$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: bdEzGH9gGeliDgKNoeWamOZsABmYGa+BvjYEjWmJLB8= Subject key identifier: 69:72:3F:6A:49:BC:12:8E:CC:6F:7E:82:86:A9:CF:C9:73:38:EE:C1 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08B7 Signing time: Mon 20 Jul 2026 21:08:10 +0000 Manifest this update: Mon 20 Jul 2026 21:08:09 +0000 Manifest next update: Mon 27 Jul 2026 21:08:09 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: gpXAsaECVdu1bGWcxEZ6BrpjdnQpu47vGAlHcazwk0Y=) 2: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 3: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 4: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 5: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 6: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 7: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 8: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 9: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 10: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jul 20 21:08:09 2026 GMT Not After : Jul 27 21:08:09 2026 GMT Subject: CN=6a5e8e39-0596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:39:6b:8a:a7:aa:52:1a:09:c0:08:41:93: b2:29:e0:a1:f3:96:d6:94:ee:ba:79:97:37:e5:b4: f5:d9:0d:b9:99:51:f9:23:d7:22:ba:05:23:e9:5d: ca:17:25:96:48:16:3c:0b:be:06:cb:fe:2f:c6:ac: af:81:15:07:67:09:b0:5b:d5:c8:91:60:0d:34:0a: 57:6a:3a:31:52:27:5c:fb:1f:96:71:33:63:65:6f: 19:69:d4:29:67:0b:bd:87:18:66:f6:a7:1f:37:86: 28:fa:df:a2:d2:c6:22:37:f7:cb:79:83:91:93:bf: 92:21:b6:b4:9e:9a:b8:96:77:17:05:81:43:b7:1e: 2a:0a:de:f0:10:0c:b4:58:3b:57:54:51:1a:fe:d7: ff:ec:4b:0a:f1:9f:83:c8:5b:5a:2d:5c:39:3d:a0: 7b:37:6b:6c:c6:8c:1d:00:e4:e5:7d:c6:a0:7d:f1: cd:ca:5c:40:62:91:cc:ad:d2:1a:5e:2a:08:c6:a6: f9:18:21:eb:d9:2e:cb:98:97:20:19:47:53:e6:54: 82:7f:73:15:39:c1:aa:dc:57:9d:23:af:75:6a:98: 85:4b:01:8c:96:35:97:67:b1:5c:f4:69:1c:41:b7: cb:c0:84:a7:a1:a0:33:79:22:c0:ce:b6:dc:94:b3: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:3F:6A:49:BC:12:8E:CC:6F:7E:82:86:A9:CF:C9:73:38:EE:C1 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dc:7a:f5:df:60:f1:4b:1d:a1:ce:0d:0d:2b:ba:7f:ff:77: 48:6a:31:0c:91:a9:74:8b:0e:51:09:04:8d:45:9d:79:58:87: 2e:10:f9:0c:e0:91:be:00:e5:43:f5:48:ad:2a:e8:37:d6:08: 3c:04:ea:8b:ff:54:5e:b0:08:e2:74:b4:54:a5:13:5a:98:fc: 60:3b:22:bf:17:de:ee:c7:e3:49:74:05:ca:38:6e:75:63:88: 7a:ff:94:37:b8:06:fb:7a:5a:0a:b0:bf:73:dd:10:08:2a:f9: d8:83:f6:78:fb:48:71:21:fd:55:09:4f:f6:6d:ed:26:15:98: 53:33:6b:56:51:d2:b4:4f:43:0b:0d:aa:54:24:0d:e9:8a:83: c5:95:2a:0e:c8:b6:5d:c6:11:4d:08:fd:8d:5b:26:90:89:47: 66:30:a9:17:d2:3e:ab:4c:25:63:ba:b8:91:df:f7:d4:3c:59: 66:66:f8:3a:b8:49:6a:b2:9c:65:b2:b0:de:84:79:90:f2:56: cf:95:a9:a1:31:52:65:85:4d:e8:dd:6e:99:e8:10:8d:ff:5d: 08:fe:3b:de:06:d9:8e:6c:ea:c5:8f:a1:73:30:49:93:f1:80: 9d:b3:d6:2d:f3:73:c5:2e:52:0c:1d:fb:54:bc:61:42:e3:63: bc:a2:e6:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNzIwMjEwODA5WhcNMjYwNzI3MjEwODA5WjAYMRYwFAYD VQQDEw02YTVlOGUzOS0wNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPc5a4qnqlIaCcAIQZOyKeCh85bWlO66eZc35bT12Q25mVH5I9ciugUj6V3K FyWWSBY8C74Gy/4vxqyvgRUHZwmwW9XIkWANNApXajoxUidc+x+WcTNjZW8ZadQp Zwu9hxhm9qcfN4Yo+t+i0sYiN/fLeYORk7+SIba0npq4lncXBYFDtx4qCt7wEAy0 WDtXVFEa/tf/7EsK8Z+DyFtaLVw5PaB7N2tsxowdAOTlfcagffHNylxAYpHMrdIa XioIxqb5GCHr2S7LmJcgGUdT5lSCf3MVOcGq3FedI691apiFSwGMljWXZ7Fc9Gkc QbfLwISnoaAzeSLAzrbclLPbDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlyP2pJ vBKOzG9+goapz8lzOO7BMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG9x69d9g8Usdoc4NDSu6f/93SGoxDJGpdIsOUQkEjUWdeViHLhD5DOCRvgDl Q/VIrSroN9YIPATqi/9UXrAI4nS0VKUTWpj8YDsivxfe7sfjSXQFyjhudWOIev+U N7gG+3paCrC/c90QCCr52IP2ePtIcSH9VQlP9m3tJhWYUzNrVlHStE9DCw2qVCQN 6YqDxZUqDsi2XcYRTQj9jVsmkIlHZjCpF9I+q0wlY7q4kd/31DxZZmb4OrhJarKc ZbKw3oR5kPJWz5WpoTFSZYVN6N1umegQjf9dCP473gbZjmzqxY+hczBJk/GAnbPW LfNzxS5SDB37VLxhQuNjvKLmSg== -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:10 2026 by rpki-client