$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: vs1Q3ZAu/6c/gwoagS/w4+MJiIKi0a2btUe7I97wW3g= Subject key identifier: 52:75:DC:84:07:83:43:F9:29:FA:49:D3:00:9D:FD:97:44:0C:D2:EA Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 0228 Signing time: Wed 29 Jul 2026 03:48:14 +0000 Manifest this update: Wed 29 Jul 2026 03:48:13 +0000 Manifest next update: Wed 05 Aug 2026 03:48:13 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: tvwkZrMk+qi5Isc5VrFgzPDGxaL+GSY999XrE3ibnhQ=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: 7N2StUmPE70BVOLqSC1CSXVVp2n3H7wqr0u0r+i43tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Jul 29 03:48:13 2026 GMT Not After : Aug 5 03:48:13 2026 GMT Subject: CN=6a6977fe-ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:f8:95:a9:5e:c0:82:24:2c:f9:b9:9b:1b: e1:52:2a:c6:c9:34:f8:7a:6e:b5:51:ee:05:ca:70: e7:50:62:71:b3:28:e0:a7:0a:a9:ee:82:23:40:d4: d4:03:9d:d2:65:27:a4:ee:ba:8d:25:98:ac:7f:15: e3:fc:6b:b2:18:29:e6:f0:fc:a0:5f:2a:34:8c:39: 40:6b:d7:77:f5:66:38:4f:42:62:d8:b1:f4:74:4c: a2:85:69:ca:21:77:06:49:6f:62:f8:b0:9b:42:99: e8:eb:ea:a0:76:92:41:b3:74:b5:c5:3d:6a:64:0d: ae:5f:a2:62:45:85:7a:8a:f7:0d:8d:f4:de:ac:95: 5c:f6:07:95:8e:6b:d1:f7:08:7f:52:bb:78:01:71: b2:a4:5f:c3:cd:d0:c7:12:60:96:7d:19:3f:0e:e2: 94:10:5f:ce:33:fe:64:74:b3:bb:0a:4e:a4:7e:0c: 6f:06:02:83:9d:7e:cd:12:6a:65:8e:4e:f5:d3:93: 30:34:5d:6b:61:d0:ad:44:93:b0:b1:dd:20:e9:c8: d4:8c:f5:2a:7c:68:b0:c6:9e:0a:3f:4a:66:ee:4c: c1:06:c2:1c:bb:25:ef:e5:d0:96:58:25:9b:8d:08: 86:a8:3b:c9:f9:8b:82:56:c0:69:90:9a:88:4a:cf: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:DC:84:07:83:43:F9:29:FA:49:D3:00:9D:FD:97:44:0C:D2:EA X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:46:71:90:cd:2e:41:d5:19:cb:7a:aa:39:de:b5:a4:a8:54: b6:11:c4:04:f2:26:23:6f:5f:f4:1f:51:10:f6:63:2a:d0:11: f4:06:e0:dc:14:74:7f:0f:16:7e:e2:64:7c:aa:40:7f:b5:bd: 0b:37:44:28:2f:20:83:c6:12:1d:aa:95:85:e4:b7:51:e3:c2: 3a:f6:3e:8e:bb:a6:3b:03:96:04:3b:0f:fe:5f:fa:83:2d:21: 58:e3:fc:a2:34:cf:6f:60:a9:ea:dc:6b:1c:b3:f1:35:a4:23: d8:ab:21:28:3d:f3:05:c9:aa:81:5d:db:fe:97:01:78:6c:34: 1b:3c:d2:c7:0a:b0:a2:fd:cb:0d:59:6a:f2:00:2d:59:de:c3: a2:b9:ee:d2:8f:c2:35:83:20:d7:a0:85:ab:24:b9:00:0d:f7: 9f:fb:0a:bb:63:f9:63:b7:62:7f:15:13:91:70:3e:3a:52:54: 12:4b:bd:b0:d4:a3:90:8d:f1:4f:0d:9a:05:43:23:2c:f4:c4: 86:3c:6c:76:dd:bd:0c:08:b5:d6:7d:d5:d5:bd:ad:f7:4d:e9: 63:0a:57:28:82:6c:86:a8:57:31:32:5d:09:ac:21:de:e8:0a: 9d:0c:d8:38:d5:0d:12:61:c3:b3:03:f5:eb:0a:bf:60:2d:70: de:b7:f5:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjYwNzI5MDM0ODEzWhcNMjYwODA1MDM0ODEzWjAYMRYwFAYD VQQDEw02YTY5NzdmZS1lZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39D4lalewIIkLPm5mxvhUirGyTT4em61Ue4FynDnUGJxsyjgpwqp7oIjQNTU A53SZSek7rqNJZisfxXj/GuyGCnm8PygXyo0jDlAa9d39WY4T0Ji2LH0dEyihWnK IXcGSW9i+LCbQpno6+qgdpJBs3S1xT1qZA2uX6JiRYV6ivcNjfTerJVc9geVjmvR 9wh/Urt4AXGypF/DzdDHEmCWfRk/DuKUEF/OM/5kdLO7Ck6kfgxvBgKDnX7NEmpl jk7105MwNF1rYdCtRJOwsd0g6cjUjPUqfGiwxp4KP0pm7kzBBsIcuyXv5dCWWCWb jQiGqDvJ+YuCVsBpkJqISs8NmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJ13IQH g0P5KfpJ0wCd/ZdEDNLqMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk0ZxkM0uQdUZy3qqOd61pKhUthHEBPImI29f9B9REPZjKtAR9Abg3BR0fw8W fuJkfKpAf7W9CzdEKC8gg8YSHaqVheS3UePCOvY+jrumOwOWBDsP/l/6gy0hWOP8 ojTPb2Cp6txrHLPxNaQj2KshKD3zBcmqgV3b/pcBeGw0GzzSxwqwov3LDVlq8gAt Wd7Dornu0o/CNYMg16CFqyS5AA33n/sKu2P5Y7difxUTkXA+OlJUEku9sNSjkI3x Tw2aBUMjLPTEhjxsdt29DAi11n3V1b2t903pYwpXKIJshqhXMTJdCawh3ugKnQzY ONUNEmHDswP16wq/YC1w3rf17w== -----END CERTIFICATE-----Generated at Wed Jul 29 07:54:44 2026 by rpki-client