$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json) Hash identifier: byyO95Pp+q3G5euqtEwUa+hP1ph/u5gJZlxT5/+ZXKw= Subject key identifier: 15:5A:E7:74:75:47:90:E6:77:AE:ED:4E:ED:24:D8:D0:C7:A9:38:A4 Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft Manifest number: 1A66 Signing time: Wed 29 Jul 2026 09:05:06 +0000 Manifest this update: Wed 29 Jul 2026 09:05:06 +0000 Manifest next update: Wed 05 Aug 2026 09:05:06 +0000 Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: KJB0CLNiN/H4jQtoehvbEqZSJvAGtqljX9Dxhh6T0nI=) 2: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: 4taf7ltYE6M7p58XiP5zUTTzb89QrcQbwrr0YABbhPc=) 3: E7729178378211EF822BAA6EC4F9AE02.roa (hash: kWi4j9Wig93ekWVxphoEylI+bhEAyZFHwi2cC9HjPZU=) 4: 932C5CF28B2C11F1938379423E11F970.roa (hash: 6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=) 5: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (hash: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM=) 6: CB355B666EA911F1979A4FB45FA30FBC.roa (hash: EFHnA2af/j04RagH4w+3B1hjPaj4axNV+Q60XLb7eWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 08:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6810 (0x1a9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jul 29 09:05:06 2026 GMT Not After : Aug 5 09:05:06 2026 GMT Subject: CN=6a69c242-9d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:a7:0e:92:03:74:b3:08:f1:b8:9c:80:49: 34:e0:ca:3b:68:40:5d:8e:d9:d8:bf:f9:fe:28:ec: 94:37:eb:db:e4:8f:7d:b3:02:80:e0:be:c6:2e:63: 35:39:f7:55:e1:26:68:eb:25:78:05:b1:f7:d0:87: 2f:ff:71:b3:b8:9a:01:c2:b2:eb:20:cc:17:2c:2f: 30:c9:09:6b:f5:90:70:9c:9f:d5:f5:2d:6a:05:05: 68:7d:4b:ee:a2:e1:d8:2d:40:be:ad:6a:72:51:9c: 52:bb:54:1d:dd:52:a3:af:a4:86:fa:27:48:fe:58: 63:01:42:a0:9c:95:a7:b5:b8:db:13:a3:c4:c8:4c: 74:a5:23:df:3e:0d:ba:07:f1:00:bf:68:c3:d3:f1: 49:22:02:97:b3:cb:8f:ce:62:98:f5:d5:27:ad:e2: 7a:75:5d:6d:c2:6b:de:ed:fb:ce:e8:a7:13:bd:1c: 12:5a:dd:d5:a7:34:7d:01:fb:90:83:15:c6:13:79: c1:cf:67:0e:68:c6:31:51:2b:8a:57:b5:7a:37:3f: 93:9e:be:11:62:00:6a:82:ee:7c:1b:f9:b5:31:63: c7:a1:8f:3a:23:f8:55:60:90:42:4c:bd:3b:81:ae: 75:58:b1:c6:f2:56:c2:4b:f0:3b:87:b9:79:45:7d: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:E7:74:75:47:90:E6:77:AE:ED:4E:ED:24:D8:D0:C7:A9:38:A4 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f7:ba:19:32:35:f6:14:68:54:98:1f:d7:41:05:4f:ff:6e: 48:be:96:e7:92:5b:b0:00:20:4c:dc:09:f0:a3:f6:10:3f:36: e0:58:a1:db:61:8e:3d:da:b8:47:e9:ca:76:6b:c7:b4:dc:e9: a8:fa:86:07:92:89:d3:ee:57:1d:e1:e2:3b:5e:8c:fa:b8:2d: d1:91:2d:e9:f2:95:de:c2:33:0c:30:66:a8:d4:03:11:ad:44: 3d:04:1d:92:2a:f7:dd:c1:6b:7e:80:02:69:7c:4c:fe:e5:b1: 93:0b:76:3f:f2:a1:83:79:4b:a6:9f:43:26:e2:4a:bb:46:c2: bf:86:2b:08:90:b9:d4:74:77:12:6e:3b:44:61:d7:43:7e:4e: 3a:f6:40:0f:95:6c:f5:98:b5:e0:ff:74:78:bf:7c:ee:eb:81: 46:85:2a:11:4a:e0:c1:50:5f:d9:1e:8e:28:47:50:16:cd:00: f1:14:0f:2c:d7:7d:fd:f0:cc:55:09:52:3d:0d:ea:d3:06:b9: 3b:51:2a:cd:99:24:85:af:c0:e6:16:28:be:40:e4:6e:91:30: fb:77:d3:ad:09:50:eb:9a:48:b0:6b:fe:8e:bc:6b:65:4f:cd: 85:0b:53:f0:6d:cd:9a:6f:0c:af:17:14:c5:5b:b0:42:69:8a: c5:1c:1d:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNzI5MDkwNTA2WhcNMjYwODA1MDkwNTA2WjAYMRYwFAYD VQQDEw02YTY5YzI0Mi05ZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOKnDpIDdLMI8bicgEk04Mo7aEBdjtnYv/n+KOyUN+vb5I99swKA4L7GLmM1 OfdV4SZo6yV4BbH30Icv/3GzuJoBwrLrIMwXLC8wyQlr9ZBwnJ/V9S1qBQVofUvu ouHYLUC+rWpyUZxSu1Qd3VKjr6SG+idI/lhjAUKgnJWntbjbE6PEyEx0pSPfPg26 B/EAv2jD0/FJIgKXs8uPzmKY9dUnreJ6dV1twmve7fvO6KcTvRwSWt3VpzR9AfuQ gxXGE3nBz2cOaMYxUSuKV7V6Nz+Tnr4RYgBqgu58G/m1MWPHoY86I/hVYJBCTL07 ga51WLHG8lbCS/A7h7l5RX3RgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVa53R1 R5Dmd67tTu0k2NDHqTikMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85M0JCNTAyRTZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFr U29jUVpMWkFldDVKUG1PbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg/e6GTI19hRoVJgf10EFT/9uSL6W55JbsAAgTNwJ8KP2ED824Fih22GOPdq4 R+nKdmvHtNzpqPqGB5KJ0+5XHeHiO16M+rgt0ZEt6fKV3sIzDDBmqNQDEa1EPQQd kir33cFrfoACaXxM/uWxkwt2P/Khg3lLpp9DJuJKu0bCv4YrCJC51HR3Em47RGHX Q35OOvZAD5Vs9Zi14P90eL987uuBRoUqEUrgwVBf2R6OKEdQFs0A8RQPLNd9/fDM VQlSPQ3q0wa5O1EqzZkkha/A5hYovkDkbpEw+3fTrQlQ65pIsGv+jrxrZU/NhQtT 8G3Nmm8MrxcUxVuwQmmKxRwdOw== -----END CERTIFICATE-----Generated at Wed Jul 29 10:56:46 2026 by rpki-client