$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: PiHvevGSJcCdqDpPws5N7mfEkjQTFg/CPSjHVkBmT+o= Subject key identifier: 34:03:D7:7A:4C:76:95:22:38:6F:12:C0:EF:D4:72:DB:81:89:89:70 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F3A Signing time: Tue 28 Jul 2026 17:45:51 +0000 Manifest this update: Tue 28 Jul 2026 17:45:50 +0000 Manifest next update: Tue 04 Aug 2026 17:45:50 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: ywVEZO7d2FSMb5zuWI29ZEIEoNvrnJKmqxGP0hr+yq8=) 2: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: j5kN5uvsFGRLFFFzFP46xJ6l0wo2CCqq8dwowySMLUk=) 3: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: g+9ZIN0bzKl4hPUjZROdg1CsqMAMZorZF/Wv0UBIawM=) 4: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: yBAKdOeuYpOHwpfvu2EJBrKJc+IZbXKkxfMi4yfRU/Q=) 5: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: rIqL842ksTXKO2fhExD42Yq0dnrl1cNwx4ESowKkH4A=) 6: UekbYDpQxrYo0CAiaXiBXjiYX7Y.asa (hash: 35cN/LTsr4AjmNFcJwEXa21fvMZF8t50qcF2L+i5uRs=) 7: 10E905682CCE11F1BB1925E192833773.roa (hash: 6g6Ja4w+RYbHzuKLTfgElgeDFmZnmZ9tKzWcakJqqZs=) 8: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: KOAlra/c7OfhaqRuBqqmBdCQXMOimlFzYXSJ4DGlkSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3999 (0xf9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Jul 28 17:45:50 2026 GMT Not After : Aug 4 17:45:50 2026 GMT Subject: CN=6a68eacf-7c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:41:63:a3:53:f1:0d:8d:a6:22:2f:b0:b5: 28:ff:a5:45:7f:94:30:79:94:4e:72:d1:9e:31:ba: 93:43:b9:fd:70:9d:18:9f:df:cd:e8:18:ec:44:b6: 24:5c:58:50:97:73:6e:8c:30:dc:f4:34:36:63:a2: ee:a8:2f:2e:4a:13:c8:0a:7a:02:a1:ae:0f:b6:98: b3:cb:51:f4:98:01:b7:42:c1:cc:9b:7c:73:7a:db: 1e:49:05:0e:a4:69:16:ed:e0:98:0c:a6:38:02:40: 36:aa:12:8e:eb:a2:15:de:cc:00:45:ff:3f:a1:37: 23:c3:cb:0f:18:18:f1:f6:6e:c3:11:17:b5:1b:fb: ae:ce:8c:4c:d3:48:c2:aa:9c:16:ab:b5:a1:97:f5: 3e:1f:49:c9:90:2f:1a:49:12:79:11:13:d3:fb:4f: da:e0:5a:6b:40:79:78:e9:11:e0:4f:94:36:71:6f: 06:44:59:88:19:07:ce:c5:3c:54:73:a4:23:e8:09: a1:f3:2d:65:c9:43:12:5c:c9:73:9b:e5:bd:66:9d: 2a:e2:94:42:48:51:e6:2f:8f:17:3d:17:7c:58:b6: 3c:b2:d7:f1:92:49:23:a5:21:80:ad:19:dc:f8:78: 69:14:66:04:54:32:42:61:05:32:f5:19:49:e3:76: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:03:D7:7A:4C:76:95:22:38:6F:12:C0:EF:D4:72:DB:81:89:89:70 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:ef:d5:50:27:a3:56:c2:7e:7d:af:7f:69:2b:77:55:cd: bd:a2:b1:3a:f3:65:42:c7:ea:62:01:4a:a8:0d:06:5e:33:5d: 59:99:a4:09:2c:7e:21:07:e4:60:f8:c1:9e:5e:14:3b:ec:cd: 6f:e2:7a:5a:34:b0:54:a6:a1:70:04:d2:d8:a9:72:6c:e9:dc: a7:08:ee:47:19:f6:56:49:90:10:8f:7a:0d:59:dd:af:a0:86: a4:99:2d:90:98:a2:97:6a:00:68:77:47:b1:28:a2:95:27:1d: e9:20:8a:37:0e:52:14:f9:8a:b5:84:79:08:6b:8f:f0:dd:68: 2d:48:1f:e8:94:7f:01:77:71:3a:e6:ea:ac:28:66:15:e7:38: 5f:bd:41:03:a6:b4:2e:06:9a:e0:85:bb:81:b6:cc:1f:3a:04: 18:c7:2b:20:44:05:3a:0e:48:1f:a0:c4:0d:7d:80:b5:37:7b: 62:8a:f2:00:28:ec:f9:82:92:77:6a:83:3b:05:17:dc:fc:9f: 0a:21:37:48:3a:92:39:ae:f7:75:92:0f:13:db:e3:cf:12:02: d4:7f:ca:ce:85:b5:99:c9:11:5b:6b:c5:ba:29:81:04:f4:6c: 44:a6:ba:6d:39:10:25:36:4b:fd:2f:22:1b:01:de:4b:6e:15: 52:a8:28:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwNzI4MTc0NTUwWhcNMjYwODA0MTc0NTUwWjAYMRYwFAYD VQQDEw02YTY4ZWFjZi03YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oRBY6NT8Q2NpiIvsLUo/6VFf5QweZROctGeMbqTQ7n9cJ0Yn9/N6BjsRLYk XFhQl3NujDDc9DQ2Y6LuqC8uShPICnoCoa4Ptpizy1H0mAG3QsHMm3xzetseSQUO pGkW7eCYDKY4AkA2qhKO66IV3swARf8/oTcjw8sPGBjx9m7DERe1G/uuzoxM00jC qpwWq7Whl/U+H0nJkC8aSRJ5ERPT+0/a4FprQHl46RHgT5Q2cW8GRFmIGQfOxTxU c6Qj6Amh8y1lyUMSXMlzm+W9Zp0q4pRCSFHmL48XPRd8WLY8stfxkkkjpSGArRnc +HhpFGYEVDJCYQUy9RlJ43b9jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQD13pM dpUiOG8SwO/UctuBiYlwMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPoXv1VAno1bCfn2vf2krd1XNvaKxOvNlQsfqYgFKqA0GXjNdWZmkCSx+IQfk YPjBnl4UO+zNb+J6WjSwVKahcATS2KlybOncpwjuRxn2VkmQEI96DVndr6CGpJkt kJiil2oAaHdHsSiilScd6SCKNw5SFPmKtYR5CGuP8N1oLUgf6JR/AXdxOubqrChm Fec4X71BA6a0Lgaa4IW7gbbMHzoEGMcrIEQFOg5IH6DEDX2AtTd7YoryACjs+YKS d2qDOwUX3PyfCiE3SDqSOa73dZIPE9vjzxIC1H/KzoW1mckRW2vFuimBBPRsRKa6 bTkQJTZL/S8iGwHeS24VUqgo1w== -----END CERTIFICATE-----Generated at Wed Jul 29 13:13:37 2026 by rpki-client