$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft File: 1K7zROHhNEdHmOy_XSnecaiG3sE.mft (raw, json) Hash identifier: DxtUkIWz4JUZfSDoQR5dKw4Eafa5k+Zh3ot+f6OnJoo= Subject key identifier: C6:FB:7A:A3:40:A3:6B:02:F4:7A:94:A8:D6:70:BA:86:09:04:72:98 Authority key identifier: D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1 Certificate issuer: /CN=A91629AA/serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft Manifest number: 08 Signing time: Tue 25 Aug 2026 03:43:46 +0000 Manifest this update: Tue 25 Aug 2026 03:43:46 +0000 Manifest next update: Tue 01 Sep 2026 03:43:46 +0000 Files and hashes: 1: 1K7zROHhNEdHmOy_XSnecaiG3sE.crl (hash: Oi0litRC5z3qfGjeUCqcnyy3nCRAoaEp1QIkfP9HT2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629AA, serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1 Validity Not Before: Aug 25 03:43:46 2026 GMT Not After : Sep 1 03:43:46 2026 GMT Subject: CN=6a8d0f72-f349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:13:68:45:0e:a4:96:fb:b5:ed:2f:e4:bf: cb:d8:6a:85:39:a3:70:9b:0f:5b:7e:f1:de:75:93: 3a:7a:79:51:1e:8b:33:ea:a8:3a:78:5b:11:71:9b: 91:5b:e5:e2:5a:29:73:44:80:cc:31:b8:f1:6a:59: 68:53:38:25:cf:81:b5:e1:11:57:5f:f2:ba:cf:71: 32:08:99:7b:75:d2:6a:3d:bd:d8:af:93:66:89:20: 78:29:ea:be:5a:44:05:1a:2e:3f:0f:df:75:aa:81: 72:db:2c:5c:d7:1d:5b:55:f3:7e:bf:3f:ad:bb:e8: a5:58:83:cf:d6:88:c9:6a:87:8b:b9:ca:50:39:6b: 8a:4f:48:87:2d:f0:6a:af:d2:0d:c9:45:92:37:e2: b1:65:19:e2:2e:23:76:fb:1f:c0:de:b5:f6:25:4d: 8a:b0:4d:7a:86:bc:10:b0:23:88:f5:e3:c9:4d:6b: 15:ac:2a:6a:d8:d4:cd:df:09:d6:da:b4:63:07:58: c6:55:ab:28:2b:36:b7:f0:f4:34:97:15:c7:31:ce: 68:1b:51:f3:f4:c6:15:da:7f:8c:3e:9e:34:d9:33: 44:7d:d3:7b:4e:7f:52:dd:b3:40:59:ea:68:9f:13: 25:d2:eb:44:ee:40:e1:1b:b2:de:f4:e9:63:17:75: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FB:7A:A3:40:A3:6B:02:F4:7A:94:A8:D6:70:BA:86:09:04:72:98 X509v3 Authority Key Identifier: keyid:D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:8a:de:f9:43:9a:06:5d:45:02:6d:f5:29:d1:c3:ad:40: 3f:f2:e5:65:be:62:1a:cb:82:fd:52:95:8d:43:62:78:c5:ff: 1b:da:6b:08:ff:32:f3:c1:79:26:95:93:69:3c:97:50:0b:69: 04:d0:e4:cf:3d:00:b9:e8:98:c0:25:0e:41:b5:e5:e4:cf:13: 27:5f:f2:a6:7c:18:0c:89:95:03:94:ea:90:54:14:28:fe:42: 90:c6:bf:e0:92:e3:a6:90:61:1a:c8:25:fc:95:ea:aa:d7:c5: 04:54:fa:96:23:74:a0:e9:08:7b:7e:7d:e6:0e:b1:84:71:81: 50:3f:f2:58:a4:ad:42:89:b2:21:f3:e3:0f:3a:67:c6:1f:eb: 99:95:52:77:8b:a5:cb:ef:1a:89:28:3f:d4:30:40:55:b8:79: 60:7a:f7:ae:aa:aa:92:16:7b:5c:2d:f0:d0:5c:38:d3:31:75: 3a:d7:b9:e7:ca:0f:91:b0:2b:a9:6d:78:b0:a9:c3:5e:97:a7: 70:07:f7:2e:cd:50:6e:f1:f1:dc:23:b4:05:ab:42:63:32:67: 1a:12:7f:9b:88:9f:0d:cc:09:30:0b:82:a4:9c:da:95:d1:d8: 31:6b:1f:51:30:91:cf:a5:11:04:f2:6e:a7:c7:46:00:85:65: b7:cb:36:b8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlBQTExMC8GA1UEBRMoRDRBRUYzNDRFMUUxMzQ0NzQ3OThFQ0JGNUQyOURFNzFB ODg2REVDMTAeFw0yNjA4MjUwMzQzNDZaFw0yNjA5MDEwMzQzNDZaMBgxFjAUBgNV BAMTDTZhOGQwZjcyLWYzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCmxNoRQ6klvu17S/kv8vYaoU5o3CbD1t+8d51kzp6eVEeizPqqDp4WxFxm5Fb 5eJaKXNEgMwxuPFqWWhTOCXPgbXhEVdf8rrPcTIImXt10mo9vdivk2aJIHgp6r5a RAUaLj8P33WqgXLbLFzXHVtV836/P6276KVYg8/WiMlqh4u5ylA5a4pPSIct8Gqv 0g3JRZI34rFlGeIuI3b7H8DetfYlTYqwTXqGvBCwI4j148lNaxWsKmrY1M3fCdba tGMHWMZVqygrNrfw9DSXFccxzmgbUfP0xhXaf4w+njTZM0R903tOf1Lds0BZ6mif EyXS60TuQOEbst706WMXdSopAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxvt6o0Cj awL0epSo1nC6hgkEcpgwHwYDVR0jBBgwFoAU1K7zROHhNEdHmOy/XSnecaiG3sEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUFBLzU2QjcyMTg4OTc3 NzExRjE4QTQ0NDY1NTQ4MTFGOTcwLzFLN3pST0hoTkVkSG1PeV9YU25lY2FpRzNz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMUs3elJPSGhORWRIbU95X1hTbmVjYWlHM3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUFBLzU2QjcyMTg4OTc3NzExRjE4QTQ0NDY1NTQ4MTFGOTcwLzFLN3pST0hoTkVk SG1PeV9YU25lY2FpRzNzRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7q4re+UOaBl1FAm31KdHDrUA/8uVlvmIay4L9UpWNQ2J4xf8b2msI/zLzwXkm lZNpPJdQC2kE0OTPPQC56JjAJQ5BteXkzxMnX/KmfBgMiZUDlOqQVBQo/kKQxr/g kuOmkGEayCX8leqq18UEVPqWI3Sg6Qh7fn3mDrGEcYFQP/JYpK1CibIh8+MPOmfG H+uZlVJ3i6XL7xqJKD/UMEBVuHlgeveuqqqSFntcLfDQXDjTMXU617nnyg+RsCup bXiwqcNel6dwB/cuzVBu8fHcI7QFq0JjMmcaEn+biJ8NzAkwC4KknNqV0dgxax9R MJHPpREE8m6nx0YAhWW3yza4 -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:52 2026 by rpki-client