$ rpki-client -vvf rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft File: 8O-KITM_UQdy8x7aMkGe3iQXrTk.mft (raw, json) Hash identifier: t8MFM3yICobZCisjF5fSLIhDU/eu9esW2kIMLWmn4hc= Subject key identifier: A5:EA:17:3F:EE:7E:2B:4A:D2:C2:73:FE:2A:35:58:06:C9:3D:C2:4A Authority key identifier: F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 Certificate issuer: /CN=A91F352B/serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft Manifest number: 0D Signing time: Thu 23 Jul 2026 11:12:15 +0000 Manifest this update: Thu 23 Jul 2026 11:12:14 +0000 Manifest next update: Thu 30 Jul 2026 11:12:14 +0000 Files and hashes: 1: 8O-KITM_UQdy8x7aMkGe3iQXrTk.crl (hash: bYdXmz5apMXFUWLfLm0t6FEZmWjJz27kl9odxVVE3Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F352B, serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Validity Not Before: Jul 23 11:12:14 2026 GMT Not After : Jul 30 11:12:14 2026 GMT Subject: CN=6a61f70f-c33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:3f:87:49:e4:a8:8f:bc:26:28:47:97:41: de:74:09:8d:b8:bc:2f:8e:9c:28:dd:bf:85:9f:e3: 08:79:0c:c5:80:11:7d:90:bb:3b:e0:b8:0f:d7:d2: f4:ab:b1:86:85:40:fd:f0:78:49:b4:08:d3:c8:89: 83:c2:36:67:7d:8f:03:90:0b:c9:c5:95:88:aa:37: b3:48:a7:ee:9e:0c:e6:90:16:ae:ed:23:05:91:e3: 88:fe:2a:5e:c8:2c:db:9b:c2:eb:40:09:e9:3b:55: 28:7e:85:4e:f2:27:7c:38:67:e5:f3:61:01:dd:01: d4:ce:8e:fb:89:3a:ff:81:79:6c:f3:cb:01:15:06: 88:49:60:d0:e1:44:95:dc:0f:df:55:f9:d6:60:c6: 46:a5:3d:d5:2e:e7:87:a9:22:ee:e6:ab:e7:d9:ca: 09:ec:c3:41:bb:d7:8b:e7:dd:81:2a:56:dc:7b:14: b9:eb:d9:c0:54:7f:dc:e8:e8:c2:e5:53:ad:ed:76: fc:7f:57:3a:6e:c9:0c:6c:ae:08:b9:46:f0:d1:6b: 55:26:41:ba:bf:40:7c:af:11:6e:ed:a4:2d:ff:bb: 00:18:0c:7a:6e:08:91:8a:35:36:87:81:3e:46:ec: fa:fb:83:a4:ce:a3:b7:b8:c8:30:62:74:97:85:d9: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:17:3F:EE:7E:2B:4A:D2:C2:73:FE:2A:35:58:06:C9:3D:C2:4A X509v3 Authority Key Identifier: keyid:F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:73:84:df:a4:0e:a9:36:48:e4:ed:e0:6f:43:0a:f7:da:9a: 29:55:23:3b:0b:d2:f3:2a:40:c9:eb:c6:9d:6f:3c:cb:40:8f: ac:f8:16:53:18:a6:85:0f:f1:67:2e:e2:28:f6:96:68:89:a6: e0:3d:45:c1:79:cb:71:6d:69:dc:09:ea:ad:98:65:0c:ae:6b: 41:d9:58:bf:f5:8d:3f:eb:16:f5:13:d2:f1:89:b3:28:2b:d6: 06:c0:41:1d:e5:f2:1b:c8:8d:1d:2e:e6:09:48:d4:64:a8:5b: 82:2e:15:b4:11:56:5c:8f:92:b1:bc:a9:7f:ba:c2:a1:7d:b2: ef:ec:26:16:2f:53:8c:19:e8:ac:00:c5:bb:45:cd:4d:91:da: 7c:a3:2d:be:40:4d:6f:e1:e2:1b:14:80:4f:9a:06:77:71:18: 81:7f:6b:bb:15:25:6a:33:6a:46:7f:f9:e7:84:89:d3:9b:5f: 6a:ca:18:bb:4a:8f:4c:10:57:d7:d9:95:6e:04:bb:29:3a:3f: c7:d5:e1:63:c3:b7:c8:f4:5d:a1:d6:5e:10:7a:83:f2:f3:f5: e5:f8:d6:42:43:86:8e:07:e7:7a:79:ef:4f:a0:8e:08:d1:70: a1:e0:39:74:8d:51:66:94:7f:d6:46:06:1c:77:8c:03:a3:b5: f5:10:cc:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzUyQjExMC8GA1UEBRMoRjBFRjhBMjEzMzNGNTEwNzcyRjMxRURBMzI0MTlFREUy NDE3QUQzOTAeFw0yNjA3MjMxMTEyMTRaFw0yNjA3MzAxMTEyMTRaMBgxFjAUBgNV BAMTDTZhNjFmNzBmLWMzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxYj+HSeSoj7wmKEeXQd50CY24vC+OnCjdv4Wf4wh5DMWAEX2QuzvguA/X0vSr sYaFQP3weEm0CNPIiYPCNmd9jwOQC8nFlYiqN7NIp+6eDOaQFq7tIwWR44j+Kl7I LNubwutACek7VSh+hU7yJ3w4Z+XzYQHdAdTOjvuJOv+BeWzzywEVBohJYNDhRJXc D99V+dZgxkalPdUu54epIu7mq+fZygnsw0G714vn3YEqVtx7FLnr2cBUf9zo6MLl U63tdvx/VzpuyQxsrgi5RvDRa1UmQbq/QHyvEW7tpC3/uwAYDHpuCJGKNTaHgT5G 7Pr7g6TOo7e4yDBidJeF2a+hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpeoXP+5+ K0rSwnP+KjVYBsk9wkowHwYDVR0jBBgwFoAU8O+KITM/UQdy8x7aMkGe3iQXrTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNTJCLzE1MzU4RDk4NzM2 QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFkeTh4N2FNa0dlM2lRWHJU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE8tS0lUTV9VUWR5OHg3YU1rR2UzaVFYclRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NTJCLzE1MzU4RDk4NzM2QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFk eTh4N2FNa0dlM2lRWHJUay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOc4TfpA6pNkjk7eBvQwr32popVSM7C9LzKkDJ68adbzzLQI+s+BZTGKaFD/Fn LuIo9pZoiabgPUXBectxbWncCeqtmGUMrmtB2Vi/9Y0/6xb1E9LxibMoK9YGwEEd 5fIbyI0dLuYJSNRkqFuCLhW0EVZcj5KxvKl/usKhfbLv7CYWL1OMGeisAMW7Rc1N kdp8oy2+QE1v4eIbFIBPmgZ3cRiBf2u7FSVqM2pGf/nnhInTm19qyhi7So9MEFfX 2ZVuBLspOj/H1eFjw7fI9F2h1l4QeoPy8/Xl+NZCQ4aOB+d6ee9PoI4I0XCh4Dl0 jVFmlH/WRgYcd4wDo7X1EMxu -----END CERTIFICATE-----Generated at Fri Jul 24 01:55:12 2026 by rpki-client