$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: G+kagg6ebruOW+z5j5nxzliQ2FMQU7DSOOvO5wRCKZE= Subject key identifier: 4E:43:C3:E8:96:4E:4F:7F:A8:39:87:70:5F:41:D1:82:8A:CF:B6:E3 Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 0408 Signing time: Wed 29 Jul 2026 00:50:48 +0000 Manifest this update: Wed 29 Jul 2026 00:50:48 +0000 Manifest next update: Wed 05 Aug 2026 00:50:48 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: B7TrCxDRuWSMEWxw7MJ3efNxw1BOwU9hMf89SURKhsQ=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Jul 29 00:50:48 2026 GMT Not After : Aug 5 00:50:48 2026 GMT Subject: CN=6a694e68-f063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:a6:70:09:38:66:fd:31:0e:f0:98:bb:f9: 32:db:99:36:8e:5b:e3:68:a8:c3:cc:8e:8a:7e:d3: 25:8c:bf:1d:5c:b3:b9:ba:0b:4c:f1:b0:9f:36:80: bc:6d:e4:7b:a1:42:e8:5f:53:ec:50:eb:69:a7:56: 79:ac:24:d8:d1:4f:89:ad:ae:8c:07:ff:fc:78:4b: 80:a2:4d:26:48:c1:af:7e:fb:72:ec:f4:76:5e:88: c3:cb:fa:f1:20:7e:cd:7a:fc:f8:30:9b:77:9e:f4: af:86:26:69:2f:97:33:68:9b:b8:a4:93:33:e2:2b: de:94:09:50:fa:b5:1a:57:1c:87:9b:9b:34:bf:27: b1:db:b6:e2:d3:aa:98:a2:2a:bd:e9:68:50:79:e4: a3:21:76:9b:74:16:ec:c6:64:d3:7d:71:35:f6:b9: 11:75:58:9c:1f:bf:13:13:15:85:96:f8:a3:93:2b: 77:32:15:ec:81:df:f0:52:b0:3d:19:ac:03:9f:34: 85:e0:25:68:e1:77:12:3c:e5:91:bd:09:b3:3d:2b: 78:c3:a9:24:27:d1:1b:f2:46:5c:e8:b3:66:22:6d: fd:49:6b:ba:fb:8b:5c:6f:bf:01:bc:9a:d4:92:b6: a9:86:61:b7:43:6a:5c:0b:9e:49:55:d8:fc:89:c4: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:C3:E8:96:4E:4F:7F:A8:39:87:70:5F:41:D1:82:8A:CF:B6:E3 X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3c:02:87:a9:39:af:34:1e:56:22:86:58:30:a9:7b:63:f9: d4:c5:48:18:9a:34:55:cc:c1:dd:fe:07:4e:58:86:95:b3:76: d7:9c:e6:82:76:57:e8:a7:10:3b:c6:fa:e6:52:b5:29:a1:55: f6:6f:8d:f1:58:77:e9:40:10:4b:30:72:50:31:6c:e9:ff:80: 26:c9:d7:de:8e:3a:f7:a9:be:03:34:84:3d:d1:46:c7:48:5b: e8:21:35:02:74:db:8a:d8:22:ea:3c:43:58:e2:7a:6f:98:e3: 6e:e6:f8:3a:89:4f:7b:0c:e8:e9:26:8c:12:a8:41:b9:c1:e6: 46:ac:b5:3c:83:7e:14:2b:33:46:4d:13:ac:b4:72:3d:97:f0: 5d:4b:44:81:ea:cd:63:62:05:e6:84:7b:c0:7b:2a:78:f8:51: e4:94:8e:b5:4d:93:fe:3c:33:b6:c7:dc:3b:58:d7:76:c6:7b: 84:b7:0f:fa:f5:af:06:b1:25:3b:15:bf:85:89:ca:04:b2:ef: 30:38:3e:14:25:73:7a:59:91:0b:9b:7f:c0:2a:40:f8:eb:8c: fe:8f:5a:15:0b:e7:60:b3:d1:8c:4d:9c:00:d0:d5:d9:90:12: 3f:41:32:8a:9f:da:48:a9:6a:2b:63:50:b9:2d:0e:36:5e:b3: fc:fb:a9:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYwNzI5MDA1MDQ4WhcNMjYwODA1MDA1MDQ4WjAYMRYwFAYD VQQDEw02YTY5NGU2OC1mMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmH+mcAk4Zv0xDvCYu/ky25k2jlvjaKjDzI6KftMljL8dXLO5ugtM8bCfNoC8 beR7oULoX1PsUOtpp1Z5rCTY0U+Jra6MB//8eEuAok0mSMGvfvty7PR2XojDy/rx IH7Nevz4MJt3nvSvhiZpL5czaJu4pJMz4ivelAlQ+rUaVxyHm5s0vyex27bi06qY oiq96WhQeeSjIXabdBbsxmTTfXE19rkRdVicH78TExWFlvijkyt3MhXsgd/wUrA9 GawDnzSF4CVo4XcSPOWRvQmzPSt4w6kkJ9Eb8kZc6LNmIm39SWu6+4tcb78BvJrU kraphmG3Q2pcC55JVdj8icTaHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5Dw+iW Tk9/qDmHcF9B0YKKz7bjMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIDwCh6k5rzQeViKGWDCpe2P51MVIGJo0VczB3f4HTliGlbN215zmgnZX6KcQ O8b65lK1KaFV9m+N8Vh36UAQSzByUDFs6f+AJsnX3o4696m+AzSEPdFGx0hb6CE1 AnTbitgi6jxDWOJ6b5jjbub4OolPewzo6SaMEqhBucHmRqy1PIN+FCszRk0TrLRy PZfwXUtEgerNY2IF5oR7wHsqePhR5JSOtU2T/jwztsfcO1jXdsZ7hLcP+vWvBrEl OxW/hYnKBLLvMDg+FCVzelmRC5t/wCpA+OuM/o9aFQvnYLPRjE2cANDV2ZASP0Ey ip/aSKlqK2NQuS0ONl6z/PupOg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:50:51 2026 by rpki-client