$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: I1CzBsXg93XAXDfj6yQuviH0jQqoLucxVcTQqn9uqtQ= Subject key identifier: 67:EA:5F:E4:1C:64:F3:A1:AF:C9:D4:19:93:32:1D:F5:9B:E0:CA:33 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0437 Signing time: Wed 29 Jul 2026 01:00:39 +0000 Manifest this update: Wed 29 Jul 2026 01:00:38 +0000 Manifest next update: Wed 05 Aug 2026 01:00:38 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: aYMiS6vT2APTC8tfzUuz3Shd7sG5hrXx5hzyATUakCk=) 2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=) 3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Jul 29 01:00:38 2026 GMT Not After : Aug 5 01:00:38 2026 GMT Subject: CN=6a6950b7-6b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:d4:5a:b6:e1:52:84:86:46:62:44:10:40: fc:23:81:4b:d7:9c:36:87:da:5f:2b:dd:6c:9a:e9: ee:b4:c3:b1:fd:a5:08:cc:fc:16:b5:a9:24:e9:51: fa:1e:6a:85:f6:e0:14:b2:c4:f2:dd:f9:f9:25:89: ba:ac:eb:86:eb:2b:b5:eb:63:25:65:bb:f7:69:7a: da:2f:6c:77:61:59:70:a7:69:44:ff:5a:b2:07:df: 9c:a8:10:42:4d:ac:ad:f7:78:2e:69:ec:a6:a2:9c: 22:7b:b6:49:39:15:80:fc:f2:e6:a7:8f:69:1e:23: 5f:63:d7:09:e3:8c:cc:e6:7a:d4:25:1a:09:00:61: 51:79:71:47:1e:a6:aa:56:6b:45:98:27:1d:6e:11: fb:ac:89:98:cc:3f:98:a6:7f:1b:bd:da:3a:38:7d: cb:f2:67:72:8f:ec:81:15:86:3d:6b:f6:96:49:c1: ad:5c:30:20:9c:e6:76:80:be:6e:d6:f2:cf:a3:f8: d2:00:a5:ca:86:c2:20:b9:97:41:81:d6:fd:e6:bb: 40:ff:d1:89:36:67:c1:a0:83:8a:65:47:04:8d:32: 0d:6a:6f:6c:d2:81:b7:aa:89:11:6b:ad:9d:7d:88: 2e:b9:e8:89:0a:d5:dc:7f:23:d7:52:4a:a6:94:6b: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EA:5F:E4:1C:64:F3:A1:AF:C9:D4:19:93:32:1D:F5:9B:E0:CA:33 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dd:7c:bb:7c:9f:bd:67:70:c5:a8:a9:f0:3f:29:85:d5:38: e4:5b:3c:c6:a6:ed:12:56:59:35:dc:80:c7:34:e9:80:c4:9d: 39:b6:7c:87:29:59:c9:e7:d1:0c:6f:1c:36:1e:2b:4f:5c:cf: ac:39:bf:b8:a7:76:fc:70:9b:62:e9:0b:75:27:86:6f:1c:28: 64:b6:8d:d5:9e:ca:b7:52:57:3d:3d:0c:d4:a5:22:0a:82:08: 70:98:3c:3c:15:77:9f:83:d8:63:5c:56:b2:aa:a4:13:43:5d: 06:04:2f:63:72:29:fc:bb:31:d8:d4:b3:31:de:c8:b2:78:65: 7a:f9:e2:9a:49:6d:05:8e:58:ea:cc:2e:80:25:88:84:20:69: 59:d7:09:ac:58:0e:5a:41:49:27:76:77:36:05:f9:1e:a1:33: e4:61:83:5c:52:92:c6:91:24:b8:e3:7c:d6:be:21:3e:25:fd: 0a:00:f1:f5:cc:24:6b:69:9a:d9:c5:83:62:1e:58:9e:72:02: d2:c2:e2:58:ed:2d:a6:40:2f:45:60:96:4c:21:39:f7:c6:c4: fe:56:c8:9d:cd:84:5c:53:db:6e:f7:dd:98:ee:4a:07:fb:5c: f8:41:b9:42:3f:2c:cc:45:72:11:cc:b3:c9:a5:d1:7f:a9:69: 46:61:7d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYwNzI5MDEwMDM4WhcNMjYwODA1MDEwMDM4WjAYMRYwFAYD VQQDEw02YTY5NTBiNy02YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArL3UWrbhUoSGRmJEEED8I4FL15w2h9pfK91smunutMOx/aUIzPwWtakk6VH6 HmqF9uAUssTy3fn5JYm6rOuG6yu162MlZbv3aXraL2x3YVlwp2lE/1qyB9+cqBBC Tayt93guaeymopwie7ZJORWA/PLmp49pHiNfY9cJ44zM5nrUJRoJAGFReXFHHqaq VmtFmCcdbhH7rImYzD+Ypn8bvdo6OH3L8mdyj+yBFYY9a/aWScGtXDAgnOZ2gL5u 1vLPo/jSAKXKhsIguZdBgdb95rtA/9GJNmfBoIOKZUcEjTINam9s0oG3qokRa62d fYguueiJCtXcfyPXUkqmlGv58wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfqX+Qc ZPOhr8nUGZMyHfWb4MozMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbd18u3yfvWdwxaip8D8phdU45Fs8xqbtElZZNdyAxzTpgMSdObZ8hylZyefR DG8cNh4rT1zPrDm/uKd2/HCbYukLdSeGbxwoZLaN1Z7Kt1JXPT0M1KUiCoIIcJg8 PBV3n4PYY1xWsqqkE0NdBgQvY3Ip/Lsx2NSzMd7IsnhlevnimkltBY5Y6swugCWI hCBpWdcJrFgOWkFJJ3Z3NgX5HqEz5GGDXFKSxpEkuON81r4hPiX9CgDx9cwka2ma 2cWDYh5YnnIC0sLiWO0tpkAvRWCWTCE598bE/lbInc2EXFPbbvfdmO5KB/tc+EG5 Qj8szEVyEcyzyaXRf6lpRmF9rA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:23:30 2026 by rpki-client