$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json) Hash identifier: fIQU2md/W7+Yob95wlLv9xMyYKrTMzBkQ9IuQk/QORg= Subject key identifier: D9:4B:75:F9:4C:A8:33:CD:BF:B9:91:89:5D:A1:42:3D:F7:48:4A:9D Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft Manifest number: 0801 Signing time: Tue 28 Jul 2026 21:44:55 +0000 Manifest this update: Tue 28 Jul 2026 21:44:54 +0000 Manifest next update: Tue 04 Aug 2026 21:44:54 +0000 Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: Kgh61hqoLXalx1aO8XmsiQ9IYGUkUAP4tjmzMUveW5U=) 2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Validity Not Before: Jul 28 21:44:54 2026 GMT Not After : Aug 4 21:44:54 2026 GMT Subject: CN=6a6922d7-f0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:db:89:87:cd:4c:0c:ad:66:af:78:5e:22: cc:01:fd:5a:6a:f7:98:a3:d8:7f:a4:7e:da:24:a4: 80:ce:d2:88:b7:a2:73:9b:60:c4:7c:74:f7:b9:8c: e5:70:77:62:22:45:08:cc:b7:29:82:47:8a:00:b1: dd:a6:59:b6:b3:3d:f4:29:85:c6:31:4c:01:a9:a6: ca:ef:90:2d:b5:2b:17:7b:df:48:ac:fe:e5:79:f4: 72:d6:ad:fa:80:68:b0:fd:14:be:38:2e:71:13:31: 09:05:4c:82:0e:e3:0a:c1:01:b4:be:de:c2:cb:4d: f3:4d:13:17:92:61:1c:aa:51:d2:62:10:ad:27:82: 9d:b0:98:40:b4:6a:09:a3:4c:54:9b:fd:4f:89:1b: d4:df:4d:f9:57:89:f6:0b:13:d1:95:a8:31:f4:ca: 87:cb:e9:da:91:b1:d8:18:1d:b6:90:da:fd:37:6e: d8:bf:ed:ba:70:81:9e:9c:82:ce:76:16:4b:19:48: 9b:24:55:95:54:18:e0:36:27:cf:dc:a9:34:67:a2: 6d:7e:6b:e5:cf:03:d2:14:fd:91:77:cf:2a:6f:a0: 80:7c:19:66:0a:c2:ad:ca:ef:61:a6:8f:a7:00:ff: d7:71:e8:4b:4b:5f:50:45:01:a5:3a:3c:4a:b4:4f: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:75:F9:4C:A8:33:CD:BF:B9:91:89:5D:A1:42:3D:F7:48:4A:9D X509v3 Authority Key Identifier: keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:38:9b:92:bc:cd:77:b7:7b:31:df:23:c0:9c:c5:17:7b:90: e2:bc:0b:0c:94:2b:bd:45:92:3c:4f:dc:cb:f9:4c:d0:0e:1c: 1c:b7:03:be:3b:0a:ee:7d:a7:31:98:a0:fd:32:fd:74:bc:7a: f2:3d:10:9b:f7:92:b8:77:d5:36:e1:eb:5b:8d:9a:f9:1c:7e: a5:af:e3:ee:db:6c:93:42:73:80:c9:91:25:93:5d:2e:2d:bd: 07:c0:36:dd:f2:4b:1d:1a:a6:e4:1a:51:fe:e8:e0:0f:c2:d4: d7:c0:d4:92:47:fc:5d:1e:72:0b:69:5e:8d:b7:d1:df:f1:f8: 7e:9c:2b:2e:c7:6b:d4:a7:f8:08:c6:b7:3b:4f:36:97:bf:09: 11:d2:f8:4a:95:21:a4:22:14:2c:14:ac:1a:6f:e2:02:0b:21: c5:6a:fd:c2:72:14:e0:3a:f5:ce:22:04:5e:7f:e0:b5:97:fc: d0:62:bf:3d:df:36:9d:bb:18:a4:49:54:8b:49:f8:1f:74:1e: ca:2f:56:a7:7a:eb:9d:9e:f3:06:97:d2:71:70:b0:8f:71:8e: 43:af:4a:d3:5a:05:a4:21:0c:13:64:a0:60:18:38:c9:dd:40: 34:4b:2e:c8:3b:1f:fb:a1:06:1a:7e:00:2e:c5:9c:75:20:1d: 23:72:cc:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF QjdEM0U5MDIwHhcNMjYwNzI4MjE0NDU0WhcNMjYwODA0MjE0NDU0WjAYMRYwFAYD VQQDEw02YTY5MjJkNy1mMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7N7biYfNTAytZq94XiLMAf1aaveYo9h/pH7aJKSAztKIt6Jzm2DEfHT3uYzl cHdiIkUIzLcpgkeKALHdplm2sz30KYXGMUwBqabK75AttSsXe99IrP7lefRy1q36 gGiw/RS+OC5xEzEJBUyCDuMKwQG0vt7Cy03zTRMXkmEcqlHSYhCtJ4KdsJhAtGoJ o0xUm/1PiRvU3035V4n2CxPRlagx9MqHy+nakbHYGB22kNr9N27Yv+26cIGenILO dhZLGUibJFWVVBjgNifP3Kk0Z6JtfmvlzwPSFP2Rd88qb6CAfBlmCsKtyu9hpo+n AP/XcehLS19QRQGlOjxKtE9syQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlLdflM qDPNv7mRiV2hQj33SEqdMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL TzZhanBLaDlhT25yZlQ2UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTibkrzNd7d7Md8jwJzFF3uQ4rwLDJQrvUWSPE/cy/lM0A4cHLcDvjsK7n2n MZig/TL9dLx68j0Qm/eSuHfVNuHrW42a+Rx+pa/j7ttsk0JzgMmRJZNdLi29B8A2 3fJLHRqm5BpR/ujgD8LU18DUkkf8XR5yC2lejbfR3/H4fpwrLsdr1Kf4CMa3O082 l78JEdL4SpUhpCIULBSsGm/iAgshxWr9wnIU4Dr1ziIEXn/gtZf80GK/Pd82nbsY pElUi0n4H3Qeyi9Wp3rrnZ7zBpfScXCwj3GOQ69K01oFpCEME2SgYBg4yd1ANEsu yDsf+6EGGn4ALsWcdSAdI3LMIw== -----END CERTIFICATE-----Generated at Wed Jul 29 00:43:16 2026 by rpki-client