$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json) Hash identifier: +TUeJE8Ca5R5uPqvFKI/umEPS7lp1N2RJmmE4iQK/9o= Subject key identifier: A4:0A:50:1A:36:B7:D4:B3:D7:9D:5D:A1:06:55:04:AD:A2:B5:AB:C3 Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft Manifest number: 8A Signing time: Thu 23 Jul 2026 09:24:53 +0000 Manifest this update: Thu 23 Jul 2026 09:24:53 +0000 Manifest next update: Thu 30 Jul 2026 09:24:53 +0000 Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: 1lUvZqSez3T5L6HiVNQv7tA5GF9TcibcISGO9reml3s=) 2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9 Validity Not Before: Jul 23 09:24:53 2026 GMT Not After : Jul 30 09:24:53 2026 GMT Subject: CN=6a61dde5-03a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:5e:f4:b6:04:7c:ac:2e:74:d6:fa:77:a3: 4a:0c:cf:ce:ab:89:90:6e:63:20:98:90:74:d7:c8: 25:07:b0:c1:df:a6:07:a4:30:c7:6c:84:16:ff:be: 96:5a:0a:f4:89:b9:8d:6b:99:fc:57:83:d9:a0:0f: 1a:ee:55:52:bd:3f:cf:fa:c6:8e:ca:9a:e4:91:70: ff:43:eb:a1:8e:77:6c:11:2d:06:fe:ba:35:4c:39: 82:52:15:84:c9:06:27:00:cb:4f:cc:bc:f5:53:eb: a0:88:9e:3b:3f:06:dd:ee:13:ed:d1:0b:41:ce:45: 02:3f:5a:84:b0:1d:d9:b4:41:b4:7b:c9:ad:33:82: 84:41:fb:67:85:27:b4:7e:0a:18:32:e3:0a:ba:94: 38:9c:22:77:ce:a4:79:6f:6f:2e:f2:af:c9:94:18: 93:53:65:ec:a6:a8:a8:6a:e0:a3:a3:da:97:48:68: 60:96:2d:69:6d:5a:da:ed:65:79:e4:1b:17:39:7e: c4:8f:e7:a5:ba:d8:ec:8c:a6:65:76:aa:a1:e6:b9: 48:84:e9:7a:a0:16:7e:8c:99:8b:e4:d9:57:2e:c3: d5:39:14:ef:0d:f1:f0:ac:38:a8:f4:77:5c:94:70: de:ea:17:62:eb:35:ab:06:0a:94:7e:ea:f6:77:75: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0A:50:1A:36:B7:D4:B3:D7:9D:5D:A1:06:55:04:AD:A2:B5:AB:C3 X509v3 Authority Key Identifier: keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ff:7a:83:a8:83:99:7f:97:53:f6:10:73:41:0b:16:14:a1: 4c:cf:9d:24:53:90:db:9c:69:ae:e0:2a:3a:8d:04:c6:94:0d: aa:f8:1a:ed:65:7d:c1:b6:6b:84:ea:45:4e:5e:9f:6b:6f:b1: da:e8:22:f9:47:4d:06:dc:10:cb:9b:0e:08:50:96:fe:11:63: e5:ac:35:82:f7:f8:91:ea:ac:35:b9:67:e4:4a:04:40:6b:05: 3c:99:1d:c9:db:ed:40:6d:7d:f6:93:49:f5:bb:21:8d:1b:bc: 1d:fd:ea:05:a9:80:5d:2b:24:e8:19:1c:c8:57:a0:6f:dd:06: 9d:85:d8:9c:ba:1a:35:d6:4e:02:ad:cb:bc:18:b6:a3:8b:d1: a5:c2:ba:38:3e:26:6d:a3:bb:6d:77:c9:be:7d:1a:54:de:e8: 5c:84:42:ea:55:36:37:1f:54:39:32:b1:cb:86:cb:60:6c:a4: 6d:45:0f:79:59:13:94:a2:35:cd:9d:57:b9:48:ef:68:db:93: 4a:86:c5:2b:d7:27:cf:b0:41:e5:e6:d9:7b:28:79:00:c4:ab: c6:fc:b6:fc:90:7b:34:9a:d2:bf:1b:8a:ea:e1:fe:91:29:5e: ed:71:09:1e:1f:ab:12:95:51:3f:3c:b8:a0:98:92:92:89:dd: a0:49:c8:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyMTgxMTAvBgNVBAUTKEY3RUYzQzg3NDI5NUI4MUZBMTBGMTQwRkVCNTVCQzlD NUNFREY5RDkwHhcNMjYwNzIzMDkyNDUzWhcNMjYwNzMwMDkyNDUzWjAYMRYwFAYD VQQDEw02YTYxZGRlNS0wM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxRe9LYEfKwudNb6d6NKDM/Oq4mQbmMgmJB018glB7DB36YHpDDHbIQW/76W Wgr0ibmNa5n8V4PZoA8a7lVSvT/P+saOyprkkXD/Q+uhjndsES0G/ro1TDmCUhWE yQYnAMtPzLz1U+ugiJ47Pwbd7hPt0QtBzkUCP1qEsB3ZtEG0e8mtM4KEQftnhSe0 fgoYMuMKupQ4nCJ3zqR5b28u8q/JlBiTU2XspqioauCjo9qXSGhgli1pbVra7WV5 5BsXOX7Ej+elutjsjKZldqqh5rlIhOl6oBZ+jJmL5NlXLsPVORTvDfHwrDio9Hdc lHDe6hdi6zWrBgqUfur2d3X+AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQKUBo2 t9Sz151doQZVBK2itavDMB8GA1UdIwQYMBaAFPfvPIdClbgfoQ8UD+tVvJxc7fnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODIxOC80RTI0MEYyMkI0 QTYxMUYwOEFEM0IwNzVDNEY5QUUwMi85LTg4aDBLVnVCLWhEeFFQNjFXOG5GenQt ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODIxOC80RTI0MEYyMkI0QTYxMUYwOEFEM0IwNzVDNEY5QUUwMi85LTg4aDBLVnVC LWhEeFFQNjFXOG5GenQtZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAv96g6iDmX+XU/YQc0ELFhShTM+dJFOQ25xpruAqOo0ExpQNqvga7WV9wbZr hOpFTl6fa2+x2ugi+UdNBtwQy5sOCFCW/hFj5aw1gvf4keqsNbln5EoEQGsFPJkd ydvtQG199pNJ9bshjRu8Hf3qBamAXSsk6BkcyFegb90GnYXYnLoaNdZOAq3LvBi2 o4vRpcK6OD4mbaO7bXfJvn0aVN7oXIRC6lU2Nx9UOTKxy4bLYGykbUUPeVkTlKI1 zZ1XuUjvaNuTSobFK9cnz7BB5ebZeyh5AMSrxvy2/JB7NJrSvxuK6uH+kSle7XEJ Hh+rEpVRPzy4oJiSkondoEnIPA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:01:29 2026 by rpki-client