$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft File: 089k1dsXYfy2pVLwaAkTMMW19Ts.mft (raw, json) Hash identifier: /KROWVZV2iqrP1Jh/dNBwSxeEufnrIlvidAKHqNxOQk= Subject key identifier: 0C:CB:BC:7E:08:34:96:C4:DA:99:8F:A6:D5:8A:EF:F4:CC:9C:B4:81 Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft Manifest number: C2 Signing time: Thu 23 Jul 2026 08:45:01 +0000 Manifest this update: Thu 23 Jul 2026 08:45:00 +0000 Manifest next update: Thu 30 Jul 2026 08:45:00 +0000 Files and hashes: 1: 089k1dsXYfy2pVLwaAkTMMW19Ts.crl (hash: ypHOcLAfyihZK9EzrRVzcsv59tDktJ6aRrzbedl1VhE=) 2: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (hash: Hc8ozT9yDfNYsIpquS99Gm4q+mTiTQ1cphIlHACdz5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Validity Not Before: Jul 23 08:45:00 2026 GMT Not After : Jul 30 08:45:00 2026 GMT Subject: CN=6a61d48d-e455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:71:5c:a9:59:f8:44:db:79:77:f6:2a:55: 82:03:75:6f:d4:de:0f:ae:2c:b4:08:29:30:c9:7a: f9:ac:d3:03:12:c6:1c:aa:45:e7:e2:91:8a:a9:57: b6:6a:17:25:0e:a8:eb:cf:46:b7:da:ae:8d:11:ba: c0:16:fb:4f:a4:3c:a4:e9:3d:40:0e:3e:a1:b5:b5: 78:42:d4:6a:02:72:6c:ee:3e:e8:b1:bc:b7:cc:d5: 92:cf:fa:3c:13:c0:27:2b:de:9a:45:ef:8e:13:a4: fb:a5:d8:35:da:4f:db:59:89:b0:03:cf:fb:86:08: f8:c3:70:e9:28:ab:ba:89:d5:6f:5a:33:7e:a1:42: 72:08:fb:2b:96:5c:28:9a:8e:a1:ad:0e:d3:73:ce: 92:16:3e:aa:9f:2e:f4:61:e5:b6:32:64:6b:cc:35: 66:a4:a8:81:fc:e7:01:93:95:84:9d:8f:c2:d2:23: bc:72:7a:5e:9e:92:25:d9:f5:a3:67:9a:28:c9:f5: bc:30:98:d6:1d:f8:ff:21:4f:af:de:7a:32:b9:f7: 0a:71:09:8c:19:e0:21:5d:b4:c9:66:30:de:30:49: a0:3f:2b:25:02:2d:da:0e:ee:79:0c:06:34:e4:b2: d4:d3:49:d8:55:9c:9d:b0:e1:82:ce:e8:b2:42:50: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CB:BC:7E:08:34:96:C4:DA:99:8F:A6:D5:8A:EF:F4:CC:9C:B4:81 X509v3 Authority Key Identifier: keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:e0:ac:fc:7d:dd:c2:1a:ad:69:e2:fc:19:e2:7f:db:76: 5f:85:c3:63:32:48:61:91:d2:21:d1:10:9d:f4:70:2c:81:7a: e2:63:bd:8d:ce:37:c3:c9:3b:62:c4:e6:9c:b4:c0:2c:b2:53: b6:a8:90:07:21:25:2f:c8:a9:5e:f3:96:64:b4:2b:6f:03:a2: 3c:35:57:ae:87:0d:da:25:f0:90:ee:38:cf:79:76:18:9b:f9: 94:3d:06:26:c5:09:bd:c4:a7:61:ec:39:31:74:c3:74:e4:c6: 8e:a2:38:40:7f:f3:5d:1f:d9:42:6c:0a:ae:99:9c:72:ef:da: 1e:2d:d8:70:a1:87:08:a9:e1:f1:55:2b:42:1e:8e:de:1c:f1: 27:81:fc:8f:19:5e:5f:90:09:d3:11:65:ff:8b:69:8b:ae:09: 8d:2c:85:5c:81:35:1b:fc:86:51:94:ac:a0:8d:8b:a6:4e:25: 3d:19:c7:b7:36:48:c9:74:91:4b:18:b1:a2:ce:64:34:3c:a1: 42:db:25:d5:aa:64:25:6a:4c:90:9c:12:ea:08:24:b9:d9:44: 16:3c:d2:b1:cb:c9:9b:dc:a6:bd:b7:10:92:27:60:ce:19:01: 67:46:23:0b:be:39:38:7d:a6:f6:af:86:b5:db:e3:8c:60:e7: 4e:23:01:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI1REYxMTAvBgNVBAUTKEQzQ0Y2NEQ1REIxNzYxRkNCNkE1NTJGMDY4MDkxMzMw QzVCNUY1M0IwHhcNMjYwNzIzMDg0NTAwWhcNMjYwNzMwMDg0NTAwWjAYMRYwFAYD VQQDEw02YTYxZDQ4ZC1lNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuERxXKlZ+ETbeXf2KlWCA3Vv1N4Priy0CCkwyXr5rNMDEsYcqkXn4pGKqVe2 ahclDqjrz0a32q6NEbrAFvtPpDyk6T1ADj6htbV4QtRqAnJs7j7osby3zNWSz/o8 E8AnK96aRe+OE6T7pdg12k/bWYmwA8/7hgj4w3DpKKu6idVvWjN+oUJyCPsrllwo mo6hrQ7Tc86SFj6qny70YeW2MmRrzDVmpKiB/OcBk5WEnY/C0iO8cnpenpIl2fWj Z5ooyfW8MJjWHfj/IU+v3noyufcKcQmMGeAhXbTJZjDeMEmgPyslAi3aDu55DAY0 5LLU00nYVZydsOGCzuiyQlCH3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzLvH4I NJbE2pmPptWK7/TMnLSBMB8GA1UdIwQYMBaAFNPPZNXbF2H8tqVS8GgJEzDFtfU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjVERi9FNjEyNDA4MjVF RDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlmeTJwVkx3YUFrVE1NVzE5 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA4OWsxZHNYWWZ5MnBWTHdhQWtUTU1XMTlUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjVERi9FNjEyNDA4MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlm eTJwVkx3YUFrVE1NVzE5VHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ0fgrPx93cIarWni/Bnif9t2X4XDYzJIYZHSIdEQnfRwLIF64mO9jc43w8k7 YsTmnLTALLJTtqiQByElL8ipXvOWZLQrbwOiPDVXrocN2iXwkO44z3l2GJv5lD0G JsUJvcSnYew5MXTDdOTGjqI4QH/zXR/ZQmwKrpmccu/aHi3YcKGHCKnh8VUrQh6O 3hzxJ4H8jxleX5AJ0xFl/4tpi64JjSyFXIE1G/yGUZSsoI2Lpk4lPRnHtzZIyXSR Sxixos5kNDyhQtsl1apkJWpMkJwS6ggkudlEFjzSscvJm9ymvbcQkidgzhkBZ0Yj C745OH2m9q+GtdvjjGDnTiMBTg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:02 2026 by rpki-client