$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: u6h+iS3qLxvDTCrTu5mtZqVk9Q9fdyiblsvapHEEgNo= Subject key identifier: 53:3F:8E:7B:2B:12:98:05:CD:C8:FF:21:08:C8:DA:E3:7B:F3:08:B1 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 022C Signing time: Wed 19 Aug 2026 03:14:03 +0000 Manifest this update: Wed 19 Aug 2026 03:14:02 +0000 Manifest next update: Wed 26 Aug 2026 03:14:02 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: yf98Ra1854H6P19dG9fbNchmpWCNCqfkyWJehtr8r7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Aug 19 03:14:02 2026 GMT Not After : Aug 26 03:14:02 2026 GMT Subject: CN=6a851f7a-78cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:5d:5d:3a:71:4a:b9:7c:aa:49:6b:44:d4: 10:33:f0:d6:63:08:c5:d2:1f:0c:a9:10:4c:60:84: e4:71:bc:8f:53:05:bd:9d:96:b4:10:7f:27:1c:8e: 5a:39:0f:56:b7:2e:e5:01:7c:ad:e1:3f:5d:86:cc: 54:02:eb:82:51:b2:0f:52:96:be:b4:16:72:30:61: 73:58:b2:1f:06:ef:ea:50:6d:8e:37:fc:61:88:58: 8f:dd:a1:3e:f1:3b:7e:33:03:f4:e2:f3:be:5b:fe: f9:e1:de:7c:4c:95:5a:00:7f:7e:a9:bc:bd:b5:a0: c8:36:df:cf:e8:e7:8e:f4:c1:6f:22:8d:35:71:18: 9d:06:90:3f:9f:a2:5e:2e:d0:01:f4:38:12:71:01: 79:3d:63:f8:be:fd:8b:24:c4:70:ea:dd:61:cc:4a: 6e:e0:94:e5:e2:98:bd:1d:2c:87:87:a3:c2:3d:ee: cf:07:f3:2b:1f:ec:ab:e0:11:17:fe:42:e0:e3:7f: 42:34:9c:db:8b:be:3c:5e:c3:82:a6:f2:d4:e3:1f: 04:e8:a6:5c:ff:d3:56:12:f3:a5:80:e4:9b:1f:dc: 33:49:ce:a7:50:5c:9b:d4:dd:58:8f:cb:bb:a6:bd: 40:c9:73:73:79:a8:dd:f0:a4:7a:ce:00:26:5f:e7: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:8E:7B:2B:12:98:05:CD:C8:FF:21:08:C8:DA:E3:7B:F3:08:B1 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:a9:b6:d6:51:c8:45:4c:a9:bb:fa:0c:a3:3a:82:b2:0d:fb: 75:ac:be:b2:3a:d8:a5:96:da:ec:ec:27:e8:4e:6f:cc:73:f1: 6b:ab:58:0c:a6:d5:94:11:03:25:0e:af:6c:de:52:f3:b5:cb: bb:f0:e5:0d:83:9d:1d:f6:76:c4:79:9d:d8:f3:10:fe:28:7f: 5e:0a:61:ca:27:87:f5:39:c5:d7:7c:0f:ad:fd:9c:6f:e7:e5: db:45:4f:95:3c:b2:43:3b:13:d3:3f:cc:46:67:f0:af:48:9a: ec:9e:dc:09:0e:85:42:5b:7b:54:da:2a:0f:94:4b:30:fd:5d: 13:d3:c3:33:c5:6f:e8:76:82:15:c8:44:2e:91:a6:43:55:6a: 25:87:ed:9d:36:76:63:51:f6:20:c4:65:a1:f8:20:f6:b1:8a: 6f:62:8c:0c:4c:2b:17:e4:bc:28:de:b0:82:a4:ed:f2:27:29: 6e:7b:94:19:69:f5:49:c8:a5:03:d3:5e:cb:92:4a:20:8e:3d: e1:e3:59:fe:e7:89:40:1c:dd:42:9f:0b:69:3f:ef:a4:0a:97: b0:d6:8d:6f:52:ca:63:7e:d8:a2:27:90:ad:2d:5e:77:a8:cb: 9d:fa:f8:13:3f:35:69:4e:76:ed:51:1c:63:a0:7c:76:83:78: 42:bf:74:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwODE5MDMxNDAyWhcNMjYwODI2MDMxNDAyWjAYMRYwFAYD VQQDEw02YTg1MWY3YS03OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRZdXTpxSrl8qklrRNQQM/DWYwjF0h8MqRBMYITkcbyPUwW9nZa0EH8nHI5a OQ9Wty7lAXyt4T9dhsxUAuuCUbIPUpa+tBZyMGFzWLIfBu/qUG2ON/xhiFiP3aE+ 8Tt+MwP04vO+W/754d58TJVaAH9+qby9taDINt/P6OeO9MFvIo01cRidBpA/n6Je LtAB9DgScQF5PWP4vv2LJMRw6t1hzEpu4JTl4pi9HSyHh6PCPe7PB/MrH+yr4BEX /kLg439CNJzbi748XsOCpvLU4x8E6KZc/9NWEvOlgOSbH9wzSc6nUFyb1N1Yj8u7 pr1AyXNzeajd8KR6zgAmX+cEcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFM/jnsr EpgFzcj/IQjI2uN78wixMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwam21lHIRUypu/oMozqCsg37day+sjrYpZba7Own6E5vzHPxa6tYDKbVlBED JQ6vbN5S87XLu/DlDYOdHfZ2xHmd2PMQ/ih/XgphyieH9TnF13wPrf2cb+fl20VP lTyyQzsT0z/MRmfwr0ia7J7cCQ6FQlt7VNoqD5RLMP1dE9PDM8Vv6HaCFchELpGm Q1VqJYftnTZ2Y1H2IMRlofgg9rGKb2KMDEwrF+S8KN6wgqTt8icpbnuUGWn1Scil A9Ney5JKII494eNZ/ueJQBzdQp8LaT/vpAqXsNaNb1LKY37YoieQrS1ed6jLnfr4 Ez81aU527VEcY6B8doN4Qr90Uw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:47:59 2026 by rpki-client