$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: h7iZdvz5g+8CRrfdNj4kpz+KNLwbqg2l6N5OTjvOJ1g= Subject key identifier: 08:A5:AB:79:B8:E2:D6:EF:98:23:C3:48:29:89:8F:10:20:CA:5C:48 Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 3A75 Signing time: Tue 28 Jul 2026 14:37:50 +0000 Manifest this update: Tue 28 Jul 2026 14:37:49 +0000 Manifest next update: Tue 04 Aug 2026 14:37:49 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: Uq6Y3cixuIz4po4FEiZ+lOhxMDZWEeQM9OIjWVfNYu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Jul 28 14:37:49 2026 GMT Not After : Aug 4 14:37:49 2026 GMT Subject: CN=6a68bebe-9036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:3f:ac:c1:a7:38:37:6a:09:da:71:2a:41: 6c:8e:be:94:de:7a:95:11:dc:c8:52:a7:03:a6:0b: d0:11:c4:39:62:ce:0d:d1:c0:cf:e7:0f:91:39:1e: 76:b9:f7:b2:e7:da:70:46:0d:f9:e4:14:08:ba:fd: 82:35:eb:83:2d:ae:53:a1:7b:e3:82:13:47:28:ba: 52:f5:96:30:22:e5:f7:8e:cd:6b:f8:4c:46:df:90: 02:5f:3e:66:f4:99:bb:99:75:7f:45:4b:97:ac:3d: 9f:64:4d:a9:54:5c:84:28:9b:62:a2:9e:b0:96:65: 39:a9:a2:af:bf:3e:dd:be:18:72:00:a7:da:05:4f: d1:79:06:ca:30:c4:51:96:27:7f:cb:e9:6c:8a:66: f6:bb:b3:1a:bc:7a:a6:99:11:73:57:90:6a:f4:e8: 4e:88:1d:2e:39:6f:f8:fb:7b:3b:7c:70:ec:7f:d6: 7a:2c:4d:73:07:be:aa:81:04:50:e2:b7:20:0c:99: 49:78:af:8b:c0:5d:7b:eb:6f:cc:40:ef:98:85:9c: 5e:28:ff:45:91:60:da:83:24:d5:9c:56:ed:4b:4c: 1f:3a:1a:73:47:ce:46:cd:95:82:4a:e8:cf:52:f5: ae:18:de:0e:f1:73:34:4d:96:68:f2:9b:67:4f:f2: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:AB:79:B8:E2:D6:EF:98:23:C3:48:29:89:8F:10:20:CA:5C:48 X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4a:85:29:8b:4c:a9:3a:63:9e:77:0b:c7:b3:27:d5:62:86: dc:58:49:65:59:fc:ce:42:7e:47:f7:ba:78:23:ea:1b:a5:bf: 52:54:06:24:d6:f7:71:90:45:be:cc:a5:0a:f1:76:14:7b:e0: fe:84:c8:17:be:f4:7a:8e:bb:6b:5f:bc:59:83:db:0a:32:0e: 4a:18:5f:b6:d5:ff:37:eb:d4:9f:80:06:b7:0a:a8:47:24:da: e8:fd:bd:b6:49:da:5f:cc:28:b7:46:c3:8e:25:3e:9b:55:54: b2:64:ee:17:e4:a9:1c:86:4e:a4:6c:bf:d6:ea:23:89:51:5b: ab:a1:39:29:33:ba:a0:6b:45:3d:8e:ea:d6:4b:b1:15:09:5f: 61:d5:c2:33:7a:a2:41:07:73:1b:12:64:be:7f:04:ed:47:19: d2:83:5e:f1:7d:3b:36:fa:91:0d:ab:22:6d:45:3f:80:fd:6d: 98:d4:09:c9:93:7e:94:14:ab:35:cc:b1:19:09:e1:59:b9:92: d0:0f:7a:d4:61:12:b9:9e:15:10:60:2a:3c:c1:f3:fc:51:60: 31:9c:04:d8:fb:df:e0:ae:cc:61:29:17:2f:91:32:29:c9:ea: e9:b1:62:ea:7a:96:d2:5e:84:11:44:68:6e:e6:b6:9b:5a:0a: 0c:71:22:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjYwNzI4MTQzNzQ5WhcNMjYwODA0MTQzNzQ5WjAYMRYwFAYD VQQDEw02YTY4YmViZS05MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk0/rMGnODdqCdpxKkFsjr6U3nqVEdzIUqcDpgvQEcQ5Ys4N0cDP5w+ROR52 ufey59pwRg355BQIuv2CNeuDLa5ToXvjghNHKLpS9ZYwIuX3js1r+ExG35ACXz5m 9Jm7mXV/RUuXrD2fZE2pVFyEKJtiop6wlmU5qaKvvz7dvhhyAKfaBU/ReQbKMMRR lid/y+lsimb2u7MavHqmmRFzV5Bq9OhOiB0uOW/4+3s7fHDsf9Z6LE1zB76qgQRQ 4rcgDJlJeK+LwF1762/MQO+YhZxeKP9FkWDagyTVnFbtS0wfOhpzR85GzZWCSujP UvWuGN4O8XM0TZZo8ptnT/IskQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAilq3m4 4tbvmCPDSCmJjxAgylxIMB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI0qFKYtMqTpjnncLx7Mn1WKG3FhJZVn8zkJ+R/e6eCPqG6W/UlQGJNb3cZBF vsylCvF2FHvg/oTIF770eo67a1+8WYPbCjIOShhfttX/N+vUn4AGtwqoRyTa6P29 tknaX8wot0bDjiU+m1VUsmTuF+SpHIZOpGy/1uojiVFbq6E5KTO6oGtFPY7q1kux FQlfYdXCM3qiQQdzGxJkvn8E7UcZ0oNe8X07NvqRDasibUU/gP1tmNQJyZN+lBSr NcyxGQnhWbmS0A961GESuZ4VEGAqPMHz/FFgMZwE2Pvf4K7MYSkXL5EyKcnq6bFi 6nqW0l6EEURobua2m1oKDHEitA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:11 2026 by rpki-client