$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: d1GAZve0+zBoAfvqw4dXhHxVSfrMDbhoTaXgYI3vuc4= Subject key identifier: E3:4C:EC:3A:2E:5D:53:15:0A:D6:E7:B6:CE:7C:5D:7A:36:F4:CC:9D Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: DC Signing time: Mon 27 Jul 2026 08:53:52 +0000 Manifest this update: Mon 27 Jul 2026 08:53:52 +0000 Manifest next update: Mon 03 Aug 2026 08:53:52 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: oMsyU/+wmSYKFzaIqqS7MsAbgzTunvhkQsH5y5BeqmI=) 2: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) 3: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jul 27 08:53:52 2026 GMT Not After : Aug 3 08:53:52 2026 GMT Subject: CN=6a671ca0-d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:33:88:dd:0b:ce:bd:2d:6a:75:fc:cd:d0: 39:56:c5:70:22:fa:26:0e:4b:27:2a:c1:92:3a:d4: 83:01:5d:58:8f:d0:86:29:71:51:1e:2f:0a:8b:d5: db:db:f1:3c:fd:03:fd:95:01:bf:e6:1f:cd:bc:76: a0:7a:5e:75:25:9c:c7:d0:c9:e8:b1:b7:21:ec:61: 0d:86:e3:f1:32:8d:f4:0a:f0:c9:1b:48:bb:46:08: 07:dd:28:9b:f2:7b:66:d6:0b:61:3d:13:5b:f0:e9: b4:ff:eb:fc:4e:ac:86:d2:2e:e2:6e:6a:2a:47:ff: 6c:d0:b9:cc:52:c0:94:ba:c6:c1:da:1d:30:3f:79: 9e:d1:ef:21:b6:2a:4d:d5:3a:f4:e5:ed:55:fc:d2: 78:f4:c7:c9:42:78:6d:d6:7d:b8:0e:4a:ff:c7:3d: db:f7:c5:69:2c:9b:43:fb:eb:9f:38:5c:27:59:77: be:db:e1:11:c4:cc:d5:f4:b9:bb:d8:87:8f:69:3c: b7:ba:cf:2a:f2:84:65:7d:a0:ac:dd:38:68:e9:08: 72:ba:bc:84:f2:fa:bb:ab:eb:f3:99:fa:bf:c7:d2: 03:fe:44:9c:72:c9:31:a7:d5:9f:e2:09:62:05:33: fc:2e:1e:73:2e:78:3b:54:90:54:fd:90:6e:d9:60: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:EC:3A:2E:5D:53:15:0A:D6:E7:B6:CE:7C:5D:7A:36:F4:CC:9D X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:28:fa:64:5d:61:d6:19:e0:45:7b:b9:4d:8e:39:e1:98:dd: fb:13:c6:aa:c5:e0:61:e8:63:5b:84:a4:e9:0e:fe:22:08:9a: bb:58:be:6d:6e:b4:9e:6e:c5:79:b1:64:48:07:2d:7a:d2:55: 8b:2d:2b:fb:b9:7e:8a:79:8d:b8:6b:83:10:f0:9e:00:fa:18: 36:b7:b1:d2:62:55:8d:21:69:89:93:04:97:fe:83:e1:ac:04: 4f:4d:f6:b8:64:0e:f5:2e:f2:4b:ba:80:01:c8:6a:61:b4:13: 30:df:a0:95:6b:75:7f:fd:e9:1f:a4:d6:56:0f:65:8f:fd:00: f4:74:db:82:8f:43:4b:db:a3:26:60:13:5f:d2:11:09:84:ca: 2f:93:0e:29:cd:59:3d:65:aa:53:73:63:5b:92:c1:11:66:13: 39:ca:ae:e5:c7:03:a1:98:85:4e:c2:5f:cd:7f:d8:64:ed:96: 91:57:87:de:6a:5e:f8:d3:ec:44:a0:7a:c6:04:b2:30:28:88: 5c:aa:ea:be:97:40:cc:fb:c1:eb:3b:8f:a1:23:96:54:d1:87: 26:cc:44:64:65:27:da:09:f5:d9:15:54:32:78:90:8f:4d:05: e4:42:3b:0a:6e:f9:1a:1b:77:6c:0a:94:95:95:8e:cb:48:56: e4:bc:d6:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwNzI3MDg1MzUyWhcNMjYwODAzMDg1MzUyWjAYMRYwFAYD VQQDEw02YTY3MWNhMC1kOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+sziN0Lzr0tanX8zdA5VsVwIvomDksnKsGSOtSDAV1Yj9CGKXFRHi8Ki9Xb 2/E8/QP9lQG/5h/NvHagel51JZzH0Mnosbch7GENhuPxMo30CvDJG0i7RggH3Sib 8ntm1gthPRNb8Om0/+v8TqyG0i7ibmoqR/9s0LnMUsCUusbB2h0wP3me0e8htipN 1Tr05e1V/NJ49MfJQnht1n24Dkr/xz3b98VpLJtD++ufOFwnWXe+2+ERxMzV9Lm7 2IePaTy3us8q8oRlfaCs3Tho6QhyuryE8vq7q+vzmfq/x9ID/kSccskxp9Wf4gli BTP8Lh5zLng7VJBU/ZBu2WDcPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONM7Dou XVMVCtbnts58XXo29MydMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANij6ZF1h1hngRXu5TY454Zjd+xPGqsXgYehjW4Sk6Q7+Igiau1i+bW60nm7F ebFkSActetJViy0r+7l+inmNuGuDEPCeAPoYNrex0mJVjSFpiZMEl/6D4awET032 uGQO9S7yS7qAAchqYbQTMN+glWt1f/3pH6TWVg9lj/0A9HTbgo9DS9ujJmATX9IR CYTKL5MOKc1ZPWWqU3NjW5LBEWYTOcqu5ccDoZiFTsJfzX/YZO2WkVeH3mpe+NPs RKB6xgSyMCiIXKrqvpdAzPvB6zuPoSOWVNGHJsxEZGUn2gn12RVUMniQj00F5EI7 Cm75Ght3bAqUlZWOy0hW5LzWXw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:51 2026 by rpki-client