$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: eEPCAn5u6ocrySaKWbYUa7XR7HxyWodt7NVVNwxlbhw= Subject key identifier: 26:C5:5F:6D:60:41:51:FD:F9:3F:87:E4:D2:15:E9:76:39:12:18:7F Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 67 Signing time: Mon 27 Jul 2026 10:21:54 +0000 Manifest this update: Mon 27 Jul 2026 10:21:53 +0000 Manifest next update: Mon 03 Aug 2026 10:21:53 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: VX835Buqza3rUIxWgSBIS50xWZdaofr0srNMZY07Yc8=) 2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) 3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: Jul 27 10:21:53 2026 GMT Not After : Aug 3 10:21:53 2026 GMT Subject: CN=6a673141-f412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:14:bf:d8:51:41:7c:85:fb:02:29:f0:10: 8b:ac:5b:ae:03:f5:21:dc:8f:4c:04:45:3b:0f:7c: e9:e2:e6:06:ff:fb:7c:c7:67:72:ef:82:02:7c:af: 69:30:63:29:e5:db:c8:0f:ba:b1:7f:f7:2c:27:89: a6:81:58:0a:65:c4:e9:5b:a2:76:54:26:31:6e:ab: 41:ae:e6:d5:b1:21:11:ed:e2:43:0f:1f:d3:61:3a: 87:ea:c9:8f:d1:6f:b3:9d:5c:ba:f1:2d:ec:97:d9: a7:e4:9a:d6:5d:02:ad:bb:3c:a3:94:ae:f0:f2:f6: 2a:f1:db:bc:5a:bf:c3:c6:9f:5d:9e:95:27:fe:da: 37:4a:31:fe:90:f8:a4:bf:88:0c:d8:97:d2:97:3e: ea:9f:3e:68:e3:63:62:87:0f:c2:d6:93:72:c6:3a: 8f:cb:34:79:e8:bf:93:db:5f:1c:d8:0a:d6:d1:69: 8b:76:44:7d:89:4b:05:d9:ed:54:1b:45:0e:b8:0e: 5a:66:81:bf:68:6b:92:b7:fa:31:a7:f8:03:c4:67: 41:75:73:5d:67:08:70:30:34:98:db:b7:8c:65:58: 47:07:93:a9:8a:84:22:a6:25:cf:40:fa:e2:cd:7e: 4e:6d:1c:5c:94:8b:d1:37:e9:24:3c:28:38:8c:86: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C5:5F:6D:60:41:51:FD:F9:3F:87:E4:D2:15:E9:76:39:12:18:7F X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:16:85:ea:e6:02:1d:37:ce:a6:1b:f6:d2:70:8c:94:43:25: 41:fb:3a:17:bb:86:54:6e:a8:20:7b:49:ae:91:bc:77:45:c7: 4f:03:9a:0f:eb:45:c8:5f:b1:f6:93:62:2b:83:ae:d7:6b:0a: 34:88:0f:7f:93:f7:a9:b6:95:e3:d5:1b:78:14:fe:8b:cf:ee: c4:56:76:85:0d:07:27:2a:25:06:d4:84:04:d8:1b:4b:df:7a: e3:47:b2:e3:94:da:11:97:81:26:1b:ce:b2:00:d4:02:b4:8d: ee:23:99:3d:91:f3:b2:7f:31:d4:48:18:17:6c:1c:ae:c4:f8: 33:69:6f:04:e4:b4:49:ef:ac:3a:25:34:d4:ef:51:3f:1d:56: de:37:de:4e:2f:c9:8e:14:b1:1d:40:c0:73:f8:2c:23:71:a2: 5d:83:eb:be:5a:55:c7:2f:6a:2d:a1:7b:51:79:07:99:a8:2b: d8:70:1c:be:e3:a9:7d:d5:52:9a:96:ce:b4:05:58:6d:0c:7c: 4a:69:29:ea:e0:07:b5:cc:cf:ca:6e:a0:3b:57:b9:1d:f7:be: 2b:95:0a:15:36:b9:af:d8:f6:91:53:33:51:9d:01:0f:7f:33: b1:4e:84:f7:9e:9b:55:68:be:17:7a:7a:0b:e8:f8:ba:b7:e0: be:f8:0e:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjA3MjcxMDIxNTNaFw0yNjA4MDMxMDIxNTNaMBgxFjAUBgNV BAMTDTZhNjczMTQxLWY0MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ+hS/2FFBfIX7AinwEIusW64D9SHcj0wERTsPfOni5gb/+3zHZ3LvggJ8r2kw Yynl28gPurF/9ywniaaBWAplxOlbonZUJjFuq0Gu5tWxIRHt4kMPH9NhOofqyY/R b7OdXLrxLeyX2afkmtZdAq27PKOUrvDy9irx27xav8PGn12elSf+2jdKMf6Q+KS/ iAzYl9KXPuqfPmjjY2KHD8LWk3LGOo/LNHnov5PbXxzYCtbRaYt2RH2JSwXZ7VQb RQ64Dlpmgb9oa5K3+jGn+APEZ0F1c11nCHAwNJjbt4xlWEcHk6mKhCKmJc9A+uLN fk5tHFyUi9E36SQ8KDiMhs9fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJsVfbWBB Uf35P4fk0hXpdjkSGH8wHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATFoXq5gIdN86mG/bScIyUQyVB+zoXu4ZUbqgge0mukbx3RcdPA5oP60XIX7H2 k2Irg67Xawo0iA9/k/eptpXj1Rt4FP6Lz+7EVnaFDQcnKiUG1IQE2BtL33rjR7Lj lNoRl4EmG86yANQCtI3uI5k9kfOyfzHUSBgXbByuxPgzaW8E5LRJ76w6JTTU71E/ HVbeN95OL8mOFLEdQMBz+CwjcaJdg+u+WlXHL2otoXtReQeZqCvYcBy+46l91VKa ls60BVhtDHxKaSnq4Ae1zM/KbqA7V7kd974rlQoVNrmv2PaRUzNRnQEPfzOxToT3 nptVaL4XenoL6Pi6t+C++A7G -----END CERTIFICATE-----Generated at Tue Jul 28 03:17:34 2026 by rpki-client