$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: EjANn6j1L+wNsJMogRXVSj+15h7nhKOoeRWo5Q3q57M= Subject key identifier: 56:F4:D0:E2:D0:12:F0:B0:59:04:52:E7:2D:44:FF:A0:66:11:D6:D9 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 086A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0845 Signing time: Sun 26 Jul 2026 21:41:33 +0000 Manifest this update: Sun 26 Jul 2026 21:41:33 +0000 Manifest next update: Sun 02 Aug 2026 21:41:33 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: Bk2tEmrIpzxMfa9bk+BzhiUqnxNi7WiqvyIIBUUOkfo=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) 4: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: QMfdlVqqG7b7DNLEI3s6n/xVYtcpjR63MA+xJ2kfQVA=) 5: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=) 6: EE2BD31C64D011F1BE18E4E96947A888.roa (hash: OhuM84ltUspKHkQbXefrgZ3TkNQ2XBw3NffUArldnvU=) 7: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) 8: FF7010DCAE9811F081180758C4F9AE02.roa (hash: qpMk4y0602U3X2w4CmvfK35aoL6m9wVB631uaMX4Chc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Jul 26 21:41:33 2026 GMT Not After : Aug 2 21:41:33 2026 GMT Subject: CN=6a667f0d-0896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:d5:8f:cf:68:8c:e6:e7:78:63:96:ed:74: 0d:69:d1:e7:a0:d6:ab:bb:5c:5d:40:df:9c:2f:b3: 8c:f0:c9:4e:d6:4f:f0:bd:38:c2:50:c1:b0:cb:95: 5c:11:17:dc:c3:4b:64:9d:f7:51:46:01:d0:3b:e4: f3:ad:00:94:01:9f:0e:70:f2:47:d0:8b:aa:d6:ed: 0f:5a:6a:bb:a0:04:b3:3c:dc:40:d4:d5:22:59:89: 3b:10:fd:25:3d:f1:a5:07:f2:75:b4:e1:5b:4e:cd: c5:c8:1f:4c:94:54:8e:e1:a1:e7:c2:ff:85:15:8a: 91:85:7f:f4:b7:4e:da:9c:2d:c1:53:ac:b7:9f:ed: 0f:4c:ca:ce:f1:7a:c2:56:91:9b:1c:13:d6:f4:11: 7c:94:7f:a4:61:04:f6:53:be:35:79:da:47:a9:b1: 3d:ea:cd:bf:4c:0d:b2:64:b7:76:86:e0:cd:b4:2d: f4:1b:a6:3f:65:ac:52:d6:91:d1:69:a9:fd:8f:0a: ca:61:3c:26:22:11:e6:ba:92:da:76:c5:3c:7a:49: 8e:c0:b6:88:54:31:84:85:18:a9:8b:fd:d4:9c:38: 33:21:67:11:c6:0f:36:a9:73:ae:e2:28:71:b6:e6: b3:4b:6c:8d:20:ed:ea:97:5c:53:37:6b:a4:8e:59: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:D0:E2:D0:12:F0:B0:59:04:52:E7:2D:44:FF:A0:66:11:D6:D9 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a7:6e:85:31:10:86:48:42:1e:a0:d2:11:5c:39:6c:ac:e7: 63:5c:c2:ae:21:3d:d4:09:7d:93:77:11:a1:f7:d0:5c:70:1c: bf:b6:f9:bb:a0:f6:3b:b8:6f:17:8c:09:cf:a3:e0:4b:4b:49: 3e:5a:25:42:48:78:50:ec:ab:ab:c4:be:78:bc:3e:cc:73:a8: b3:c1:68:69:23:d9:0c:38:d9:42:eb:f2:5a:14:62:0d:5a:c9: 6b:5b:eb:04:01:d4:77:f8:b6:97:74:3f:92:5f:c0:01:d3:e3: a6:3d:9c:fa:85:1d:17:e3:9d:28:3e:ec:b5:4e:45:f6:a7:66: e9:17:38:d5:d8:1f:d3:21:76:82:10:cd:e1:6c:17:96:d7:9b: 26:6a:dd:04:13:2b:3c:11:b6:9f:af:49:dd:13:72:ba:10:cf: e4:f8:bb:99:e8:c5:6e:77:4a:3f:98:97:ca:05:fb:d5:45:8f: ba:1b:40:72:24:a8:06:51:30:2c:36:ff:74:7c:dc:4f:a7:ab: b4:24:7a:9d:aa:66:d1:c8:5f:f4:20:6b:c3:4c:d0:af:02:3f: 5c:4c:69:5d:f6:56:fd:84:1e:e1:cf:26:bf:ae:75:03:61:5b: 22:33:eb:dd:6a:ee:42:8f:93:94:8f:d1:03:25:f7:15:62:0e: 30:61:0b:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwNzI2MjE0MTMzWhcNMjYwODAyMjE0MTMzWjAYMRYwFAYD VQQDEw02YTY2N2YwZC0wODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSfVj89ojObneGOW7XQNadHnoNaru1xdQN+cL7OM8MlO1k/wvTjCUMGwy5Vc ERfcw0tknfdRRgHQO+TzrQCUAZ8OcPJH0Iuq1u0PWmq7oASzPNxA1NUiWYk7EP0l PfGlB/J1tOFbTs3FyB9MlFSO4aHnwv+FFYqRhX/0t07anC3BU6y3n+0PTMrO8XrC VpGbHBPW9BF8lH+kYQT2U741edpHqbE96s2/TA2yZLd2huDNtC30G6Y/ZaxS1pHR aan9jwrKYTwmIhHmupLadsU8ekmOwLaIVDGEhRipi/3UnDgzIWcRxg82qXOu4ihx tuazS2yNIO3ql1xTN2ukjlkr1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFb00OLQ EvCwWQRS5y1E/6BmEdbZMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUaduhTEQhkhCHqDSEVw5bKznY1zCriE91Al9k3cRoffQXHAcv7b5u6D2O7hv F4wJz6PgS0tJPlolQkh4UOyrq8S+eLw+zHOos8FoaSPZDDjZQuvyWhRiDVrJa1vr BAHUd/i2l3Q/kl/AAdPjpj2c+oUdF+OdKD7stU5F9qdm6Rc41dgf0yF2ghDN4WwX ltebJmrdBBMrPBG2n69J3RNyuhDP5Pi7mejFbndKP5iXygX71UWPuhtAciSoBlEw LDb/dHzcT6ertCR6napm0chf9CBrw0zQrwI/XExpXfZW/YQe4c8mv651A2FbIjPr 3WruQo+TlI/RAyX3FWIOMGELkQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:39:01 2026 by rpki-client