$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: QgaYYbOs19FhN9CnSPYGsftlyur8fzLKk+A1ig1vFUU= Subject key identifier: 54:D3:CF:A1:D2:C1:5A:B3:7D:02:79:FB:AE:4F:8E:8D:69:9E:DC:B5 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0533 Signing time: Mon 27 Jul 2026 00:29:06 +0000 Manifest this update: Mon 27 Jul 2026 00:29:05 +0000 Manifest next update: Mon 03 Aug 2026 00:29:05 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: 8bsODKdaSL8ZzIm1pVruAnwHJACRBBznkYZLx6MWCXQ=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Jul 27 00:29:05 2026 GMT Not After : Aug 3 00:29:05 2026 GMT Subject: CN=6a66a652-a406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:4b:cd:70:f3:05:28:dc:2a:b3:8a:a6:65: 0b:78:7d:b8:b5:3d:c9:c2:07:09:25:ce:c1:f0:6d: c1:42:63:f6:8e:fb:75:e7:3a:f5:70:37:5f:a2:9b: 12:0a:f4:ce:3d:5c:62:28:79:c8:fa:a9:63:d3:4b: db:c2:31:8e:d4:0d:e0:e3:57:3e:03:eb:e9:bf:b3: c5:a4:71:62:5d:15:19:f8:9c:5c:1a:a7:6a:e5:6e: 7f:e9:df:bd:fa:ac:80:55:d6:cc:dd:d8:a8:8e:17: 48:44:8e:55:64:80:ad:67:62:79:41:b9:8f:f0:2b: c9:fd:7b:26:b4:00:7e:bd:63:e1:89:9f:f3:39:84: e3:1e:9c:5a:4f:fd:38:4a:04:20:22:c2:fe:f7:38: 96:c1:d7:75:ae:72:99:2e:3d:ca:0d:75:65:4b:cc: 20:1a:8b:85:e6:df:31:01:02:6e:e6:c6:f8:47:ed: 37:2a:cc:68:88:9b:c0:4c:e2:f4:b2:f4:3a:8e:a3: 9f:16:c4:fc:fc:3a:50:39:c8:da:a9:3d:ea:bf:2b: 45:ff:e0:a1:f0:d2:32:8b:34:70:37:84:f5:2b:98: a8:ca:fa:54:42:04:d4:74:62:d7:2a:24:45:8f:fe: 3f:84:3b:5c:0f:c0:23:3d:2d:be:ee:39:03:24:60: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:CF:A1:D2:C1:5A:B3:7D:02:79:FB:AE:4F:8E:8D:69:9E:DC:B5 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c5:e6:be:d1:4c:b1:9c:16:e4:52:d4:71:69:ad:0b:96:f9: f8:5b:9c:72:6a:30:37:70:4e:49:6e:75:23:41:60:38:a2:15: fc:69:b1:2f:10:3d:39:73:5c:45:06:3d:a8:c3:09:6c:ff:12: c4:74:75:34:e2:1b:8b:86:05:5e:ae:71:8a:40:15:43:b9:fb: 8b:63:43:30:01:a2:af:ef:14:62:9c:2f:74:69:3d:a8:a7:bd: aa:6a:7e:4e:46:19:2a:df:72:d3:46:5a:1f:7a:60:95:e3:4a: 25:ee:93:93:95:69:31:2f:bd:7a:c9:61:df:45:08:85:c3:40: 71:51:4a:06:e3:53:3b:40:64:58:13:d5:66:c1:54:70:6e:1a: a0:40:3d:7e:89:23:e7:e5:20:75:31:03:a1:4b:e6:6f:2b:39: fd:34:39:b8:0c:47:d6:9f:b9:53:ba:57:fd:d5:a5:15:f2:61: 89:22:e9:c6:a2:3c:82:9f:fd:88:68:57:8a:12:58:d4:1c:ed: fd:63:71:18:25:f4:62:4b:4f:e9:65:e8:53:f7:a0:a6:a7:55: 15:5e:fe:c3:bb:67:6b:1b:79:0f:85:d1:0a:d9:c7:2d:67:7a: 01:e7:03:0b:2d:71:54:cb:94:5d:2a:8d:7a:37:fc:f4:8b:1a: 57:5c:ed:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjYwNzI3MDAyOTA1WhcNMjYwODAzMDAyOTA1WjAYMRYwFAYD VQQDEw02YTY2YTY1Mi1hNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFtLzXDzBSjcKrOKpmULeH24tT3JwgcJJc7B8G3BQmP2jvt15zr1cDdfopsS CvTOPVxiKHnI+qlj00vbwjGO1A3g41c+A+vpv7PFpHFiXRUZ+JxcGqdq5W5/6d+9 +qyAVdbM3diojhdIRI5VZICtZ2J5QbmP8CvJ/XsmtAB+vWPhiZ/zOYTjHpxaT/04 SgQgIsL+9ziWwdd1rnKZLj3KDXVlS8wgGouF5t8xAQJu5sb4R+03KsxoiJvATOL0 svQ6jqOfFsT8/DpQOcjaqT3qvytF/+Ch8NIyizRwN4T1K5ioyvpUQgTUdGLXKiRF j/4/hDtcD8AjPS2+7jkDJGD7AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTTz6HS wVqzfQJ5+65Pjo1pnty1MB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMXmvtFMsZwW5FLUcWmtC5b5+FuccmowN3BOSW51I0FgOKIV/GmxLxA9OXNc RQY9qMMJbP8SxHR1NOIbi4YFXq5xikAVQ7n7i2NDMAGir+8UYpwvdGk9qKe9qmp+ TkYZKt9y00ZaH3pgleNKJe6Tk5VpMS+9eslh30UIhcNAcVFKBuNTO0BkWBPVZsFU cG4aoEA9fokj5+UgdTEDoUvmbys5/TQ5uAxH1p+5U7pX/dWlFfJhiSLpxqI8gp/9 iGhXihJY1Bzt/WNxGCX0YktP6WXoU/egpqdVFV7+w7tnaxt5D4XRCtnHLWd6AecD Cy1xVMuUXSqNejf89IsaV1ztgQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:32:27 2026 by rpki-client