$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft File: KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json) Hash identifier: lRFLhKk4RM8sdsrOfD6Esd29rCLWPjEiuT8JCC4+8qs= Subject key identifier: 89:BA:E9:9C:1D:D0:E7:31:3A:AB:E1:63:81:E9:34:BA:2E:76:FA:D8 Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D Certificate issuer: /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft Manifest number: 33 Signing time: Mon 27 Jul 2026 11:00:25 +0000 Manifest this update: Mon 27 Jul 2026 11:00:25 +0000 Manifest next update: Mon 03 Aug 2026 11:00:25 +0000 Files and hashes: 1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: dOyqCEZ6KtbcTEpQ0BJW0tNvULc3woLuY08zfAfeB/s=) 2: 80748E243E2C11F19772AA47B7833773.roa (hash: dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D Validity Not Before: Jul 27 11:00:25 2026 GMT Not After : Aug 3 11:00:25 2026 GMT Subject: CN=6a673a49-78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:59:3e:d6:14:4d:aa:8b:c2:09:f4:fe:e4: 33:3e:50:16:f1:05:9a:85:f8:6d:02:ce:69:76:14: 96:79:de:1b:aa:a0:e4:16:8b:fd:8a:e6:d3:12:e0: b6:d6:a8:4d:35:8d:fc:fe:57:41:37:3a:cc:1a:8e: a2:5b:3d:6b:2b:48:b9:7a:69:4f:9c:b4:c5:47:95: 0e:20:29:86:95:22:bb:9b:d7:6f:21:4a:95:35:06: 78:22:24:6a:6d:db:d5:55:00:e0:b9:db:6d:4e:61: 54:0a:fa:12:05:a8:08:6a:63:05:70:8d:e1:f3:1a: 66:1c:e1:dd:a8:14:8d:29:55:10:24:b6:38:5e:d5: 52:4c:63:16:c3:18:37:e3:64:49:49:9c:3c:23:fc: cb:d4:8a:28:81:95:dc:d6:60:2a:46:90:ff:67:69: 58:31:41:d3:a3:a4:3e:c8:10:67:b2:e9:9b:3a:9f: 62:43:ec:e1:e4:c9:69:93:d2:34:82:1f:1d:dd:8e: c1:10:8c:97:8e:d6:32:4f:01:39:34:ec:79:5b:8c: 38:da:2b:00:5b:61:77:8a:b1:74:94:70:ff:b0:91: 5d:d7:43:1e:e1:db:ee:17:c1:62:8e:48:59:1e:d4: 22:01:a8:50:2e:be:44:35:81:3f:c0:de:16:84:fe: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:E9:9C:1D:D0:E7:31:3A:AB:E1:63:81:E9:34:BA:2E:76:FA:D8 X509v3 Authority Key Identifier: keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:2a:14:76:a1:b6:f9:c2:bd:06:d3:5b:e7:0e:26:d6:2d: c6:17:8a:e2:b8:f3:e5:51:f1:54:c7:e9:c9:63:36:20:7f:56: ba:30:9a:02:ef:a4:2f:1a:fd:73:99:49:45:60:6e:34:49:b7: 5d:2b:d9:79:17:70:05:ff:dc:dd:d1:63:30:5c:f9:2f:90:f2: 04:dd:8b:48:a8:30:42:33:61:d2:fb:e9:df:1e:1c:4c:4f:22: cb:01:4d:b3:ae:d6:21:28:4e:6e:c2:dd:e3:e9:7f:e7:58:0d: 93:9d:fa:34:c9:76:b5:16:d7:8d:1f:0e:61:81:34:6b:49:f3: 02:05:b5:25:24:95:79:66:4e:0a:e3:e8:8e:13:8a:c8:2a:30: 74:79:04:28:1b:65:ff:08:8b:00:a6:46:e3:d5:53:b7:09:77: 46:8d:55:2d:0f:01:4a:10:ee:db:03:f7:73:7d:c1:c3:57:a4: 3b:7e:50:43:5e:34:41:2b:bd:ac:83:c9:94:5f:e8:37:c8:02: 5c:ed:9c:f9:fc:f9:45:eb:c8:04:73:c7:f0:b5:89:e1:21:00: 74:c4:13:ec:f9:03:4d:d8:4f:c0:94:ef:79:1f:bf:1a:4b:e5: 27:66:7e:bc:6d:a0:8d:6f:8e:5d:d7:0c:41:7a:39:2f:d8:d3: 50:f1:ab:dc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTA5NTExMC8GA1UEBRMoMjk0QUY5QTREMEVEOTZCNjM5Mjk1QzU4NzNEQ0ZFMjg5 RjI3QTM2RDAeFw0yNjA3MjcxMTAwMjVaFw0yNjA4MDMxMTAwMjVaMBgxFjAUBgNV BAMTDTZhNjczYTQ5LTc4ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDyVk+1hRNqovCCfT+5DM+UBbxBZqF+G0Czml2FJZ53huqoOQWi/2K5tMS4LbW qE01jfz+V0E3OswajqJbPWsrSLl6aU+ctMVHlQ4gKYaVIrub128hSpU1BngiJGpt 29VVAOC5221OYVQK+hIFqAhqYwVwjeHzGmYc4d2oFI0pVRAktjhe1VJMYxbDGDfj ZElJnDwj/MvUiiiBldzWYCpGkP9naVgxQdOjpD7IEGey6Zs6n2JD7OHkyWmT0jSC Hx3djsEQjJeO1jJPATk07HlbjDjaKwBbYXeKsXSUcP+wkV3XQx7h2+4XwWKOSFke 1CIBqFAuvkQ1gT/A3haE/tG3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUibrpnB3Q 5zE6q+Fjgek0ui52+tgwHwYDVR0jBBgwFoAUKUr5pNDtlrY5KVxYc9z+KJ8no20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MDk1LzZCQTZGMTE2M0Uy ODExRjFCOEY4RkVBNUI1ODMzNzczL0tVcjVwTkR0bHJZNUtWeFljOXotS0o4bm8y MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1VyNXBORHRsclk1S1Z4WWM5ei1LSjhubzIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 MDk1LzZCQTZGMTE2M0UyODExRjFCOEY4RkVBNUI1ODMzNzczL0tVcjVwTkR0bHJZ NUtWeFljOXotS0o4bm8yMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBERioUdqG2+cK9BtNb5w4m1i3GF4riuPPlUfFUx+nJYzYgf1a6MJoC76QvGv1z mUlFYG40SbddK9l5F3AF/9zd0WMwXPkvkPIE3YtIqDBCM2HS++nfHhxMTyLLAU2z rtYhKE5uwt3j6X/nWA2Tnfo0yXa1FteNHw5hgTRrSfMCBbUlJJV5Zk4K4+iOE4rI KjB0eQQoG2X/CIsApkbj1VO3CXdGjVUtDwFKEO7bA/dzfcHDV6Q7flBDXjRBK72s g8mUX+g3yAJc7Zz5/PlF68gEc8fwtYnhIQB0xBPs+QNN2E/AlO95H78aS+UnZn68 baCNb45d1wxBejkv2NNQ8avc -----END CERTIFICATE-----Generated at Wed Jul 29 04:01:19 2026 by rpki-client