$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: I7fFZ3DB/lx21CiiChUv7DN5BGGCCbEDhmOfumsuNG4= Subject key identifier: 0F:45:33:B5:3F:FC:BC:F2:F3:04:A8:C1:EA:0D:D1:51:95:21:0D:50 Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 01DD Signing time: Mon 27 Jul 2026 05:06:56 +0000 Manifest this update: Mon 27 Jul 2026 05:06:55 +0000 Manifest next update: Mon 03 Aug 2026 05:06:55 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: peDhW6VgWkGTIS9s+TZCBzv2t8AU61r36Hh1gkUotrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Jul 27 05:06:55 2026 GMT Not After : Aug 3 05:06:55 2026 GMT Subject: CN=6a66e76f-246e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:71:a8:6e:21:95:f2:4f:78:64:ce:ea:48: b1:cf:df:1d:a1:e4:25:10:05:15:fb:fc:c4:bd:d1: 2a:fd:8d:df:f8:2d:f6:a5:9b:c1:85:ab:ab:f2:29: 2b:19:57:c6:d2:82:16:ab:67:68:33:88:e6:4b:57: 9f:73:69:35:b3:f1:89:00:01:1d:a8:5d:14:9c:4b: 84:9d:05:df:8e:2f:c6:53:dc:49:98:e5:8a:bd:8c: 39:69:6a:1a:1f:db:45:25:f0:1e:91:6c:b0:63:af: a3:fd:93:2d:a2:9f:08:15:9c:16:f3:83:9a:91:76: 81:38:9e:3d:70:5e:75:89:ac:01:0c:bc:2b:5c:77: 59:71:11:d7:fa:aa:23:a1:5b:fe:3d:20:f1:fe:81: 63:11:3a:7e:34:d1:25:b7:e0:19:90:7e:f2:ac:44: fa:18:37:0e:ee:0a:d2:be:0c:f8:b6:ab:69:91:b9: c8:71:bf:7f:60:b5:7a:c5:ae:13:27:eb:3d:77:71: e0:cf:1d:f0:60:63:df:c4:73:7b:af:62:0a:a5:b9: ea:18:5b:f2:1d:38:4f:52:47:e4:47:6a:e6:8d:74: af:63:17:d4:9a:7d:60:31:62:05:b7:1a:56:5a:5d: a3:e3:ba:f9:ee:cd:0e:10:ff:20:24:e0:e0:51:3d: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:45:33:B5:3F:FC:BC:F2:F3:04:A8:C1:EA:0D:D1:51:95:21:0D:50 X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:e1:73:1e:0c:64:4f:c8:14:dd:37:15:c4:49:ef:28:ac: 61:55:e5:c3:fd:e8:eb:b0:a6:75:db:0e:24:cd:fc:76:b0:43: d5:28:e2:82:e9:77:7b:15:29:09:72:ff:07:88:1c:8e:fd:78: 37:58:54:60:13:30:a9:28:69:50:66:36:df:b3:13:0a:e4:fe: ed:58:2a:b4:1c:d5:aa:de:9f:37:03:8d:09:6a:93:bd:20:53: 2a:cc:c3:75:7d:da:2d:c1:cd:6f:c4:af:ae:a6:55:e9:25:0a: 8f:eb:ed:7b:0d:4a:1b:04:fe:7f:78:e9:dc:c4:d7:1f:16:b9: c9:cb:65:35:f3:81:8a:8c:27:6e:1e:50:52:32:d8:ed:17:15: 89:d8:9e:ad:92:49:7e:dc:f9:18:fe:7e:10:e0:27:ec:ed:4f: b4:ed:f0:4e:3d:bf:a8:97:6d:df:6e:df:8e:49:37:b0:68:42: ca:2b:cd:7c:73:a4:33:4a:5a:8f:46:27:7f:1a:ff:c1:98:0e: 26:95:3b:0d:34:e0:36:27:be:ac:2b:1f:c9:18:8b:1c:b2:c0: 62:b9:02:5c:e6:9a:50:1e:53:9f:02:69:c3:5b:ff:ec:8b:1b: c2:4f:4e:8e:95:24:54:52:59:01:ec:bf:43:0c:f6:24:df:4a: 8f:2a:35:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjYwNzI3MDUwNjU1WhcNMjYwODAzMDUwNjU1WjAYMRYwFAYD VQQDEw02YTY2ZTc2Zi0yNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtapxqG4hlfJPeGTO6kixz98doeQlEAUV+/zEvdEq/Y3f+C32pZvBhaur8ikr GVfG0oIWq2doM4jmS1efc2k1s/GJAAEdqF0UnEuEnQXfji/GU9xJmOWKvYw5aWoa H9tFJfAekWywY6+j/ZMtop8IFZwW84OakXaBOJ49cF51iawBDLwrXHdZcRHX+qoj oVv+PSDx/oFjETp+NNElt+AZkH7yrET6GDcO7grSvgz4tqtpkbnIcb9/YLV6xa4T J+s9d3Hgzx3wYGPfxHN7r2IKpbnqGFvyHThPUkfkR2rmjXSvYxfUmn1gMWIFtxpW Wl2j47r57s0OEP8gJODgUT3HZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9FM7U/ /Lzy8wSoweoN0VGVIQ1QMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaa7hcx4MZE/IFN03FcRJ7yisYVXlw/3o67CmddsOJM38drBD1Sjigul3exUp CXL/B4gcjv14N1hUYBMwqShpUGY237MTCuT+7VgqtBzVqt6fNwONCWqTvSBTKszD dX3aLcHNb8SvrqZV6SUKj+vtew1KGwT+f3jp3MTXHxa5yctlNfOBiownbh5QUjLY 7RcVidierZJJftz5GP5+EOAn7O1PtO3wTj2/qJdt327fjkk3sGhCyivNfHOkM0pa j0Ynfxr/wZgOJpU7DTTgNie+rCsfyRiLHLLAYrkCXOaaUB5TnwJpw1v/7Isbwk9O jpUkVFJZAey/Qwz2JN9Kjyo1FA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:05:44 2026 by rpki-client