$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: Fq5YPGxaYb1qdU2P0LzILjOr9KAm2dJsMGGN56zZ0zU= Subject key identifier: E8:40:91:76:7F:92:AB:B6:08:57:BA:3A:D8:88:02:7A:D0:42:51:F4 Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 06D2 Signing time: Tue 28 Jul 2026 16:04:57 +0000 Manifest this update: Tue 28 Jul 2026 16:04:57 +0000 Manifest next update: Tue 04 Aug 2026 16:04:57 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: plU5nyA58dbRQX6gjsXe4lwPRMb7KMXMrQ1xq/bGE+4=) 2: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: po/i8uxPFYRsNFTlJU1d5KEDrihE5XxUDGJv65GiON0=) 3: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yCmJKCeUjCX4/1rndfEcZXyyAy1UCnlaRalfod8v7Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Jul 28 16:04:57 2026 GMT Not After : Aug 4 16:04:57 2026 GMT Subject: CN=6a68d329-ccce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:b1:78:ed:05:73:47:e1:83:da:86:99:38: 81:d2:e0:d2:88:4c:1b:55:60:04:9b:0a:5d:9b:6c: cd:27:da:fb:52:70:d8:5a:09:8d:fc:91:f2:81:c6: c6:25:6a:96:b7:25:0c:8c:d2:06:f4:cd:78:f0:1f: b3:98:d8:5f:78:fb:64:50:85:c6:05:f7:d7:3d:b5: 9e:7e:6a:d8:df:16:72:64:45:1b:26:15:54:a6:7c: b2:57:00:df:c2:e2:73:53:7d:58:a0:1c:b9:2b:4d: 4d:40:f4:8b:5f:ca:9c:43:fb:23:ef:4b:f7:67:31: 8b:f0:66:e6:c1:d2:96:f6:a0:12:a6:f3:46:85:a0: 7e:dc:8d:f7:25:49:25:90:53:22:43:07:ca:2f:30: c0:c4:1c:07:20:8c:ad:45:2c:f1:fe:50:64:da:c6: 6e:36:24:3b:7e:d6:96:d9:17:de:11:23:b9:e1:07: 6f:a0:93:4f:64:29:dd:3b:51:a8:27:95:e7:9e:09: 1b:bc:e1:8e:6b:9f:7a:d8:0a:85:ec:50:a1:67:ba: 31:6c:eb:3f:82:3c:25:2e:4d:ea:54:ab:7f:f4:06: f9:c9:73:d0:59:2b:ce:66:72:ca:d4:da:99:ea:72: 2e:aa:03:cd:3f:c9:01:93:2c:c6:15:56:bd:b1:67: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:91:76:7F:92:AB:B6:08:57:BA:3A:D8:88:02:7A:D0:42:51:F4 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:38:2b:af:36:f9:1f:26:bc:e1:31:66:2f:65:34:06:33:64: 07:61:04:79:29:63:d1:ac:96:3e:7f:37:d7:4b:ee:e1:47:ab: e6:c1:3a:73:c1:c3:e7:39:2d:e9:11:66:d4:8f:57:0f:42:cf: 57:44:52:d7:6e:1b:73:43:8f:77:29:ed:ac:4b:dd:36:a4:97: 70:d5:af:c4:70:0e:0c:f9:78:c6:d9:74:cf:71:0a:c7:29:bb: 13:3c:28:20:20:13:94:b7:d1:6b:20:c7:6a:33:97:e7:70:32: 2a:a0:bb:cf:13:31:52:e1:9d:a9:fe:f6:97:39:e6:1b:a7:c8: db:4e:ca:53:30:38:15:51:9c:c4:4e:e2:3d:7e:f8:30:eb:e1: 72:5a:53:6c:95:45:71:dd:36:6a:61:e8:e3:be:ac:16:d6:30: de:a1:48:be:77:d9:af:ea:b4:e3:ce:7c:38:d1:cc:36:f6:27: a1:91:c9:98:02:a9:fe:b7:4b:58:b0:54:ef:b5:36:39:68:09: 9d:7d:83:86:e0:09:49:86:9a:ec:53:2e:4d:5d:34:a8:1f:35: f9:32:22:e7:6c:79:95:6e:62:46:76:27:4b:91:6c:c2:9e:2d: 53:bd:72:d9:00:4f:56:a9:de:cf:95:b0:df:4a:83:54:15:46: d3:30:b6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwNzI4MTYwNDU3WhcNMjYwODA0MTYwNDU3WjAYMRYwFAYD VQQDEw02YTY4ZDMyOS1jY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkW2xeO0Fc0fhg9qGmTiB0uDSiEwbVWAEmwpdm2zNJ9r7UnDYWgmN/JHygcbG JWqWtyUMjNIG9M148B+zmNhfePtkUIXGBffXPbWefmrY3xZyZEUbJhVUpnyyVwDf wuJzU31YoBy5K01NQPSLX8qcQ/sj70v3ZzGL8GbmwdKW9qASpvNGhaB+3I33JUkl kFMiQwfKLzDAxBwHIIytRSzx/lBk2sZuNiQ7ftaW2RfeESO54QdvoJNPZCndO1Go J5XnngkbvOGOa5962AqF7FChZ7oxbOs/gjwlLk3qVKt/9Ab5yXPQWSvOZnLK1NqZ 6nIuqgPNP8kBkyzGFVa9sWdkzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhAkXZ/ kqu2CFe6OtiIAnrQQlH0MB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdTgrrzb5Hya84TFmL2U0BjNkB2EEeSlj0ayWPn8310vu4Uer5sE6c8HD5zkt 6RFm1I9XD0LPV0RS124bc0OPdyntrEvdNqSXcNWvxHAODPl4xtl0z3EKxym7Ezwo ICATlLfRayDHajOX53AyKqC7zxMxUuGdqf72lznmG6fI207KUzA4FVGcxE7iPX74 MOvhclpTbJVFcd02amHo476sFtYw3qFIvnfZr+q04858ONHMNvYnoZHJmAKp/rdL WLBU77U2OWgJnX2DhuAJSYaa7FMuTV00qB81+TIi52x5lW5iRnYnS5Fswp4tU71y 2QBPVqnez5Ww30qDVBVG0zC2xQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:58 2026 by rpki-client