$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: LKfKkjKNi9XfxUZHTZk79sDNdiGIpeLQL/rQZEoStG4= Subject key identifier: 75:77:A9:FD:C5:70:AF:9B:A0:5D:0B:92:0F:76:B5:0E:20:3E:8D:C1 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0212 Signing time: Mon 27 Jul 2026 04:55:35 +0000 Manifest this update: Mon 27 Jul 2026 04:55:34 +0000 Manifest next update: Mon 03 Aug 2026 04:55:34 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: 1gEc1LUcrpscHpFyh8yzz4UFXeNpS6VNS97GVSO3X8Y=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) 4: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Jul 27 04:55:34 2026 GMT Not After : Aug 3 04:55:34 2026 GMT Subject: CN=6a66e4c7-066e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:58:53:67:a3:ca:f7:0c:ef:40:9e:dd:a3: cf:f1:69:9c:81:9e:5b:d7:d7:fc:39:1c:9b:a6:89: d5:da:d7:86:6e:fd:e2:6e:ce:6f:4d:aa:28:5c:25: 97:45:13:a9:3b:5a:61:91:06:41:20:25:52:bf:53: 01:f5:43:4c:1a:c8:85:e0:5b:1a:0a:42:27:f9:52: 92:7d:cc:87:8f:e0:b4:6d:1b:19:8c:5d:ff:c2:be: e8:34:97:ed:be:1c:b5:d3:e7:c9:d5:77:73:95:66: 29:58:e1:84:87:96:cd:5a:94:eb:b9:b0:84:e7:54: ef:3d:b2:0d:05:5f:40:d5:39:f0:43:17:b0:7a:77: ed:35:f2:18:73:ee:f7:ba:bd:ef:78:a6:21:1b:20: d1:26:b9:aa:10:e9:c2:54:d7:64:09:4a:54:91:f9: 9c:f2:1d:81:10:96:8d:52:a2:9e:ec:42:da:09:53: cc:46:aa:fe:b5:14:7b:3d:8c:09:74:12:60:e4:67: 25:2d:21:f5:db:8e:cc:eb:d9:92:cf:78:2a:99:77: da:6d:4c:b1:75:92:44:a8:95:48:4a:46:1d:21:f9: 8b:38:27:4b:61:8d:74:42:f0:df:42:a2:0a:8d:e5: 44:3c:72:75:61:60:ff:a1:49:a3:c5:cd:0b:7c:15: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:77:A9:FD:C5:70:AF:9B:A0:5D:0B:92:0F:76:B5:0E:20:3E:8D:C1 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:4f:91:54:4e:9d:83:fd:90:10:94:e3:68:ca:9a:e0:b2:88: 54:89:5e:aa:ff:ea:0d:48:1b:26:db:6d:67:8c:c8:4d:48:91: 01:34:8c:ed:97:55:d1:01:b4:f5:5a:11:dd:66:13:79:56:f3: eb:3c:dd:6f:57:f3:81:83:c1:1d:bd:ee:9e:24:93:f0:a9:3e: 63:15:6d:ff:e7:b9:40:2f:06:b3:b4:27:71:84:8b:90:a7:31: c2:6b:52:aa:5c:3e:84:35:bc:25:22:60:b4:0d:ff:1f:40:db: 53:b3:19:e3:c0:9f:cd:dc:be:98:17:3d:1e:ff:96:a1:a2:f5: 8b:76:fa:d7:e7:37:62:cc:30:a7:e0:6d:de:80:fc:e1:fc:08: 7c:ac:e6:d0:15:20:b7:41:8c:01:d8:4d:64:c8:84:2c:ba:8b: 05:9a:5b:34:4e:be:c6:19:23:8e:98:f0:da:be:46:85:34:3d: 15:d4:f8:9b:a0:e3:ed:87:99:b2:89:31:f3:e5:82:bf:b5:5d: f8:21:7e:27:a0:ec:7d:92:08:05:e9:90:94:15:47:84:dc:8e: 29:6d:26:09:8b:0a:51:cb:57:8d:b4:47:7f:29:fe:c9:10:1e: a3:c0:ca:66:2a:6d:b2:1f:5e:d2:bd:8f:50:c2:c0:bb:fa:5b: cf:e7:95:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwNzI3MDQ1NTM0WhcNMjYwODAzMDQ1NTM0WjAYMRYwFAYD VQQDEw02YTY2ZTRjNy0wNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXlYU2ejyvcM70Ce3aPP8WmcgZ5b19f8ORybponV2teGbv3ibs5vTaooXCWX RROpO1phkQZBICVSv1MB9UNMGsiF4FsaCkIn+VKSfcyHj+C0bRsZjF3/wr7oNJft vhy10+fJ1XdzlWYpWOGEh5bNWpTrubCE51TvPbINBV9A1TnwQxewenftNfIYc+73 ur3veKYhGyDRJrmqEOnCVNdkCUpUkfmc8h2BEJaNUqKe7ELaCVPMRqr+tRR7PYwJ dBJg5GclLSH1247M69mSz3gqmXfabUyxdZJEqJVISkYdIfmLOCdLYY10QvDfQqIK jeVEPHJ1YWD/oUmjxc0LfBXojwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHV3qf3F cK+boF0Lkg92tQ4gPo3BMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd0+RVE6dg/2QEJTjaMqa4LKIVIleqv/qDUgbJtttZ4zITUiRATSM7ZdV0QG0 9VoR3WYTeVbz6zzdb1fzgYPBHb3uniST8Kk+YxVt/+e5QC8Gs7QncYSLkKcxwmtS qlw+hDW8JSJgtA3/H0DbU7MZ48Cfzdy+mBc9Hv+WoaL1i3b61+c3Yswwp+Bt3oD8 4fwIfKzm0BUgt0GMAdhNZMiELLqLBZpbNE6+xhkjjpjw2r5GhTQ9FdT4m6Dj7YeZ sokx8+WCv7Vd+CF+J6DsfZIIBemQlBVHhNyOKW0mCYsKUctXjbRHfyn+yRAeo8DK Ziptsh9e0r2PUMLAu/pbz+eVNA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:24 2026 by rpki-client