$ rpki-client -vvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft File: knWZPcnEM_JdNYCsd-OV0GaWSD0.mft (raw, json) Hash identifier: i0EWSkWtqPCwN7nojEcsS+BK11FzaRHcpUO4SbjQhuI= Subject key identifier: 4B:64:C0:58:58:08:09:52:EF:DD:8D:01:41:AF:8C:EE:C1:BC:75:9F Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D Certificate issuer: /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft Manifest number: 07BC Signing time: Sun 26 Jul 2026 22:07:22 +0000 Manifest this update: Sun 26 Jul 2026 22:07:21 +0000 Manifest next update: Sun 02 Aug 2026 22:07:21 +0000 Files and hashes: 1: knWZPcnEM_JdNYCsd-OV0GaWSD0.crl (hash: U+ToeNw5Cne5FSskupoYpNKBnRfTKb+Xi1HgOsXVJxw=) 2: 57BAE77C517D11EB8949D438C4F9AE02.roa (hash: aBoUkT3XfOno4ZFpM1LCowGFp8BTgYEHGaCNCAbFWpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276A3, serialNumber=9275993DC9C433F25D3580AC77E395D06696483D Validity Not Before: Jul 26 22:07:21 2026 GMT Not After : Aug 2 22:07:21 2026 GMT Subject: CN=6a66851a-b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:5e:4b:3b:27:33:f2:f6:b5:26:93:19:2d: b4:27:44:ec:20:dd:9b:27:67:b9:3f:c7:0b:ce:8b: 9e:cb:6e:e2:86:4d:fb:3c:d6:e1:fc:45:ad:9b:3c: fa:2c:a9:57:a9:fb:67:b8:72:60:02:a4:e2:82:91: d3:1c:83:e4:01:96:5f:18:84:b2:fb:fc:4f:f7:c2: e5:db:34:38:cf:63:40:83:7f:55:3b:24:f2:31:a8: 59:48:df:bb:52:a2:9b:34:db:8b:e3:ea:51:fa:9d: b3:68:b9:a6:0b:1a:6d:db:3a:af:c5:64:83:36:03: 88:b7:f2:ad:77:d2:a7:f7:fe:c8:4c:c1:7c:62:c6: d7:95:f2:fc:6a:55:bc:9f:74:dd:e2:fd:86:fc:8a: 5e:54:41:92:5e:b9:c2:99:26:0d:97:40:3a:75:5f: 73:8c:73:19:e3:57:31:f7:ce:31:b5:b7:90:38:e4: a7:62:84:05:a3:5a:7a:1b:92:3c:32:b4:7b:78:ab: 60:2e:be:ce:b7:88:38:cd:32:14:7a:c5:31:a9:0b: 50:55:7e:18:34:6c:cf:be:30:09:48:27:97:94:c1: 26:e9:78:05:5e:ff:21:6a:9f:94:12:fe:c6:57:6f: a3:4a:9c:e2:cf:66:88:32:c7:a5:cd:e2:25:8d:3b: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:64:C0:58:58:08:09:52:EF:DD:8D:01:41:AF:8C:EE:C1:BC:75:9F X509v3 Authority Key Identifier: keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7e:1c:db:ee:16:bd:15:bf:e1:76:0e:04:d2:ca:47:95:dd: e6:40:68:b6:6c:2e:64:f0:cd:0d:1d:b8:85:9e:91:6e:29:42: 9f:00:e9:8e:c5:59:84:e0:67:3b:15:3f:3c:60:ae:ac:27:d2: e7:92:7c:09:7a:db:c6:6a:54:90:d6:f8:28:fd:f6:23:aa:ad: 50:56:a3:19:36:0f:6c:d0:f3:de:d1:7a:e1:1c:6c:6c:ac:bf: 18:c4:82:c1:8c:62:f5:4f:46:f4:5c:19:04:75:2b:e2:0d:d4: 1c:c3:71:7c:ef:34:3f:ad:7a:79:59:be:40:28:c9:37:a4:a4: 87:09:35:2b:dc:34:b2:ff:e0:d5:d4:d4:00:8e:82:9e:8f:bb: 21:01:1f:cf:e2:54:d9:ce:b5:a8:1d:cf:a2:55:81:94:c3:01: 68:17:ac:4d:ff:9e:a8:07:08:f0:7b:8f:5e:26:6e:a8:d5:16: e3:8a:d3:14:36:2d:b9:4c:d4:6b:8a:76:88:fa:26:63:a0:ea: 34:9b:62:9c:01:df:08:dc:df:09:2a:84:c0:8e:5d:83:ae:b2: 07:92:be:50:6d:61:c3:e4:81:12:27:3b:ea:82:5e:91:e8:62: f6:44:6e:fe:50:a0:79:19:44:4c:39:67:87:41:e6:0b:a7:b2: 2d:54:30:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2QTMxMTAvBgNVBAUTKDkyNzU5OTNEQzlDNDMzRjI1RDM1ODBBQzc3RTM5NUQw NjY5NjQ4M0QwHhcNMjYwNzI2MjIwNzIxWhcNMjYwODAyMjIwNzIxWjAYMRYwFAYD VQQDEw02YTY2ODUxYS1iN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYheSzsnM/L2tSaTGS20J0TsIN2bJ2e5P8cLzouey27ihk37PNbh/EWtmzz6 LKlXqftnuHJgAqTigpHTHIPkAZZfGISy+/xP98Ll2zQ4z2NAg39VOyTyMahZSN+7 UqKbNNuL4+pR+p2zaLmmCxpt2zqvxWSDNgOIt/Ktd9Kn9/7ITMF8YsbXlfL8alW8 n3Td4v2G/IpeVEGSXrnCmSYNl0A6dV9zjHMZ41cx984xtbeQOOSnYoQFo1p6G5I8 MrR7eKtgLr7Ot4g4zTIUesUxqQtQVX4YNGzPvjAJSCeXlMEm6XgFXv8hap+UEv7G V2+jSpziz2aIMselzeIljTuIxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtkwFhY CAlS792NAUGvjO7BvHWfMB8GA1UdIwQYMBaAFJJ1mT3JxDPyXTWArHfjldBmlkg9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZBMy84MzIwQkQxQzUx N0IxMUVCODZDMkQ3MzZDNEY5QUUwMi9rbldaUGNuRU1fSmROWUNzZC1PVjBHYVdT RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tuV1pQY25FTV9KZE5ZQ3NkLU9WMEdhV1NEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZBMy84MzIwQkQxQzUxN0IxMUVCODZDMkQ3MzZDNEY5QUUwMi9rbldaUGNuRU1f SmROWUNzZC1PVjBHYVdTRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACX4c2+4WvRW/4XYOBNLKR5Xd5kBotmwuZPDNDR24hZ6RbilCnwDpjsVZhOBn OxU/PGCurCfS55J8CXrbxmpUkNb4KP32I6qtUFajGTYPbNDz3tF64RxsbKy/GMSC wYxi9U9G9FwZBHUr4g3UHMNxfO80P616eVm+QCjJN6Skhwk1K9w0sv/g1dTUAI6C no+7IQEfz+JU2c61qB3PolWBlMMBaBesTf+eqAcI8HuPXiZuqNUW44rTFDYtuUzU a4p2iPomY6DqNJtinAHfCNzfCSqEwI5dg66yB5K+UG1hw+SBEic76oJekehi9kRu /lCgeRlETDlnh0HmC6eyLVQwxA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:00 2026 by rpki-client