$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: YdQoCihaF2IrLJMEE/PhRBuGxvFNxfIbvJmZrDzUb0U= Subject key identifier: 10:B8:E8:C5:D1:44:BE:3C:DF:C1:A9:E5:68:15:AB:DF:1B:A8:04:0E Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 0999 Signing time: Tue 28 Jul 2026 20:20:21 +0000 Manifest this update: Tue 28 Jul 2026 20:20:20 +0000 Manifest next update: Tue 04 Aug 2026 20:20:20 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: CrTa3L96JCf619YECJxlBhGnFzlk/h+HNaWMVUHNd9w=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Jul 28 20:20:20 2026 GMT Not After : Aug 4 20:20:20 2026 GMT Subject: CN=6a690f05-a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:e8:27:bc:ab:87:e1:38:42:f7:be:db:07: 63:5c:5e:0c:8c:28:77:ae:19:0b:df:d0:8b:75:d5: 7e:dd:a7:eb:07:60:43:dd:c5:f8:7b:26:7d:c5:82: 1e:7c:64:97:a2:4e:36:1e:d7:a0:04:27:d7:f1:4a: 1b:24:01:ef:e7:e7:14:e1:8d:f4:0c:36:ff:07:cd: b1:bc:07:3c:4f:25:99:8a:46:20:57:18:07:e8:d5: 31:63:0c:78:7a:9f:ed:be:74:cc:47:f2:71:04:65: 40:63:c2:fc:2b:a3:7e:1b:8f:ed:39:26:f7:bf:81: 3a:5f:10:11:2f:81:95:34:99:fd:0f:83:0a:e1:97: 0b:2e:64:cf:4c:03:22:88:94:34:56:4d:f5:75:fe: 21:d0:11:ba:cf:12:b0:c2:69:cc:6a:3a:4e:a6:49: 1c:3d:9f:eb:b8:7a:d2:49:0c:b0:e2:20:d4:e7:47: 4e:45:20:93:86:b9:e1:d4:a9:5d:b7:54:b5:8a:ff: 1d:6b:51:ea:30:05:c6:74:47:1e:b5:9d:f0:24:07: 53:2a:d0:ed:b9:7b:42:5e:e4:e8:cc:a9:e9:7c:e2: 8d:94:b9:f3:25:eb:a6:7a:0f:dc:01:f4:d7:08:51: c3:a6:b6:2a:fc:22:93:c0:51:bc:1b:cc:12:d0:b2: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B8:E8:C5:D1:44:BE:3C:DF:C1:A9:E5:68:15:AB:DF:1B:A8:04:0E X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6b:f5:dc:1f:25:68:c5:03:c9:15:24:ac:9c:e8:ed:46:50: b6:2c:77:b8:f8:32:1c:b0:7f:6c:14:8b:e7:9a:9f:77:f2:a6: e5:57:a3:2a:6b:58:43:a2:49:8e:1d:13:e6:c6:d0:84:d6:0d: 5b:30:e2:82:64:7e:c6:ae:6e:38:e2:22:fb:fd:a8:12:9f:4a: 8b:c1:33:68:76:9b:72:19:48:e0:bb:c0:8c:8e:b7:1a:dd:17: dd:00:45:3a:bc:cc:be:7d:2a:99:8a:7c:45:43:c2:4a:ca:92: 83:1c:8d:ad:7f:41:f8:da:9f:15:18:97:d1:00:29:76:5b:63: 49:8c:b6:b2:6e:cd:4f:80:f8:48:ca:8c:db:35:68:3f:d6:77: 39:82:41:a8:51:fc:c6:14:92:87:54:1b:0d:9f:7a:28:8a:b7: ab:f5:e6:c4:f4:28:48:ce:b8:c9:9b:94:64:ac:5e:ff:ae:62: dc:5c:8d:ef:18:ee:1e:42:4d:db:73:41:f1:31:84:4d:d9:ca: b6:13:2d:7f:b2:88:93:7c:3b:8a:1d:8b:7d:ca:d1:2e:44:8a: 9c:7f:b7:e0:31:6e:e8:33:fe:1a:c8:cc:89:55:33:a7:c8:b3: 71:65:a9:15:ea:5a:e1:8e:82:b0:d3:49:55:ef:2e:96:2b:6a: 19:57:44:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjYwNzI4MjAyMDIwWhcNMjYwODA0MjAyMDIwWjAYMRYwFAYD VQQDEw02YTY5MGYwNS1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8foJ7yrh+E4Qve+2wdjXF4MjCh3rhkL39CLddV+3afrB2BD3cX4eyZ9xYIe fGSXok42HtegBCfX8UobJAHv5+cU4Y30DDb/B82xvAc8TyWZikYgVxgH6NUxYwx4 ep/tvnTMR/JxBGVAY8L8K6N+G4/tOSb3v4E6XxARL4GVNJn9D4MK4ZcLLmTPTAMi iJQ0Vk31df4h0BG6zxKwwmnMajpOpkkcPZ/ruHrSSQyw4iDU50dORSCThrnh1Kld t1S1iv8da1HqMAXGdEcetZ3wJAdTKtDtuXtCXuTozKnpfOKNlLnzJeumeg/cAfTX CFHDprYq/CKTwFG8G8wS0LKOCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC46MXR RL4838Gp5WgVq98bqAQOMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgGv13B8laMUDyRUkrJzo7UZQtix3uPgyHLB/bBSL55qfd/Km5VejKmtYQ6JJ jh0T5sbQhNYNWzDigmR+xq5uOOIi+/2oEp9Ki8EzaHabchlI4LvAjI63Gt0X3QBF OrzMvn0qmYp8RUPCSsqSgxyNrX9B+NqfFRiX0QApdltjSYy2sm7NT4D4SMqM2zVo P9Z3OYJBqFH8xhSSh1QbDZ96KIq3q/XmxPQoSM64yZuUZKxe/65i3FyN7xjuHkJN 23NB8TGETdnKthMtf7KIk3w7ih2LfcrRLkSKnH+34DFu6DP+GsjMiVUzp8izcWWp Fepa4Y6CsNNJVe8ulitqGVdEcA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:14 2026 by rpki-client