$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft File: H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json) Hash identifier: 8VcIrnbuEWwNEP49WRxzHHTQMLh5sckCNeNmX0oG1UI= Subject key identifier: E5:4A:1F:84:55:4F:90:0A:89:94:82:52:93:8A:42:1C:58:A2:BA:5D Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft Manifest number: 0773 Signing time: Tue 28 Jul 2026 22:08:23 +0000 Manifest this update: Tue 28 Jul 2026 22:08:23 +0000 Manifest next update: Tue 04 Aug 2026 22:08:23 +0000 Files and hashes: 1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: IH8xcy4RLrP5ayqZt3nJiMyXSpIclAzvDMi01Repdng=) 2: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: JK6/e0PvYBa8kGFQgLjtSrCPCDpo6wNDkFljh8D9dzM=) 3: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: NXfieC6S74PlG+JtYRQQl5gMzeIDNhGSgnxY2WBkw18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Jul 28 22:08:23 2026 GMT Not After : Aug 4 22:08:23 2026 GMT Subject: CN=6a692857-f5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:1e:fe:e5:77:4f:21:33:16:a4:dc:70:c4: 62:54:c9:fa:55:a2:fd:89:67:9d:79:f1:45:dd:0a: a0:2c:57:d3:a6:74:43:db:c7:06:54:b0:e6:9d:97: 6c:87:a3:06:9b:5e:ed:16:89:4b:b1:01:aa:2b:b6: f4:77:6f:fa:73:19:91:f9:d4:f0:85:9b:8b:c4:33: e7:89:ca:dd:d4:0c:2c:ca:fe:5e:23:5b:e2:b0:97: 58:aa:13:f2:df:03:fe:08:0e:21:37:84:b1:cd:5d: 84:7a:ee:98:f2:4e:33:75:a1:5d:90:42:2a:14:eb: b2:13:7a:f0:e0:e4:32:ad:a9:ba:ed:3d:0d:c9:76: fd:78:b2:e4:c6:5e:58:12:c0:cd:77:8b:5b:18:f1: f7:b2:38:4d:5a:f1:f8:0b:fa:49:47:26:45:97:90: f1:b7:26:2b:1e:65:4d:5e:8f:63:1a:64:e6:61:ad: 72:ce:9a:d2:da:1b:cb:bb:26:3d:31:5c:83:22:3b: d2:38:f9:d9:6c:5f:34:3d:e2:cb:68:7d:85:7b:b6: 51:c2:f2:c7:09:7b:5b:e5:0e:bd:ec:d3:56:e4:5b: 8f:60:f5:f4:3c:33:dd:52:69:65:d8:8c:06:13:6a: c2:60:e2:df:40:64:e4:b6:9f:e7:8e:82:8b:64:27: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4A:1F:84:55:4F:90:0A:89:94:82:52:93:8A:42:1C:58:A2:BA:5D X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:73:15:d9:0f:52:15:f5:31:f6:7e:d6:fe:3f:5a:ff:22:d0: 0c:f5:f4:b7:a4:71:ad:40:93:e3:c4:16:33:34:b4:1a:c6:aa: fc:1d:e5:05:a8:1d:d9:1d:79:f8:dd:81:a8:05:11:24:c5:2a: 00:d2:dc:30:98:0c:74:a0:c6:63:2a:cc:e1:c0:e6:d2:3e:47: 3d:7e:e3:53:d9:51:53:1c:48:4b:be:47:2a:37:e3:06:c4:c7: d5:9a:e4:03:6f:5a:ce:65:d3:0d:7a:b3:b9:90:5c:17:91:0f: 36:5b:9b:ee:09:1e:3f:f9:6f:1b:3c:92:27:c5:60:1e:9c:d7: 49:38:d0:f9:55:d0:ea:3d:79:09:a6:a2:b9:c3:d1:5d:a3:7e: 9a:e9:74:30:d1:db:8f:6c:7c:8b:80:e2:50:8f:12:2e:b2:7f: 65:30:ba:2b:9c:18:46:0d:64:e8:9b:6a:e6:89:77:1a:48:30: 68:d7:68:0a:fa:13:12:7e:09:d3:22:c4:5c:dd:f9:a7:d1:d6: 75:50:46:91:d3:6f:61:fd:9c:96:e2:87:91:2e:81:4f:13:a8: 89:2a:c5:38:6c:cf:70:00:77:1a:b1:46:c2:fb:ac:87:00:34: ab:bc:25:82:7c:cd:94:54:eb:b9:06:64:be:18:ef:80:51:8e: f8:2d:54:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjYwNzI4MjIwODIzWhcNMjYwODA0MjIwODIzWjAYMRYwFAYD VQQDEw02YTY5Mjg1Ny1mNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkH0e/uV3TyEzFqTccMRiVMn6VaL9iWedefFF3QqgLFfTpnRD28cGVLDmnZds h6MGm17tFolLsQGqK7b0d2/6cxmR+dTwhZuLxDPnicrd1Awsyv5eI1visJdYqhPy 3wP+CA4hN4SxzV2Eeu6Y8k4zdaFdkEIqFOuyE3rw4OQyram67T0NyXb9eLLkxl5Y EsDNd4tbGPH3sjhNWvH4C/pJRyZFl5DxtyYrHmVNXo9jGmTmYa1yzprS2hvLuyY9 MVyDIjvSOPnZbF80PeLLaH2Fe7ZRwvLHCXtb5Q697NNW5FuPYPX0PDPdUmll2IwG E2rCYOLfQGTktp/njoKLZCfeCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVKH4RV T5AKiZSCUpOKQhxYorpdMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDc3Qi8xQzI1NjI3MDcyNTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05L anJoR1BUbFJ3aW8wV0Rlc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwXMV2Q9SFfUx9n7W/j9a/yLQDPX0t6RxrUCT48QWMzS0Gsaq/B3lBagd2R15 +N2BqAURJMUqANLcMJgMdKDGYyrM4cDm0j5HPX7jU9lRUxxIS75HKjfjBsTH1Zrk A29azmXTDXqzuZBcF5EPNlub7gkeP/lvGzySJ8VgHpzXSTjQ+VXQ6j15CaaiucPR XaN+mul0MNHbj2x8i4DiUI8SLrJ/ZTC6K5wYRg1k6Jtq5ol3GkgwaNdoCvoTEn4J 0yLEXN35p9HWdVBGkdNvYf2cluKHkS6BTxOoiSrFOGzPcAB3GrFGwvushwA0q7wl gnzNlFTruQZkvhjvgFGO+C1UKA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:09:53 2026 by rpki-client