$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: qudJ1HZcdXg78Bp1wEiaWixwRtkVHQpuY/OagCLyYCE= Subject key identifier: 22:F6:08:50:D7:8C:22:B5:E9:7B:BB:21:F4:6F:83:D1:7C:5A:07:26 Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 0108 Signing time: Thu 23 Jul 2026 07:49:01 +0000 Manifest this update: Thu 23 Jul 2026 07:49:00 +0000 Manifest next update: Thu 30 Jul 2026 07:49:00 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: oxQ6AE6Du98EnVHiStnR+bfa6v09cy13tTks958c4zI=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Jul 23 07:49:00 2026 GMT Not After : Jul 30 07:49:00 2026 GMT Subject: CN=6a61c76c-c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:05:e8:63:58:66:9b:44:1a:65:79:77:cb: 46:80:be:2f:1a:46:67:f6:bd:b2:d6:df:79:30:11: 5b:2f:82:35:1b:5a:89:59:ae:8d:f4:ee:f3:cf:38: be:56:87:bc:3d:99:01:c4:c6:bf:f1:5d:99:14:b4: 81:e9:20:c4:72:4d:7d:e1:e8:32:ac:4d:c3:ce:ff: 19:57:bf:bb:13:b9:50:55:d0:a2:12:62:c6:e7:30: 91:8e:5e:e9:b4:1b:32:b3:9e:23:72:c0:22:34:91: 12:65:a6:82:a9:18:32:91:4f:c1:7f:bf:ef:29:d0: 80:99:8f:e2:b6:76:fe:96:c6:0c:08:45:2a:2b:96: 65:a4:9f:9d:51:80:ae:14:53:3d:4b:74:a1:32:f2: 0e:50:36:5f:05:de:9c:eb:4e:91:db:88:56:73:f1: b9:17:ba:11:dd:62:2d:59:e6:82:d5:41:08:e7:fa: d4:81:0f:2d:22:20:db:f3:ce:5e:36:22:da:f7:d7: 73:87:2d:6a:66:7a:38:ca:54:43:e4:05:fa:0e:5d: f1:1e:b8:58:44:fd:b7:65:f9:4f:7d:3e:2b:0f:87: 3e:8f:b5:27:0d:95:e4:d8:fb:d0:88:b4:48:a8:e7: ac:ed:17:45:be:1d:80:f3:50:0b:c1:9c:c1:f8:98: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:08:50:D7:8C:22:B5:E9:7B:BB:21:F4:6F:83:D1:7C:5A:07:26 X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:81:91:59:02:03:f2:9e:78:d5:4d:dd:95:ce:5e:b1:db:73: 17:21:12:fe:df:ee:c3:c7:15:57:22:a3:fe:0d:12:96:10:0a: 48:0c:d6:dd:cd:ad:70:b8:07:de:96:61:70:ee:80:fc:a5:35: d2:48:e2:52:41:1b:84:40:39:06:e7:54:e7:dd:6c:b3:c2:b3: 8b:e8:35:51:99:b4:a7:59:44:f5:7f:b6:6d:63:33:84:f9:ab: 89:1e:e2:df:76:ab:62:bf:11:74:c4:bb:62:d8:3c:e9:5d:57: b0:31:98:b7:92:fb:f9:78:c4:5b:62:df:c3:b5:e3:3a:e2:01: 4a:e3:d1:a6:f1:82:91:53:d3:55:41:8c:26:cf:be:fc:07:01: e4:69:32:45:7a:95:7b:99:53:1e:c2:9f:1e:65:fa:c0:f2:61: 04:ae:bb:4e:57:d6:d7:d8:32:a7:b4:45:83:f6:ec:e0:0a:ed: c5:9b:15:59:be:d3:0a:b6:a8:52:86:b9:99:17:da:65:a2:eb: e6:e8:9e:28:06:d9:93:a4:35:69:e0:32:5d:66:ff:1a:c1:e7: 6f:19:7d:f6:ea:c8:fc:6f:94:43:09:06:38:7c:7e:20:f7:c0: e0:ee:65:3f:78:51:58:52:82:49:74:3a:9c:ad:2a:96:47:62: 95:46:dd:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5ODUxMTAvBgNVBAUTKDI5QURCMzlCNjIwRUFFM0NCOEFGQ0EyQ0ExODVGNUM0 ODc2RkQwNDMwHhcNMjYwNzIzMDc0OTAwWhcNMjYwNzMwMDc0OTAwWjAYMRYwFAYD VQQDEw02YTYxYzc2Yy1jMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34MF6GNYZptEGmV5d8tGgL4vGkZn9r2y1t95MBFbL4I1G1qJWa6N9O7zzzi+ Voe8PZkBxMa/8V2ZFLSB6SDEck194egyrE3Dzv8ZV7+7E7lQVdCiEmLG5zCRjl7p tBsys54jcsAiNJESZaaCqRgykU/Bf7/vKdCAmY/itnb+lsYMCEUqK5ZlpJ+dUYCu FFM9S3ShMvIOUDZfBd6c606R24hWc/G5F7oR3WItWeaC1UEI5/rUgQ8tIiDb885e NiLa99dzhy1qZno4ylRD5AX6Dl3xHrhYRP23ZflPfT4rD4c+j7UnDZXk2PvQiLRI qOes7RdFvh2A81ALwZzB+Jj1eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCL2CFDX jCK16Xu7IfRvg9F8WgcmMB8GA1UdIwQYMBaAFCmts5tiDq48uK/KLKGF9cSHb9BD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzk4NS82NzNBQTJGNEY1 QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3JqeTRyOG9zb1lYMXhJZHYw RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzk4NS82NzNBQTJGNEY1QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3Jq eTRyOG9zb1lYMXhJZHYwRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1IGRWQID8p541U3dlc5esdtzFyES/t/uw8cVVyKj/g0SlhAKSAzW3c2tcLgH 3pZhcO6A/KU10kjiUkEbhEA5BudU591ss8Kzi+g1UZm0p1lE9X+2bWMzhPmriR7i 33arYr8RdMS7Ytg86V1XsDGYt5L7+XjEW2Lfw7XjOuIBSuPRpvGCkVPTVUGMJs++ /AcB5GkyRXqVe5lTHsKfHmX6wPJhBK67TlfW19gyp7RFg/bs4ArtxZsVWb7TCrao Uoa5mRfaZaLr5uieKAbZk6Q1aeAyXWb/GsHnbxl99urI/G+UQwkGOHx+IPfA4O5l P3hRWFKCSXQ6nK0qlkdilUbdkQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:59:13 2026 by rpki-client