$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft File: kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json) Hash identifier: edSFY4EiJHicTT33kiq7WFhoRaHZFg8XhzEjmM08iUc= Subject key identifier: 73:25:03:B4:33:3B:B7:AB:66:A8:05:B1:F0:BF:2B:ED:50:F7:AD:23 Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A Certificate issuer: /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft Manifest number: 0CD7 Signing time: Sun 26 Jul 2026 18:48:31 +0000 Manifest this update: Sun 26 Jul 2026 18:48:30 +0000 Manifest next update: Sun 02 Aug 2026 18:48:30 +0000 Files and hashes: 1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: /kE7dutCWUEGPMxsjbNZw5HQ2WC2jYyqzGB1fXakfps=) 2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: 8Kzq8ge3wSUVu+VYpnFOyTT3NcPx0P4ByioHfNwqHSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Validity Not Before: Jul 26 18:48:30 2026 GMT Not After : Aug 2 18:48:30 2026 GMT Subject: CN=6a66567e-9f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:ca:84:c7:c1:83:57:e9:25:b6:c7:65:a7: 37:d1:a1:2a:e3:d1:9b:40:17:ec:58:23:c9:b5:41: 12:40:d0:2d:15:4d:6d:73:5a:51:37:43:d3:55:22: ff:1e:2a:c9:1e:65:e2:a8:51:4d:96:78:a4:8f:40: ec:63:65:e0:6e:0d:db:e4:1c:55:7d:f4:48:5f:37: 36:b8:06:45:26:94:59:a4:00:f2:72:e7:61:fe:47: 76:b5:2c:33:c3:71:8c:ef:3a:80:d6:11:24:7b:e7: ca:94:d2:09:f9:7b:45:89:b2:ac:0e:ad:ef:a3:54: aa:36:5f:36:d2:09:64:4b:99:46:b8:2d:f9:74:b8: bf:73:f5:7d:9a:5f:54:84:f6:9e:b5:d0:7c:2c:11: 31:3e:eb:61:f1:0d:c1:99:02:27:ee:3e:38:24:2f: 59:33:6b:20:38:2a:05:02:c0:c0:5d:40:fb:f7:8b: e8:85:f2:01:39:7e:f8:e6:8f:3d:5c:a3:71:5f:d1: db:23:15:59:b0:cb:02:c2:6a:c3:0d:9e:2c:1b:99: ca:86:53:ac:36:80:23:c7:7e:28:18:95:db:21:d9: 07:c2:13:67:b7:03:78:43:14:e3:bd:77:66:06:79: 92:e1:b0:ff:1d:19:3c:82:a7:29:01:86:21:dc:63: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:25:03:B4:33:3B:B7:AB:66:A8:05:B1:F0:BF:2B:ED:50:F7:AD:23 X509v3 Authority Key Identifier: keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f3:42:a0:b1:4a:cb:e9:40:d6:09:63:19:9b:69:d4:7b:60: 68:47:91:8b:99:5f:6f:1c:b0:d8:f1:3e:bc:f3:be:ae:98:72: 6a:16:b3:19:f8:e5:19:5c:54:de:9b:b6:04:cb:78:9a:31:ba: 52:98:3f:98:fb:77:19:91:cb:52:4a:17:46:7b:e2:2b:c7:ae: d8:17:19:6c:a6:ab:96:86:9e:4d:7e:54:28:10:53:31:cd:f4: c3:5f:03:04:39:74:c5:d1:60:e4:04:36:5c:a2:18:ba:bc:dc: 83:0c:5a:2b:16:7f:a0:fd:9d:b6:e5:7a:ac:8f:f0:e6:d9:65: 6a:38:52:f3:54:fb:9f:f0:ea:37:74:4e:df:fe:22:52:92:c0: 9f:e2:54:e5:2c:4f:d0:d2:ad:1a:c5:25:ce:b0:54:f9:53:07: e4:ba:0b:ef:6c:2f:0e:b3:5c:06:16:c9:c1:ca:4d:de:0a:12: de:41:4f:59:4b:7b:36:25:46:c1:db:81:ed:1b:53:c1:29:28: 70:fa:0d:37:11:1e:af:1b:d4:c8:9c:d1:cc:d5:94:18:6f:cf: 73:b6:5b:80:f9:b0:eb:5d:5b:da:e0:b2:75:e8:76:7c:7d:af: a9:8e:5f:0b:89:96:b4:4b:01:61:0b:e9:44:ca:33:a4:31:9c: 4f:50:86:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwREUxMTAvBgNVBAUTKDkzM0M0Q0Q2RDg0MzVDMEY4QkUyRjUyMzQ3MjZENjYx MEY3RURBM0EwHhcNMjYwNzI2MTg0ODMwWhcNMjYwODAyMTg0ODMwWjAYMRYwFAYD VQQDEw02YTY2NTY3ZS05Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhcbKhMfBg1fpJbbHZac30aEq49GbQBfsWCPJtUESQNAtFU1tc1pRN0PTVSL/ HirJHmXiqFFNlnikj0DsY2Xgbg3b5BxVffRIXzc2uAZFJpRZpADycudh/kd2tSwz w3GM7zqA1hEke+fKlNIJ+XtFibKsDq3vo1SqNl820glkS5lGuC35dLi/c/V9ml9U hPaetdB8LBExPuth8Q3BmQIn7j44JC9ZM2sgOCoFAsDAXUD794vohfIBOX745o89 XKNxX9HbIxVZsMsCwmrDDZ4sG5nKhlOsNoAjx34oGJXbIdkHwhNntwN4QxTjvXdm BnmS4bD/HRk8gqcpAYYh3GOjawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMlA7Qz O7erZqgFsfC/K+1Q960jMB8GA1UdIwQYMBaAFJM8TNbYQ1wPi+L1I0cm1mEPfto6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBERS9EQTQ1RDQzMDE1 MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhBLUw0dlVqUnliV1lROS0y am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6eE0xdGhEWEEtTDR2VWpSeWJXWVE5LTJqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBERS9EQTQ1RDQzMDE1MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhB LUw0dlVqUnliV1lROS0yam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmfNCoLFKy+lA1gljGZtp1HtgaEeRi5lfbxyw2PE+vPO+rphyahazGfjlGVxU 3pu2BMt4mjG6Upg/mPt3GZHLUkoXRnviK8eu2BcZbKarloaeTX5UKBBTMc30w18D BDl0xdFg5AQ2XKIYurzcgwxaKxZ/oP2dtuV6rI/w5tllajhS81T7n/DqN3RO3/4i UpLAn+JU5SxP0NKtGsUlzrBU+VMH5LoL72wvDrNcBhbJwcpN3goS3kFPWUt7NiVG wduB7RtTwSkocPoNNxEerxvUyJzRzNWUGG/Pc7ZbgPmw611b2uCydeh2fH2vqY5f C4mWtEsBYQvpRMozpDGcT1CGdg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:26 2026 by rpki-client