$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: KgISGXkVmZeb5+hOGorSOl0MS0KuPKgWR+dHFjYiL4M= Subject key identifier: EC:29:6B:3E:6A:26:1C:E1:39:80:08:AC:57:91:CC:0B:9C:D3:34:1C Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08B8 Signing time: Wed 22 Jul 2026 21:07:45 +0000 Manifest this update: Wed 22 Jul 2026 21:07:45 +0000 Manifest next update: Wed 29 Jul 2026 21:07:45 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: G26xEN6mVYfgn167eXzbZlvr2UH12YTGWjevoIQNu4A=) 2: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 3: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 4: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 6: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 7: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 8: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 9: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 10: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jul 22 21:07:45 2026 GMT Not After : Jul 29 21:07:45 2026 GMT Subject: CN=6a613121-6f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:79:34:4d:72:89:fc:4c:14:be:a6:46:54: 77:94:1c:ae:4c:7d:fa:ea:19:fa:4d:0f:b7:37:a0: 48:83:b3:a7:f9:9a:57:11:47:2f:8b:4f:29:a4:0f: 3b:f5:01:ab:82:6f:ec:ec:50:dc:6c:14:d0:71:e1: d3:61:bd:14:02:5e:b8:d4:8d:75:51:9d:ac:1f:cd: 2e:a8:52:d9:25:63:d2:2d:65:7a:15:06:9c:7a:d4: d1:0d:60:6b:7c:cb:a1:5f:79:13:4d:e0:1e:0f:c6: a4:ce:ee:5d:4c:98:a5:bf:46:33:da:61:c3:ac:78: fb:c6:3b:f7:b6:6a:78:9b:f2:27:2d:e8:f3:20:94: b5:b6:7e:ec:bb:ee:a5:d0:4a:bb:5d:0d:d4:46:1b: 39:f6:87:fc:a4:d0:9e:d9:ba:d8:fc:d4:47:e3:06: 2d:3a:42:c2:e4:c6:0e:4d:7f:bd:2f:e7:0e:42:12: 93:16:2d:52:65:ec:ab:e1:09:12:cd:18:ae:2c:d6: 6d:dc:1d:ef:7f:0d:7e:cd:60:7c:87:9a:c0:e7:2b: 8d:a4:51:00:00:ae:5c:90:1a:23:05:65:26:6a:de: 37:84:23:30:28:14:de:22:24:3a:ca:2b:5e:aa:72: 99:ba:f7:c0:24:6a:84:ff:9b:59:7d:e8:ee:14:4e: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:29:6B:3E:6A:26:1C:E1:39:80:08:AC:57:91:CC:0B:9C:D3:34:1C X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3c:22:da:0a:c8:f7:9d:d0:69:1c:28:7f:8a:a4:96:38:06: 5b:98:46:47:ff:dd:f2:08:c5:1f:67:bd:d6:cd:c5:de:b1:50: 93:2d:d7:24:b6:e7:0c:cb:5f:02:78:a1:5c:fd:91:be:19:51: 61:42:14:b6:f8:99:5e:ba:ee:df:27:72:6d:6f:bd:4d:a8:ab: 8c:b1:d8:ff:4c:2c:77:6a:fb:bf:95:b9:ef:e6:43:27:66:93: e7:e9:6e:82:a7:bc:bc:48:15:65:7f:0a:92:98:88:9b:c9:49: 3d:39:f4:1d:7c:fc:32:4e:37:bf:df:01:51:a9:62:ab:1e:db: 0c:77:8b:44:42:ee:62:bf:61:cd:0f:79:25:f8:a1:23:2c:bf: e9:0c:c2:01:79:b3:86:3b:58:4b:84:c7:80:14:f9:eb:c1:0b: 1e:2f:23:07:aa:da:1c:c9:b0:5e:72:28:30:c3:00:cd:3b:1a: a3:e4:bd:3d:a9:a9:b0:81:69:ff:4c:d5:66:d2:ee:e6:55:e3: b7:e2:20:28:d7:dc:48:80:5d:fe:01:c0:b2:db:9f:2f:a8:20: 25:c4:02:4d:ed:11:8b:03:5c:4d:4b:13:e9:70:a8:76:3f:b2: c1:06:e7:98:1d:79:87:8f:29:4f:1d:b5:56:fb:ab:5c:6f:ff: e6:d9:14:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNzIyMjEwNzQ1WhcNMjYwNzI5MjEwNzQ1WjAYMRYwFAYD VQQDEw02YTYxMzEyMS02ZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1d5NE1yifxMFL6mRlR3lByuTH366hn6TQ+3N6BIg7On+ZpXEUcvi08ppA87 9QGrgm/s7FDcbBTQceHTYb0UAl641I11UZ2sH80uqFLZJWPSLWV6FQacetTRDWBr fMuhX3kTTeAeD8akzu5dTJilv0Yz2mHDrHj7xjv3tmp4m/InLejzIJS1tn7su+6l 0Eq7XQ3URhs59of8pNCe2brY/NRH4wYtOkLC5MYOTX+9L+cOQhKTFi1SZeyr4QkS zRiuLNZt3B3vfw1+zWB8h5rA5yuNpFEAAK5ckBojBWUmat43hCMwKBTeIiQ6yite qnKZuvfAJGqE/5tZfejuFE53oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwpaz5q JhzhOYAIrFeRzAuc0zQcMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbzwi2grI953QaRwof4qkljgGW5hGR//d8gjFH2e91s3F3rFQky3XJLbnDMtf AnihXP2RvhlRYUIUtviZXrru3ydybW+9TairjLHY/0wsd2r7v5W57+ZDJ2aT5+lu gqe8vEgVZX8KkpiIm8lJPTn0HXz8Mk43v98BUaliqx7bDHeLRELuYr9hzQ95Jfih Iyy/6QzCAXmzhjtYS4THgBT568ELHi8jB6raHMmwXnIoMMMAzTsao+S9PampsIFp /0zVZtLu5lXjt+IgKNfcSIBd/gHAstufL6ggJcQCTe0RiwNcTUsT6XCodj+ywQbn mB15h48pTx21VvurXG//5tkUBw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:05 2026 by rpki-client