$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: xauDpTS7KN7MCMVMn8UYvdjf0xZcHXDh2csUkcTF1R4= Subject key identifier: 4D:84:38:8E:20:79:34:EF:72:90:D0:21:A5:FF:D9:97:35:6F:1E:20 Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 05 Signing time: Mon 27 Jul 2026 03:14:47 +0000 Manifest this update: Mon 27 Jul 2026 03:14:47 +0000 Manifest next update: Mon 03 Aug 2026 03:14:47 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: wcqWCJdfVcpdb9CTlQR84J/UqiBv1P3TTumWBP09VLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Jul 27 03:14:47 2026 GMT Not After : Aug 3 03:14:47 2026 GMT Subject: CN=6a66cd27-96dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:fd:bc:a4:48:94:1b:d2:a4:b5:3c:e7:46: 3b:a6:9f:2e:a3:84:c2:44:8c:9d:6b:85:e2:b7:3c: aa:e5:44:a6:e2:2a:c6:ad:d4:43:60:70:bf:bc:c3: 3d:7b:ad:a5:7b:8a:1b:6e:6e:9a:90:17:01:99:79: 97:8d:1a:20:e6:ce:35:26:15:7a:9e:44:69:b7:2b: 05:67:c5:a7:24:e8:f8:f1:20:81:5d:40:f3:71:ca: 0f:4a:e7:84:71:20:cc:53:3e:87:cf:56:ee:58:43: eb:ce:e9:58:66:14:9a:c4:5b:42:6d:4f:d2:7b:cd: 3f:b8:76:b2:42:60:80:e3:a8:4c:84:af:2d:77:0a: 1f:80:39:b0:19:80:de:cc:69:a4:25:13:25:e0:16: f8:06:1c:be:aa:06:cc:c4:74:b0:ec:ad:dc:88:8f: a6:1f:df:95:1b:48:41:d9:79:37:c3:f8:4d:54:1e: 8f:ff:34:c2:05:be:f5:97:38:70:de:9a:91:ef:a9: ba:4d:23:b9:82:dc:23:df:25:54:16:40:a4:45:24: ce:ce:c7:4d:8f:e8:93:bb:1f:da:2c:d3:f1:40:51: 88:23:b7:41:23:e2:f3:ff:09:0f:cd:34:db:e8:b2: 1a:4c:d5:11:3d:bf:14:43:31:be:f7:75:93:54:5e: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:84:38:8E:20:79:34:EF:72:90:D0:21:A5:FF:D9:97:35:6F:1E:20 X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:f1:7c:3c:79:63:b2:f1:9a:9f:07:4a:ff:df:44:29:3d: af:88:31:f6:c3:f5:07:16:6a:77:80:5e:09:b3:0a:f6:cc:a7: af:00:57:c0:39:bf:93:7c:40:8b:e9:f9:cc:5c:e4:8d:df:1a: 4b:7d:e5:54:40:c2:3b:f2:01:85:bf:e2:2b:d0:a1:80:b5:0a: e5:4d:31:ff:d1:c7:17:5a:59:4c:29:8c:5a:22:71:a5:d0:69: 14:5d:76:52:71:e6:77:8d:7a:39:c6:1f:a8:26:05:17:2f:04: 89:75:eb:b7:e5:09:4a:91:36:5c:e1:02:26:c1:b2:d5:5f:05: cc:3a:3e:0e:8b:47:4e:00:5a:76:3e:53:2c:44:43:c8:50:a5: f4:29:77:d7:f3:19:7b:0c:a7:b6:12:96:b4:c4:2f:12:81:c3: 73:e1:db:7e:cb:36:98:d9:b6:20:44:98:6a:4c:cd:b2:16:7d: 8a:07:04:2c:fd:f1:fa:12:f4:48:9d:99:ed:6b:4f:ae:d8:25: 49:14:b6:a4:43:e2:54:ba:5d:1b:7e:d3:35:0f:1d:8a:e0:4d: 06:9c:81:a9:a5:17:1a:30:5c:e1:e4:f0:bb:b4:07:16:90:80: 88:62:7f:0a:c8:66:50:9c:1a:38:2b:ac:ec:67:0b:b8:ad:04: 9d:b3:b4:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjA3MjcwMzE0NDdaFw0yNjA4MDMwMzE0NDdaMBgxFjAUBgNV BAMTDTZhNjZjZDI3LTk2ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVP28pEiUG9KktTznRjumny6jhMJEjJ1rheK3PKrlRKbiKsat1ENgcL+8wz17 raV7ihtubpqQFwGZeZeNGiDmzjUmFXqeRGm3KwVnxack6PjxIIFdQPNxyg9K54Rx IMxTPofPVu5YQ+vO6VhmFJrEW0JtT9J7zT+4drJCYIDjqEyEry13Ch+AObAZgN7M aaQlEyXgFvgGHL6qBszEdLDsrdyIj6Yf35UbSEHZeTfD+E1UHo//NMIFvvWXOHDe mpHvqbpNI7mC3CPfJVQWQKRFJM7Ox02P6JO7H9os0/FAUYgjt0Ej4vP/CQ/NNNvo shpM1RE9vxRDMb73dZNUXu2FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTYQ4jiB5 NO9ykNAhpf/ZlzVvHiAwHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOPfF8PHljsvGanwdK/99EKT2viDH2w/UHFmp3gF4Jswr2zKevAFfAOb+TfECL 6fnMXOSN3xpLfeVUQMI78gGFv+Ir0KGAtQrlTTH/0ccXWllMKYxaInGl0GkUXXZS ceZ3jXo5xh+oJgUXLwSJdeu35QlKkTZc4QImwbLVXwXMOj4Oi0dOAFp2PlMsREPI UKX0KXfX8xl7DKe2Epa0xC8SgcNz4dt+yzaY2bYgRJhqTM2yFn2KBwQs/fH6EvRI nZnta0+u2CVJFLakQ+JUul0bftM1Dx2K4E0GnIGppRcaMFzh5PC7tAcWkICIYn8K yGZQnBo4K6zsZwu4rQSds7RS -----END CERTIFICATE-----Generated at Tue Jul 28 15:36:57 2026 by rpki-client