$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json) Hash identifier: owa/YYqXECS9pn+ZbV8NTFxcYSU3ymiUuh4QtxA0fDc= Subject key identifier: F5:E2:DA:02:E5:C4:9A:B0:8C:17:DB:E2:55:46:7D:A4:4E:AB:19:EC Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft Manifest number: 0708 Signing time: Sun 26 Jul 2026 22:36:35 +0000 Manifest this update: Sun 26 Jul 2026 22:36:34 +0000 Manifest next update: Sun 02 Aug 2026 22:36:34 +0000 Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: HSp3SsZYiAud09+7VsoVqEkPGtC8Ac0DT3rNKPlPVqE=) 2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Validity Not Before: Jul 26 22:36:34 2026 GMT Not After : Aug 2 22:36:34 2026 GMT Subject: CN=6a668bf2-6b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:e2:d1:5f:a0:71:cb:6e:2a:f3:c5:b4:9e: c1:35:55:6d:84:2e:2d:dc:bb:16:96:75:c6:3f:7e: 05:eb:18:20:38:7f:91:d6:8e:68:6f:06:8e:0e:0e: 89:23:58:05:02:3a:b7:8a:5c:f8:94:93:0f:12:76: d2:fb:c8:d8:c7:bb:80:c3:03:31:53:13:f3:f6:68: 92:73:3d:f6:56:d9:b6:26:4a:2c:06:34:7c:ea:b9: fa:8e:1f:d8:38:a5:a9:c3:f9:ad:fb:60:00:a8:4a: d7:13:0f:83:98:72:f6:58:82:7f:d2:6d:91:03:4c: 86:f1:7c:fe:68:c2:7e:eb:84:e1:34:7f:ac:eb:7a: 02:63:c5:5d:94:09:94:2b:0c:dc:13:c3:f1:d8:f5: 29:c9:e8:6d:77:12:28:fd:8d:9c:9e:f1:0f:6d:11: fa:e4:c3:a4:ad:dc:7a:97:8b:b3:2c:77:e4:16:23: 26:f6:36:6e:17:d6:ed:34:dc:78:2f:2b:ad:2b:fd: 92:e6:d7:16:a3:57:ce:54:58:32:e1:c9:0c:f9:a2: ff:21:22:05:08:b0:0c:a5:b9:60:e3:04:bc:5f:51: 6c:3e:6e:be:53:eb:68:f8:0a:ae:56:24:9e:de:44: 80:c8:54:80:08:2f:d5:cf:81:9a:8b:e4:8f:28:58: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:DA:02:E5:C4:9A:B0:8C:17:DB:E2:55:46:7D:A4:4E:AB:19:EC X509v3 Authority Key Identifier: keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d7:9d:9a:9c:45:3c:f8:e4:af:1b:a5:55:43:0f:a8:e9:3f: c2:1e:43:b3:2a:a8:0e:90:e4:05:c0:c1:32:41:89:87:ad:06: 90:3f:a5:38:c9:6f:3e:63:eb:82:bd:ac:39:40:cc:c4:ad:5c: d3:d5:6a:a6:fa:5c:e1:84:95:6d:a2:6a:92:9e:da:5b:67:9b: 69:58:b2:11:3c:fb:7d:0e:59:a2:79:14:04:9f:68:86:c3:93: a3:9d:bb:c8:61:76:26:25:a5:89:54:98:e3:c2:4e:0c:8d:a2: 14:7f:bc:52:b8:c6:3c:0a:61:dc:ac:5a:ac:0f:da:79:48:07: 78:24:61:e2:72:17:14:96:b5:33:72:c3:44:3a:e6:7c:6b:e9: a4:1b:32:50:52:70:b5:77:c3:2b:da:f0:41:0c:61:90:5a:25: b0:5b:76:23:68:9a:1e:16:74:67:68:f2:32:2b:61:86:96:3e: 35:9a:d4:8a:16:7e:84:8e:03:3e:ba:17:e8:12:30:52:82:fc: ba:fc:f7:4c:87:51:cb:c6:7c:46:3d:81:e2:eb:91:7e:40:a3: 89:76:c9:dc:c4:8d:36:d7:65:ce:88:a6:d5:ca:fa:b3:f3:34: 4f:2f:1a:12:05:00:94:0d:b9:9b:d2:c7:c7:13:bf:d0:6b:8d: cf:a3:bb:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3 MkU3NTRDQjUwHhcNMjYwNzI2MjIzNjM0WhcNMjYwODAyMjIzNjM0WjAYMRYwFAYD VQQDEw02YTY2OGJmMi02YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLji0V+gcctuKvPFtJ7BNVVthC4t3LsWlnXGP34F6xggOH+R1o5obwaODg6J I1gFAjq3ilz4lJMPEnbS+8jYx7uAwwMxUxPz9miScz32Vtm2JkosBjR86rn6jh/Y OKWpw/mt+2AAqErXEw+DmHL2WIJ/0m2RA0yG8Xz+aMJ+64ThNH+s63oCY8VdlAmU KwzcE8Px2PUpyehtdxIo/Y2cnvEPbRH65MOkrdx6l4uzLHfkFiMm9jZuF9btNNx4 LyutK/2S5tcWo1fOVFgy4ckM+aL/ISIFCLAMpblg4wS8X1FsPm6+U+to+AquViSe 3kSAyFSACC/Vz4Gai+SPKFhO9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXi2gLl xJqwjBfb4lVGfaROqxnsMB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4 MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS82MzQ3Mzc1Njk4MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdy UkJfZDdlYl9QTk55NTFUTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUNedmpxFPPjkrxulVUMPqOk/wh5DsyqoDpDkBcDBMkGJh60GkD+lOMlvPmPr gr2sOUDMxK1c09Vqpvpc4YSVbaJqkp7aW2ebaViyETz7fQ5ZonkUBJ9ohsOTo527 yGF2JiWliVSY48JODI2iFH+8UrjGPAph3KxarA/aeUgHeCRh4nIXFJa1M3LDRDrm fGvppBsyUFJwtXfDK9rwQQxhkFolsFt2I2iaHhZ0Z2jyMithhpY+NZrUihZ+hI4D ProX6BIwUoL8uvz3TIdRy8Z8Rj2B4uuRfkCjiXbJ3MSNNtdlzoim1cr6s/M0Ty8a EgUAlA25m9LHxxO/0GuNz6O7ag== -----END CERTIFICATE-----Generated at Tue Jul 28 18:22:49 2026 by rpki-client