$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: dJY09VvrvgOs7++Vz3U/2fVdtjmKpwiC1q9y32sSotY= Subject key identifier: 05:D9:96:25:48:21:CD:D0:14:F2:A7:AC:89:94:15:78:37:70:A8:EF Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 02BA Signing time: Mon 27 Jul 2026 02:45:47 +0000 Manifest this update: Mon 27 Jul 2026 02:45:46 +0000 Manifest next update: Mon 03 Aug 2026 02:45:46 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: 11PE10RbshHGH9jFXnPmFKEwckaRZT8BjM4VtIaKdSM=) 2: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=) 3: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=) 4: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Jul 27 02:45:46 2026 GMT Not After : Aug 3 02:45:46 2026 GMT Subject: CN=6a66c65b-1718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9e:d3:2c:1f:10:2f:e4:c3:7b:ac:e6:b2:4d: 27:6e:8e:4f:9c:20:b7:89:35:9b:40:b5:ab:ef:63: 34:70:c1:3e:64:f0:28:0d:42:8a:d8:42:d0:6f:4c: 4f:e1:9a:df:a6:0d:d1:e3:9a:01:14:8b:3f:75:2a: 89:df:b2:d9:0c:4b:5f:e9:71:12:6b:d9:f8:0f:8b: f7:25:cb:78:3f:91:7e:c4:13:e5:a7:6a:4b:4d:56: 8f:c4:a8:00:48:36:39:1d:5c:ab:5f:de:ad:10:92: 2c:d1:33:54:a2:8e:39:e4:e2:d2:e7:14:9c:00:cb: c8:a8:92:1f:86:49:95:eb:d5:1d:85:f0:87:82:a3: d0:a3:58:f1:1e:6c:01:8d:11:88:70:21:fe:c1:30: 4c:16:00:67:c5:cb:51:d1:d3:6d:55:62:08:c9:1d: ba:bd:a4:83:61:e1:72:6e:02:3d:31:77:d2:8f:cf: eb:63:42:11:e9:a6:be:ac:b2:12:b5:fb:dc:6a:8a: 29:ab:30:be:77:9b:66:47:9a:04:2f:24:96:71:7b: d2:90:1a:2b:8a:17:1c:24:9c:3c:03:6d:46:d5:09: 78:14:a4:ed:eb:f1:11:45:30:12:05:b0:1d:03:c0: e1:a6:ab:c5:15:dc:91:33:17:ba:00:79:bb:e4:0f: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:96:25:48:21:CD:D0:14:F2:A7:AC:89:94:15:78:37:70:A8:EF X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:d1:01:a0:ed:49:8f:92:72:1d:1a:d2:87:2d:6f:87:bb: 51:44:f4:da:66:f1:16:bf:1c:67:c2:e4:62:92:ed:b0:ec:e3: 7e:cd:8b:cb:a3:5c:95:7f:a5:56:65:6f:60:2a:62:64:dd:8e: 54:d7:9a:02:ab:79:f3:1c:66:e5:6e:8b:89:05:b7:f4:1d:77: 08:0d:83:e1:bc:fe:45:d1:5e:26:69:48:5c:81:fe:f8:76:30: a1:11:b3:d8:a9:f7:1e:6d:c8:d9:7d:02:b1:05:72:6b:80:68: 80:9c:8c:fc:6f:4a:ef:13:1e:97:be:12:30:d9:6a:65:e1:b7: e3:74:ee:50:1c:49:5e:91:d5:0c:2a:3c:16:d1:4c:73:3e:ce: 4c:1e:8a:49:7d:0f:b4:bb:f2:28:e1:5f:b6:78:d7:51:6b:cd: b4:b7:14:de:08:ee:66:d8:9e:2e:b1:e3:84:f8:53:19:a7:75: da:ed:52:46:11:20:f7:60:67:95:d0:95:c3:48:11:35:7c:84: b0:84:61:66:c9:16:51:3f:17:1e:2d:dc:69:7e:10:b8:85:70: c0:f4:de:39:8c:37:5b:a9:2d:5b:d1:83:5b:41:4e:ef:92:c3: 74:9b:b3:ec:76:35:0f:7c:f8:75:6f:1a:3b:ba:12:89:a1:f6: ae:1d:33:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjYwNzI3MDI0NTQ2WhcNMjYwODAzMDI0NTQ2WjAYMRYwFAYD VQQDEw02YTY2YzY1Yi0xNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Z7TLB8QL+TDe6zmsk0nbo5PnCC3iTWbQLWr72M0cME+ZPAoDUKK2ELQb0xP 4Zrfpg3R45oBFIs/dSqJ37LZDEtf6XESa9n4D4v3Jct4P5F+xBPlp2pLTVaPxKgA SDY5HVyrX96tEJIs0TNUoo455OLS5xScAMvIqJIfhkmV69UdhfCHgqPQo1jxHmwB jRGIcCH+wTBMFgBnxctR0dNtVWIIyR26vaSDYeFybgI9MXfSj8/rY0IR6aa+rLIS tfvcaoopqzC+d5tmR5oELySWcXvSkBorihccJJw8A21G1Ql4FKTt6/ERRTASBbAd A8DhpqvFFdyRMxe6AHm75A8MMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXZliVI Ic3QFPKnrImUFXg3cKjvMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIp3RAaDtSY+Sch0a0octb4e7UUT02mbxFr8cZ8LkYpLtsOzjfs2Ly6NclX+l VmVvYCpiZN2OVNeaAqt58xxm5W6LiQW39B13CA2D4bz+RdFeJmlIXIH++HYwoRGz 2Kn3Hm3I2X0CsQVya4BogJyM/G9K7xMel74SMNlqZeG343TuUBxJXpHVDCo8FtFM cz7OTB6KSX0PtLvyKOFftnjXUWvNtLcU3gjuZtieLrHjhPhTGad12u1SRhEg92Bn ldCVw0gRNXyEsIRhZskWUT8XHi3caX4QuIVwwPTeOYw3W6ktW9GDW0FO75LDdJuz 7HY1D3z4dW8aO7oSiaH2rh0zGQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:42 2026 by rpki-client