$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json) Hash identifier: DQyBG05kK5pIJaKZ1eAxK8/aHBYISzMUa6wHewMB2ao= Subject key identifier: 32:51:69:88:89:79:EB:57:41:DF:64:0E:EE:EC:D3:79:89:0A:C5:5F Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft Manifest number: 2C Signing time: Mon 27 Jul 2026 11:06:33 +0000 Manifest this update: Mon 27 Jul 2026 11:06:32 +0000 Manifest next update: Mon 03 Aug 2026 11:06:32 +0000 Files and hashes: 1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: DoUY19Kv3BIEuwTQ7mLXqasELF/h0T7l1jWNMTGsO9c=) 2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Validity Not Before: Jul 27 11:06:32 2026 GMT Not After : Aug 3 11:06:32 2026 GMT Subject: CN=6a673bb9-c268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:37:51:78:a5:b8:1f:c7:02:2a:ee:74:85: d9:fb:ed:51:1f:19:3d:7a:2a:72:5e:db:f0:ec:c5: 6c:a7:94:ec:40:d8:d5:18:ab:81:83:ae:9e:6c:a8: 52:02:f0:49:9c:db:7d:45:0e:bc:9f:05:cf:70:aa: ac:0a:77:54:8b:1e:5c:7d:0b:8c:25:63:5b:1b:20: c3:b5:dd:dd:ad:ac:02:ce:d9:f2:3c:18:35:9b:b6: 9e:39:a8:2b:c5:2d:a9:e2:29:60:ed:8e:77:96:56: 41:d2:05:f3:c5:d8:55:52:8b:79:ea:55:a0:c9:6c: c1:26:b6:ed:c3:07:33:9e:6d:34:4e:56:11:67:a4: ea:e7:db:cd:b3:a9:01:71:90:1e:ef:8c:a1:6f:da: 53:c5:1f:d3:f6:da:85:36:f4:0b:df:c1:41:15:1f: a4:fa:13:f5:7a:8b:08:41:aa:ab:62:7b:ab:7d:a0: 64:3d:64:3d:19:ad:79:71:02:cb:f8:be:43:e5:89: a3:d2:9e:2f:94:f2:8e:91:a5:35:ae:92:72:36:f3: b6:bb:05:7b:67:d0:5a:9f:98:81:72:de:c1:41:a2: 43:08:6f:03:b0:5a:74:29:20:b6:ca:33:c5:e6:53: 4a:87:b3:ab:d3:69:1a:82:97:f2:77:c1:be:58:0d: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:51:69:88:89:79:EB:57:41:DF:64:0E:EE:EC:D3:79:89:0A:C5:5F X509v3 Authority Key Identifier: keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6b:40:38:50:66:95:98:c6:a3:43:a1:49:4e:07:9f:fb:71: f9:a6:64:42:34:43:3e:b1:76:57:ab:a1:ef:b0:49:f8:41:f8: dd:67:a6:dd:ae:e8:d8:f0:bc:59:50:d1:46:a8:f2:cd:57:52: c0:f3:53:58:a6:94:af:31:26:2d:a0:2b:8b:e9:58:9b:76:c7: 62:0b:ae:b5:c1:a0:6a:0d:74:99:93:ab:b1:5a:a2:41:d1:64: 68:b9:a4:6a:21:aa:44:6d:aa:b6:40:ce:40:8b:b2:51:b8:d2: 16:a1:e0:be:66:27:3b:3f:51:25:58:2a:79:24:15:72:6d:95: df:ad:a8:3b:77:7d:36:38:98:e6:02:23:2f:83:d9:be:98:27: e8:a8:64:5c:01:49:a9:19:9d:dd:55:a1:56:9e:74:bf:5b:70: c5:a8:63:6e:2a:11:46:64:9a:e1:d3:e8:c0:77:b3:63:fb:69: 3d:4b:90:38:35:54:35:25:2f:d1:9b:8d:fb:e7:e3:28:5f:98: 92:56:b9:76:ca:b9:6c:6a:2b:43:fb:1a:73:f8:87:d1:ca:25: 80:4d:18:af:2a:20:9b:bc:e2:6d:07:bc:49:01:0b:c6:27:f0: 56:d7:cd:dd:6c:aa:ef:ad:27:6b:91:8f:27:46:e2:3e:c0:c5: 10:a2:e8:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoRjI0NDgxNUQ1QjM5MUUyMDAwQjc4Q0E5NkUxOTMwMjBG RjkwMjI1ODAeFw0yNjA3MjcxMTA2MzJaFw0yNjA4MDMxMTA2MzJaMBgxFjAUBgNV BAMTDTZhNjczYmI5LWMyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEEDdReKW4H8cCKu50hdn77VEfGT16KnJe2/DsxWynlOxA2NUYq4GDrp5sqFIC 8Emc231FDryfBc9wqqwKd1SLHlx9C4wlY1sbIMO13d2trALO2fI8GDWbtp45qCvF LaniKWDtjneWVkHSBfPF2FVSi3nqVaDJbMEmtu3DBzOebTROVhFnpOrn282zqQFx kB7vjKFv2lPFH9P22oU29AvfwUEVH6T6E/V6iwhBqqtie6t9oGQ9ZD0ZrXlxAsv4 vkPliaPSni+U8o6RpTWuknI287a7BXtn0FqfmIFy3sFBokMIbwOwWnQpILbKM8Xm U0qHs6vTaRqCl/J3wb5YDQQZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMlFpiIl5 61dB32QO7uzTeYkKxV8wHwYDVR0jBBgwFoAU8kSBXVs5HiAAt4ypbhkwIP+QIlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0YwMzA5QkE2NDdD NjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlBQXQ0eXBiaGt3SVAtUUls Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtTQlhWczVIaUFBdDR5cGJoa3dJUC1RSWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0YwMzA5QkE2NDdDNjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlB QXQ0eXBiaGt3SVAtUUlsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQARa0A4UGaVmMajQ6FJTgef+3H5pmRCNEM+sXZXq6HvsEn4QfjdZ6bdrujY8LxZ UNFGqPLNV1LA81NYppSvMSYtoCuL6VibdsdiC661waBqDXSZk6uxWqJB0WRouaRq IapEbaq2QM5Ai7JRuNIWoeC+Zic7P1ElWCp5JBVybZXfrag7d302OJjmAiMvg9m+ mCfoqGRcAUmpGZ3dVaFWnnS/W3DFqGNuKhFGZJrh0+jAd7Nj+2k9S5A4NVQ1JS/R m4375+MoX5iSVrl2yrlsaitD+xpz+IfRyiWATRivKiCbvOJtB7xJAQvGJ/BW183d bKrvrSdrkY8nRuI+wMUQouiv -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:31 2026 by rpki-client