$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: dgsA91SQiyOx519h+wkSkX0pJ7x0xtmLZgT+za6/SJQ= Subject key identifier: 9D:52:E0:7C:F1:93:4F:1E:5B:77:15:A1:E7:72:EC:0C:A7:11:31:43 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 027C Signing time: Mon 27 Jul 2026 03:19:00 +0000 Manifest this update: Mon 27 Jul 2026 03:19:00 +0000 Manifest next update: Mon 03 Aug 2026 03:19:00 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: sd6pTVpcQjLD5GxuXLJtPIGOYyWvAzzVD/QyahW9HkI=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: c33kuST7gT7ebNkTWc7XNN3mabw1ea/YNIBXvt3Yc/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Jul 27 03:19:00 2026 GMT Not After : Aug 3 03:19:00 2026 GMT Subject: CN=6a66ce24-a4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:19:db:48:d6:2b:0d:5d:06:4e:69:c6:7e: 06:f6:9a:14:a6:e3:e9:c2:55:ce:89:a8:80:60:c7: 4b:70:f1:23:d0:66:6a:14:c1:2d:7b:3f:b1:b9:92: 54:48:cc:18:ac:e9:2c:4b:6d:b4:ce:73:28:90:57: 3c:dc:b7:26:fb:39:c4:b0:fb:25:94:26:c8:e9:36: ad:d0:e2:01:fb:e3:2e:fb:d5:b9:3c:c5:bb:5e:10: 13:dc:e6:79:0d:86:be:2d:69:2a:29:07:c5:d5:40: b5:cf:86:7c:d8:a5:bf:40:76:b7:ee:9e:5c:3f:f4: 8d:a0:e2:1b:22:9d:38:d3:7a:69:6a:c6:5a:c6:69: c7:47:21:22:3d:6e:47:8d:0a:d1:cc:c4:1e:99:8d: ab:35:e4:95:ca:5b:20:ee:ad:df:3a:0b:5d:51:db: 53:f5:5f:71:95:d5:fe:05:5c:3e:ff:84:6b:31:5e: 26:6e:5c:40:91:7d:ad:41:bc:a0:be:81:b4:fd:7b: 59:52:72:f6:6a:06:39:8a:a3:e2:e2:31:81:4d:d3: 84:b8:c0:3d:90:28:23:6c:b4:bd:b6:88:b6:ac:48: 10:f3:76:6e:fd:93:40:13:44:e7:12:29:c9:4e:14: 3d:b5:8d:90:fd:f3:32:62:fc:15:68:5a:6e:af:db: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:52:E0:7C:F1:93:4F:1E:5B:77:15:A1:E7:72:EC:0C:A7:11:31:43 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:36:78:f9:80:7f:f0:1b:28:dc:fe:3e:43:da:df:92:52:73: 44:11:56:54:ed:20:a1:15:0d:f5:6f:ef:ac:5e:8a:37:be:b9: 9f:e5:38:8c:d1:54:0e:5e:d8:80:33:64:51:f0:77:74:5d:e1: 14:da:ba:5b:0b:e5:9e:bc:66:b0:c1:f8:ed:a2:94:47:d4:b2: a7:36:62:8d:2e:95:03:22:eb:74:c6:ce:51:fd:1e:32:9c:fb: 43:f3:6c:c0:88:f7:e1:d5:32:e3:65:31:c7:42:f4:a7:1c:5e: 66:ad:dc:1b:df:59:cc:69:b2:83:4e:09:a0:89:d7:27:0f:9f: 23:48:f3:35:40:b0:2e:d3:6d:33:01:5c:fa:e9:99:24:fa:91: 49:7c:e8:e4:24:21:c5:27:08:cc:e3:87:55:8b:af:55:b5:a5: f1:4f:be:8c:f4:48:d5:ff:27:38:45:b1:e6:08:66:f6:56:36: 0e:94:e0:89:4e:e4:62:dc:57:69:d6:f9:a0:d0:5b:0e:03:a4: 57:e1:19:47:dc:e9:d9:7b:81:02:3e:65:2c:67:0c:04:f2:cf: 1f:2d:d2:01:4e:c3:9d:5d:2c:c5:db:af:42:ed:f4:5f:8c:c0: 8c:c0:5c:98:23:6b:ed:76:1a:7f:48:35:a6:6d:35:6b:10:e7: ef:94:34:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjYwNzI3MDMxOTAwWhcNMjYwODAzMDMxOTAwWjAYMRYwFAYD VQQDEw02YTY2Y2UyNC1hNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VIZ20jWKw1dBk5pxn4G9poUpuPpwlXOiaiAYMdLcPEj0GZqFMEtez+xuZJU SMwYrOksS220znMokFc83Lcm+znEsPsllCbI6Tat0OIB++Mu+9W5PMW7XhAT3OZ5 DYa+LWkqKQfF1UC1z4Z82KW/QHa37p5cP/SNoOIbIp0403ppasZaxmnHRyEiPW5H jQrRzMQemY2rNeSVylsg7q3fOgtdUdtT9V9xldX+BVw+/4RrMV4mblxAkX2tQbyg voG0/XtZUnL2agY5iqPi4jGBTdOEuMA9kCgjbLS9toi2rEgQ83Zu/ZNAE0TnEinJ ThQ9tY2Q/fMyYvwVaFpur9ukIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1S4Hzx k08eW3cVoedy7AynETFDMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDZ4+YB/8Bso3P4+Q9rfklJzRBFWVO0goRUN9W/vrF6KN765n+U4jNFUDl7Y gDNkUfB3dF3hFNq6WwvlnrxmsMH47aKUR9SypzZijS6VAyLrdMbOUf0eMpz7Q/Ns wIj34dUy42Uxx0L0pxxeZq3cG99ZzGmyg04JoInXJw+fI0jzNUCwLtNtMwFc+umZ JPqRSXzo5CQhxScIzOOHVYuvVbWl8U++jPRI1f8nOEWx5ghm9lY2DpTgiU7kYtxX adb5oNBbDgOkV+EZR9zp2XuBAj5lLGcMBPLPHy3SAU7DnV0sxduvQu30X4zAjMBc mCNr7XYaf0g1pm01axDn75Q0nQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:56:02 2026 by rpki-client