$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 6T8bI+4bvhXL7C53DdOY1wGOxdnyrxki85D7Ls0yQv8= Subject key identifier: 6E:53:BD:DA:62:9E:15:8F:12:66:D2:7C:94:05:79:E5:08:3E:22:30 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 021D Signing time: Thu 23 Jul 2026 04:08:41 +0000 Manifest this update: Thu 23 Jul 2026 04:08:41 +0000 Manifest next update: Thu 30 Jul 2026 04:08:41 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: O2nMGtCWZZoyuVxAsD7KEmWcKYWrhfA9PsTl+Kf2dQI=) 2: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Jul 23 04:08:41 2026 GMT Not After : Jul 30 04:08:41 2026 GMT Subject: CN=6a6193c9-848e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:a2:89:ab:0a:36:34:3f:85:f9:a9:32:01: 48:01:d6:8f:82:ad:da:9a:d6:9c:79:53:9b:39:b0: f1:36:31:e5:57:0f:20:b4:3c:40:91:8e:a1:2e:8d: 25:3b:20:63:46:c3:5e:cf:58:d9:fa:ff:99:35:27: dc:6a:d6:62:61:61:55:a0:06:45:c0:52:cc:9f:ff: f5:dc:56:1f:de:7f:41:45:ab:6b:f7:3e:3d:66:ba: 15:12:59:bb:76:5a:c2:96:11:52:51:a4:98:93:61: 44:11:cf:44:d8:7a:13:57:26:64:af:0c:c3:86:49: 1a:a2:ea:fb:92:8f:ec:84:20:81:5c:5e:d2:4a:75: 29:45:c8:16:0f:14:cb:72:ac:af:ca:cf:5b:e6:c4: 02:7a:28:1b:85:48:ba:c0:31:d9:ed:e8:a5:ec:69: 00:02:e2:1a:ac:92:67:4c:b8:5a:bc:30:47:15:22: 67:d1:40:e8:64:a7:b0:9a:c8:5d:c1:58:28:b1:4a: 7c:0b:ef:39:84:cf:5b:6b:9c:05:85:7f:94:8f:0e: 4d:fd:93:41:75:c6:60:d8:06:a7:23:ba:46:b2:b4: bb:b1:10:23:61:0b:c7:c9:3d:96:84:30:53:d9:e6: ee:26:6f:99:7b:82:b0:dc:89:7c:af:f8:44:e7:d5: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:53:BD:DA:62:9E:15:8F:12:66:D2:7C:94:05:79:E5:08:3E:22:30 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:43:94:d3:45:db:c2:24:37:f9:52:1b:85:db:ec:2f:4e: 4a:62:0e:f3:ae:8b:de:c1:0b:ae:1f:56:65:54:1e:e0:62:e9: 6b:cb:88:b7:3c:f5:9d:3e:64:00:70:e8:2e:ed:b9:cc:64:4d: 5c:26:43:56:aa:7b:4b:d1:b4:fa:c1:b3:a6:4e:a6:29:35:49: 63:19:44:25:2a:a6:07:d1:00:f5:b5:f4:4b:c3:6d:b3:01:88: a5:3d:c8:66:08:23:58:06:4a:8f:70:90:c7:63:5b:8d:20:19: a8:b6:b2:8d:96:f0:1b:44:4d:18:51:f9:0e:8d:9c:55:fe:64: c7:1e:80:ae:38:e4:8f:1b:c3:8c:d6:a4:f7:f8:f1:e3:bc:96: fc:e4:1b:53:ac:1b:bb:17:bf:cd:f6:6f:75:93:e6:fb:25:c9: f6:9b:ec:82:01:d3:5f:19:ee:1a:9e:3c:fe:db:57:38:e6:08: e2:ca:a5:99:b0:89:f5:47:af:36:f7:e6:51:16:53:fb:8a:06: a8:0b:3e:0a:5f:d7:8c:f3:e1:03:44:a6:c2:b1:0a:17:55:97: 7b:2d:ea:bc:7d:41:aa:e5:16:c4:5b:43:34:c9:64:de:9e:3b: 98:84:5d:19:2e:03:66:22:94:49:29:f3:8f:8d:93:c0:b3:40: 73:5e:fc:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYwNzIzMDQwODQxWhcNMjYwNzMwMDQwODQxWjAYMRYwFAYD VQQDEw02YTYxOTNjOS04NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKOiiasKNjQ/hfmpMgFIAdaPgq3amtaceVObObDxNjHlVw8gtDxAkY6hLo0l OyBjRsNez1jZ+v+ZNSfcatZiYWFVoAZFwFLMn//13FYf3n9BRatr9z49ZroVElm7 dlrClhFSUaSYk2FEEc9E2HoTVyZkrwzDhkkaour7ko/shCCBXF7SSnUpRcgWDxTL cqyvys9b5sQCeigbhUi6wDHZ7eil7GkAAuIarJJnTLhavDBHFSJn0UDoZKewmshd wVgosUp8C+85hM9ba5wFhX+Ujw5N/ZNBdcZg2AanI7pGsrS7sRAjYQvHyT2WhDBT 2ebuJm+Ze4Kw3Il8r/hE59XlLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5Tvdpi nhWPEmbSfJQFeeUIPiIwMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJJDlNNF28IkN/lSG4Xb7C9OSmIO866L3sELrh9WZVQe4GLpa8uItzz1nT5k AHDoLu25zGRNXCZDVqp7S9G0+sGzpk6mKTVJYxlEJSqmB9EA9bX0S8NtswGIpT3I ZggjWAZKj3CQx2NbjSAZqLayjZbwG0RNGFH5Do2cVf5kxx6ArjjkjxvDjNak9/jx 47yW/OQbU6wbuxe/zfZvdZPm+yXJ9pvsggHTXxnuGp48/ttXOOYI4sqlmbCJ9Uev NvfmURZT+4oGqAs+Cl/XjPPhA0SmwrEKF1WXey3qvH1BquUWxFtDNMlk3p47mIRd GS4DZiKUSSnzj42TwLNAc178Kw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:39 2026 by rpki-client