$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: IzAUt/vZnUwk6yDP8TjRn/7MSy1eVAkzk5XyVF5vlUo= Subject key identifier: A3:21:D1:62:2A:0A:1A:8B:5F:F8:44:C4:EB:B7:62:FE:44:89:87:2D Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 275B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 261E Signing time: Tue 28 Jul 2026 15:50:22 +0000 Manifest this update: Tue 28 Jul 2026 15:50:21 +0000 Manifest next update: Tue 04 Aug 2026 15:50:21 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: 7gYC8DhXlNxSqkNOmp4c+HBGAlTzhic/h+XEGouyH+I=) 2: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw=) 3: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lOvYt+0/Xr6pgMpv/63iUFQ210NPhZzouXW57Pt++DQ=) 4: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=) 5: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=) 6: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: U+tT529Q+GHL3QD7YEYw7NjVcXz/pyFy7z7T6MnIels=) 7: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg=) 8: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: PvlCjzRuVQS5z3Y7RAsjDxZGQj+lAI/1wkWEPf7utQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10075 (0x275b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 28 15:50:21 2026 GMT Not After : Aug 4 15:50:21 2026 GMT Subject: CN=6a68cfbd-ebcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:2a:5f:2d:cd:aa:11:2f:54:1f:fb:05:e1: 58:da:be:95:3d:cd:9b:11:b0:e4:19:3c:8a:1a:b6: bc:05:74:75:ef:a6:b1:3b:c7:e0:9e:0a:34:0b:97: 93:17:42:2a:8a:1e:d0:6f:d9:74:f2:59:f9:0c:99: f2:d2:79:2a:c2:93:39:cf:a8:c9:bf:c2:c0:b4:1c: fb:bb:65:1b:6c:87:b7:f4:87:fd:64:b4:63:b2:81: 25:52:ca:ef:c8:34:0f:3b:8f:d2:ef:22:47:ca:be: 6e:1e:48:c1:d4:55:70:70:b0:93:ed:79:77:86:97: 6a:06:e2:92:8f:84:db:83:f2:6b:7a:79:eb:a6:7e: 9b:25:a6:f7:7a:79:9e:15:06:a5:c2:13:5f:88:95: ca:e2:64:45:f8:25:c1:19:be:e4:5d:30:29:1e:5b: d7:5e:cf:0f:63:03:70:83:c2:8f:6a:c6:7f:40:f7: b5:9b:ac:f3:fb:46:e4:f0:ca:82:ca:88:6e:1e:53: 6b:9c:96:9a:bc:fd:62:4d:87:07:0a:7a:68:4f:ec: e6:6c:7c:78:71:da:7b:c8:d2:8c:21:f3:c0:83:62: bc:dd:80:93:5f:e3:27:82:de:30:9e:28:6f:8c:b9: f6:4b:c8:cc:3a:4b:f0:85:0d:b0:6d:fb:fb:ab:2b: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:D1:62:2A:0A:1A:8B:5F:F8:44:C4:EB:B7:62:FE:44:89:87:2D X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:6e:30:c9:4b:8d:3d:04:dc:8f:5f:f0:88:90:6f:10:0f:97: 3d:f2:90:5f:7b:3a:57:b5:4f:69:bc:f2:4e:59:ce:82:ae:d3: 97:2f:ab:6b:12:cb:0e:37:cc:ea:03:2d:18:a0:88:7a:de:6b: 0c:f0:3d:e5:6e:3e:25:4e:94:c0:3e:eb:89:8b:d9:f0:f5:a8: 39:a5:b6:9c:04:fd:1a:e2:52:aa:44:27:94:57:97:3a:32:7a: 1e:e8:03:77:09:cb:01:19:e7:23:52:a4:8f:0a:8c:cb:99:3c: 99:ff:d7:d2:59:b1:18:81:40:9f:12:09:95:1b:93:24:2f:bf: 6f:c1:27:6b:c4:a6:68:0f:da:f2:55:df:bb:64:f0:74:38:b2: de:c3:27:5c:12:2e:30:bb:b4:9e:e1:7a:0a:1a:94:8c:25:b0: d6:32:18:80:55:15:dd:92:e1:ee:0b:68:8f:65:b0:70:85:2f: 3e:cc:1e:a7:63:bb:96:43:7a:cc:0e:79:86:91:2e:9e:83:e2: 34:0e:04:a7:4e:54:a3:a3:38:f1:dc:bf:2b:94:c6:f4:7f:c6: 2c:84:82:14:1b:72:57:3d:38:89:0a:b3:ba:87:cb:86:1a:62: 99:90:29:d9:e4:74:5b:c2:c0:70:c3:eb:a8:0e:a3:b6:f3:a8: 28:6e:b0:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNzI4MTU1MDIxWhcNMjYwODA0MTU1MDIxWjAYMRYwFAYD VQQDEw02YTY4Y2ZiZC1lYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBwqXy3NqhEvVB/7BeFY2r6VPc2bEbDkGTyKGra8BXR176axO8fgngo0C5eT F0Iqih7Qb9l08ln5DJny0nkqwpM5z6jJv8LAtBz7u2UbbIe39If9ZLRjsoElUsrv yDQPO4/S7yJHyr5uHkjB1FVwcLCT7Xl3hpdqBuKSj4Tbg/Jrennrpn6bJab3enme FQalwhNfiJXK4mRF+CXBGb7kXTApHlvXXs8PYwNwg8KPasZ/QPe1m6zz+0bk8MqC yohuHlNrnJaavP1iTYcHCnpoT+zmbHx4cdp7yNKMIfPAg2K83YCTX+Mngt4wnihv jLn2S8jMOkvwhQ2wbfv7qys5MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMh0WIq ChqLX/hExOu3Yv5EiYctMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcW4wyUuNPQTcj1/wiJBvEA+XPfKQX3s6V7VPabzyTlnOgq7Tly+raxLLDjfM 6gMtGKCIet5rDPA95W4+JU6UwD7riYvZ8PWoOaW2nAT9GuJSqkQnlFeXOjJ6HugD dwnLARnnI1KkjwqMy5k8mf/X0lmxGIFAnxIJlRuTJC+/b8Ena8SmaA/a8lXfu2Tw dDiy3sMnXBIuMLu0nuF6ChqUjCWw1jIYgFUV3ZLh7gtoj2WwcIUvPswep2O7lkN6 zA55hpEunoPiNA4Ep05Uo6M48dy/K5TG9H/GLISCFBtyVz04iQqzuofLhhpimZAp 2eR0W8LAcMPrqA6jtvOoKG6wZA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:18:22 2026 by rpki-client