$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: hGDGlHxPspSEKlk96rKTBCmfUJjx2Z8KLnnpbL8Kb+s= Subject key identifier: BF:39:30:F3:EA:5B:84:CB:B0:F8:75:E2:32:A4:DA:E3:24:0F:E5:4E Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 15A2 Signing time: Sun 26 Jul 2026 19:25:32 +0000 Manifest this update: Sun 26 Jul 2026 19:25:31 +0000 Manifest next update: Sun 02 Aug 2026 19:25:31 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: 2FTSyVnjzmtCPagz7D4nZ4FAFiO+/r9eMknITZsA4Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Jul 26 19:25:31 2026 GMT Not After : Aug 2 19:25:31 2026 GMT Subject: CN=6a665f2c-43b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:5a:83:2a:3e:d4:23:6a:17:da:80:e4:be: d4:d3:a8:c2:9d:0d:69:54:3d:b5:d5:07:c4:42:85: 2a:95:b2:03:36:52:e8:f1:4f:f6:92:72:15:27:7c: 33:22:39:d3:4d:89:4b:25:bd:1e:44:df:88:88:45: c3:32:3c:78:31:fa:3c:7a:0d:e2:ad:41:e5:26:be: d5:6d:33:2f:22:c4:02:c0:3e:c1:e9:84:81:55:4b: d0:09:b8:d0:c2:7e:34:24:31:84:2f:c4:58:d5:0e: 63:e0:c8:4d:73:af:34:3d:5a:78:54:d4:22:24:d8: b6:af:b3:5f:af:a5:c3:32:49:b2:c2:7b:40:de:f6: 03:f1:be:36:40:72:4d:b0:62:c7:65:f0:9f:ff:80: 21:8a:89:79:10:d5:a6:b1:3d:32:24:ef:c4:fa:c0: e5:bf:76:98:74:87:8b:ba:87:78:e9:49:49:6a:27: ff:12:50:dc:67:33:88:84:65:88:91:57:a2:9d:0e: 19:b8:36:8a:9a:1c:13:49:44:9f:32:9a:94:fc:30: da:85:61:d0:54:33:dc:4d:56:68:78:2a:bb:2d:26: 4b:fc:d2:b1:b8:86:a8:33:e3:2c:54:2e:6e:3b:72: 73:19:ae:b7:62:7e:22:bb:2f:c5:54:1a:ac:4c:75: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:30:F3:EA:5B:84:CB:B0:F8:75:E2:32:A4:DA:E3:24:0F:E5:4E X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:27:18:c4:32:7d:ea:e8:4b:08:bc:b9:f6:ad:fb:7e:04:44: ed:a1:cf:63:f3:27:6c:63:47:5a:69:92:e1:d2:a2:3a:45:d2: 45:6d:cf:ae:90:36:eb:56:fd:53:a5:76:f9:26:93:95:7a:a2: 74:1b:e0:79:ca:52:55:c6:b5:93:b3:55:a7:46:ba:76:c9:7d: 43:13:dd:f7:33:98:06:aa:41:ed:49:71:df:43:07:bf:a9:0a: b8:6d:cc:3b:ca:1d:05:32:3c:b6:f3:bf:73:62:4a:00:63:ca: 37:6d:ac:97:36:00:e6:ec:a4:4b:c6:8f:3d:f2:98:d4:17:b8: dc:dc:b9:75:bc:61:74:ad:c4:95:ec:1b:1c:66:98:51:82:7b: 02:d5:e5:d0:bb:0a:df:80:84:aa:f9:b6:ec:8e:f9:27:d4:91: d6:5b:d0:1e:1e:bf:10:d6:c9:aa:b0:87:1b:6f:98:e3:86:c8: 9c:1b:5d:93:1a:2c:61:72:28:2a:e2:f4:c7:72:a0:65:45:3a: 99:79:11:29:d5:66:44:fd:ce:b8:5f:32:cb:92:91:01:a6:c2: 07:f0:a7:5d:df:e6:1d:6e:ae:0e:a0:a3:df:da:0e:2a:00:c5: b8:75:d2:a7:c0:5c:63:14:2a:41:c9:7f:9a:bc:78:c5:f1:3e: 35:b5:30:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjYwNzI2MTkyNTMxWhcNMjYwODAyMTkyNTMxWjAYMRYwFAYD VQQDEw02YTY2NWYyYy00M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw79agyo+1CNqF9qA5L7U06jCnQ1pVD211QfEQoUqlbIDNlLo8U/2knIVJ3wz IjnTTYlLJb0eRN+IiEXDMjx4Mfo8eg3irUHlJr7VbTMvIsQCwD7B6YSBVUvQCbjQ wn40JDGEL8RY1Q5j4MhNc680PVp4VNQiJNi2r7Nfr6XDMkmywntA3vYD8b42QHJN sGLHZfCf/4Ahiol5ENWmsT0yJO/E+sDlv3aYdIeLuod46UlJaif/ElDcZzOIhGWI kVeinQ4ZuDaKmhwTSUSfMpqU/DDahWHQVDPcTVZoeCq7LSZL/NKxuIaoM+MsVC5u O3JzGa63Yn4iuy/FVBqsTHUOHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL85MPPq W4TLsPh14jKk2uMkD+VOMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAICcYxDJ96uhLCLy59q37fgRE7aHPY/MnbGNHWmmS4dKiOkXSRW3PrpA261b9 U6V2+SaTlXqidBvgecpSVca1k7NVp0a6dsl9QxPd9zOYBqpB7Ulx30MHv6kKuG3M O8odBTI8tvO/c2JKAGPKN22slzYA5uykS8aPPfKY1Be43Ny5dbxhdK3ElewbHGaY UYJ7AtXl0LsK34CEqvm27I75J9SR1lvQHh6/ENbJqrCHG2+Y44bInBtdkxosYXIo KuL0x3KgZUU6mXkRKdVmRP3OuF8yy5KRAabCB/CnXd/mHW6uDqCj39oOKgDFuHXS p8BcYxQqQcl/mrx4xfE+NbUw8g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:30 2026 by rpki-client