$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: +41GY15f6HWoWHo9utNH9wPxmVjKzLhUNiDxZXdrIaI= Subject key identifier: 29:8B:E5:05:00:A2:ED:A3:71:70:7F:24:A1:B5:8E:43:CC:A2:79:9C Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 01E9 Signing time: Sun 05 Jul 2026 03:58:23 +0000 Manifest this update: Sun 05 Jul 2026 03:58:23 +0000 Manifest next update: Sun 12 Jul 2026 03:58:23 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: 06v3wfNR8JBwFOa/MbcZTuIJblsM8+bkkPBT65OmrQ4=) 2: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=) 3: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: yzwQF5BWuhV75DE3qzozKQNyER1bQqJr/dSB8bkYg7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 03:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Jul 5 03:58:23 2026 GMT Not After : Jul 12 03:58:23 2026 GMT Subject: CN=6a49d65f-e1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:5c:87:1c:22:3b:a3:f3:a0:39:09:12:38: 16:95:a4:d2:26:4e:40:13:26:76:15:32:34:b5:77: e8:0c:9d:88:69:ae:b7:41:15:e2:02:2c:7e:20:42: 2b:74:7f:aa:79:3e:4a:89:61:aa:a5:29:0f:34:36: 9b:74:fd:8d:51:98:3a:f6:af:e5:f0:5a:d4:02:ea: 01:87:08:65:53:2a:f0:25:20:e5:26:90:d2:9e:b9: ed:b0:d2:8b:97:83:e1:ed:06:f9:82:07:5b:bd:29: ca:3f:2c:f8:50:17:76:25:0a:f4:ca:21:c7:b5:a9: 12:35:ca:96:dc:cd:8e:e5:90:79:f1:12:64:07:ba: 50:6c:8c:6b:e7:f0:43:9e:ee:36:00:c2:1b:91:a5: f6:6d:f5:07:71:54:48:8b:f4:54:8b:90:00:9f:ef: 77:73:85:b8:bc:37:86:72:3b:cc:22:fb:0e:77:1a: 98:64:d1:52:3d:2b:f4:35:aa:79:da:8c:f1:84:7f: 94:e6:00:a9:d1:a3:3b:2c:eb:22:76:f6:42:25:76: 39:76:ba:1f:38:c3:b6:55:e3:d1:5d:b8:f4:e3:59: e3:a7:0f:78:b5:2e:b6:b2:c0:29:50:19:e1:85:65: b5:9c:e7:1e:07:90:b7:91:f4:bf:3c:90:87:f7:2a: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:E5:05:00:A2:ED:A3:71:70:7F:24:A1:B5:8E:43:CC:A2:79:9C X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e0:4e:3d:f6:3e:78:24:ee:1a:ac:0e:db:9e:43:ba:ff:2f: 73:4c:cf:b9:97:d1:69:aa:c4:6d:e1:32:ce:58:07:b9:cb:b0: 08:18:4c:29:be:ec:2f:24:2a:8a:2b:ca:a2:b9:7a:41:0d:5f: 7a:12:f8:fa:b5:6e:7c:ec:09:11:a8:13:ba:16:02:27:62:76: f9:6f:b7:b0:9c:b9:7f:9f:b4:96:d7:5f:01:cf:0d:5a:9f:c3: 1d:9b:bb:5b:cf:f4:00:68:e7:d5:c1:b3:28:7b:91:49:ce:18: 98:e6:a6:4f:9f:95:23:fc:4d:89:71:49:3a:ca:2b:26:91:94: 38:a7:de:14:b3:a8:a8:ed:1f:7e:bf:8a:6a:17:c2:d2:18:83: cd:3e:cf:9e:ef:6c:23:2e:94:32:66:20:40:6e:4c:19:26:89: 29:fa:53:0e:a7:88:c3:85:92:6b:ef:0b:13:8d:40:b2:9b:da: b0:87:2a:96:09:df:a0:1e:1f:d2:89:7b:93:d7:2b:4c:7a:26: d8:d8:c9:1b:5b:94:d1:68:2a:c0:3a:ee:81:ca:b0:a5:19:b8: fa:c2:81:88:61:b3:fb:ad:8f:49:9f:ae:64:7c:66:09:4f:aa: 37:9b:42:7c:f2:1b:82:dc:ae:be:f3:1a:84:63:7b:a9:ff:ba: 12:89:d3:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjYwNzA1MDM1ODIzWhcNMjYwNzEyMDM1ODIzWjAYMRYwFAYD VQQDEw02YTQ5ZDY1Zi1lMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkFchxwiO6PzoDkJEjgWlaTSJk5AEyZ2FTI0tXfoDJ2Iaa63QRXiAix+IEIr dH+qeT5KiWGqpSkPNDabdP2NUZg69q/l8FrUAuoBhwhlUyrwJSDlJpDSnrntsNKL l4Ph7Qb5ggdbvSnKPyz4UBd2JQr0yiHHtakSNcqW3M2O5ZB58RJkB7pQbIxr5/BD nu42AMIbkaX2bfUHcVRIi/RUi5AAn+93c4W4vDeGcjvMIvsOdxqYZNFSPSv0Nap5 2ozxhH+U5gCp0aM7LOsidvZCJXY5drofOMO2VePRXbj041njpw94tS62ssApUBnh hWW1nOceB5C3kfS/PJCH9yrbxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmL5QUA ou2jcXB/JKG1jkPMonmcMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALeBOPfY+eCTuGqwO255Duv8vc0zPuZfRaarEbeEyzlgHucuwCBhMKb7sLyQq iivKorl6QQ1fehL4+rVufOwJEagTuhYCJ2J2+W+3sJy5f5+0ltdfAc8NWp/DHZu7 W8/0AGjn1cGzKHuRSc4YmOamT5+VI/xNiXFJOsorJpGUOKfeFLOoqO0ffr+KahfC 0hiDzT7Pnu9sIy6UMmYgQG5MGSaJKfpTDqeIw4WSa+8LE41AspvasIcqlgnfoB4f 0ol7k9crTHom2NjJG1uU0WgqwDrugcqwpRm4+sKBiGGz+62PSZ+uZHxmCU+qN5tC fPIbgtyuvvMahGN7qf+6EonToQ== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:28 2026 by rpki-client