$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: ZmAB8XYojrGMWPqi4i1K2UGLYeUj39YIXtOinlSokPk= Subject key identifier: EF:87:87:FC:1F:C5:03:02:41:36:6A:AA:15:F0:55:6D:70:D4:A3:4C Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0C43 Signing time: Sun 26 Jul 2026 19:05:35 +0000 Manifest this update: Sun 26 Jul 2026 19:05:35 +0000 Manifest next update: Sun 02 Aug 2026 19:05:35 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: tUcPpfTSApjyi2ErtcomcSIQ9kA7IUxja+VtxWE6hKU=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bPIRgHEZY9rLQvrwabu6nPsfSsBA8Z8Wnu5AlQzU9KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Jul 26 19:05:35 2026 GMT Not After : Aug 2 19:05:35 2026 GMT Subject: CN=6a665a7f-b196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:f2:c0:71:8c:19:8f:67:2d:83:ef:de:80: 80:6a:4e:3e:20:a7:a8:d1:c7:2d:b5:d7:bd:fd:e9: 71:a4:cd:07:34:6c:af:77:09:05:3f:84:30:80:1f: 8f:37:14:31:78:b0:55:d3:05:24:7c:95:65:d3:90: 79:c0:dc:ba:dd:19:ad:4f:ce:38:ea:76:4d:23:e2: 67:50:ed:52:f0:a4:d8:8d:a3:98:20:ba:e6:c7:ea: fc:73:95:4b:71:cb:13:0b:d2:9b:f1:44:d2:e9:9c: 0e:63:cc:ca:ee:ed:11:b4:cf:0c:8b:88:1b:ba:d7: b5:d8:62:75:21:ee:85:88:e5:a2:f4:3e:f5:a5:66: b5:4b:9a:b8:73:1b:bb:e9:68:86:99:ff:2e:14:5a: 91:d5:20:df:1b:1f:21:e2:00:86:f7:9f:f1:6a:7f: 97:53:78:99:4f:10:37:72:96:a5:0a:72:36:a1:31: 31:b3:ba:ad:7d:cb:01:26:da:42:9f:2d:84:62:62: 0a:85:ee:4f:09:64:d6:d9:a0:df:e4:1d:26:a8:67: d0:0d:5f:34:6b:f6:af:d0:2c:6b:de:19:83:90:f0: 71:c0:66:a3:ea:b9:83:65:20:4c:07:95:af:d1:09: 0a:e8:36:bd:8f:9d:42:c1:19:56:1d:ff:78:77:43: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:87:FC:1F:C5:03:02:41:36:6A:AA:15:F0:55:6D:70:D4:A3:4C X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c8:c4:fe:ff:6a:40:8a:3e:a9:14:6a:33:ab:d3:48:f7:a8: c7:fe:fd:0e:08:96:7e:1a:57:32:9b:e1:16:8e:5c:5a:4d:a4: 94:65:a3:b4:48:0d:73:5e:f7:00:0b:6b:cd:0e:d2:12:1f:bb: 7e:2c:62:de:69:e4:f5:5c:74:76:93:79:4e:75:0b:84:6c:d2: 84:0f:ff:1c:59:b2:08:12:90:24:c6:58:27:46:bf:4e:89:a2: aa:62:72:dd:24:50:9e:76:9c:39:ef:b7:e0:a8:e8:d3:e3:36: 14:03:0d:09:af:04:d1:c0:58:05:af:84:a6:7f:b2:9e:b9:62: 49:8d:97:35:2b:a1:10:1b:41:78:46:bb:d7:9c:7f:36:8b:02: a0:3d:5b:0e:54:a6:8c:e8:1e:86:82:a2:29:10:29:de:7a:bd: 37:7b:98:d7:67:08:73:56:1e:45:0a:9c:b0:67:46:41:7c:b7: ec:7a:dd:57:fc:2c:66:c6:73:57:9b:4c:9b:93:17:58:e1:49: 71:56:09:4a:3a:7f:be:04:56:e0:e3:61:64:8a:67:a3:ec:b2: 07:56:b1:8c:5a:17:95:a5:0c:6e:69:cf:e9:d9:58:fc:0d:ad: 59:02:6b:be:1e:b2:d1:21:d6:34:51:aa:cb:a6:84:03:5f:7a: d6:eb:cf:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjYwNzI2MTkwNTM1WhcNMjYwODAyMTkwNTM1WjAYMRYwFAYD VQQDEw02YTY2NWE3Zi1iMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNzywHGMGY9nLYPv3oCAak4+IKeo0ccttde9/elxpM0HNGyvdwkFP4QwgB+P NxQxeLBV0wUkfJVl05B5wNy63RmtT8446nZNI+JnUO1S8KTYjaOYILrmx+r8c5VL ccsTC9Kb8UTS6ZwOY8zK7u0RtM8Mi4gbute12GJ1Ie6FiOWi9D71pWa1S5q4cxu7 6WiGmf8uFFqR1SDfGx8h4gCG95/xan+XU3iZTxA3cpalCnI2oTExs7qtfcsBJtpC ny2EYmIKhe5PCWTW2aDf5B0mqGfQDV80a/av0Cxr3hmDkPBxwGaj6rmDZSBMB5Wv 0QkK6Da9j51CwRlWHf94d0MiewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+Hh/wf xQMCQTZqqhXwVW1w1KNMMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJcjE/v9qQIo+qRRqM6vTSPeox/79DgiWfhpXMpvhFo5cWk2klGWjtEgNc173 AAtrzQ7SEh+7fixi3mnk9Vx0dpN5TnULhGzShA//HFmyCBKQJMZYJ0a/TomiqmJy 3SRQnnacOe+34Kjo0+M2FAMNCa8E0cBYBa+Epn+ynrliSY2XNSuhEBtBeEa715x/ NosCoD1bDlSmjOgehoKiKRAp3nq9N3uY12cIc1YeRQqcsGdGQXy37HrdV/wsZsZz V5tMm5MXWOFJcVYJSjp/vgRW4ONhZIpno+yyB1axjFoXlaUMbmnP6dlY/A2tWQJr vh6y0SHWNFGqy6aEA1961uvP1A== -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:17 2026 by rpki-client