$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: fk731snz9bMD+ftQHWuHbBE01d+V+gYSUliMvOHHah8= Subject key identifier: 7D:88:AB:D0:32:53:F3:66:A2:43:4A:D2:C5:6F:28:EA:8C:DB:84:5A Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0DD1 Signing time: Wed 22 Jul 2026 18:06:24 +0000 Manifest this update: Wed 22 Jul 2026 18:06:23 +0000 Manifest next update: Wed 29 Jul 2026 18:06:23 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: 7tV6dhnp9ebsTHgjFlvvNt8XqIoOF8R2p1yf58HJO2g=) 2: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=) 3: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: OCSQyHL40HhtFPxjiZ0aie03NCu9qKwOOGRctAZUKss=) 4: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: p0qRh9uijUrBuvk2zDLygs2mx5whlrqDAoU+cadOU2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Jul 22 18:06:23 2026 GMT Not After : Jul 29 18:06:23 2026 GMT Subject: CN=6a6106a0-6e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:74:f2:e6:46:f5:7c:b5:9b:34:be:f8:9b: 68:18:b7:44:95:0d:7e:5a:40:9b:2f:56:29:c7:51: 8e:61:c5:0e:eb:9b:b2:ed:e1:ba:78:45:ac:e7:7a: 03:9e:db:ce:c7:c4:ab:68:ca:88:4a:e3:80:57:6d: 55:95:ee:24:1e:12:cc:6d:c9:c7:fe:ea:3c:7c:1c: 57:04:63:0f:5e:65:60:d8:f5:05:25:37:5b:5b:a8: c3:fe:6b:bd:b2:34:e5:9b:63:36:54:b3:5d:d8:db: b1:7f:3d:9f:ce:8c:8f:b9:24:a9:66:0c:eb:fe:be: c7:7e:d6:0b:33:94:fc:d0:86:09:5b:34:8a:54:60: ac:a2:71:22:cd:6a:f0:17:ac:ec:fa:40:77:c9:61: 86:fc:10:7e:cc:a6:e7:19:7b:30:86:4f:f5:e9:4e: f4:7d:c5:75:74:45:94:d3:6e:5d:4a:3e:6b:e0:8d: 6b:24:28:f5:be:14:d2:31:6e:5f:f1:4f:fe:93:83: 88:ac:51:22:63:09:12:1f:43:26:3c:4b:71:0f:7b: 45:43:2a:a5:5b:b7:e0:47:9d:17:e5:98:36:2e:52: a7:03:86:c2:40:6c:fd:ce:39:d9:ee:1f:eb:d3:c9: 46:45:e0:a1:87:ec:0c:48:33:ed:ec:40:2e:0a:bd: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:AB:D0:32:53:F3:66:A2:43:4A:D2:C5:6F:28:EA:8C:DB:84:5A X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:23:a2:b2:97:c4:53:27:ad:b8:df:47:c4:2b:b7:30:56: 10:da:00:b9:82:09:be:e2:26:72:ef:a3:22:a1:cd:a1:ad:ba: 46:19:d0:4d:4a:22:7a:92:76:03:9e:db:e5:50:f7:73:98:44: 61:bc:e6:91:a9:aa:c4:1a:3a:82:d0:05:b4:b0:ea:8e:4a:bc: 10:55:41:55:13:a4:89:ce:18:ae:6b:41:ca:7c:ad:3c:e4:1b: 7c:4e:3a:65:db:59:c0:a7:e4:f4:30:42:60:41:a6:70:f5:4b: 17:17:17:cd:a4:70:42:fb:e5:ce:b9:c8:94:83:ae:3c:35:19: 7d:fb:d8:77:0d:49:68:90:10:81:4a:fa:83:b8:82:ad:74:40: cc:69:25:5a:da:60:c9:b6:23:6e:c5:c5:b0:3f:6a:a5:d5:09: 8f:db:c3:4a:49:f3:10:91:01:ad:17:00:9e:4a:80:42:dc:d1: c0:41:ae:37:0c:21:9d:c1:e5:f5:af:0a:26:f3:3b:67:7c:55: 00:d1:e0:11:9d:6c:c8:d7:d9:a4:00:d8:77:60:68:2e:14:69: f6:50:ab:ac:6a:a2:50:48:cf:8a:22:a7:87:8e:fd:f7:a4:45: 54:5d:b5:8c:68:dd:fd:a7:50:51:72:ad:79:31:5b:ff:f2:ad: bc:a2:16:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjYwNzIyMTgwNjIzWhcNMjYwNzI5MTgwNjIzWjAYMRYwFAYD VQQDEw02YTYxMDZhMC02ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cJ08uZG9Xy1mzS++JtoGLdElQ1+WkCbL1Ypx1GOYcUO65uy7eG6eEWs53oD ntvOx8SraMqISuOAV21Vle4kHhLMbcnH/uo8fBxXBGMPXmVg2PUFJTdbW6jD/mu9 sjTlm2M2VLNd2Nuxfz2fzoyPuSSpZgzr/r7HftYLM5T80IYJWzSKVGCsonEizWrw F6zs+kB3yWGG/BB+zKbnGXswhk/16U70fcV1dEWU025dSj5r4I1rJCj1vhTSMW5f 8U/+k4OIrFEiYwkSH0MmPEtxD3tFQyqlW7fgR50X5Zg2LlKnA4bCQGz9zjnZ7h/r 08lGReChh+wMSDPt7EAuCr2QuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2Iq9Ay U/NmokNK0sVvKOqM24RaMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIIjorKXxFMnrbjfR8QrtzBWENoAuYIJvuImcu+jIqHNoa26RhnQTUoiepJ2 A57b5VD3c5hEYbzmkamqxBo6gtAFtLDqjkq8EFVBVROkic4YrmtBynytPOQbfE46 ZdtZwKfk9DBCYEGmcPVLFxcXzaRwQvvlzrnIlIOuPDUZffvYdw1JaJAQgUr6g7iC rXRAzGklWtpgybYjbsXFsD9qpdUJj9vDSknzEJEBrRcAnkqAQtzRwEGuNwwhncHl 9a8KJvM7Z3xVANHgEZ1syNfZpADYd2BoLhRp9lCrrGqiUEjPiiKnh47996RFVF21 jGjd/adQUXKteTFb//KtvKIW9g== -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:21 2026 by rpki-client