$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json) Hash identifier: JUnmxlhSoCiwTImkBh+or8xLXLqm2IhQq35t6YTmYc8= Subject key identifier: 9B:C0:42:18:59:DA:56:EB:59:0B:21:89:E8:7F:19:DD:60:1C:D4:6B Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft Manifest number: 22 Signing time: Sun 05 Jul 2026 09:37:09 +0000 Manifest this update: Sun 05 Jul 2026 09:37:09 +0000 Manifest next update: Sun 12 Jul 2026 09:37:09 +0000 Files and hashes: 1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: s8k3640DsFDni5vXEZYif3A6eLvurdG/pHx+qnNrCIk=) 2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 09:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Validity Not Before: Jul 5 09:37:09 2026 GMT Not After : Jul 12 09:37:09 2026 GMT Subject: CN=6a4a25c5-86eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:5b:c3:bd:6e:d9:2a:3b:cb:af:9b:98:ae: 30:9d:9d:21:55:78:eb:d7:f8:6c:16:60:14:1b:16: 8e:f5:ec:c5:95:d2:48:b1:e7:07:29:b1:e1:37:84: 88:28:20:99:cc:e8:ac:e0:ce:06:7a:c5:6a:12:e0: d5:75:16:8e:ab:2a:ff:26:d8:3e:71:8d:a8:23:3b: b5:da:e8:31:01:22:ce:09:1a:3b:b5:d0:d3:ec:d1: ae:1c:fa:c3:7f:a8:90:be:75:32:8a:60:97:0d:17: 1b:8d:e0:5c:80:06:9a:f9:0d:9a:a3:28:00:28:0b: f8:21:aa:36:05:b4:27:ae:0f:c6:38:ba:0a:5b:8d: 68:b6:ff:68:6c:9f:c9:1a:dd:8e:ae:b0:0e:8b:26: 66:4d:90:bc:d1:c7:32:83:a3:72:ce:b0:09:28:12: 17:3e:2e:dc:dc:2d:c1:d9:e8:71:63:12:1c:74:2c: da:88:36:8f:5d:43:27:7f:89:7c:b1:51:5b:46:ec: 01:9f:7c:8f:74:83:bd:93:c8:b9:55:ee:d2:7b:bc: 40:01:53:7e:b8:cd:57:d9:aa:b0:5c:2f:6e:42:0b: 87:5c:e7:cc:cd:63:59:8d:12:31:da:f4:75:93:2c: cc:14:43:e5:7b:ea:a8:b6:3a:57:98:98:aa:35:46: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:42:18:59:DA:56:EB:59:0B:21:89:E8:7F:19:DD:60:1C:D4:6B X509v3 Authority Key Identifier: keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:bd:93:12:52:fa:e3:b0:78:a9:e7:7e:c9:ad:e0:ec:e6:4c: 1f:21:54:6c:2e:0f:74:67:b2:23:48:93:ff:0e:92:4b:3e:e1: 48:2a:ca:2f:88:d9:05:f7:ea:3d:a9:60:be:31:24:8a:96:b2: 8b:c3:5b:16:d4:ea:a6:7a:9a:82:91:44:61:78:ac:66:d9:f1: 83:c2:4b:a8:44:ff:5a:19:36:2a:a4:85:51:94:99:36:cb:7b: d1:f8:37:c0:1a:07:e0:8d:9b:55:aa:12:b7:40:fb:0d:ae:a1: c2:6d:4b:57:17:ac:c5:e0:ec:e0:81:63:7d:93:eb:be:45:19: d2:c3:b8:87:13:83:f6:ff:06:24:21:f6:35:66:44:26:0f:0d: e0:c6:29:a7:9e:9b:52:a8:6d:75:33:cf:fa:1e:c1:aa:29:66: 1d:25:22:29:0d:6b:8e:85:c7:2f:c2:d9:b4:61:09:1c:11:ab: 55:dd:fc:2d:f8:43:7f:9b:71:10:aa:ec:97:96:f7:7b:0f:9e: 31:b5:95:08:93:66:76:98:19:33:1e:8c:71:64:85:18:94:b9: c2:81:e0:c4:13:4b:aa:86:b8:6f:fb:71:1e:3c:53:60:c7:a3: 93:da:72:4f:ee:d3:2a:27:a1:e1:29:90:94:f8:e2:83:a2:61: ad:d2:45:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoRjI0NDgxNUQ1QjM5MUUyMDAwQjc4Q0E5NkUxOTMwMjBG RjkwMjI1ODAeFw0yNjA3MDUwOTM3MDlaFw0yNjA3MTIwOTM3MDlaMBgxFjAUBgNV BAMTDTZhNGEyNWM1LTg2ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs3VvDvW7ZKjvLr5uYrjCdnSFVeOvX+GwWYBQbFo717MWV0kix5wcpseE3hIgo IJnM6KzgzgZ6xWoS4NV1Fo6rKv8m2D5xjagjO7Xa6DEBIs4JGju10NPs0a4c+sN/ qJC+dTKKYJcNFxuN4FyABpr5DZqjKAAoC/ghqjYFtCeuD8Y4ugpbjWi2/2hsn8ka 3Y6usA6LJmZNkLzRxzKDo3LOsAkoEhc+LtzcLcHZ6HFjEhx0LNqINo9dQyd/iXyx UVtG7AGffI90g72TyLlV7tJ7vEABU364zVfZqrBcL25CC4dc58zNY1mNEjHa9HWT LMwUQ+V76qi2OleYmKo1RmzXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm8BCGFna VutZCyGJ6H8Z3WAc1GswHwYDVR0jBBgwFoAU8kSBXVs5HiAAt4ypbhkwIP+QIlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0YwMzA5QkE2NDdD NjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlBQXQ0eXBiaGt3SVAtUUls Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtTQlhWczVIaUFBdDR5cGJoa3dJUC1RSWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0YwMzA5QkE2NDdDNjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlB QXQ0eXBiaGt3SVAtUUlsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZvZMSUvrjsHip537JreDs5kwfIVRsLg90Z7IjSJP/DpJLPuFIKsoviNkF9+o9 qWC+MSSKlrKLw1sW1OqmepqCkURheKxm2fGDwkuoRP9aGTYqpIVRlJk2y3vR+DfA GgfgjZtVqhK3QPsNrqHCbUtXF6zF4OzggWN9k+u+RRnSw7iHE4P2/wYkIfY1ZkQm Dw3gximnnptSqG11M8/6HsGqKWYdJSIpDWuOhccvwtm0YQkcEatV3fwt+EN/m3EQ quyXlvd7D54xtZUIk2Z2mBkzHoxxZIUYlLnCgeDEE0uqhrhv+3EePFNgx6OT2nJP 7tMqJ6HhKZCU+OKDomGt0kVx -----END CERTIFICATE-----Generated at Tue Jul 7 04:38:00 2026 by rpki-client