$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: LTeP2x6AnbyyvZ54+8wzRZtk7COcRdkZnlSsxQn78+E= Subject key identifier: A0:5E:34:86:58:B1:8D:F9:9C:2A:19:0C:C9:03:19:85:2C:92:93:E1 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 048A Signing time: Thu 23 Jul 2026 01:04:25 +0000 Manifest this update: Thu 23 Jul 2026 01:04:24 +0000 Manifest next update: Thu 30 Jul 2026 01:04:24 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: humzT2ouhHXy3xBWYm1cpuGLMjWXbHN6o8gSck43VKM=) 2: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=) 3: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=) 4: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=) 6: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=) 7: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=) 8: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=) 9: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Jul 23 01:04:24 2026 GMT Not After : Jul 30 01:04:24 2026 GMT Subject: CN=6a616899-791f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:a8:cb:27:ee:e8:17:22:c6:f5:dc:06:99: f0:ff:07:be:57:9e:7c:26:b6:d0:69:23:04:d8:ad: a5:83:bb:a7:d2:f7:ef:5a:e2:31:d0:5a:cc:6d:58: f6:a3:d4:a7:0f:8c:62:8c:35:c5:bf:ac:13:ff:8d: 30:da:ac:b2:57:4a:02:3a:30:f4:79:79:cc:2c:39: a5:1e:51:8b:bc:09:7e:98:bf:41:a7:49:a1:33:0b: cd:27:1e:9c:7c:6f:4a:25:f6:e3:a7:5c:8a:ae:b8: cd:64:46:d5:9a:ec:ff:0a:aa:96:e1:38:fc:6f:90: c2:55:f7:66:27:06:cd:c7:ea:c9:fe:fe:bb:34:22: ed:17:28:8d:57:9e:2a:b4:ee:1a:d9:17:c8:92:02: f6:bc:98:b2:0f:45:13:a8:b6:a4:5e:d8:b4:92:99: ac:54:58:61:e0:38:71:20:68:5e:6a:90:57:7c:36: a3:e3:85:c3:eb:51:d7:2b:9f:32:e7:5c:25:96:5a: 05:2f:6f:47:73:cd:6a:31:92:19:0f:0d:aa:32:1a: c2:4d:09:94:57:d9:37:31:0c:05:c1:88:73:50:a5: 53:ed:76:b2:71:b8:98:55:ff:6d:a9:48:df:e2:b2: 12:29:64:42:bd:db:ff:19:74:a3:05:ad:ff:0f:28: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5E:34:86:58:B1:8D:F9:9C:2A:19:0C:C9:03:19:85:2C:92:93:E1 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:80:a2:85:eb:7e:e3:7e:c3:f9:75:eb:c2:1a:0e:6e:bd:0b: 2b:b1:92:ec:e2:e9:31:0e:cc:ec:09:2d:0d:bf:17:f9:b3:fe: a4:36:3b:a6:cb:95:4f:d9:c4:06:e4:9d:d1:92:56:53:29:91: 91:f0:75:ed:df:7a:f0:ae:55:ea:e5:5b:be:8b:76:4d:94:c4: bb:11:e7:25:35:59:3b:4c:7b:48:07:f4:0d:d4:cf:3f:4e:dd: 36:58:7b:64:2b:fc:d6:ca:53:f1:45:2f:c3:1b:d8:ea:6a:a6: 1f:24:af:20:8c:64:3a:99:f7:fd:b5:85:3f:bc:d4:b3:8e:12: c8:14:8d:4f:ba:b5:d3:fc:71:9d:6c:9c:de:93:5d:c1:f5:ef: 8a:9a:17:16:56:c4:65:91:45:f8:4e:cc:96:68:1e:4a:dd:15: 33:53:c8:44:2d:ff:ba:f7:1c:28:6d:75:3b:db:e5:d8:8a:81: bb:d9:b9:df:68:37:11:b3:0a:38:96:06:4a:4f:76:04:a0:a7: 08:58:11:e8:de:94:e1:81:4a:f4:3c:b3:46:d5:cc:b3:42:94: 95:be:0a:eb:c7:c3:2c:b0:a5:3e:05:a7:d0:0e:35:c1:48:75: 98:01:40:a2:59:2c:1e:c8:cb:0c:9a:7b:1a:8d:0b:0f:e1:b2: a8:b4:0f:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjYwNzIzMDEwNDI0WhcNMjYwNzMwMDEwNDI0WjAYMRYwFAYD VQQDEw02YTYxNjg5OS03OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD2oyyfu6BcixvXcBpnw/we+V558JrbQaSME2K2lg7un0vfvWuIx0FrMbVj2 o9SnD4xijDXFv6wT/40w2qyyV0oCOjD0eXnMLDmlHlGLvAl+mL9Bp0mhMwvNJx6c fG9KJfbjp1yKrrjNZEbVmuz/CqqW4Tj8b5DCVfdmJwbNx+rJ/v67NCLtFyiNV54q tO4a2RfIkgL2vJiyD0UTqLakXti0kpmsVFhh4DhxIGheapBXfDaj44XD61HXK58y 51wllloFL29Hc81qMZIZDw2qMhrCTQmUV9k3MQwFwYhzUKVT7XaycbiYVf9tqUjf 4rISKWRCvdv/GXSjBa3/Dygi4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBeNIZY sY35nCoZDMkDGYUskpPhMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4Cihet+437D+XXrwhoObr0LK7GS7OLpMQ7M7AktDb8X+bP+pDY7psuVT9nE BuSd0ZJWUymRkfB17d968K5V6uVbvot2TZTEuxHnJTVZO0x7SAf0DdTPP07dNlh7 ZCv81spT8UUvwxvY6mqmHySvIIxkOpn3/bWFP7zUs44SyBSNT7q10/xxnWyc3pNd wfXvipoXFlbEZZFF+E7MlmgeSt0VM1PIRC3/uvccKG11O9vl2IqBu9m532g3EbMK OJYGSk92BKCnCFgR6N6U4YFK9DyzRtXMs0KUlb4K68fDLLClPgWn0A41wUh1mAFA olksHsjLDJp7Go0LD+GyqLQPeg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:54 2026 by rpki-client