$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: DqCs1MJhgP7jbHgcrCd1FrcbeNF/wu1FDcBT+Tf8f9U= Subject key identifier: 45:FA:A6:73:E7:B0:8B:65:20:3C:A0:5A:D2:36:F9:90:0C:8B:46:EA Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 0899 Signing time: Mon 20 Jul 2026 21:14:35 +0000 Manifest this update: Mon 20 Jul 2026 21:14:35 +0000 Manifest next update: Mon 27 Jul 2026 21:14:35 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: wBESBXCi2fWJ100j5saw4ANdIYESDasVXg5wUB/JiZM=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Jul 20 21:14:35 2026 GMT Not After : Jul 27 21:14:35 2026 GMT Subject: CN=6a5e8fbb-2990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:af:66:30:a0:b0:a5:25:22:3b:8d:0d:0f: 92:59:71:af:7c:96:45:ec:c5:86:f4:87:8c:8c:38: 52:52:53:01:d9:a0:35:01:ba:70:37:7b:47:64:3f: 54:da:8f:71:5c:21:72:9b:80:e7:fb:fe:3f:a5:02: 89:d5:e0:0d:9d:78:dd:43:3c:b1:e2:b0:18:18:10: 6f:c9:45:28:a2:e5:98:b6:42:a0:0d:8e:90:04:b8: fb:b2:81:ee:96:cd:2a:ad:e1:4a:80:97:a2:3e:d9: 02:17:08:a7:0b:27:20:6f:41:24:3e:67:c5:e7:7c: 8b:e9:1f:be:5e:92:ff:fc:0f:a9:0b:7b:eb:2c:c4: 23:2e:6b:b8:e6:06:85:d3:9c:b0:82:6b:39:d1:e9: 9b:6c:ae:ee:94:23:93:e4:04:d3:2c:7b:ee:29:75: dd:59:5a:61:3d:f6:2f:12:eb:5c:72:b2:14:f5:9d: 54:77:72:34:7a:18:a8:a0:bf:91:24:ab:7d:33:56: ff:20:22:0d:af:66:12:ff:5b:0f:06:43:4a:83:65: f4:b1:5d:26:a1:14:80:6d:0a:17:43:6e:92:f4:dc: da:ea:31:91:0e:36:41:29:d9:d6:86:e3:ba:01:9d: 2f:05:ab:ac:6c:36:af:6f:d1:65:2a:33:98:7a:6f: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:A6:73:E7:B0:8B:65:20:3C:A0:5A:D2:36:F9:90:0C:8B:46:EA X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:26:9e:51:cd:bb:36:0e:de:e5:65:9c:fc:8f:e5:e3:11:e1: 49:3e:a7:e8:19:21:2b:79:1b:6d:de:7d:08:fa:bb:f5:fb:e7: 8e:8e:72:5f:75:3b:a3:5c:4a:7e:be:95:4b:0f:3a:fc:42:9b: b1:14:ba:0a:ac:2c:e0:31:38:15:23:8a:3d:bd:e6:5c:a0:a6: 55:17:53:c4:d9:d8:c8:58:d9:f0:fb:a4:df:ca:dd:14:8c:ea: c8:3d:34:bb:71:f6:4c:4b:20:c4:c5:00:27:d9:3b:6f:dc:a1: 0a:95:a9:5e:55:77:59:70:a3:b2:d5:33:97:b8:7b:a1:38:a1: 08:94:34:79:c7:8f:85:6a:cd:72:35:7f:df:22:14:63:4d:6c: e0:7c:3e:2c:28:ab:96:7c:29:d1:35:8c:0a:f2:06:a5:76:82: c6:63:db:49:5c:57:61:81:6b:58:31:bd:c4:74:07:4e:9c:cc: 76:b8:fc:c4:a5:08:58:c8:03:6a:ee:7a:81:7e:6b:23:14:5d: a0:86:c3:6c:ed:d8:c6:a1:a3:ba:08:81:36:81:c2:70:dc:31: d8:c0:70:f3:02:1e:5d:fd:0e:ee:14:74:28:c7:e4:bd:15:d0: 01:4f:44:a6:14:07:1e:f1:9e:21:fa:1e:70:be:c0:00:11:c3: 63:5a:37:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjYwNzIwMjExNDM1WhcNMjYwNzI3MjExNDM1WjAYMRYwFAYD VQQDEw02YTVlOGZiYi0yOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3OvZjCgsKUlIjuNDQ+SWXGvfJZF7MWG9IeMjDhSUlMB2aA1AbpwN3tHZD9U 2o9xXCFym4Dn+/4/pQKJ1eANnXjdQzyx4rAYGBBvyUUoouWYtkKgDY6QBLj7soHu ls0qreFKgJeiPtkCFwinCycgb0EkPmfF53yL6R++XpL//A+pC3vrLMQjLmu45gaF 05ywgms50embbK7ulCOT5ATTLHvuKXXdWVphPfYvEutccrIU9Z1Ud3I0ehiooL+R JKt9M1b/ICINr2YS/1sPBkNKg2X0sV0moRSAbQoXQ26S9Nza6jGRDjZBKdnWhuO6 AZ0vBausbDavb9FlKjOYem854wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEX6pnPn sItlIDygWtI2+ZAMi0bqMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCaeUc27Ng7e5WWc/I/l4xHhST6n6BkhK3kbbd59CPq79fvnjo5yX3U7o1xK fr6VSw86/EKbsRS6Cqws4DE4FSOKPb3mXKCmVRdTxNnYyFjZ8Puk38rdFIzqyD00 u3H2TEsgxMUAJ9k7b9yhCpWpXlV3WXCjstUzl7h7oTihCJQ0ecePhWrNcjV/3yIU Y01s4Hw+LCirlnwp0TWMCvIGpXaCxmPbSVxXYYFrWDG9xHQHTpzMdrj8xKUIWMgD au56gX5rIxRdoIbDbO3YxqGjugiBNoHCcNwx2MBw8wIeXf0O7hR0KMfkvRXQAU9E phQHHvGeIfoecL7AABHDY1o3YA== -----END CERTIFICATE-----Generated at Wed Jul 22 03:05:43 2026 by rpki-client