$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: xaRmBt2R9/E3wv1EvSzFlvIhqmkqooaAGgpY/J7Dc7E= Subject key identifier: 7C:74:DA:4E:09:BC:03:B7:9E:5D:17:DD:2C:F4:27:D9:9E:9E:DD:A7 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 2C Signing time: Mon 27 Jul 2026 11:11:59 +0000 Manifest this update: Mon 27 Jul 2026 11:11:58 +0000 Manifest next update: Mon 03 Aug 2026 11:11:58 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: 50QOesTu9KpA3v1WDpdBCTsvWutHiEJ6rgDc0pGGW/4=) 2: DDFBF53064F811F18CD9A2CE7647A888.roa (hash: rnHtHer8GYacGwWfe6Ay6DpWc4MNGCoinmNNStme7Mo=) 3: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: k921Mcmu/cnS51QvFoRXejBwdAmHFdMNAue6ueGlIEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Jul 27 11:11:58 2026 GMT Not After : Aug 3 11:11:58 2026 GMT Subject: CN=6a673cff-5a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:69:a4:b0:f5:31:37:9d:62:18:4f:15:0a: dc:79:7d:7b:96:b9:41:8b:5d:60:14:bf:fa:f4:45: c1:ca:55:9c:4d:0d:19:18:06:a1:dd:71:cc:6f:a0: a7:f7:c4:c8:cf:89:f2:27:be:12:3d:ca:75:1a:30: 3e:57:60:cb:80:f9:d4:b9:de:19:d3:66:fd:ac:29: d9:dd:3a:29:bf:c4:b4:f2:14:2c:aa:38:58:8a:67: cc:f2:1f:44:a9:10:47:0d:25:5b:fb:82:69:6e:a2: 83:60:d7:6a:1f:32:a1:f7:2d:be:39:3c:8c:a8:7a: e3:6d:2f:11:09:d7:96:52:5a:e4:e3:ea:cb:88:cc: 80:5e:d1:52:64:55:1d:cf:1f:df:45:f9:c8:7c:87: 26:15:d1:57:91:ac:f3:34:cb:65:ca:22:6f:4a:4c: 7f:34:54:f0:49:38:92:9f:c2:ca:5a:a0:cc:54:7c: 44:f3:5d:b1:91:fd:2d:3e:4e:60:27:5e:69:41:ab: ee:ec:ce:4c:44:e9:f4:00:c7:10:ee:3f:cc:cf:ed: 15:f2:57:73:75:a1:12:1d:75:19:6e:72:b1:c0:6a: 2f:02:8f:d6:51:8a:9b:1d:76:1b:b3:1c:8c:c8:a2: 1d:fa:97:e8:a3:ad:ca:fa:a6:a9:3b:a4:3b:78:3b: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:74:DA:4E:09:BC:03:B7:9E:5D:17:DD:2C:F4:27:D9:9E:9E:DD:A7 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:eb:ef:ec:a1:90:4f:7e:92:a7:4c:68:c0:e8:7a:a0:7b:61: 70:72:d3:c3:72:05:8a:d5:56:80:11:a1:4d:34:95:78:0a:ce: 41:64:04:8d:30:1f:41:58:02:62:d9:f9:83:33:0b:eb:df:84: 71:ae:d0:d9:46:ac:aa:ce:8f:86:2b:21:00:3f:97:27:2c:74: d0:5f:60:8e:54:0d:38:5e:45:4e:d2:0d:21:d8:e1:3b:95:2d: 6d:9e:cd:67:57:51:7a:31:99:0e:e5:25:46:d3:5d:0a:6d:b9: 27:01:03:0f:d0:33:80:a2:d7:d4:8e:b7:cf:fc:9d:6f:cd:3b: 48:0a:f4:37:aa:a7:b4:fe:d9:65:21:00:b8:12:77:96:ce:a6: 79:8e:41:11:76:14:a0:0c:55:ab:34:ba:0c:28:35:85:fd:6a: 52:9e:02:81:48:79:66:a9:96:99:c8:af:e4:04:7a:23:ac:4b: 29:f4:64:39:27:aa:a7:0c:dd:8b:7d:2c:b8:be:a6:3c:df:0b: 19:0c:6f:6e:c7:b2:39:9f:7b:f7:8e:1b:11:47:77:49:6d:f0: e8:c3:fa:d6:10:7f:49:73:eb:11:e7:d4:1c:b4:22:67:f8:7a: 42:67:ed:be:8d:e0:98:b4:79:7c:06:12:ed:43:5c:5d:16:69: dc:98:8d:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA3MjcxMTExNThaFw0yNjA4MDMxMTExNThaMBgxFjAUBgNV BAMTDTZhNjczY2ZmLTVhNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUPWmksPUxN51iGE8VCtx5fXuWuUGLXWAUv/r0RcHKVZxNDRkYBqHdccxvoKf3 xMjPifInvhI9ynUaMD5XYMuA+dS53hnTZv2sKdndOim/xLTyFCyqOFiKZ8zyH0Sp EEcNJVv7gmluooNg12ofMqH3Lb45PIyoeuNtLxEJ15ZSWuTj6suIzIBe0VJkVR3P H99F+ch8hyYV0VeRrPM0y2XKIm9KTH80VPBJOJKfwspaoMxUfETzXbGR/S0+TmAn XmlBq+7szkxE6fQAxxDuP8zP7RXyV3N1oRIddRlucrHAai8Cj9ZRipsddhuzHIzI oh36l+ijrcr6pqk7pDt4O/EfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfHTaTgm8 A7eeXRfdLPQn2Z6e3acwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBs6+/soZBPfpKnTGjA6Hqge2FwctPDcgWK1VaAEaFNNJV4Cs5BZASNMB9BWAJi 2fmDMwvr34RxrtDZRqyqzo+GKyEAP5cnLHTQX2COVA04XkVO0g0h2OE7lS1tns1n V1F6MZkO5SVG010KbbknAQMP0DOAotfUjrfP/J1vzTtICvQ3qqe0/tllIQC4EneW zqZ5jkERdhSgDFWrNLoMKDWF/WpSngKBSHlmqZaZyK/kBHojrEsp9GQ5J6qnDN2L fSy4vqY83wsZDG9ux7I5n3v3jhsRR3dJbfDow/rWEH9Jc+sR59QctCJn+HpCZ+2+ jeCYtHl8BhLtQ1xdFmncmI0S -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:33 2026 by rpki-client