$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: PL/95KDeHTY9QxvYFmFkwAcuuf4TnLtLXOyWXNmKiQs= Subject key identifier: 76:1A:E0:66:98:C7:A2:3F:A2:6F:9B:D3:9A:83:BD:68:74:3B:F8:8A Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 0287 Signing time: Mon 27 Jul 2026 03:20:03 +0000 Manifest this update: Mon 27 Jul 2026 03:20:03 +0000 Manifest next update: Mon 03 Aug 2026 03:20:03 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: 6S0EakbnpV+cXcclOzQxsPyjK3CPKN3RR5zjqhnjKXg=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Jul 27 03:20:03 2026 GMT Not After : Aug 3 03:20:03 2026 GMT Subject: CN=6a66ce63-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:4c:e2:eb:cc:93:cd:ed:8a:eb:bc:a6:a0: 66:5a:11:1e:2f:78:03:c4:f0:47:cc:10:b0:ad:b6: b8:ca:b0:69:46:99:0a:c8:62:6d:de:0e:63:d0:73: 84:b3:b6:57:d8:29:c8:5a:32:01:7b:c2:dc:e8:e0: 3c:c1:33:d5:4f:86:b3:2c:e0:2a:4f:74:fe:6c:54: 7c:06:d1:f9:d3:eb:ca:b6:dd:96:74:65:dc:13:73: 2b:25:9d:f8:31:09:c8:0e:69:a4:76:8a:c1:f1:19: fa:f3:1d:be:77:49:d0:8a:a0:86:fd:5d:48:36:e2: 2e:c6:b9:8b:d5:12:33:93:62:60:6d:a8:92:b3:7f: 9e:26:09:cb:fb:a0:26:72:44:c6:03:d7:b4:f3:d8: 84:52:a2:9f:9f:4f:d9:3b:68:cc:0f:da:a2:58:1c: b6:8e:04:66:7a:7d:ff:1d:49:08:ed:81:cb:2d:2a: 66:ba:b0:d9:89:7a:d4:16:50:e0:a1:19:51:ea:88: 86:1d:a4:97:5b:de:b2:7c:f1:46:c9:ef:d2:91:73: 54:88:95:80:40:41:82:35:32:55:e2:9a:50:35:e8: 6c:e9:e7:3d:07:3b:63:94:73:6a:1a:45:fa:69:e8: d3:c6:70:86:9f:00:cc:75:c4:4d:86:4b:0b:1d:c5: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:E0:66:98:C7:A2:3F:A2:6F:9B:D3:9A:83:BD:68:74:3B:F8:8A X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:03:e5:d5:d2:bf:dc:df:59:d0:9c:d2:14:db:cc:36:b7:73: 6e:02:09:2f:de:d0:09:79:06:b5:44:55:81:85:c7:0b:1a:2b: 83:30:6b:d0:eb:db:93:f4:9c:ce:04:ac:5d:de:c0:6b:e0:09: e7:fd:db:06:52:ed:06:56:a6:b0:af:c1:e5:38:5c:a9:6f:5d: 27:31:bc:23:92:90:1a:4f:e4:41:c8:4d:60:58:42:98:94:84: 54:a0:23:6e:b8:41:d7:b5:7d:be:c3:e5:d4:31:90:19:b0:19: 87:c0:63:d2:8a:51:2c:0f:2c:4e:f1:a2:9f:d2:76:61:7b:7c: 18:71:e1:c0:a9:d3:37:59:37:e9:65:e7:0f:5b:d3:bb:56:23: 6f:44:d2:12:0b:96:07:bc:95:61:6c:5a:20:e2:93:4a:05:6d: c7:db:ef:83:dd:93:00:30:bb:79:63:d5:17:11:f6:21:1f:2d: 71:7d:7e:48:1c:c1:02:67:84:94:22:51:5b:19:0d:a9:83:05: 58:d9:eb:3f:b7:92:79:e3:98:4d:c6:12:e8:80:b8:fe:69:8a: eb:8b:0e:9f:ee:71:e3:5f:a3:ed:12:97:7f:87:22:19:ed:f6: 3b:d2:16:bb:1a:90:da:e5:b4:d3:19:9b:42:3e:42:04:81:60: 3f:46:eb:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjYwNzI3MDMyMDAzWhcNMjYwODAzMDMyMDAzWjAYMRYwFAYD VQQDEw02YTY2Y2U2My00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5lM4uvMk83tiuu8pqBmWhEeL3gDxPBHzBCwrba4yrBpRpkKyGJt3g5j0HOE s7ZX2CnIWjIBe8Lc6OA8wTPVT4azLOAqT3T+bFR8BtH50+vKtt2WdGXcE3MrJZ34 MQnIDmmkdorB8Rn68x2+d0nQiqCG/V1INuIuxrmL1RIzk2JgbaiSs3+eJgnL+6Am ckTGA9e089iEUqKfn0/ZO2jMD9qiWBy2jgRmen3/HUkI7YHLLSpmurDZiXrUFlDg oRlR6oiGHaSXW96yfPFGye/SkXNUiJWAQEGCNTJV4ppQNehs6ec9BztjlHNqGkX6 aejTxnCGnwDMdcRNhksLHcWMrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYa4GaY x6I/om+b05qDvWh0O/iKMB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQPl1dK/3N9Z0JzSFNvMNrdzbgIJL97QCXkGtURVgYXHCxorgzBr0Ovbk/Sc zgSsXd7Aa+AJ5/3bBlLtBlamsK/B5ThcqW9dJzG8I5KQGk/kQchNYFhCmJSEVKAj brhB17V9vsPl1DGQGbAZh8Bj0opRLA8sTvGin9J2YXt8GHHhwKnTN1k36WXnD1vT u1Yjb0TSEguWB7yVYWxaIOKTSgVtx9vvg92TADC7eWPVFxH2IR8tcX1+SBzBAmeE lCJRWxkNqYMFWNnrP7eSeeOYTcYS6IC4/mmK64sOn+5x41+j7RKXf4ciGe32O9IW uxqQ2uW00xmbQj5CBIFgP0brVA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:21:37 2026 by rpki-client