$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: rJVSd377SKmZRNggIvHbPPpeWg5KdPsu3j9icSsgU+E= Subject key identifier: C8:A9:34:E8:E2:96:49:C4:1C:C9:CB:3A:A6:6F:96:74:4A:36:20:BC Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0B20 Signing time: Sun 26 Jul 2026 19:46:06 +0000 Manifest this update: Sun 26 Jul 2026 19:46:06 +0000 Manifest next update: Sun 02 Aug 2026 19:46:06 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: dQ2JDhdYw8Ia/vZI7jB7StnZSNMjGeAXich5DNL109U=) 2: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=) 3: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Jul 26 19:46:06 2026 GMT Not After : Aug 2 19:46:06 2026 GMT Subject: CN=6a6663fe-bdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:89:1d:e7:7d:e1:5c:46:6a:48:94:32:3e: 96:45:8e:cb:30:12:b7:f9:b1:89:28:da:cc:bc:79: a7:5d:f0:01:8e:b3:1f:89:a1:a2:ad:63:5e:38:2d: 4c:13:e2:64:98:c3:5d:7e:09:e0:87:b5:83:22:9d: c4:f3:49:82:8f:db:fb:f8:69:09:4d:1d:c0:a1:4c: 23:5b:a9:20:4f:eb:a0:e5:3c:af:bc:05:1d:c0:e6: f6:ca:3e:ca:b3:cd:ad:53:dd:fb:3b:77:cc:69:d9: 78:f1:75:fa:bf:58:32:69:ab:0f:b3:c7:01:6a:eb: a4:9f:c0:ed:20:af:31:21:55:27:67:7a:d4:99:b5: 4f:fd:a7:a9:2c:6c:43:bc:37:32:ed:d5:9b:cc:13: 6e:08:8e:a3:dc:b9:e8:a0:35:86:cf:dc:db:02:bc: 71:19:1a:46:7b:99:4b:92:eb:a4:d0:0e:6f:6c:ce: f8:54:a7:26:0e:e1:6d:fc:f7:4e:e4:1a:9c:5a:0c: a0:f3:9e:64:8d:d8:d2:fb:d4:df:28:e8:40:c8:37: 28:3e:99:66:65:88:3b:fd:10:26:d5:f3:55:8a:39: 93:63:e5:7a:da:28:47:3f:6f:b0:29:4a:b1:45:83: 11:6e:f1:0b:c7:88:71:23:91:06:b0:71:66:a0:03: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A9:34:E8:E2:96:49:C4:1C:C9:CB:3A:A6:6F:96:74:4A:36:20:BC X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:87:34:29:04:77:dd:64:40:ff:5c:a0:db:34:36:9d:f2:17: 2d:82:13:68:50:a9:5e:86:33:39:8b:98:66:74:9d:12:9b:db: 30:69:e3:b0:7e:96:99:3e:7c:6d:b1:18:34:70:8d:a8:b3:ab: 3b:41:58:31:3e:ae:bd:74:d3:d1:28:49:8e:36:0a:07:36:9d: 8c:a2:ff:e9:4e:1f:8d:a4:ad:2b:c8:1c:1d:dd:a5:19:18:ff: af:d2:14:20:56:cb:8d:42:27:c0:fe:46:71:3e:cb:11:24:1b: 03:ec:61:de:b5:27:cb:84:bf:08:e5:29:0f:e2:c0:d1:21:60: 11:2f:86:71:57:30:34:fc:70:b1:20:9a:aa:53:a6:cb:90:6c: 0e:dd:94:cd:80:aa:21:7e:54:6c:c8:42:20:c2:93:c0:8f:8a: 87:4c:1f:89:66:91:75:0d:e2:09:2d:2d:ed:fa:c1:e3:d2:b9: db:54:6c:ec:ff:8a:f6:a5:35:cd:e8:49:07:bc:87:63:ab:7d: 53:76:1f:2d:9d:a5:aa:8f:7e:6d:29:23:0a:05:92:dd:23:37: 0d:d0:40:89:77:62:c3:9a:c1:36:47:b9:3b:6f:3b:7b:76:1d: aa:cb:df:af:39:54:ba:59:da:79:4d:46:ef:27:92:e9:21:d9: ad:d2:e3:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwNzI2MTk0NjA2WhcNMjYwODAyMTk0NjA2WjAYMRYwFAYD VQQDEw02YTY2NjNmZS1iZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJOJHed94VxGakiUMj6WRY7LMBK3+bGJKNrMvHmnXfABjrMfiaGirWNeOC1M E+JkmMNdfgngh7WDIp3E80mCj9v7+GkJTR3AoUwjW6kgT+ug5TyvvAUdwOb2yj7K s82tU937O3fMadl48XX6v1gyaasPs8cBauukn8DtIK8xIVUnZ3rUmbVP/aepLGxD vDcy7dWbzBNuCI6j3LnooDWGz9zbArxxGRpGe5lLkuuk0A5vbM74VKcmDuFt/PdO 5BqcWgyg855kjdjS+9TfKOhAyDcoPplmZYg7/RAm1fNVijmTY+V62ihHP2+wKUqx RYMRbvELx4hxI5EGsHFmoAOTuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMipNOji lknEHMnLOqZvlnRKNiC8MB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAooc0KQR33WRA/1yg2zQ2nfIXLYITaFCpXoYzOYuYZnSdEpvbMGnjsH6WmT58 bbEYNHCNqLOrO0FYMT6uvXTT0ShJjjYKBzadjKL/6U4fjaStK8gcHd2lGRj/r9IU IFbLjUInwP5GcT7LESQbA+xh3rUny4S/COUpD+LA0SFgES+GcVcwNPxwsSCaqlOm y5BsDt2UzYCqIX5UbMhCIMKTwI+Kh0wfiWaRdQ3iCS0t7frB49K521Rs7P+K9qU1 zehJB7yHY6t9U3YfLZ2lqo9+bSkjCgWS3SM3DdBAiXdiw5rBNke5O287e3Ydqsvf rzlUulnaeU1G7yeS6SHZrdLj5g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:18 2026 by rpki-client