:f8:04:85:46:1d:88:25:73:d4: 01:3c:53:fd:83:3a:0b:b5:b1:a7:86:44:5c:59:23: 61:1e:f3:26:28:f4:a3:d7:c0:d9:38:ba:55:35:91: 6e:fd:c2:e3:42:1c:eb:b5:3a:fb:1a:71:e3:6d:d9: f7:0c:47:74:f4:d4:00:72:18:dd:e4:7e:4a:b0:be: fd:83:d1:2b:b0:c4:3d:9c:1b:36:81:b9:eb:22:32: 32:e8:5a:ed:65:0f:72:01:d3:72:35:73:f2:0e:da: 3e:eb:d2:f5:aa:12:bc:96:c6:35:51:fa:48:9d:14: ed:ee:c4:ba:e2:8f:89:56:9d:2e:f7:cf:67:2c:55: 4c:de:90:e7:6a:61:99:60:2f:fd:9a:d8:88:c2:90: 59:f8:c5:31:3f:11:a8:db:41:bc:d1:1e:39:47:ad: 46:bb:d9:b4:6f:62:94:94:fc:b5:c8:f5:a0:2c:94: 67:d0:1f:aa:58:83:77:d0:67:0a:f4:01:5c:2b:3a: 16:31:ff:71:2f:09:0d:b8:bf:0e:d0:46:0d:f6:2a: e0:81:8b:aa:4f:79:85:39:bb:75:28:28:9d:01:3e: 17:bc:d0:65:64:1f:c9:0a:08:ae:ca:a7:66:ea:8b: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:F5:54:36:1B:AF:A2:2D:AD:D6:31:B5:57:9F:13:B6:42:0C:5A X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:06:d6:20:db:b7:f6:32:9c:17:c7:81:e0:26:b2:df:10: af:85:67:6d:b6:d5:4e:84:a4:1e:fe:20:aa:be:b0:91:21:c1: b3:72:1d:40:5c:d9:62:e3:a6:49:f3:8b:6e:92:1f:49:9b:55: 4a:cb:e2:c8:a0:55:40:63:55:5c:5f:e4:b4:6a:64:9b:e1:76: c2:e1:a5:1a:64:61:14:f1:82:e3:c4:02:98:67:e6:83:7e:65: 63:74:d4:f8:28:19:f2:a3:20:ee:bf:d3:61:8d:2b:17:21:f8: 2f:54:d4:38:fa:c0:d2:5c:97:c5:6e:d0:83:89:01:44:5e:f4: e1:e6:e9:8f:7f:42:f1:2a:14:4e:62:65:5a:a4:82:6c:12:fe: 94:66:ea:ec:3b:ca:3b:17:82:c9:02:14:2d:82:aa:8f:e6:0a: b2:31:4a:b4:eb:b0:8a:d6:4e:2d:5a:b0:60:b0:43:dd:1d:e6: b6:7d:5f:9b:cb:ea:72:74:6a:44:79:cb:9a:0d:0a:71:81:e6: 5d:6d:2f:64:6d:42:ec:e4:b0:f8:b0:fa:d2:fc:de:47:74:37: 8b:43:00:a9:08:a6:12:a8:cb:6e:ea:1a:6e:8a:90:d7:96:e5: 26:1c:b0:04:8a:6f:fd:9f:0a:c2:08:0c:0b:ef:c1:c8:9e:49: 7b:7c:2b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNzI4MTgwMTIwWhcNMjYwODA0MTgwMTIwWjAYMRYwFAYD VQQDEw02YTY4ZWU3MC1lM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLrqRy0E6VnMrGspyBaoug9m1V74BIVGHYglc9QBPFP9gzoLtbGnhkRcWSNh HvMmKPSj18DZOLpVNZFu/cLjQhzrtTr7GnHjbdn3DEd09NQAchjd5H5KsL79g9Er sMQ9nBs2gbnrIjIy6FrtZQ9yAdNyNXPyDto+69L1qhK8lsY1UfpInRTt7sS64o+J Vp0u989nLFVM3pDnamGZYC/9mtiIwpBZ+MUxPxGo20G80R45R61Gu9m0b2KUlPy1 yPWgLJRn0B+qWIN30GcK9AFcKzoWMf9xLwkNuL8O0EYN9irggYuqT3mFObt1KCid AT4XvNBlZB/JCgiuyqdm6otIsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiS9VQ2 G6+iLa3WMbVXnxO2QgxaMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS+AG1iDbt/YynBfHgeAmst8Qr4VnbbbVToSkHv4gqr6wkSHBs3IdQFzZYuOm SfOLbpIfSZtVSsviyKBVQGNVXF/ktGpkm+F2wuGlGmRhFPGC48QCmGfmg35lY3TU +CgZ8qMg7r/TYY0rFyH4L1TUOPrA0lyXxW7Qg4kBRF704ebpj39C8SoUTmJlWqSC bBL+lGbq7DvKOxeCyQIULYKqj+YKsjFKtOuwitZOLVqwYLBD3R3mtn1fm8vqcnRq RHnLmg0KcYHmXW0vZG1C7OSw+LD60vzeR3Q3i0MAqQimEqjLbuoaboqQ15blJhyw BIpv/Z8KwggMC+/ByJ5Je3wrZQ== -----END CERTIFICATE-----Generated at Wed Jul 29 08:16:19 2026 by rpki-client