$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: n5FJSOG1jALWkrmfqYvxkpGGWFKdJMimzHavY6dk41A= Subject key identifier: CE:C6:3D:14:B7:8B:5D:6F:76:D4:D2:CE:1B:02:AE:4E:79:94:EE:92 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01C7 Signing time: Mon 27 Jul 2026 05:29:20 +0000 Manifest this update: Mon 27 Jul 2026 05:29:20 +0000 Manifest next update: Mon 03 Aug 2026 05:29:20 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: 8Qr9q+3rihstR2qP9PbsFANhTPZ56V+FsM5+5HrkqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Jul 27 05:29:20 2026 GMT Not After : Aug 3 05:29:20 2026 GMT Subject: CN=6a66ecb0-9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:21:5e:40:50:6f:e0:9a:cf:01:92:5f:d8: d5:10:84:b3:b4:91:47:46:1c:99:38:dd:7a:64:20: a7:d9:e2:eb:77:49:32:22:54:61:ac:ed:20:a6:e4: 89:59:f6:71:c5:35:50:a1:a1:7c:1a:31:d9:5b:5b: b4:9f:fa:60:2f:c0:03:c6:8e:bc:4c:f7:ce:1a:fa: 2d:40:6e:5b:33:9a:fa:62:9a:99:55:54:80:47:d7: 45:ae:b5:0d:33:50:bd:80:bd:67:cf:3c:75:9a:90: c6:71:c0:95:54:c6:37:84:fa:89:7b:f8:6b:e7:b7: 54:0d:57:3b:2c:e4:e5:df:5f:49:38:8a:1c:0e:56: 8b:a6:8b:bd:7a:2a:e0:97:cd:ee:f9:0c:3c:3f:dc: 97:ac:46:6d:ed:85:77:b8:d7:fd:f5:11:dd:75:9f: 2e:ee:3e:3c:0f:e2:52:b3:4d:21:87:3c:ed:7f:82: 8b:5c:c9:05:97:63:b9:97:7b:09:17:39:8f:cc:39: 2e:35:14:de:e3:14:1f:f7:a9:5d:a8:1f:6e:a4:93: cd:0a:dc:ae:a7:6e:ee:80:61:9f:c9:a3:d7:2f:dd: f5:07:7a:a3:d7:97:ea:11:a1:60:b5:3a:48:a9:ca: cb:eb:b0:18:ed:24:06:93:49:e4:10:41:10:f3:30: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C6:3D:14:B7:8B:5D:6F:76:D4:D2:CE:1B:02:AE:4E:79:94:EE:92 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ea:25:6a:b2:ee:df:60:a3:c1:38:90:0e:0c:3e:e3:0c:08: c8:71:f9:75:3b:fe:03:3e:bf:b0:06:6f:1f:53:9c:0d:4f:4a: 43:38:fe:01:04:c3:a7:d7:94:27:91:1f:fe:80:3d:0b:29:b6: e0:e0:95:70:60:e5:8b:43:03:6e:16:59:9c:af:78:dd:2a:bc: 1c:48:f8:89:2e:94:02:f7:99:41:dd:ab:21:e6:75:39:21:fa: 1e:09:de:8b:f0:1e:ae:a7:a1:75:20:ee:ed:c8:1d:47:64:78: 52:60:ce:40:37:7d:41:b8:4a:6c:8d:34:42:7f:f6:5d:f7:12: a4:1e:e3:11:f2:84:36:26:84:c8:a1:2a:72:fd:ec:00:18:85: 0a:31:f4:77:b4:c6:12:d1:dc:f0:4c:f0:01:b8:ee:f3:65:6f: fd:55:c9:51:66:65:f5:66:1a:aa:2c:87:ac:83:de:b4:cd:39: e4:20:5b:76:da:96:90:1d:14:e1:6a:c1:10:5e:ad:13:f4:e1: c0:7c:fe:63:fa:e3:d0:2f:8e:d4:af:70:4f:61:f7:06:1e:73: bf:33:8d:a9:a1:18:cd:17:3d:8f:75:96:26:18:70:d2:e6:d3: f2:43:15:f3:13:3c:c1:b3:e1:30:d1:5a:17:55:22:7b:fd:37: 63:87:c0:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwNzI3MDUyOTIwWhcNMjYwODAzMDUyOTIwWjAYMRYwFAYD VQQDEw02YTY2ZWNiMC05NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqwhXkBQb+CazwGSX9jVEISztJFHRhyZON16ZCCn2eLrd0kyIlRhrO0gpuSJ WfZxxTVQoaF8GjHZW1u0n/pgL8ADxo68TPfOGvotQG5bM5r6YpqZVVSAR9dFrrUN M1C9gL1nzzx1mpDGccCVVMY3hPqJe/hr57dUDVc7LOTl319JOIocDlaLpou9eirg l83u+Qw8P9yXrEZt7YV3uNf99RHddZ8u7j48D+JSs00hhzztf4KLXMkFl2O5l3sJ FzmPzDkuNRTe4xQf96ldqB9upJPNCtyup27ugGGfyaPXL931B3qj15fqEaFgtTpI qcrL67AY7SQGk0nkEEEQ8zBRywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7GPRS3 i11vdtTSzhsCrk55lO6SMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsuolarLu32CjwTiQDgw+4wwIyHH5dTv+Az6/sAZvH1OcDU9KQzj+AQTDp9eU J5Ef/oA9Cym24OCVcGDli0MDbhZZnK943Sq8HEj4iS6UAveZQd2rIeZ1OSH6Hgne i/AerqehdSDu7cgdR2R4UmDOQDd9QbhKbI00Qn/2XfcSpB7jEfKENiaEyKEqcv3s ABiFCjH0d7TGEtHc8EzwAbju82Vv/VXJUWZl9WYaqiyHrIPetM055CBbdtqWkB0U 4WrBEF6tE/ThwHz+Y/rj0C+O1K9wT2H3Bh5zvzONqaEYzRc9j3WWJhhw0ubT8kMV 8xM8wbPhMNFaF1Uie/03Y4fAVg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:28 2026 by rpki-client