$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft File: KJS89-I5RAOCbTtLS4B6RKekFoI.mft (raw, json) Hash identifier: /4MR0cywISbQAkktIK8UrLR87sIALM6WSGK46lU11TQ= Subject key identifier: 3D:82:43:CA:D4:C4:5F:88:9C:BF:F8:16:7E:8B:77:45:DF:98:05:A1 Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft Manifest number: 09 Signing time: Mon 27 Jul 2026 11:35:53 +0000 Manifest this update: Mon 27 Jul 2026 11:35:53 +0000 Manifest next update: Mon 03 Aug 2026 11:35:53 +0000 Files and hashes: 1: KJS89-I5RAOCbTtLS4B6RKekFoI.crl (hash: qMOzMkWqGl5Jrux4/ytNILHi37FbSr4FvRWGrp4hbmk=) 2: 2A71D75884B211F18866DC898FA30FBC.roa (hash: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU=) 3: 35BF0DAA84B811F1831C967990A30FBC.roa (hash: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Jul 27 11:35:53 2026 GMT Not After : Aug 3 11:35:53 2026 GMT Subject: CN=6a674299-bc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:8b:97:a5:27:2f:d5:83:c2:bd:e4:ee:e6: 8a:3e:fe:fa:c0:1d:23:1f:90:03:0c:46:6f:c9:9a: 4a:65:d7:b9:4b:e1:80:b3:09:c5:da:f3:af:86:a2: f8:e8:ad:d0:b3:27:66:a3:4d:21:2a:d7:9a:c9:89: 9c:e9:bd:a1:ba:59:39:96:48:3f:77:a8:c6:30:0f: eb:09:7d:c3:3a:22:4d:c8:6b:82:5f:52:63:d7:78: 97:d5:94:67:79:c3:0b:94:80:1b:2e:e6:49:ac:eb: fe:56:ac:69:1d:60:46:63:ee:c0:2f:a2:c8:c6:df: 7e:c6:a6:e8:15:02:3f:4d:b9:f5:b6:28:3f:95:f8: c4:42:d8:3a:86:df:09:be:54:b6:0b:c5:ca:81:9e: 7e:ae:f0:cf:c8:16:2e:87:da:c0:bb:80:99:5c:b3: a6:5f:63:22:41:de:c5:39:8a:d6:94:79:4c:78:75: 63:82:a3:16:9e:14:bc:ae:52:b9:51:3e:8c:29:11: cf:17:51:bb:7f:80:29:6e:39:38:b9:13:8a:fe:87: 78:16:61:e6:f0:36:7a:15:68:fa:bb:96:bb:7d:53: f9:4c:a5:1e:1e:eb:b9:39:36:5c:3d:ab:c5:7e:9a: bd:cf:45:d1:33:ba:58:02:ab:50:91:05:0a:52:3f: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:43:CA:D4:C4:5F:88:9C:BF:F8:16:7E:8B:77:45:DF:98:05:A1 X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:a1:56:67:88:ff:e0:97:9f:9d:72:8e:c0:71:d0:29:b0: 85:9a:47:79:c7:17:08:d0:dd:e1:f9:38:89:a6:ab:13:17:b6: 07:a4:c6:b9:56:d8:61:13:44:ca:7b:2e:e4:a6:50:60:ad:f9: 3e:1a:c0:9a:76:60:c2:ce:59:f2:5b:4b:9a:21:23:98:50:47: 0f:ab:9f:ec:c4:7b:d2:d2:bd:6f:70:3b:3d:f0:15:7d:c1:a7: 4a:15:e3:57:11:72:db:9c:f9:c0:04:a4:60:b0:66:04:12:73: 65:ce:bb:ca:1e:91:f8:58:21:0b:4c:e0:2d:ab:bf:cb:a1:3b: 29:e9:2e:c2:e9:2c:2c:78:dd:da:7f:8b:84:a6:f4:01:8d:66: c9:19:6b:29:0e:64:b9:87:d8:e2:c0:3c:ac:dd:63:85:08:27: a3:d8:04:44:2c:b0:b9:0c:34:78:f2:2a:40:1d:02:89:b5:f0: 72:bc:29:60:86:e1:5b:7d:aa:32:83:52:8b:f1:4f:eb:82:e7: 65:69:72:12:e1:82:28:99:a0:86:c1:db:7e:ae:c0:c1:00:30: b2:c9:3a:ce:07:c0:96:9f:2f:fa:d7:53:e1:5f:30:14:cf:0a: 2c:95:22:7d:12:97:ee:f7:dc:03:86:38:3f:7c:25:e6:49:0e: e1:06:92:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA3MjcxMTM1NTNaFw0yNjA4MDMxMTM1NTNaMBgxFjAUBgNV BAMTDTZhNjc0Mjk5LWJjNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJv4uXpScv1YPCveTu5oo+/vrAHSMfkAMMRm/Jmkpl17lL4YCzCcXa86+Govjo rdCzJ2ajTSEq15rJiZzpvaG6WTmWSD93qMYwD+sJfcM6Ik3Ia4JfUmPXeJfVlGd5 wwuUgBsu5kms6/5WrGkdYEZj7sAvosjG337GpugVAj9NufW2KD+V+MRC2DqG3wm+ VLYLxcqBnn6u8M/IFi6H2sC7gJlcs6ZfYyJB3sU5itaUeUx4dWOCoxaeFLyuUrlR PowpEc8XUbt/gCluOTi5E4r+h3gWYebwNnoVaPq7lrt9U/lMpR4e67k5Nlw9q8V+ mr3PRdEzulgCq1CRBQpSPy7HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPYJDytTE X4icv/gWfot3Rd+YBaEwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUVELzczNjRGMTBDODE1NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFP Q2JUdExTNEI2Uktla0ZvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9UqFWZ4j/4JefnXKOwHHQKbCFmkd5xxcI0N3h+TiJpqsTF7YHpMa5VthhE0TK ey7kplBgrfk+GsCadmDCzlnyW0uaISOYUEcPq5/sxHvS0r1vcDs98BV9wadKFeNX EXLbnPnABKRgsGYEEnNlzrvKHpH4WCELTOAtq7/LoTsp6S7C6SwseN3af4uEpvQB jWbJGWspDmS5h9jiwDys3WOFCCej2ARELLC5DDR48ipAHQKJtfByvClghuFbfaoy g1KL8U/rgudlaXIS4YIomaCGwdt+rsDBADCyyTrOB8CWny/611PhXzAUzwoslSJ9 Epfu99wDhjg/fCXmSQ7hBpJp -----END CERTIFICATE-----Generated at Tue Jul 28 23:23:18 2026 by rpki-client