$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: zo0ZDQz8TTMG7EXkO1J+2oAO72KNRNSFWsRZSswNvfY= Subject key identifier: 4B:AF:C7:34:48:B7:73:43:1F:04:88:03:F2:BE:B6:DC:05:C7:FE:B2 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 020D Signing time: Mon 27 Jul 2026 04:35:03 +0000 Manifest this update: Mon 27 Jul 2026 04:35:02 +0000 Manifest next update: Mon 03 Aug 2026 04:35:02 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: V0V3swRkYr3L1tpVmSB0PR7JlTscq74uU00nz7h0ixA=) 2: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) 3: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Jul 27 04:35:02 2026 GMT Not After : Aug 3 04:35:02 2026 GMT Subject: CN=6a66dff6-52cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:02:aa:a6:22:19:36:51:67:c0:b4:6d:d5: 38:33:0c:82:7e:73:3d:38:21:1a:50:1c:5b:de:1e: b5:f1:0d:de:8f:f6:44:05:d3:2f:e2:cb:ad:5b:75: 2a:b3:b3:f6:1c:f5:d0:7e:2d:80:b1:94:6c:8d:d2: 29:83:e3:c8:fc:63:fc:10:6d:23:8d:6f:0d:30:0f: d0:43:bd:47:d6:4d:3c:51:46:cf:aa:fd:9f:a4:39: 7b:23:11:1e:09:5d:cd:74:f4:4a:3c:7a:d0:f9:36: 8a:a9:38:38:65:e4:f3:f5:4d:54:a4:8e:94:1c:34: 23:4a:26:4a:47:1a:80:83:26:db:a5:ff:3f:00:92: 41:23:7a:9e:26:eb:7f:2a:18:6b:b8:74:c6:1c:a6: 6c:42:f9:cc:25:ce:79:88:0a:6b:d5:3c:7f:0b:ac: c0:01:e6:38:1c:dc:18:75:c4:60:46:51:3c:61:d7: 39:b6:3c:c1:68:50:ca:92:b3:be:8c:9a:6b:89:61: e8:d1:ae:cd:df:8a:fb:e0:81:cd:5d:0c:6c:e9:67: 85:42:bd:be:28:b0:4c:2e:f4:3b:01:5a:6c:91:fb: c5:d9:3f:89:1c:bc:4a:95:b2:7d:28:6a:99:d6:21: 22:6e:42:ac:a2:3d:9a:a1:98:d3:c2:0f:a3:59:e7: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:C7:34:48:B7:73:43:1F:04:88:03:F2:BE:B6:DC:05:C7:FE:B2 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:37:d4:65:92:5e:54:1a:b9:61:24:6f:37:aa:e2:08:17:c3: ed:34:01:30:10:51:dc:ee:64:29:ba:62:da:89:3d:b9:04:31: 19:61:31:97:8b:3f:67:fa:0b:e0:df:f6:2c:bd:71:2f:47:01: 82:ab:8d:cb:31:b1:33:3d:36:b0:1e:79:c4:35:e5:7c:11:90: 28:d8:f4:04:03:22:a4:ec:80:12:84:f0:4e:4f:4e:9f:a5:47: a9:29:ae:bf:2b:bd:d9:8e:ce:f0:09:ef:fe:7b:d9:8f:89:fa: 96:1f:18:9d:8d:3f:20:e6:fe:4d:fc:6e:a5:bf:b7:8d:f0:dd: d3:3c:da:f9:c1:74:50:13:5f:1b:7e:f0:cf:25:06:7e:98:40: c0:33:b9:10:42:06:80:ed:9b:44:31:53:9b:0c:47:44:3a:91: e3:bf:db:e9:63:cd:cc:9b:d4:6b:1a:09:b6:12:e4:b7:57:d4: fe:0c:51:48:64:5d:12:89:f6:f8:a1:65:e0:46:75:c4:53:87: 31:0b:cb:dd:26:70:13:18:54:00:c6:11:66:fd:a9:58:d5:f8: 8d:8a:d3:8f:5b:96:19:67:6e:40:f6:b7:1c:e6:ce:05:50:d2: 69:6a:86:7e:2c:37:e1:2e:f1:3c:5d:ac:03:a9:86:43:c6:ad: 16:e0:10:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwNzI3MDQzNTAyWhcNMjYwODAzMDQzNTAyWjAYMRYwFAYD VQQDEw02YTY2ZGZmNi01MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CECqqYiGTZRZ8C0bdU4MwyCfnM9OCEaUBxb3h618Q3ej/ZEBdMv4sutW3Uq s7P2HPXQfi2AsZRsjdIpg+PI/GP8EG0jjW8NMA/QQ71H1k08UUbPqv2fpDl7IxEe CV3NdPRKPHrQ+TaKqTg4ZeTz9U1UpI6UHDQjSiZKRxqAgybbpf8/AJJBI3qeJut/ KhhruHTGHKZsQvnMJc55iApr1Tx/C6zAAeY4HNwYdcRgRlE8Ydc5tjzBaFDKkrO+ jJpriWHo0a7N34r74IHNXQxs6WeFQr2+KLBMLvQ7AVpskfvF2T+JHLxKlbJ9KGqZ 1iEibkKsoj2aoZjTwg+jWecf+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuvxzRI t3NDHwSIA/K+ttwFx/6yMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfTfUZZJeVBq5YSRvN6riCBfD7TQBMBBR3O5kKbpi2ok9uQQxGWExl4s/Z/oL 4N/2LL1xL0cBgquNyzGxMz02sB55xDXlfBGQKNj0BAMipOyAEoTwTk9On6VHqSmu vyu92Y7O8Anv/nvZj4n6lh8YnY0/IOb+Tfxupb+3jfDd0zza+cF0UBNfG37wzyUG fphAwDO5EEIGgO2bRDFTmwxHRDqR47/b6WPNzJvUaxoJthLkt1fU/gxRSGRdEon2 +KFl4EZ1xFOHMQvL3SZwExhUAMYRZv2pWNX4jYrTj1uWGWduQPa3HObOBVDSaWqG fiw34S7xPF2sA6mGQ8atFuAQEQ== -----END CERTIFICATE-----Generated at Wed Jul 29 01:47:24 2026 by rpki-client