$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: PFnjxotAG7GLRVbZMWATeB0xGblXaRo30Lzpui/IZeA= Subject key identifier: C6:59:E2:AD:6E:7F:05:AE:26:0C:6A:5C:D4:B9:FE:E6:2B:0C:A2:E8 Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 3F Signing time: Mon 27 Jul 2026 10:51:07 +0000 Manifest this update: Mon 27 Jul 2026 10:51:07 +0000 Manifest next update: Mon 03 Aug 2026 10:51:07 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: PgtnELuE3W+rsqXsxzc/WEpng6p1UbqED9by584GPzE=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Jul 27 10:51:07 2026 GMT Not After : Aug 3 10:51:07 2026 GMT Subject: CN=6a67381b-96c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:ce:5c:43:0d:85:d8:d6:81:e3:e0:16:a9: 65:a2:23:e1:40:01:fa:4d:8e:f9:cd:3c:60:fe:58: 22:c9:fc:4b:94:33:da:77:a7:2a:a5:3e:8f:24:eb: 54:cf:0b:a0:92:e5:fb:20:3d:1c:51:f4:66:22:65: 61:12:0c:9b:08:8b:93:56:1f:b9:7e:c2:fe:ed:db: 88:12:07:86:de:6b:0e:c9:1c:0e:f8:e8:80:6f:38: eb:d4:0b:72:25:c5:15:fe:4f:e0:4f:f2:9a:7d:c6: 63:72:e0:22:4d:66:86:c7:84:e2:17:79:a2:40:4d: 0f:d8:6b:ee:ff:35:5a:99:5e:b7:94:6e:3e:e3:40: c8:2c:66:1d:56:fe:93:ec:f7:42:bc:0e:dc:25:1a: 1e:5b:e8:59:83:1b:50:bf:4e:df:e2:6d:30:2a:e7: c8:28:4e:60:2f:ad:7d:58:f6:26:eb:73:a6:3d:58: a8:13:4b:38:29:2a:d5:34:86:59:4e:aa:bd:fa:64: 62:ed:0c:6f:93:7d:4b:e6:e0:5a:72:1a:2d:80:18: e8:e8:cb:71:ac:08:31:cd:59:cc:f9:f6:92:5c:68: a1:ba:c6:f9:47:07:5b:4b:b5:b4:e9:9b:fd:ab:18: e3:e2:30:90:a2:48:49:3d:0b:17:77:09:13:ec:24: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:E2:AD:6E:7F:05:AE:26:0C:6A:5C:D4:B9:FE:E6:2B:0C:A2:E8 X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:52:49:b8:e4:9a:0f:ae:9d:ef:0d:a2:0d:6c:27:89:ac:34: 9a:28:12:b7:bf:2d:7f:5d:e5:a6:ca:ea:8a:52:7b:d5:13:99: 5c:a2:10:f9:2b:bd:54:ee:f6:b7:f9:b0:6a:a1:fa:3f:0d:d9: d2:1d:6b:c5:04:fc:6d:e1:d1:7a:6e:d2:37:c7:46:90:72:81: 55:70:7c:50:6e:a4:0b:ba:0a:b4:24:67:50:a4:b9:1b:5e:30: e3:54:db:28:d5:88:51:1b:b1:11:5e:9c:21:5e:0a:e9:8e:bc: 57:ad:22:8a:36:d4:5d:49:36:9e:c1:e4:96:97:ee:13:d7:26: 79:7a:81:b4:3f:c6:6a:b5:b4:60:f8:67:9a:40:30:5c:de:5f: 92:8a:5c:3a:8e:6d:44:0d:99:3b:29:f0:f8:b4:53:2c:25:be: a0:4d:db:d8:b1:e6:25:14:58:e5:17:43:6b:ae:9a:54:2a:24: 6e:97:35:76:6e:33:66:33:e1:8d:3f:65:c3:85:45:99:b4:70: 4c:47:8e:81:ad:44:c9:70:f5:06:2e:08:66:1a:03:3f:a6:4e: 8c:e1:c0:7b:01:42:02:cf:df:4d:1a:7f:2b:17:d1:c2:83:ee: 9a:aa:3f:60:1d:dd:e8:c8:1b:1e:fe:04:8a:14:fd:20:82:21: 4c:fa:0e:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA3MjcxMDUxMDdaFw0yNjA4MDMxMDUxMDdaMBgxFjAUBgNV BAMTDTZhNjczODFiLTk2YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/2M5cQw2F2NaB4+AWqWWiI+FAAfpNjvnNPGD+WCLJ/EuUM9p3pyqlPo8k61TP C6CS5fsgPRxR9GYiZWESDJsIi5NWH7l+wv7t24gSB4beaw7JHA746IBvOOvUC3Il xRX+T+BP8pp9xmNy4CJNZobHhOIXeaJATQ/Ya+7/NVqZXreUbj7jQMgsZh1W/pPs 90K8DtwlGh5b6FmDG1C/Tt/ibTAq58goTmAvrX1Y9ibrc6Y9WKgTSzgpKtU0hllO qr36ZGLtDG+TfUvm4FpyGi2AGOjoy3GsCDHNWcz59pJcaKG6xvlHB1tLtbTpm/2r GOPiMJCiSEk9Cxd3CRPsJJvNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxlnirW5/ Ba4mDGpc1Ln+5isMougwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxUkm45JoPrp3vDaINbCeJrDSaKBK3vy1/XeWmyuqKUnvVE5lcohD5K71U7va3 +bBqofo/DdnSHWvFBPxt4dF6btI3x0aQcoFVcHxQbqQLugq0JGdQpLkbXjDjVNso 1YhRG7ERXpwhXgrpjrxXrSKKNtRdSTaeweSWl+4T1yZ5eoG0P8ZqtbRg+GeaQDBc 3l+Silw6jm1EDZk7KfD4tFMsJb6gTdvYseYlFFjlF0NrrppUKiRulzV2bjNmM+GN P2XDhUWZtHBMR46BrUTJcPUGLghmGgM/pk6M4cB7AUICz99NGn8rF9HCg+6aqj9g Hd3oyBse/gSKFP0ggiFM+g7W -----END CERTIFICATE-----Generated at Tue Jul 28 21:00:09 2026 by rpki-client