$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json) Hash identifier: cknsgQCzVy7yZohbqFkEFZkm2T4B77eV0KDMMj4yMPU= Subject key identifier: 9D:50:83:3B:FD:5A:A4:1A:6E:2A:05:8B:42:A2:C6:0E:5B:63:78:0B Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft Manifest number: 0123 Signing time: Mon 27 Jul 2026 07:43:49 +0000 Manifest this update: Mon 27 Jul 2026 07:43:49 +0000 Manifest next update: Mon 03 Aug 2026 07:43:49 +0000 Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: lsBixa8jiOXKmrfs4DLLhosgAOagQrK6atx2OjogEUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Validity Not Before: Jul 27 07:43:49 2026 GMT Not After : Aug 3 07:43:49 2026 GMT Subject: CN=6a670c35-a400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:c2:d6:0d:91:d9:69:1b:75:a3:8b:d2:10: 71:8b:f6:e7:2e:4c:e3:9f:8d:00:d8:08:52:9b:47: db:37:4f:3d:ca:70:c2:c0:96:79:8b:f0:20:be:6d: 7d:ff:ce:88:0f:8f:89:8d:32:54:d0:88:b0:40:2a: ce:4d:1e:11:96:04:6a:e8:f2:d6:7f:e0:46:ef:b6: 8f:8b:b6:1f:0f:fd:db:a4:01:de:a1:9d:f7:e5:6e: ca:4b:69:4b:7f:28:e2:ed:23:80:96:07:5a:32:95: 01:b8:27:0b:ca:80:e0:6f:3f:ca:63:2f:0e:e8:44: 05:e8:1d:4d:31:ba:71:9f:7c:18:ce:6e:70:a4:70: 8f:21:05:2f:0d:cb:17:7e:7f:6f:98:e4:03:c7:c2: c9:41:18:04:d3:9f:c5:8e:8d:e4:5b:6f:29:d5:f2: c8:c1:df:b4:fc:96:a9:38:75:6b:b0:3f:d2:a8:9b: 02:6b:30:23:81:b8:c8:63:a7:fc:69:68:c6:22:b0: 3c:69:6f:7c:aa:31:d4:03:2d:04:46:6b:5b:f4:ef: c5:58:77:f1:38:8d:ea:4f:21:fc:8b:4c:6d:0b:d5: 12:3e:78:c1:6e:a2:c4:4f:8f:50:d5:b0:57:23:05: 69:3e:5d:4a:ed:29:85:83:15:c5:73:ed:d3:8a:bf: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:50:83:3B:FD:5A:A4:1A:6E:2A:05:8B:42:A2:C6:0E:5B:63:78:0B X509v3 Authority Key Identifier: keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ca:98:b0:82:d9:0a:1a:5a:ea:17:da:d4:81:e6:db:e9:59: 28:48:b9:46:a7:3d:95:2b:24:1e:1d:dd:10:11:b2:f1:38:22: 68:82:6b:4e:51:2c:30:d7:a7:52:99:78:5a:ac:ea:53:74:8e: e2:ce:22:d5:3f:09:09:0c:c5:69:c5:4d:8f:b8:32:da:af:83: b1:b8:17:aa:cb:58:c5:5c:71:9e:e3:e5:02:4f:01:cc:54:eb: 09:e2:1e:01:39:47:2c:75:a6:f8:e9:ca:64:f7:c0:d7:93:a6: 5c:6f:d2:21:4d:d2:b9:fb:52:c9:87:51:a8:8f:3c:ff:fb:cb: 00:9a:b9:f3:4a:7a:13:48:8d:70:99:87:fb:8f:ab:3d:60:a9: f3:0b:dd:28:0c:39:5d:86:5e:b8:0b:e6:a4:00:0e:35:6f:8d: c5:23:45:fb:09:0c:81:36:23:65:91:af:60:66:35:d5:d7:86: 6a:de:d4:e2:60:62:e4:79:be:b3:ba:73:48:83:e5:6b:da:bf: 6b:ea:e5:da:f6:e3:1b:a9:b6:be:ad:1d:6f:a2:3f:f3:dc:7f: 30:d8:6d:ff:59:85:60:8d:de:90:b4:31:3c:77:22:11:18:65: 59:f4:3e:d9:ae:9c:d4:95:6d:42:7a:22:0a:a0:0f:72:c1:01: 8c:23:07:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzNzcxMTAvBgNVBAUTKDkwODBEQjUwRkYwQjc0M0ZGQTMyQjc5RDBERDVDMzE5 MDIxRDZFMjQwHhcNMjYwNzI3MDc0MzQ5WhcNMjYwODAzMDc0MzQ5WjAYMRYwFAYD VQQDEw02YTY3MGMzNS1hNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cPC1g2R2WkbdaOL0hBxi/bnLkzjn40A2AhSm0fbN089ynDCwJZ5i/Agvm19 /86ID4+JjTJU0IiwQCrOTR4RlgRq6PLWf+BG77aPi7YfD/3bpAHeoZ335W7KS2lL fyji7SOAlgdaMpUBuCcLyoDgbz/KYy8O6EQF6B1NMbpxn3wYzm5wpHCPIQUvDcsX fn9vmOQDx8LJQRgE05/Fjo3kW28p1fLIwd+0/JapOHVrsD/SqJsCazAjgbjIY6f8 aWjGIrA8aW98qjHUAy0ERmtb9O/FWHfxOI3qTyH8i0xtC9USPnjBbqLET49Q1bBX IwVpPl1K7SmFgxXFc+3Tir/GxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1Qgzv9 WqQabioFi0Kixg5bY3gLMB8GA1UdIwQYMBaAFJCA21D/C3Q/+jK3nQ3VwxkCHW4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTM3Ny9GM0M0NEE3OEND NTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGREXzZNcmVkRGRYREdRSWRi aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJRGJVUDhMZERfNk1yZWREZFhER1FJZGJpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTM3Ny9GM0M0NEE3OENDNTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGRE XzZNcmVkRGRYREdRSWRiaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp8qYsILZChpa6hfa1IHm2+lZKEi5Rqc9lSskHh3dEBGy8TgiaIJrTlEsMNen Upl4WqzqU3SO4s4i1T8JCQzFacVNj7gy2q+DsbgXqstYxVxxnuPlAk8BzFTrCeIe ATlHLHWm+OnKZPfA15OmXG/SIU3SuftSyYdRqI88//vLAJq580p6E0iNcJmH+4+r PWCp8wvdKAw5XYZeuAvmpAAONW+NxSNF+wkMgTYjZZGvYGY11deGat7U4mBi5Hm+ s7pzSIPla9q/a+rl2vbjG6m2vq0db6I/89x/MNht/1mFYI3ekLQxPHciERhlWfQ+ 2a6c1JVtQnoiCqAPcsEBjCMHwQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:23 2026 by rpki-client