$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: UW+IUXSC3b4RVxrr0SIEyE0/+poTGQxqL+3cYszCaA0= Subject key identifier: 15:AC:8E:15:69:AE:53:8A:B1:99:E3:CE:EF:7F:55:BC:3C:D2:B7:4E Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0A5D Signing time: Tue 28 Jul 2026 19:58:56 +0000 Manifest this update: Tue 28 Jul 2026 19:58:55 +0000 Manifest next update: Tue 04 Aug 2026 19:58:55 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: AoloWP6OdX9fmKFiuag7LjsNMYgX9ZJpTz8vefQvceU=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Jul 28 19:58:55 2026 GMT Not After : Aug 4 19:58:55 2026 GMT Subject: CN=6a6909ff-e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:ee:f4:33:9d:b9:e3:41:da:db:7e:0b:51: 29:34:ec:c4:71:2a:4c:9b:83:4a:5b:c1:08:8c:d0: d8:2c:5c:e4:2f:f9:9a:3e:64:67:1c:35:e4:ab:d7: 95:36:6e:1a:b5:ea:63:47:42:89:6d:6c:d5:fa:4d: cd:ee:86:8e:81:ed:c1:b3:88:7b:2c:76:14:10:db: 8c:15:56:68:36:41:fd:b9:5a:ee:5f:ca:e6:f8:f6: 13:6f:9f:7d:55:c9:5d:e2:18:e5:ac:ba:35:69:8b: 74:a6:01:11:ad:22:d7:04:65:28:76:ad:ba:e0:b9: 5f:80:b9:f2:d6:b8:35:4f:f3:fa:7f:fe:72:42:4d: 1e:89:8b:35:71:91:77:ee:24:bc:8d:d9:09:74:9f: cd:99:fa:2f:40:f4:9e:e8:d7:db:99:ef:8a:62:83: 65:95:8c:b6:cb:70:96:6c:4a:29:2d:13:05:5a:04: 13:26:d5:f8:8d:db:76:56:2f:e0:df:c5:61:3a:b8: 26:b9:1a:eb:0d:11:7f:87:06:1b:d8:b6:33:19:17: cd:49:95:9f:96:65:0e:c3:50:d3:38:63:11:af:ee: e2:27:93:c2:be:05:e1:5d:67:5f:e3:00:10:5f:1b: d3:f9:66:a9:96:ad:79:31:e6:ae:14:60:fd:11:c4: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AC:8E:15:69:AE:53:8A:B1:99:E3:CE:EF:7F:55:BC:3C:D2:B7:4E X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:17:78:32:0f:d8:0e:a1:a8:36:5a:11:fd:c9:2b:fc:e1: ac:c6:5c:96:97:76:3f:db:c3:9a:ac:bc:d4:6d:e2:0a:93:c7: 17:82:fa:1c:c7:71:58:27:38:d7:10:31:5f:7e:26:4f:1d:7e: 13:5a:04:53:15:48:03:23:9d:62:f6:11:58:a3:f6:ba:23:f5: f8:20:78:b1:92:af:63:fd:a3:6b:13:8f:13:bc:49:46:f9:f6: bc:b6:89:fb:66:a2:cf:c4:51:ce:f4:79:d3:59:42:fc:38:5e: e3:2d:ec:6e:62:be:0f:f0:a3:e3:61:9c:60:b2:f5:e6:32:69: 6d:57:15:23:81:54:dd:fc:65:5c:c2:7b:8c:6e:7a:49:6a:fd: 0b:82:65:04:55:eb:7b:44:37:df:66:43:60:be:2d:4f:0a:fa: 5a:7b:bb:81:e7:11:c0:e4:83:95:df:37:b5:65:28:2f:17:55: a8:58:3b:0a:99:45:32:dd:f8:45:2f:39:62:bd:cd:03:83:6a: 74:32:ad:c2:92:6a:23:d6:c5:43:83:7d:09:91:74:a0:dd:a1: 12:73:a9:66:cb:84:04:c0:61:f0:20:ea:e6:4b:6c:d6:e1:b4: bd:ce:0f:d8:2b:61:87:5b:69:85:bb:61:6f:b0:13:fa:17:e0: 8a:55:af:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjYwNzI4MTk1ODU1WhcNMjYwODA0MTk1ODU1WjAYMRYwFAYD VQQDEw02YTY5MDlmZi1lNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdDu9DOdueNB2tt+C1EpNOzEcSpMm4NKW8EIjNDYLFzkL/maPmRnHDXkq9eV Nm4atepjR0KJbWzV+k3N7oaOge3Bs4h7LHYUENuMFVZoNkH9uVruX8rm+PYTb599 Vcld4hjlrLo1aYt0pgERrSLXBGUodq264LlfgLny1rg1T/P6f/5yQk0eiYs1cZF3 7iS8jdkJdJ/NmfovQPSe6Nfbme+KYoNllYy2y3CWbEopLRMFWgQTJtX4jdt2Vi/g 38VhOrgmuRrrDRF/hwYb2LYzGRfNSZWflmUOw1DTOGMRr+7iJ5PCvgXhXWdf4wAQ XxvT+Waplq15MeauFGD9EcQdWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWsjhVp rlOKsZnjzu9/Vbw80rdOMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbuMXeDIP2A6hqDZaEf3JK/zhrMZclpd2P9vDmqy81G3iCpPHF4L6HMdxWCc4 1xAxX34mTx1+E1oEUxVIAyOdYvYRWKP2uiP1+CB4sZKvY/2jaxOPE7xJRvn2vLaJ +2aiz8RRzvR501lC/Dhe4y3sbmK+D/Cj42GcYLL15jJpbVcVI4FU3fxlXMJ7jG56 SWr9C4JlBFXre0Q332ZDYL4tTwr6Wnu7gecRwOSDld83tWUoLxdVqFg7CplFMt34 RS85Yr3NA4NqdDKtwpJqI9bFQ4N9CZF0oN2hEnOpZsuEBMBh8CDq5kts1uG0vc4P 2Cthh1tphbthb7AT+hfgilWvpw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:32 2026 by rpki-client