$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: gvPXWWcLAYRD/NxeJgqvKF/xpsEBS1pfbP4/3A/B9oQ= Subject key identifier: 8C:A3:78:19:6C:AC:1C:F5:A1:E3:A8:A3:D9:84:99:70:3C:6F:C8:28 Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 0297 Signing time: Mon 27 Jul 2026 03:03:47 +0000 Manifest this update: Mon 27 Jul 2026 03:03:47 +0000 Manifest next update: Mon 03 Aug 2026 03:03:47 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: 8ZqnTuw4ticJ2F1rIukKgXOFnpRkTUVB/MMsmYik+uk=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: VdzI+wpbVcWCFABnPCYqXynsNBJPpDkJq/yCZxhlV3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3, serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Jul 27 03:03:47 2026 GMT Not After : Aug 3 03:03:47 2026 GMT Subject: CN=6a66ca93-d937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:e9:8d:48:51:cc:8b:57:8e:80:36:82:2e: c7:9b:a6:45:85:9b:a3:ed:46:c6:95:db:26:e9:f9: 87:87:51:c4:49:cd:26:4b:d9:40:05:eb:15:6b:61: a2:e0:88:90:2f:60:f9:41:95:1d:75:68:8d:4e:b5: 05:ab:e9:0f:f1:01:d6:8a:83:7a:65:c5:99:91:56: c2:a9:37:76:ba:15:2d:34:04:fe:51:ce:0b:3c:44: 9b:37:5b:a9:8d:e4:47:9b:ec:e8:6f:34:fe:85:ca: bb:fb:f3:cd:09:0f:dc:60:5b:43:c6:2b:fa:69:3f: d2:99:3b:7a:ac:5e:d3:2d:e5:b0:fe:74:4d:03:b8: 7b:b2:d6:b5:67:6a:80:d5:57:4d:48:5e:67:63:5c: 39:4d:45:8c:9b:11:8a:56:af:96:f4:94:af:0d:f4: 1c:e0:13:45:ab:6f:37:05:f4:da:f3:d7:cb:ba:73: 4f:58:95:71:5b:41:80:99:18:b2:ee:7c:26:97:ad: ea:bc:9a:af:21:c6:b3:0c:f7:ea:8a:e1:c4:14:e4: fc:66:c0:b6:28:ec:86:11:3c:fb:4a:71:30:47:a6: 87:94:d1:7e:3e:bf:8c:ae:8a:78:94:4a:5c:8f:6a: 2b:7d:c1:15:70:92:39:f2:c7:87:7a:7e:73:f8:47: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:78:19:6C:AC:1C:F5:A1:E3:A8:A3:D9:84:99:70:3C:6F:C8:28 X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f4:09:54:b1:0f:27:3a:24:3b:89:58:75:43:ed:85:7a:aa: 23:4a:b2:af:1f:f3:99:b9:c8:28:db:9c:82:db:08:69:61:91: 74:bd:e0:b6:1a:2c:f9:47:6e:63:cb:cd:27:f0:02:48:ad:d4: af:1f:25:84:25:6f:de:c9:17:1e:a8:32:d9:bc:f3:59:f0:0f: df:5d:78:16:3d:ab:73:4a:af:29:6b:2b:ee:6e:21:eb:43:89: 37:81:a3:be:3d:0e:fb:fd:b3:fc:68:db:d5:ea:19:e1:ad:f5: c1:7b:45:5b:5f:56:c6:7f:99:9b:c3:42:53:69:fb:d7:31:df: 14:8a:20:4a:c8:d1:bc:ac:a5:5b:ca:75:ab:b5:1a:8a:3b:44: 92:98:db:84:9a:c9:57:fb:50:e2:8e:36:fe:48:3c:08:c4:cc: d2:20:cc:4c:9c:45:a1:52:8f:43:c4:3f:d5:da:92:3d:c5:5d: b1:8c:86:af:2d:f8:47:c1:33:91:b3:ca:b1:a2:0b:39:6e:86: 30:17:69:25:b2:03:27:7e:57:9a:75:48:42:93:34:bb:b3:b2: d9:1c:79:17:c8:b7:fd:94:af:af:05:8d:dd:1d:5a:ee:8d:75: 45:86:23:ee:1a:cc:27:07:cb:c7:fb:3d:89:e9:59:ac:83:ec: 9a:0b:ca:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjYwNzI3MDMwMzQ3WhcNMjYwODAzMDMwMzQ3WjAYMRYwFAYD VQQDEw02YTY2Y2E5My1kOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0TpjUhRzItXjoA2gi7Hm6ZFhZuj7UbGldsm6fmHh1HESc0mS9lABesVa2Gi 4IiQL2D5QZUddWiNTrUFq+kP8QHWioN6ZcWZkVbCqTd2uhUtNAT+Uc4LPESbN1up jeRHm+zobzT+hcq7+/PNCQ/cYFtDxiv6aT/SmTt6rF7TLeWw/nRNA7h7sta1Z2qA 1VdNSF5nY1w5TUWMmxGKVq+W9JSvDfQc4BNFq283BfTa89fLunNPWJVxW0GAmRiy 7nwml63qvJqvIcazDPfqiuHEFOT8ZsC2KOyGETz7SnEwR6aHlNF+Pr+Mrop4lEpc j2orfcEVcJI58seHen5z+EcXIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyjeBls rBz1oeOoo9mEmXA8b8goMB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhvQJVLEPJzokO4lYdUPthXqqI0qyrx/zmbnIKNucgtsIaWGRdL3gthos+Udu Y8vNJ/ACSK3Urx8lhCVv3skXHqgy2bzzWfAP3114Fj2rc0qvKWsr7m4h60OJN4Gj vj0O+/2z/Gjb1eoZ4a31wXtFW19Wxn+Zm8NCU2n71zHfFIogSsjRvKylW8p1q7Ua ijtEkpjbhJrJV/tQ4o42/kg8CMTM0iDMTJxFoVKPQ8Q/1dqSPcVdsYyGry34R8Ez kbPKsaILOW6GMBdpJbIDJ35XmnVIQpM0u7Oy2Rx5F8i3/ZSvrwWN3R1a7o11RYYj 7hrMJwfLx/s9ielZrIPsmgvKPg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:37 2026 by rpki-client