$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: ohHRWkPVKphnY6CLPVNkGlxMuc3YRvhn3BAtJswJKzU= Subject key identifier: 86:C4:23:00:B9:68:58:1C:59:92:7A:F2:C0:F9:F6:FA:C8:29:09:90 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 86 Signing time: Sat 15 Aug 2026 07:49:59 +0000 Manifest this update: Sat 15 Aug 2026 07:49:58 +0000 Manifest next update: Sat 22 Aug 2026 07:49:58 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: uRVsO3lM4/He8aWIcxmRAAm0ODZdStgnXgbv7WfSvew=) 2: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) 3: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Aug 15 07:49:58 2026 GMT Not After : Aug 22 07:49:58 2026 GMT Subject: CN=6a801a27-7715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:93:1c:26:b0:01:77:7d:92:74:14:5d:77: 8e:23:ed:3a:19:61:95:a5:53:e7:a7:71:8d:b0:fc: 15:bd:94:47:36:62:fa:7c:6d:a4:79:f2:a0:de:c7: 33:c0:41:32:eb:3a:18:af:6c:38:5e:54:62:3a:16: b5:6c:80:8d:3a:da:ea:81:46:e5:6b:bf:eb:dc:79: 42:06:50:08:6f:b4:99:9c:27:0a:12:cc:4f:e3:04: 6b:b0:be:d6:1e:a0:1f:54:8d:22:85:9f:e4:4b:56: 3d:1e:f1:71:3c:82:c8:34:1f:bf:cd:30:8a:81:47: 08:5e:1b:7f:6e:18:f4:07:f6:79:fa:84:68:25:a8: f9:e1:71:0d:c0:15:f4:3c:0f:ad:5a:65:ea:ce:bf: 53:d9:f1:56:26:36:01:d4:7f:42:35:1a:4e:49:92: f9:3e:29:8d:89:4c:89:80:e5:9e:38:f0:07:12:63: 45:b7:84:8e:03:82:78:ec:19:18:2c:20:74:53:29: 0c:da:06:38:d9:2b:f5:ce:27:97:12:05:74:c9:bb: 5e:19:9e:e0:71:c1:21:b9:55:6a:b5:14:59:e0:8b: ed:e2:07:fb:65:44:88:70:64:2d:9b:81:f7:84:9b: 34:b8:7b:8c:e4:de:ab:42:05:c1:84:0d:0e:bb:2e: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:23:00:B9:68:58:1C:59:92:7A:F2:C0:F9:F6:FA:C8:29:09:90 X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:de:54:6d:fe:3c:c2:91:57:58:fc:c7:89:1e:b3:53:12:83: d5:ae:4f:84:57:3d:5c:c2:60:83:ff:b8:d1:fb:73:6e:d9:f7: 0d:07:cd:ff:4a:4f:90:b5:3c:14:70:cb:c7:78:81:a9:cb:40: 47:79:64:6d:d8:f7:91:ea:2f:10:12:32:85:81:e8:d2:6f:94: 2c:2e:39:f4:d9:a5:29:d7:89:bb:76:8e:b2:2f:e9:b9:f4:ee: 10:cb:ba:bc:20:ba:19:2d:80:fb:c1:8a:d4:fb:fe:a7:41:d3: be:19:2b:96:17:19:eb:b1:25:32:aa:99:fe:58:f3:5f:54:ef: bc:28:a8:21:19:1d:a7:be:85:5d:f0:6e:41:f8:15:b4:98:a3: 71:29:eb:08:e9:bf:64:3a:2e:bd:02:9f:84:d1:1c:b5:48:f1: b3:d6:78:db:77:3c:43:ff:d2:d4:29:3b:16:07:54:7d:29:9d: 12:4d:57:db:9a:ef:f8:23:b5:4a:60:b5:30:0c:f2:cf:cd:95: 41:cb:e3:fe:3c:aa:23:d8:8b:24:bf:ac:e8:60:fb:04:a0:b8: 95:0a:8d:e0:76:26:e0:ee:c6:a8:ab:4a:04:93:a2:5e:1f:37: 43:55:49:62:00:0b:1e:a9:50:c1:0e:4c:7c:17:b4:3b:bc:68: 61:27:f3:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJCMEQ0NEM4MjQz MDU0MjYyNjYwHhcNMjYwODE1MDc0OTU4WhcNMjYwODIyMDc0OTU4WjAYMRYwFAYD VQQDEw02YTgwMWEyNy03NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8+THCawAXd9knQUXXeOI+06GWGVpVPnp3GNsPwVvZRHNmL6fG2kefKg3scz wEEy6zoYr2w4XlRiOha1bICNOtrqgUbla7/r3HlCBlAIb7SZnCcKEsxP4wRrsL7W HqAfVI0ihZ/kS1Y9HvFxPILINB+/zTCKgUcIXht/bhj0B/Z5+oRoJaj54XENwBX0 PA+tWmXqzr9T2fFWJjYB1H9CNRpOSZL5PimNiUyJgOWeOPAHEmNFt4SOA4J47BkY LCB0UykM2gY42Sv1zieXEgV0ybteGZ7gccEhuVVqtRRZ4Ivt4gf7ZUSIcGQtm4H3 hJs0uHuM5N6rQgXBhA0Ouy7DtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbEIwC5 aFgcWZJ68sD59vrIKQmQMB8GA1UdIwQYMBaAFPJPFHFyOmTk1XDbsNRMgkMFQmJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThGRi80RTNDQjZDMEQ3 MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpPVFZjTnV3MUV5Q1F3VkNZ bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1ltWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThGRi80RTNDQjZDMEQ3MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJNlpP VFZjTnV3MUV5Q1F3VkNZbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAd5Ubf48wpFXWPzHiR6zUxKD1a5PhFc9XMJgg/+40ftzbtn3DQfN/0pPkLU8 FHDLx3iBqctAR3lkbdj3keovEBIyhYHo0m+ULC459NmlKdeJu3aOsi/pufTuEMu6 vCC6GS2A+8GK1Pv+p0HTvhkrlhcZ67ElMqqZ/ljzX1TvvCioIRkdp76FXfBuQfgV tJijcSnrCOm/ZDouvQKfhNEctUjxs9Z423c8Q//S1Ck7FgdUfSmdEk1X25rv+CO1 SmC1MAzyz82VQcvj/jyqI9iLJL+s6GD7BKC4lQqN4HYm4O7GqKtKBJOiXh83Q1VJ YgALHqlQwQ5MfBe0O7xoYSfzyA== -----END CERTIFICATE-----Generated at Sat Aug 15 13:10:48 2026 by rpki-client