$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft File: KrJDLDrVEo7XPpnEYNBhH69NIg4.mft (raw, json) Hash identifier: iJysT0FjhRpeCQCU0RRkgdFDrED8I1kbVqYKkjOC4x4= Subject key identifier: 39:65:33:E9:12:C5:AA:3A:81:3B:D3:33:BE:D8:82:57:65:DA:E0:16 Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft Manifest number: 010E Signing time: Mon 27 Jul 2026 08:14:43 +0000 Manifest this update: Mon 27 Jul 2026 08:14:43 +0000 Manifest next update: Mon 03 Aug 2026 08:14:43 +0000 Files and hashes: 1: KrJDLDrVEo7XPpnEYNBhH69NIg4.crl (hash: +w6nsFs9BJNGOujZRpySK1vJKbcGcL/l+RZIDL54wLk=) 2: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (hash: MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=) 3: D6246110AA6F11F0AD515C63C4F9AE02.roa (hash: kgI9j69ZuRKnS83zYB2SCGnkfw+45wKRpdDjx0NhraU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Validity Not Before: Jul 27 08:14:43 2026 GMT Not After : Aug 3 08:14:43 2026 GMT Subject: CN=6a671373-25c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:e3:af:55:98:1e:4a:6b:26:9b:02:61:24: 10:ef:89:58:08:86:e9:11:89:96:aa:e4:5d:94:c4: 50:f0:73:7b:2e:ab:91:d1:0a:29:d4:82:d1:12:df: 88:f4:67:c4:3c:71:92:33:95:92:5c:c8:d6:77:5f: c8:5e:e2:a4:f8:a5:d6:2b:08:c2:9c:12:e8:c2:8a: 41:c0:1c:70:e5:28:f2:c0:0b:da:fa:0b:ba:86:19: 68:3a:81:fd:73:62:87:6b:e3:66:ce:be:93:7a:05: 34:9e:c3:f8:25:dc:73:d4:71:ab:2d:09:5e:17:b7: f5:f1:38:28:34:17:d5:92:94:bb:01:e3:e4:48:8b: fb:74:3e:ab:36:04:6d:84:e7:19:b2:1f:b8:7e:f3: f7:6c:06:95:7e:81:a6:09:bd:d3:21:e8:a9:11:c2: 07:45:80:50:6d:cf:2a:f4:cb:93:16:7a:24:de:11: 1a:cc:bb:59:64:21:cd:17:69:b7:ca:3d:e8:dc:52: 3a:68:6d:d0:d2:9d:40:0d:69:93:8e:4b:f8:2b:53: 66:28:0e:83:26:e9:8e:aa:41:ca:d0:5b:d4:74:7d: c4:bc:40:35:e7:ee:d4:40:db:2b:83:15:b6:38:fd: 40:b8:5d:80:31:71:0a:d0:d1:14:12:7d:d9:80:05: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:33:E9:12:C5:AA:3A:81:3B:D3:33:BE:D8:82:57:65:DA:E0:16 X509v3 Authority Key Identifier: keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:74:fa:a6:97:34:7b:8f:e0:59:f4:0e:46:c2:bd:5c:a3:ad: ef:c6:8c:bb:d7:e6:ee:2d:68:0a:a3:bb:f3:fc:dc:c4:90:c4: a5:6d:6c:8b:cf:ba:0d:50:32:02:04:f6:c3:2e:ac:d6:74:f8: eb:bc:d6:f0:b5:a0:38:0f:29:d0:91:f7:c5:ab:af:4b:b7:a6: e6:d5:77:9f:6e:e4:16:18:19:f3:05:8f:2c:f9:9c:2d:c1:07: 8c:44:0d:00:56:d7:04:bb:0d:00:59:f6:8c:d3:48:f2:5a:53: 58:e1:99:d3:d3:ef:7c:08:28:0c:76:b1:10:4d:d3:c5:bd:c7: 44:1a:e1:fa:3f:7c:87:53:6c:13:c6:a4:c2:7f:6a:3e:eb:9f: 3e:e5:13:7d:0e:dd:dc:f0:9f:83:02:9e:e5:b2:3d:16:66:0f: 8d:0a:60:bc:f3:81:49:f4:f1:ec:25:af:3c:a3:5f:a9:e5:0c: db:25:19:2c:50:ac:40:ce:72:18:1b:d7:0c:0b:37:91:43:fd: 72:24:5f:08:23:08:aa:63:7c:15:e6:ce:ca:ae:d8:04:f0:01: 5a:ca:3e:05:e2:09:d1:9d:8b:3c:53:78:fa:44:81:74:26:10: f5:7a:b9:ad:13:6b:17:d5:bc:a6:ab:fb:1a:d6:94:6d:d4:52: e3:06:7e:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4NTAxMTAvBgNVBAUTKDJBQjI0MzJDM0FENTEyOEVENzNFOTlDNDYwRDA2MTFG QUY0RDIyMEUwHhcNMjYwNzI3MDgxNDQzWhcNMjYwODAzMDgxNDQzWjAYMRYwFAYD VQQDEw02YTY3MTM3My0yNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJnjr1WYHkprJpsCYSQQ74lYCIbpEYmWquRdlMRQ8HN7LquR0Qop1ILREt+I 9GfEPHGSM5WSXMjWd1/IXuKk+KXWKwjCnBLowopBwBxw5SjywAva+gu6hhloOoH9 c2KHa+Nmzr6TegU0nsP4Jdxz1HGrLQleF7f18TgoNBfVkpS7AePkSIv7dD6rNgRt hOcZsh+4fvP3bAaVfoGmCb3TIeipEcIHRYBQbc8q9MuTFnok3hEazLtZZCHNF2m3 yj3o3FI6aG3Q0p1ADWmTjkv4K1NmKA6DJumOqkHK0FvUdH3EvEA15+7UQNsrgxW2 OP1AuF2AMXEK0NEUEn3ZgAWT3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDllM+kS xao6gTvTM77Ygldl2uAWMB8GA1UdIwQYMBaAFCqyQyw61RKO1z6ZxGDQYR+vTSIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzg1MC83QjNCMzdENDAx ODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVvN1hQcG5FWU5CaEg2OU5J ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5TklnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzg1MC83QjNCMzdENDAxODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVv N1hQcG5FWU5CaEg2OU5JZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdnT6ppc0e4/gWfQORsK9XKOt78aMu9fm7i1oCqO78/zcxJDEpW1si8+6DVAy AgT2wy6s1nT467zW8LWgOA8p0JH3xauvS7em5tV3n27kFhgZ8wWPLPmcLcEHjEQN AFbXBLsNAFn2jNNI8lpTWOGZ09PvfAgoDHaxEE3Txb3HRBrh+j98h1NsE8akwn9q PuufPuUTfQ7d3PCfgwKe5bI9FmYPjQpgvPOBSfTx7CWvPKNfqeUM2yUZLFCsQM5y GBvXDAs3kUP9ciRfCCMIqmN8FebOyq7YBPABWso+BeIJ0Z2LPFN4+kSBdCYQ9Xq5 rRNrF9W8pqv7GtaUbdRS4wZ+FQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:34 2026 by rpki-client