$ rpki-client -vvf rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft File: KXr2WH-YpJnreNLMrjYW70KfV1A.mft (raw, json) Hash identifier: 02kPZDCVj91f/bZRyaQBudvhumLkLDwGMSqAeXNXJDA= Subject key identifier: 35:42:49:52:76:E6:D0:B5:3E:C9:CD:29:1C:54:4E:C0:47:49:85:10 Authority key identifier: 29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 Certificate issuer: /CN=A91411BC/serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft Manifest number: 13FA Signing time: Tue 28 Jul 2026 17:00:44 +0000 Manifest this update: Tue 28 Jul 2026 17:00:44 +0000 Manifest next update: Tue 04 Aug 2026 17:00:44 +0000 Files and hashes: 1: KXr2WH-YpJnreNLMrjYW70KfV1A.crl (hash: uIxQGnVflXLw87kC1WTPGRnA0lPKQPpb967uJvsKXd0=) 2: B4996A22AC3411E88623474BC4F9AE02.roa (hash: RPjXeL3Zl8P6QkaRaUeCd76+wyQHC30Y9Dr1jaF8lPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411BC, serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Validity Not Before: Jul 28 17:00:44 2026 GMT Not After : Aug 4 17:00:44 2026 GMT Subject: CN=6a68e03c-4d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:74:1e:7b:85:59:fb:c2:7e:28:c2:c3:7a: 05:a9:3e:1f:4d:8b:7d:1a:97:21:29:7f:f2:2f:d8: 7a:94:74:a4:3a:5d:67:5d:56:9e:ae:bb:1b:07:08: c7:f7:4b:85:a9:cf:2c:fd:b1:66:bd:37:9a:a8:3c: 64:1f:71:7d:dc:14:1e:f0:53:ea:56:bc:cf:a4:ec: 92:86:cb:31:4a:bf:95:ca:9c:fc:73:25:09:54:b2: 87:86:e9:96:d7:85:85:a0:47:97:22:a6:5b:1d:0e: ca:93:bd:e4:36:96:1e:69:1c:f4:79:97:a0:e0:24: 2b:01:f7:a3:58:df:79:61:cc:4f:ae:df:40:22:8d: b7:44:96:27:75:e5:61:86:08:06:5f:95:ce:b6:7f: 5e:1c:a8:23:70:ee:77:fd:96:2e:d3:47:43:fa:8c: 7c:11:92:98:e3:0c:c0:f2:f6:da:6c:a5:70:df:5a: 81:6f:ec:2f:a2:db:6e:87:3a:b8:f2:f1:3a:d0:f1: 1e:5b:f1:ed:54:13:1f:28:2a:e0:51:f3:d3:bd:92: fd:fa:b3:2b:6a:5b:b4:72:91:b9:69:51:d1:1a:be: 27:97:cc:01:d1:e5:4b:98:7f:77:21:a7:54:a7:74: d2:ee:50:2b:bb:1f:ff:0a:50:c4:d6:b2:5e:db:9b: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:49:52:76:E6:D0:B5:3E:C9:CD:29:1C:54:4E:C0:47:49:85:10 X509v3 Authority Key Identifier: keyid:29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:08:50:91:20:88:b3:cc:cb:44:72:ba:88:43:ec:d5:29:2c: 69:c8:9d:47:76:9d:84:9e:f7:03:2d:29:63:30:fa:90:5e:6a: 74:fb:da:7b:f5:78:cd:37:12:16:ec:89:e2:4a:29:d5:b5:86: 28:be:59:47:e3:82:e3:76:35:28:34:2e:00:e7:2a:ee:8c:17: a2:e6:91:41:25:f8:db:d2:31:bd:27:25:06:fd:0c:73:f7:aa: 7c:28:97:f3:c1:bc:d5:ae:1b:8f:2c:4e:a5:0a:9f:b2:db:44: 07:5d:f1:ac:e4:e8:cc:b5:63:b3:5f:02:16:34:6d:db:83:83: 7a:d7:09:13:63:94:59:28:51:8a:a7:bd:1c:4f:49:d4:06:57: 49:57:e3:91:ea:33:d9:a5:31:e5:e9:b8:4f:8e:a5:f3:b3:a0: 11:c5:23:09:89:a9:22:9a:5d:e5:95:9e:86:02:88:de:82:d6: fe:e3:22:3b:51:04:ea:6d:8e:0e:0a:a2:bd:c5:af:1c:e0:cd: 56:17:22:a3:d7:bd:70:92:5f:68:a9:3e:68:a9:6b:d2:b4:63: 31:9b:f0:fe:b8:ce:23:32:ba:58:21:70:8c:d9:a8:a9:7d:59: 4f:3d:70:13:b0:f9:b9:d7:14:29:24:de:57:23:86:7b:94:26: ee:f9:fa:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQkMxMTAvBgNVBAUTKDI5N0FGNjU4N0Y5OEE0OTlFQjc4RDJDQ0FFMzYxNkVG NDI5RjU3NTAwHhcNMjYwNzI4MTcwMDQ0WhcNMjYwODA0MTcwMDQ0WjAYMRYwFAYD VQQDEw02YTY4ZTAzYy00ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZF0HnuFWfvCfijCw3oFqT4fTYt9GpchKX/yL9h6lHSkOl1nXVaerrsbBwjH 90uFqc8s/bFmvTeaqDxkH3F93BQe8FPqVrzPpOyShssxSr+Vypz8cyUJVLKHhumW 14WFoEeXIqZbHQ7Kk73kNpYeaRz0eZeg4CQrAfejWN95YcxPrt9AIo23RJYndeVh hggGX5XOtn9eHKgjcO53/ZYu00dD+ox8EZKY4wzA8vbabKVw31qBb+wvottuhzq4 8vE60PEeW/HtVBMfKCrgUfPTvZL9+rMralu0cpG5aVHRGr4nl8wB0eVLmH93IadU p3TS7lArux//ClDE1rJe25tyZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVCSVJ2 5tC1PsnNKRxUTsBHSYUQMB8GA1UdIwQYMBaAFCl69lh/mKSZ63jSzK42Fu9Cn1dQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCQy9FMzE3MUIwMkFD MzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBKbnJlTkxNcmpZVzcwS2ZW MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYcjJXSC1ZcEpucmVOTE1yallXNzBLZlYxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCQy9FMzE3MUIwMkFDMzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBK bnJlTkxNcmpZVzcwS2ZWMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvAhQkSCIs8zLRHK6iEPs1SksacidR3adhJ73Ay0pYzD6kF5qdPvae/V4zTcS FuyJ4kop1bWGKL5ZR+OC43Y1KDQuAOcq7owXouaRQSX429IxvSclBv0Mc/eqfCiX 88G81a4bjyxOpQqfsttEB13xrOTozLVjs18CFjRt24ODetcJE2OUWShRiqe9HE9J 1AZXSVfjkeoz2aUx5em4T46l87OgEcUjCYmpIppd5ZWehgKI3oLW/uMiO1EE6m2O DgqivcWvHODNVhcio9e9cJJfaKk+aKlr0rRjMZvw/rjOIzK6WCFwjNmoqX1ZTz1w E7D5udcUKSTeVyOGe5Qm7vn69Q== -----END CERTIFICATE-----Generated at Tue Jul 28 22:31:49 2026 by rpki-client