$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: 1qNuEyMio3Fk76gQQdJ1ECI2fTVTaeLIAOLdYQH9O9Q= Subject key identifier: E4:74:43:C8:FA:1F:96:90:40:85:30:B8:DB:66:AF:06:FE:4F:0B:64 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 021A Signing time: Fri 21 Aug 2026 02:55:50 +0000 Manifest this update: Fri 21 Aug 2026 02:55:50 +0000 Manifest next update: Fri 28 Aug 2026 02:55:50 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: gJqOve+ak6T9L/ZWlnV2cbTiCjSehW0yDB2+wO0mH28=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Aug 21 02:55:50 2026 GMT Not After : Aug 28 02:55:50 2026 GMT Subject: CN=6a87be36-17b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:09:b1:4b:25:39:88:5c:f8:61:49:5a:25: 1a:e5:51:b4:84:7c:70:21:c8:2f:7c:0d:78:4f:2d: e4:7c:7e:5b:ab:8e:ff:c4:9a:32:11:5a:37:06:23: e7:b5:3e:fd:9e:8e:59:b8:32:f6:66:09:07:ec:b0: be:6f:55:d8:9e:65:8f:8f:a9:16:8c:4c:f6:e0:e6: 86:dc:8f:e4:31:3e:bb:ed:80:bc:10:81:25:cc:57: ff:dc:67:43:27:d5:66:5a:79:0a:0a:9d:2e:15:64: fb:05:b0:87:89:96:51:e6:a6:48:49:32:dd:25:a0: da:1d:4f:69:60:de:93:c4:12:7c:85:07:34:bc:bf: 8c:1e:61:10:fe:3b:e2:35:0f:33:81:79:07:4f:b5: 55:a1:d1:c3:00:8a:45:52:2a:36:b1:19:11:37:1d: 20:a5:41:de:c9:d0:4d:d1:28:93:f8:e3:cf:24:70: 4b:d7:9d:bb:8c:5a:9f:34:05:95:d4:f8:ec:5e:2b: cd:44:61:ad:1f:4d:c4:c9:4e:b0:c9:0e:03:30:b4: 7a:6a:9e:92:af:e5:11:ff:92:67:68:b5:79:03:9e: d8:35:f3:8d:a0:70:d1:e1:82:7a:0a:df:4d:60:ec: 2a:36:49:48:46:86:3a:71:41:b5:85:d1:51:65:8f: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:74:43:C8:FA:1F:96:90:40:85:30:B8:DB:66:AF:06:FE:4F:0B:64 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:02:54:fd:0d:21:5a:25:29:3b:6b:c8:3e:5f:84:5f:50:e8: 37:66:5a:f4:8f:ce:be:b7:ba:58:f7:c3:49:b9:6f:07:bb:62: ea:5a:ed:bd:af:9e:38:fb:1a:b7:d7:11:96:24:a5:4d:ce:7f: 13:e3:5b:37:5a:09:54:01:57:79:dc:34:0f:0c:21:f9:19:d1: 91:59:29:8e:06:10:80:e9:c9:35:1a:55:d3:94:bb:55:1d:ff: fa:a5:30:4e:1f:9e:77:ca:b6:26:a4:9a:10:fe:93:90:ef:cb: d8:b4:ea:8c:2d:07:ab:71:ee:5f:57:cd:94:05:39:b4:bb:a1: 28:ed:40:42:6a:4d:f9:d8:f1:20:b3:6f:12:d1:85:a7:f4:ff: 1d:af:07:b5:08:49:96:f9:3e:5b:91:85:01:c4:92:e2:6a:3e: 19:24:d0:83:2c:90:8a:71:28:94:44:ba:3e:a3:ad:04:57:3d: f9:ed:3d:8c:6a:dc:b9:31:af:9e:d3:6a:2c:37:cb:fc:b1:76: 79:c6:c3:65:9b:95:07:74:d2:cb:c1:42:e8:a5:64:17:30:7a: ad:68:93:df:2e:9e:70:ac:54:ba:56:33:a7:a4:f8:9b:ef:0f: a7:64:f0:c6:7f:7e:c6:37:28:bd:7b:9e:54:c2:7e:b4:ae:c5: 70:38:5d:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwODIxMDI1NTUwWhcNMjYwODI4MDI1NTUwWjAYMRYwFAYD VQQDEw02YTg3YmUzNi0xN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk4YJsUslOYhc+GFJWiUa5VG0hHxwIcgvfA14Ty3kfH5bq47/xJoyEVo3BiPn tT79no5ZuDL2ZgkH7LC+b1XYnmWPj6kWjEz24OaG3I/kMT677YC8EIElzFf/3GdD J9VmWnkKCp0uFWT7BbCHiZZR5qZISTLdJaDaHU9pYN6TxBJ8hQc0vL+MHmEQ/jvi NQ8zgXkHT7VVodHDAIpFUio2sRkRNx0gpUHeydBN0SiT+OPPJHBL1527jFqfNAWV 1PjsXivNRGGtH03EyU6wyQ4DMLR6ap6Sr+UR/5JnaLV5A57YNfONoHDR4YJ6Ct9N YOwqNklIRoY6cUG1hdFRZY/QTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOR0Q8j6 H5aQQIUwuNtmrwb+TwtkMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABAJU/Q0hWiUpO2vIPl+EX1DoN2Za9I/Ovre6WPfDSblvB7ti6lrtva+eOPsa t9cRliSlTc5/E+NbN1oJVAFXedw0Dwwh+RnRkVkpjgYQgOnJNRpV05S7VR3/+qUw Th+ed8q2JqSaEP6TkO/L2LTqjC0Hq3HuX1fNlAU5tLuhKO1AQmpN+djxILNvEtGF p/T/Ha8HtQhJlvk+W5GFAcSS4mo+GSTQgyyQinEolES6PqOtBFc9+e09jGrcuTGv ntNqLDfL/LF2ecbDZZuVB3TSy8FC6KVkFzB6rWiT3y6ecKxUulYzp6T4m+8Pp2Tw xn9+xjcovXueVMJ+tK7FcDhdog== -----END CERTIFICATE-----Generated at Sat Aug 22 21:10:12 2026 by rpki-client