$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: Ub33eHY7E5MeSYUWQHKPFEtmkOD+E578OYVtwPL5mt4= Subject key identifier: 3C:2A:D8:FD:36:A5:0D:2A:41:58:81:D2:9B:DD:A4:A9:3C:0D:51:DA Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 6E Signing time: Mon 29 Jun 2026 08:40:46 +0000 Manifest this update: Mon 29 Jun 2026 08:40:46 +0000 Manifest next update: Mon 06 Jul 2026 08:40:46 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: G3kMRVujFKelECEQDU7if5POjAmUtWyk3z5UjFXqZZw=) 2: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) 3: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Jul 2026 08:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: Jun 29 08:40:46 2026 GMT Not After : Jul 6 08:40:46 2026 GMT Subject: CN=6a422f8e-4d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:1a:ef:f0:50:af:6a:a0:0b:5a:c8:5e:b6: 4c:bf:61:3f:fb:95:41:34:26:1c:c4:3a:8d:ac:87: 99:96:44:ec:87:f8:17:c2:6f:9d:bb:69:b0:f6:28: 24:85:45:53:4b:ea:c6:7a:38:88:3b:48:8f:81:0c: 60:45:aa:51:de:e9:b3:f7:cd:1f:df:4c:36:c9:b2: 4b:fc:63:ca:a4:b8:6a:b5:5c:ec:27:86:dc:24:b4: 09:80:6b:c0:81:43:ec:d6:85:85:69:9a:5d:f0:d6: 8a:af:78:de:ea:30:dc:a0:6a:fc:71:8d:e1:ff:df: 3b:0e:b1:fc:47:30:85:70:1e:a7:cc:36:5b:bc:b7: 13:aa:a6:85:91:23:5c:d1:66:52:9d:ec:a3:9b:8a: e1:58:dc:15:e2:63:49:e0:5c:57:66:3e:06:2a:8d: 24:34:22:20:c1:7a:d8:ca:56:39:b2:cd:b5:89:08: 8e:b2:f3:5e:da:c8:cf:b4:89:d7:4f:7f:ea:20:e0: 4d:04:72:6f:9b:99:3b:1f:8b:59:e8:b1:04:75:d4: 91:b1:75:e2:f5:ed:98:61:0f:30:0d:2e:ea:24:fa: 45:a0:a9:1a:7e:a1:4b:93:07:82:e6:ce:49:c4:bc: fd:2e:d3:d4:db:74:c5:ca:65:8c:40:6a:a2:50:00: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2A:D8:FD:36:A5:0D:2A:41:58:81:D2:9B:DD:A4:A9:3C:0D:51:DA X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2d:57:4b:5f:17:b4:83:f1:43:35:70:e3:72:02:b3:e2:b1: 7f:aa:26:a7:89:4c:e9:31:ba:1f:31:7c:d9:1e:5d:98:e8:01: 87:d5:f0:76:b1:a3:9e:67:91:4b:60:1d:a9:13:ba:61:5e:da: 7c:22:61:2e:96:8f:03:df:2d:a4:c8:e0:54:6d:ec:0a:d8:8b: 94:90:77:f9:4d:fe:5f:1d:1e:e9:91:e5:c8:41:79:c6:b6:fb: fc:b2:44:63:cd:c4:d8:1d:ce:8f:94:d5:b8:11:a9:a3:2a:80: 00:1a:ab:e7:bd:b4:76:d2:4a:56:20:21:da:8d:dd:3c:a1:d7: f9:13:8c:6a:0f:78:03:ea:e5:b7:f7:c6:33:43:24:62:ca:19: 80:c2:5a:4e:5f:18:7c:dd:c9:9e:b5:0d:d6:7d:cb:47:95:4d: 1b:11:f4:d3:38:a7:37:d4:97:c0:0c:5c:a1:a0:d5:4e:f0:a2: 82:9e:3c:f4:2c:34:25:e6:95:c6:45:ac:b7:75:5f:dc:d1:e5: 01:2d:9e:e8:5d:57:b6:11:0d:0f:0f:6a:d7:d2:6d:04:a3:d3: 1c:67:79:cd:60:1a:d4:da:3c:e0:c9:35:ff:7e:29:13:85:fa: 3d:c9:e4:ba:8e:d0:ae:29:0d:98:55:57:9a:b8:c4:6a:c5:2e: ef:47:df:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjA2MjkwODQwNDZaFw0yNjA3MDYwODQwNDZaMBgxFjAUBgNV BAMTDTZhNDIyZjhlLTRkNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjYhrv8FCvaqALWshetky/YT/7lUE0JhzEOo2sh5mWROyH+BfCb527abD2KCSF RVNL6sZ6OIg7SI+BDGBFqlHe6bP3zR/fTDbJskv8Y8qkuGq1XOwnhtwktAmAa8CB Q+zWhYVpml3w1oqveN7qMNygavxxjeH/3zsOsfxHMIVwHqfMNlu8txOqpoWRI1zR ZlKd7KObiuFY3BXiY0ngXFdmPgYqjSQ0IiDBetjKVjmyzbWJCI6y817ayM+0iddP f+og4E0Ecm+bmTsfi1nosQR11JGxdeL17ZhhDzANLuok+kWgqRp+oUuTB4LmzknE vP0u09TbdMXKZYxAaqJQAPj5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPCrY/Tal DSpBWIHSm92kqTwNUdowHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoLVdLXxe0g/FDNXDjcgKz4rF/qianiUzpMbofMXzZHl2Y6AGH1fB2saOeZ5FL YB2pE7phXtp8ImEulo8D3y2kyOBUbewK2IuUkHf5Tf5fHR7pkeXIQXnGtvv8skRj zcTYHc6PlNW4EamjKoAAGqvnvbR20kpWICHajd08odf5E4xqD3gD6uW398YzQyRi yhmAwlpOXxh83cmetQ3WfctHlU0bEfTTOKc31JfADFyhoNVO8KKCnjz0LDQl5pXG Ray3dV/c0eUBLZ7oXVe2EQ0PD2rX0m0Eo9McZ3nNYBrU2jzgyTX/fikThfo9yeS6 jtCuKQ2YVVeauMRqxS7vR9+h -----END CERTIFICATE-----Generated at Wed Jul 1 09:47:29 2026 by rpki-client