$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: l/OuU3jTpBNbhl91YgkhB496ogUtaJcQIJNiippXk+k= Subject key identifier: D1:87:B8:E3:46:AD:E6:14:D0:F6:8B:BC:78:2B:10:5E:3C:27:1B:59 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0206 Signing time: Mon 27 Jul 2026 04:39:28 +0000 Manifest this update: Mon 27 Jul 2026 04:39:28 +0000 Manifest next update: Mon 03 Aug 2026 04:39:28 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: OyXtEOwZCMWM8+JcYIeiJVFuoUDKiGNZ7SlDazwQMXg=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: YTWQLKjMPS+pJcK/98qLOrg1cnW5P2/DgKnTnaoaWiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Jul 27 04:39:28 2026 GMT Not After : Aug 3 04:39:28 2026 GMT Subject: CN=6a66e100-f734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:3c:de:a1:d9:3e:af:48:02:53:2e:e3:fb: 20:53:41:91:46:f3:af:4c:3d:70:a5:4a:fb:2b:70: 5a:52:5f:76:89:1c:e3:99:bf:c5:45:67:8d:9f:3c: 2e:de:ec:71:20:ac:79:9e:f8:0f:5d:30:b5:2a:85: a8:65:23:eb:89:7b:41:9d:c4:f9:a9:65:f1:50:f9: 9d:e7:fb:05:76:aa:e8:1c:ca:ae:e3:19:f1:64:77: 77:e4:b9:31:b4:70:62:59:ba:e0:6e:36:ae:9d:53: 6e:05:28:28:d7:6c:fc:b9:fd:c9:b9:b9:6f:8e:19: b0:18:c5:9f:c9:a0:ac:ab:14:0e:0e:7b:89:53:60: ed:fd:8c:a1:86:40:39:03:ef:68:e4:89:2e:4e:98: 64:ff:d7:7c:f5:25:74:07:90:4f:32:9c:39:71:6c: 9f:c7:3c:2b:47:54:42:7e:59:3b:aa:48:9c:44:69: 98:46:18:44:1b:43:e6:29:93:cc:09:73:a9:e0:e0: 79:92:2c:f8:11:c3:04:9b:1d:b7:ea:22:c3:24:2e: f2:45:5b:f6:a2:11:c5:b4:54:7e:e2:2b:0f:9e:bc: 74:f5:ad:d8:93:cd:c7:ca:77:d9:65:d6:31:b3:3c: 3e:eb:06:18:42:cb:cc:d2:5a:0d:d9:5a:7f:cd:bc: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:B8:E3:46:AD:E6:14:D0:F6:8B:BC:78:2B:10:5E:3C:27:1B:59 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bc:cb:bd:14:9d:5a:56:58:3e:2d:3d:6c:2e:29:c9:1e:ba: 59:e2:22:47:5a:b4:c2:96:e9:32:09:ed:d0:52:e5:81:48:33: 86:7b:ee:9b:84:bd:c6:94:16:62:d3:82:d1:a7:19:4d:1d:45: c0:75:2c:e1:d6:f6:12:f6:96:d7:ec:f7:87:12:00:33:3c:b3: 5f:df:d6:da:6a:c6:c4:d4:a6:dc:77:ad:00:5b:af:15:87:0c: 3f:ac:5e:8f:06:a7:41:99:42:9d:e8:ad:e4:ec:e0:80:fa:2e: e5:99:eb:69:38:96:df:69:44:e2:9d:02:3f:c7:6f:c6:a3:cd: 9d:75:c5:75:e5:0a:bf:85:15:86:4c:ff:7d:ef:52:70:1d:c9: 52:76:25:91:28:5f:fa:27:9e:5e:d3:ec:01:a2:68:a4:63:ca: 5c:0c:1f:5f:f2:6e:1b:47:d4:22:36:43:de:d1:9c:05:99:6c: a8:31:65:77:46:ce:d3:73:e7:39:fa:36:0f:4e:e9:b3:ee:48: 16:40:d4:19:83:33:c0:9b:f2:10:dd:36:b8:66:49:46:fa:f2: c1:39:c7:89:55:49:73:41:69:60:37:a2:14:b8:e3:d6:30:32: ac:81:3c:32:e0:26:2e:dc:8c:d3:45:b5:eb:00:77:ae:6b:a3: 76:ce:8c:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjYwNzI3MDQzOTI4WhcNMjYwODAzMDQzOTI4WjAYMRYwFAYD VQQDEw02YTY2ZTEwMC1mNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9g83qHZPq9IAlMu4/sgU0GRRvOvTD1wpUr7K3BaUl92iRzjmb/FRWeNnzwu 3uxxIKx5nvgPXTC1KoWoZSPriXtBncT5qWXxUPmd5/sFdqroHMqu4xnxZHd35Lkx tHBiWbrgbjaunVNuBSgo12z8uf3JublvjhmwGMWfyaCsqxQODnuJU2Dt/YyhhkA5 A+9o5IkuTphk/9d89SV0B5BPMpw5cWyfxzwrR1RCflk7qkicRGmYRhhEG0PmKZPM CXOp4OB5kiz4EcMEmx236iLDJC7yRVv2ohHFtFR+4isPnrx09a3Yk83HynfZZdYx szw+6wYYQsvM0loN2Vp/zbzORwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGHuONG reYU0PaLvHgrEF48JxtZMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7zLvRSdWlZYPi09bC4pyR66WeIiR1q0wpbpMgnt0FLlgUgzhnvum4S9xpQW YtOC0acZTR1FwHUs4db2EvaW1+z3hxIAMzyzX9/W2mrGxNSm3HetAFuvFYcMP6xe jwanQZlCneit5OzggPou5ZnraTiW32lE4p0CP8dvxqPNnXXFdeUKv4UVhkz/fe9S cB3JUnYlkShf+ieeXtPsAaJopGPKXAwfX/JuG0fUIjZD3tGcBZlsqDFld0bO03Pn Ofo2D07ps+5IFkDUGYMzwJvyEN02uGZJRvrywTnHiVVJc0FpYDeiFLjj1jAyrIE8 MuAmLtyM00W16wB3rmujds6MvA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:28 2026 by rpki-client