$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: XTWPuiN2MfA4YlhxIAOE8fXoSZtLHUU5dEYDQy1TC3I= Subject key identifier: 74:00:B9:88:D2:84:7A:4E:D3:85:6E:35:EC:32:D1:28:A3:2B:99:F2 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0D34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0D29 Signing time: Sun 26 Jul 2026 18:27:06 +0000 Manifest this update: Sun 26 Jul 2026 18:27:06 +0000 Manifest next update: Sun 02 Aug 2026 18:27:06 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: FrUZ3nPAfg5JXkPSPq6Di54RQcEyb+6TEQs4rzxxY98=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3380 (0xd34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Jul 26 18:27:06 2026 GMT Not After : Aug 2 18:27:06 2026 GMT Subject: CN=6a66517a-98c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:14:93:ed:78:bd:69:43:cb:3a:3f:20:3a: 63:d7:15:55:59:9a:a1:c5:3b:3b:05:ee:3f:ae:5a: ec:f5:fb:a5:69:d1:6b:ef:6d:96:92:4f:40:fc:41: 33:ea:16:5e:13:41:51:f0:08:cc:b8:20:00:f4:47: d1:ce:d4:ed:58:2a:bc:db:13:ce:be:af:01:8c:77: 6e:8a:1f:54:2b:c8:7a:4c:29:d3:e2:f0:71:38:e8: 1a:f2:ac:91:51:1b:43:6d:d1:d7:61:bd:53:e5:7d: ba:26:4c:01:3f:4c:ca:b7:82:db:c6:b1:a4:40:3c: fa:57:e8:a9:b0:1f:9a:7e:96:1a:ab:72:35:ef:12: 7f:6c:cf:7a:7a:e8:67:c2:33:68:a0:9b:54:c4:2a: 3e:21:00:fd:38:81:7b:d1:f2:08:7f:ab:76:9f:1d: 6a:9a:2e:e7:1a:1c:79:c8:6d:93:9a:83:a6:5e:0d: 28:50:4e:7a:8b:d8:f9:3a:95:f6:ae:4e:f8:27:fd: 95:c4:00:28:60:1a:58:2c:6e:08:f0:a2:c3:84:dc: 39:b7:af:95:b8:b6:c9:35:fa:66:75:8e:77:d8:35: 76:b6:c9:64:24:72:76:70:29:74:7b:92:6e:24:03: 27:9a:4c:25:ca:7e:44:40:30:36:15:d6:b3:27:d3: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:00:B9:88:D2:84:7A:4E:D3:85:6E:35:EC:32:D1:28:A3:2B:99:F2 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:fd:59:5f:79:91:01:84:9c:02:0a:5d:7e:1f:28:bd:55: c7:84:82:ab:37:f8:46:55:61:2f:63:3d:84:38:98:f4:02:1d: d5:83:33:5b:30:65:8b:30:13:03:05:78:37:7a:b8:28:b2:2c: dc:7e:60:ef:81:b0:9d:29:72:9e:f1:4c:ad:c5:b3:34:d6:3c: e0:8a:ea:2f:09:77:fb:b5:86:9f:67:ce:fe:20:56:32:9e:8e: 31:7f:da:73:c6:50:6b:b9:f2:33:2e:20:21:ec:f4:2d:2d:3d: 6e:bd:8c:4b:7b:74:fc:43:e1:81:56:4e:80:49:a5:aa:5b:09: d7:b7:1e:b0:ea:bf:47:a2:5c:0c:69:5b:70:4e:73:b2:53:8c: 84:44:c0:8f:2c:02:9d:a8:3b:ad:13:85:e5:68:e2:8a:ac:c0: e9:39:f8:69:4e:c9:8a:96:a1:3b:0a:7e:9e:a7:7c:43:95:95: c4:48:3c:9d:d5:47:59:8d:76:92:46:03:16:89:f0:08:94:d6: fd:28:fb:84:59:ae:f6:0c:08:12:8a:61:a6:85:ec:84:dc:f8: c8:c5:20:b3:80:ca:32:19:c4:ad:a2:4c:8e:d6:31:8d:b2:e1: 00:1e:84:59:8e:a2:6f:a7:35:a4:8b:0d:9a:42:3c:2e:b3:11: 19:33:dd:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwNzI2MTgyNzA2WhcNMjYwODAyMTgyNzA2WjAYMRYwFAYD VQQDEw02YTY2NTE3YS05OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcIUk+14vWlDyzo/IDpj1xVVWZqhxTs7Be4/rlrs9fuladFr722Wkk9A/EEz 6hZeE0FR8AjMuCAA9EfRztTtWCq82xPOvq8BjHduih9UK8h6TCnT4vBxOOga8qyR URtDbdHXYb1T5X26JkwBP0zKt4LbxrGkQDz6V+ipsB+afpYaq3I17xJ/bM96euhn wjNooJtUxCo+IQD9OIF70fIIf6t2nx1qmi7nGhx5yG2TmoOmXg0oUE56i9j5OpX2 rk74J/2VxAAoYBpYLG4I8KLDhNw5t6+VuLbJNfpmdY532DV2tslkJHJ2cCl0e5Ju JAMnmkwlyn5EQDA2FdazJ9MbHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQAuYjS hHpO04VuNewy0SijK5nyMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcMn9WV95kQGEnAIKXX4fKL1Vx4SCqzf4RlVhL2M9hDiY9AId1YMzWzBlizAT AwV4N3q4KLIs3H5g74GwnSlynvFMrcWzNNY84IrqLwl3+7WGn2fO/iBWMp6OMX/a c8ZQa7nyMy4gIez0LS09br2MS3t0/EPhgVZOgEmlqlsJ17cesOq/R6JcDGlbcE5z slOMhETAjywCnag7rROF5WjiiqzA6Tn4aU7JipahOwp+nqd8Q5WVxEg8ndVHWY12 kkYDFonwCJTW/Sj7hFmu9gwIEophpoXshNz4yMUgs4DKMhnEraJMjtYxjbLhAB6E WY6ib6c1pIsNmkI8LrMRGTPdmA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:33:55 2026 by rpki-client