$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: 4TqymixsSM5AcWfHegBl2lmSa/Q4tMCGt1ItvgScvG8= Subject key identifier: 9F:2A:CD:95:30:61:91:06:E6:48:1D:E0:29:56:91:18:F8:29:63:44 Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 0225 Signing time: Thu 23 Jul 2026 03:59:35 +0000 Manifest this update: Thu 23 Jul 2026 03:59:35 +0000 Manifest next update: Thu 30 Jul 2026 03:59:35 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: zhCxCRmMZ5C5R9N9BlT0HBhfzSm4U6zKyD9MGo2ekUU=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: 7N2StUmPE70BVOLqSC1CSXVVp2n3H7wqr0u0r+i43tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Jul 23 03:59:35 2026 GMT Not After : Jul 30 03:59:35 2026 GMT Subject: CN=6a6191a7-15e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:9d:f4:d0:e8:7d:57:33:77:4e:0b:f8:dd: de:44:0d:db:a2:16:44:98:e0:80:46:09:a7:b9:8f: da:30:28:91:4a:90:f2:42:74:da:3d:97:35:41:2a: 97:52:be:dc:3d:28:d2:4a:ce:9a:fd:f7:a7:95:05: 3b:20:4b:59:fd:1e:f3:7d:07:a2:51:9f:1a:a4:df: 20:62:4e:81:d4:b7:33:75:29:17:c2:6d:0f:68:77: 31:92:13:ab:8c:87:49:47:1a:24:0f:ff:29:1b:c1: ea:77:47:c4:08:7c:ab:78:ef:ec:2a:bd:df:d9:bc: 71:ba:4e:07:1a:d7:4d:42:b0:03:82:f4:d7:57:2d: 94:fb:3e:70:76:28:f5:6e:95:f6:5e:e7:d2:51:86: 91:11:f6:3b:a7:c2:36:42:0f:32:4b:07:0a:fc:1f: 29:c9:23:51:73:c9:7a:fd:6d:47:f6:2c:4d:a9:b5: 26:b7:d6:e0:88:5e:3c:01:c3:c9:46:ff:8e:83:24: 23:6e:12:18:7f:dd:ab:44:28:31:8f:1a:f3:14:c5: 46:81:f8:5e:a7:55:4d:e9:0b:46:0c:47:3e:38:31: 9e:9e:fa:46:02:8f:4e:4b:5a:6a:5e:ea:b4:99:03: 77:fb:90:2d:d7:69:94:68:a0:b7:18:6e:e6:47:70: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:CD:95:30:61:91:06:E6:48:1D:E0:29:56:91:18:F8:29:63:44 X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:80:d8:24:b6:3a:5b:f3:8c:7c:13:d5:4c:08:28:59:29:a5: f3:51:9e:5f:e6:3d:40:04:0e:75:b6:5a:9b:a2:a4:20:14:ca: 2f:05:99:ee:5e:38:55:9a:54:4d:0b:6b:22:55:7c:f1:70:a4: c4:bb:d8:ad:c9:4d:d0:8e:34:48:93:46:da:0f:d9:8f:a0:20: 20:6f:04:bf:22:79:43:91:3a:2a:89:61:f0:7f:da:ea:7b:0d: 2c:9c:5d:57:69:ca:cd:55:1c:38:24:11:44:1e:3e:72:e2:98: 14:a1:32:57:7d:ea:13:e1:f3:a7:da:0f:fd:64:37:56:33:93: 23:ae:3e:a6:fc:06:02:67:87:aa:34:57:17:a2:43:3a:14:cc: cb:3c:18:76:c5:94:7c:61:fc:f3:4e:04:0b:44:ff:ec:b0:d1: 67:3a:bf:ff:bb:03:23:81:10:76:e4:12:5f:56:f2:b6:22:28: 13:7e:83:28:68:5a:74:09:75:c5:12:e6:4b:5c:64:01:14:f9: d7:fa:9c:3b:85:e9:56:4b:a1:55:de:5b:72:6a:f1:01:e1:b9: 19:fa:d8:52:9a:82:1c:20:46:b8:32:f8:51:d3:b2:83:2a:be: 88:09:4d:62:5b:a0:5c:7b:f9:fd:8e:8e:3d:1d:e3:cc:df:e8: f6:9e:f6:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjYwNzIzMDM1OTM1WhcNMjYwNzMwMDM1OTM1WjAYMRYwFAYD VQQDEw02YTYxOTFhNy0xNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgid9NDofVczd04L+N3eRA3bohZEmOCARgmnuY/aMCiRSpDyQnTaPZc1QSqX Ur7cPSjSSs6a/fenlQU7IEtZ/R7zfQeiUZ8apN8gYk6B1LczdSkXwm0PaHcxkhOr jIdJRxokD/8pG8Hqd0fECHyreO/sKr3f2bxxuk4HGtdNQrADgvTXVy2U+z5wdij1 bpX2XufSUYaREfY7p8I2Qg8ySwcK/B8pySNRc8l6/W1H9ixNqbUmt9bgiF48AcPJ Rv+OgyQjbhIYf92rRCgxjxrzFMVGgfhep1VN6QtGDEc+ODGenvpGAo9OS1pqXuq0 mQN3+5At12mUaKC3GG7mR3BchQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8qzZUw YZEG5kgd4ClWkRj4KWNEMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi4DYJLY6W/OMfBPVTAgoWSml81GeX+Y9QAQOdbZam6KkIBTKLwWZ7l44VZpU TQtrIlV88XCkxLvYrclN0I40SJNG2g/Zj6AgIG8EvyJ5Q5E6Kolh8H/a6nsNLJxd V2nKzVUcOCQRRB4+cuKYFKEyV33qE+Hzp9oP/WQ3VjOTI64+pvwGAmeHqjRXF6JD OhTMyzwYdsWUfGH8804EC0T/7LDRZzq//7sDI4EQduQSX1bytiIoE36DKGhadAl1 xRLmS1xkART51/qcO4XpVkuhVd5bcmrxAeG5GfrYUpqCHCBGuDL4UdOygyq+iAlN YlugXHv5/Y6OPR3jzN/o9p72Rg== -----END CERTIFICATE-----Generated at Fri Jul 24 18:39:56 2026 by rpki-client