$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: mSrLa9nTjlnC2IU+PgwDtKXZb/NwrWZVc74H/Ri0pkU= Subject key identifier: 7C:8E:10:E4:08:4D:44:7C:B0:AE:E0:B3:6E:A8:03:02:B1:72:78:9E Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 08C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 61AE Signing time: Wed 22 Jul 2026 14:15:23 +0000 Manifest this update: Wed 22 Jul 2026 14:15:22 +0000 Manifest next update: Wed 29 Jul 2026 14:15:22 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: 6oUuDcywmfkJbq1HVlMhf8G8D0R1Di6hX6csL5rcBpQ=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=) 4: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Jul 22 14:15:22 2026 GMT Not After : Jul 29 14:15:22 2026 GMT Subject: CN=6a60d07b-ec26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:3d:81:cc:c8:99:dd:16:90:4e:d3:d2:d2: fc:88:0c:54:8a:ee:87:04:16:21:d8:24:25:e3:68: 0e:e5:9e:a8:f5:1e:02:c9:89:15:01:7b:93:92:b2: fa:e3:3f:87:fc:5c:3c:9d:61:db:42:9b:25:c8:2b: 42:dd:ba:1f:ed:c9:ea:95:9f:bc:4c:fe:82:87:8a: 44:d7:a7:23:1d:44:3f:78:c3:40:2b:52:e0:46:9c: 34:70:74:c5:e0:71:80:96:bc:30:96:51:6d:2e:2c: 86:2e:7d:39:56:35:5b:74:e0:bf:de:27:95:cf:4f: 71:85:c4:6e:4a:c8:b7:df:75:f0:d2:c0:ea:92:3f: ec:79:e8:f4:9b:4a:b3:6d:a5:b0:dc:08:e6:39:0e: 84:9f:aa:64:c9:2f:d3:61:1c:61:f6:c7:70:6a:4c: 19:8a:fb:b4:9d:93:0e:d3:cb:be:a4:85:06:2a:66: 52:cc:c2:53:24:22:4c:c0:3c:9d:99:1c:7f:ef:33: 41:7d:0d:06:79:23:cf:7f:42:53:08:11:34:ab:ba: 63:bc:8c:8a:72:0a:99:72:0a:09:03:fa:0f:a6:d3: 6f:fe:51:58:a0:de:9d:68:5f:51:2b:a5:82:36:dc: 52:21:90:a9:01:43:56:33:ba:15:b0:ea:91:96:c1: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8E:10:E4:08:4D:44:7C:B0:AE:E0:B3:6E:A8:03:02:B1:72:78:9E X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:4e:7d:94:c3:11:ad:61:84:47:1d:98:68:2e:c3:48:9e: 99:dd:b8:ef:3e:35:05:7f:0f:6c:5f:b7:9a:50:21:40:89:ba: 98:1b:2f:88:cc:5c:d0:6e:79:ac:f8:b8:48:92:e8:e9:56:aa: 3a:63:15:4d:a2:a6:30:57:73:4d:c5:d0:0b:18:d0:74:6c:10: 1d:b7:a7:6e:69:8c:f4:00:c7:1d:02:e2:0f:50:07:08:af:b4: 9e:e2:06:26:9d:3e:48:06:07:70:e1:b2:a9:e5:1f:d6:cf:68: 5c:8e:57:f0:fb:46:e7:fb:e8:cd:0d:14:1a:67:70:08:a0:29: d9:0a:7f:0a:49:87:9b:5f:c8:e3:b5:f2:5b:dd:a2:61:f5:4d: 86:cd:ba:1b:48:97:ba:f7:6b:e5:0b:7d:1f:05:19:a9:88:f0: 57:6b:87:e1:86:ca:c4:5c:f0:93:ba:81:32:f1:3e:b8:33:80: 1e:23:1d:d1:98:7e:da:a4:6e:78:4c:89:ab:4c:1f:15:8a:c4: bd:d7:2c:21:a3:ae:fa:93:0d:5c:85:74:cc:fd:71:c5:e5:51: a5:f4:51:ba:b6:4e:8b:d8:58:30:b9:14:b9:70:1a:54:e3:b8: 90:3f:a7:c3:86:fe:f6:80:63:78:e0:5d:e8:00:71:d5:fb:23: a9:ea:b1:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjYwNzIyMTQxNTIyWhcNMjYwNzI5MTQxNTIyWjAYMRYwFAYD VQQDEw02YTYwZDA3Yi1lYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUM9gczImd0WkE7T0tL8iAxUiu6HBBYh2CQl42gO5Z6o9R4CyYkVAXuTkrL6 4z+H/Fw8nWHbQpslyCtC3bof7cnqlZ+8TP6Ch4pE16cjHUQ/eMNAK1LgRpw0cHTF 4HGAlrwwllFtLiyGLn05VjVbdOC/3ieVz09xhcRuSsi333Xw0sDqkj/seej0m0qz baWw3AjmOQ6En6pkyS/TYRxh9sdwakwZivu0nZMO08u+pIUGKmZSzMJTJCJMwDyd mRx/7zNBfQ0GeSPPf0JTCBE0q7pjvIyKcgqZcgoJA/oPptNv/lFYoN6daF9RK6WC NtxSIZCpAUNWM7oVsOqRlsGuQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyOEOQI TUR8sK7gs26oAwKxcnieMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5tOfZTDEa1hhEcdmGguw0iemd247z41BX8PbF+3mlAhQIm6mBsviMxc0G55 rPi4SJLo6VaqOmMVTaKmMFdzTcXQCxjQdGwQHbenbmmM9ADHHQLiD1AHCK+0nuIG Jp0+SAYHcOGyqeUf1s9oXI5X8PtG5/vozQ0UGmdwCKAp2Qp/CkmHm1/I47XyW92i YfVNhs26G0iXuvdr5Qt9HwUZqYjwV2uH4YbKxFzwk7qBMvE+uDOAHiMd0Zh+2qRu eEyJq0wfFYrEvdcsIaOu+pMNXIV0zP1xxeVRpfRRurZOi9hYMLkUuXAaVOO4kD+n w4b+9oBjeOBd6ABx1fsjqeqxUQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:13:06 2026 by rpki-client