$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: 8xGW+ns/l4RcPxzPQGd2NcKQwsIFK9wz9IuxPw4LckY= Subject key identifier: 98:41:F5:DD:4E:C3:80:7D:97:B1:F0:89:2D:55:5D:B3:E2:28:AC:19 Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0F3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0F2F Signing time: Tue 28 Jul 2026 17:40:53 +0000 Manifest this update: Tue 28 Jul 2026 17:40:52 +0000 Manifest next update: Tue 04 Aug 2026 17:40:52 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: H4XUZK/ws1IOYMJYqXXXZ89mxAJexaoIYJ6TxkmAv7U=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3898 (0xf3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Jul 28 17:40:52 2026 GMT Not After : Aug 4 17:40:52 2026 GMT Subject: CN=6a68e9a5-233f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:d4:83:59:17:a6:68:04:d2:cd:60:fe:58: a0:d9:c7:5d:a2:5a:4a:c2:3c:b5:97:7d:16:4c:73: 74:90:17:4d:dd:65:90:42:18:58:83:5e:7d:95:a1: b9:07:8d:2b:3e:36:3f:39:25:57:05:2c:cf:94:c7: eb:5f:fd:06:b9:64:e3:5f:0d:fa:c9:60:41:b9:5f: 18:b0:6f:e7:93:80:e1:05:39:bb:81:09:51:1c:87: 86:cb:ee:af:31:b9:bb:e5:04:67:de:cd:e4:27:9b: d3:38:a4:9d:44:ae:01:c5:8d:fb:19:4c:6b:5b:8e: 9f:5b:48:1d:9b:7b:22:7c:af:2a:e4:2e:15:d4:18: ae:40:d5:3e:e3:91:6f:91:44:43:c6:fd:48:29:73: 29:8a:05:f2:4d:8a:b8:aa:46:06:18:2a:cd:c2:d6: 45:a6:0d:fa:40:05:47:aa:70:d6:99:30:eb:7c:41: 5c:1b:5f:02:eb:df:62:94:55:42:9f:78:95:d0:33: 99:e9:53:56:ae:2d:2c:7c:f0:d6:c6:d1:15:a9:16: ad:36:44:20:ab:8d:a2:50:a6:a4:51:fa:b1:31:f2: f2:17:97:84:7c:ba:7c:4b:b6:41:ef:7f:6b:37:75: 35:a6:b6:1d:14:b3:2e:fc:45:eb:74:28:1e:b3:1f: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:F5:DD:4E:C3:80:7D:97:B1:F0:89:2D:55:5D:B3:E2:28:AC:19 X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:44:fd:70:bc:ee:ab:59:69:88:f5:11:d6:a1:37:03:04: ef:3f:09:41:05:8e:b6:81:2a:02:1e:c4:5f:07:fe:f2:e2:0b: 34:29:54:00:19:96:3d:43:6f:a8:59:4d:66:71:e6:d7:28:a3: 71:90:5d:e7:0a:77:69:8c:d6:24:f4:11:f6:fd:0b:68:f1:b8: a7:89:f6:e2:b9:93:5f:50:a6:a8:b6:fe:b7:a2:22:cb:e7:80: 06:c7:50:81:ea:23:dd:e3:b7:13:68:dc:61:93:f9:23:5a:7d: 50:bc:14:de:9b:f7:91:9a:7d:b6:fc:d9:d9:2d:24:16:25:44: 36:fd:a1:08:18:10:a8:03:fe:4b:5f:51:f5:72:5d:73:55:7a: 2b:2e:05:a9:03:80:e6:8a:dd:be:cc:72:a1:52:f5:fa:e5:0a: ae:c2:b2:fa:fd:30:06:e2:3a:5d:86:de:de:2a:0d:bd:a6:15: 2a:e7:aa:64:07:6a:2d:53:61:53:69:eb:d0:57:f6:7a:e4:74: b5:b8:aa:aa:90:2f:14:5d:4b:91:8a:68:59:db:28:8b:76:df: f3:9c:36:c4:e4:2a:0c:64:31:12:a9:a2:d8:a7:88:83:fb:18: d7:40:78:e8:74:34:61:58:a8:19:a5:2d:08:48:c2:1f:65:3d: 3e:65:29:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjYwNzI4MTc0MDUyWhcNMjYwODA0MTc0MDUyWjAYMRYwFAYD VQQDEw02YTY4ZTlhNS0yMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvszUg1kXpmgE0s1g/lig2cddolpKwjy1l30WTHN0kBdN3WWQQhhYg159laG5 B40rPjY/OSVXBSzPlMfrX/0GuWTjXw36yWBBuV8YsG/nk4DhBTm7gQlRHIeGy+6v Mbm75QRn3s3kJ5vTOKSdRK4BxY37GUxrW46fW0gdm3sifK8q5C4V1BiuQNU+45Fv kURDxv1IKXMpigXyTYq4qkYGGCrNwtZFpg36QAVHqnDWmTDrfEFcG18C699ilFVC n3iV0DOZ6VNWri0sfPDWxtEVqRatNkQgq42iUKakUfqxMfLyF5eEfLp8S7ZB739r N3U1prYdFLMu/EXrdCgesx/ZBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhB9d1O w4B9l7HwiS1VXbPiKKwZMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABKlE/XC87qtZaYj1EdahNwME7z8JQQWOtoEqAh7EXwf+8uILNClUABmWPUNv qFlNZnHm1yijcZBd5wp3aYzWJPQR9v0LaPG4p4n24rmTX1CmqLb+t6Iiy+eABsdQ geoj3eO3E2jcYZP5I1p9ULwU3pv3kZp9tvzZ2S0kFiVENv2hCBgQqAP+S19R9XJd c1V6Ky4FqQOA5ordvsxyoVL1+uUKrsKy+v0wBuI6XYbe3ioNvaYVKueqZAdqLVNh U2nr0Ff2euR0tbiqqpAvFF1LkYpoWdsoi3bf85w2xOQqDGQxEqmi2KeIg/sY10B4 6HQ0YVioGaUtCEjCH2U9PmUpBg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:12 2026 by rpki-client