$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: rbZpovnEygKbA/XIXC9+AU83gywj/WyQnSskPuehIns= Subject key identifier: C3:B2:69:5A:01:7E:E0:6B:39:83:A2:CC:BE:4E:D3:F4:3F:66:BB:2D Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 010A Signing time: Mon 27 Jul 2026 08:07:29 +0000 Manifest this update: Mon 27 Jul 2026 08:07:28 +0000 Manifest next update: Mon 03 Aug 2026 08:07:28 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: nZ8XhBJLUIQgltujmkEoMZmw/lvKCssxXdk3Scva3cw=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Jul 27 08:07:28 2026 GMT Not After : Aug 3 08:07:28 2026 GMT Subject: CN=6a6711c0-2cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:b7:b6:ef:28:d1:1a:17:14:28:04:77:b8: 4b:13:89:8b:55:b4:0f:cc:f9:f1:09:51:cb:b2:65: a7:9f:f0:bc:61:9a:bf:f7:e9:73:c6:fa:a8:83:04: 10:54:c0:58:05:86:8a:a8:ff:d0:b5:fd:10:42:7f: 7c:33:5c:94:3b:72:4c:c8:58:ec:bc:f6:8e:56:c4: 24:4f:cf:b8:72:9a:02:64:da:49:5e:19:fe:91:cf: 25:bb:75:2d:83:92:39:18:6c:df:ab:a3:fe:2e:1f: 01:ac:91:5e:1c:60:78:1a:81:18:36:61:fb:80:98: 7a:6b:97:cb:1c:7c:70:0b:38:9b:69:4a:9b:a2:39: 02:ac:0d:97:2f:a0:b7:b7:97:1a:00:9f:65:4e:87: 4a:e9:81:2b:4d:60:80:99:01:a0:35:3f:a8:4c:e8: 95:d1:24:34:ca:46:08:cc:e1:e2:fe:c8:7f:b7:c0: f1:4d:77:73:20:0d:dc:4f:4a:c6:37:6d:ed:b0:96: 67:66:24:73:15:04:47:8b:b9:ff:2e:18:c8:6f:4f: 6a:dd:74:b6:04:b0:8c:08:62:66:f2:df:b2:38:6b: 6b:15:f9:c9:02:61:41:69:78:2e:47:20:65:21:11: 9e:b7:89:b5:32:24:e6:26:2b:2f:df:00:8e:90:58: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:69:5A:01:7E:E0:6B:39:83:A2:CC:BE:4E:D3:F4:3F:66:BB:2D X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:c5:54:26:91:13:42:e7:eb:48:c2:68:67:66:a1:ab:fd: 5f:05:6b:6a:76:75:47:85:aa:cf:c1:79:3d:e4:8f:f6:57:48: d4:7e:3e:15:ce:a7:98:b2:a4:c4:ea:04:ff:46:78:a2:36:b0: 0a:ab:ad:9e:57:b9:6e:f0:88:94:f7:d1:d4:01:74:c4:47:d8: 39:ab:7f:03:16:e9:9f:f7:da:c5:ab:f9:21:60:6c:26:b6:8e: f7:d8:f8:d1:ba:c1:43:bb:86:1e:eb:60:5a:1c:9e:cb:3b:a8: 9f:3b:f6:74:24:1d:44:de:14:2c:a9:de:27:12:8f:6c:d5:ab: 98:8b:fa:0d:97:f8:ce:aa:04:ac:bf:69:b0:49:71:97:09:9d: d3:75:44:2d:30:65:61:ce:53:86:d8:92:89:ac:d9:c5:06:0d: ba:05:74:1e:5c:26:8b:b6:01:0c:df:33:90:63:c6:ce:0b:c0: d4:e9:80:4e:f3:4b:ca:24:b4:96:9d:f4:32:d1:fd:a5:d3:45: 1f:59:b7:d6:a9:ea:95:4f:0d:f4:f4:cb:9f:26:e3:82:96:6f: f3:4c:30:1c:dc:ee:c1:d6:91:97:03:d9:04:57:51:22:65:c0: 73:f8:b9:8a:99:6d:33:e6:d3:af:b7:47:c2:a7:31:a6:87:36: 8b:f6:0e:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5ODUxMTAvBgNVBAUTKDI5QURCMzlCNjIwRUFFM0NCOEFGQ0EyQ0ExODVGNUM0 ODc2RkQwNDMwHhcNMjYwNzI3MDgwNzI4WhcNMjYwODAzMDgwNzI4WjAYMRYwFAYD VQQDEw02YTY3MTFjMC0yY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ju3tu8o0RoXFCgEd7hLE4mLVbQPzPnxCVHLsmWnn/C8YZq/9+lzxvqogwQQ VMBYBYaKqP/Qtf0QQn98M1yUO3JMyFjsvPaOVsQkT8+4cpoCZNpJXhn+kc8lu3Ut g5I5GGzfq6P+Lh8BrJFeHGB4GoEYNmH7gJh6a5fLHHxwCzibaUqbojkCrA2XL6C3 t5caAJ9lTodK6YErTWCAmQGgNT+oTOiV0SQ0ykYIzOHi/sh/t8DxTXdzIA3cT0rG N23tsJZnZiRzFQRHi7n/LhjIb09q3XS2BLCMCGJm8t+yOGtrFfnJAmFBaXguRyBl IRGet4m1MiTmJisv3wCOkFiHjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOyaVoB fuBrOYOizL5O0/Q/ZrstMB8GA1UdIwQYMBaAFCmts5tiDq48uK/KLKGF9cSHb9BD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzk4NS82NzNBQTJGNEY1 QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3JqeTRyOG9zb1lYMXhJZHYw RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzk4NS82NzNBQTJGNEY1QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3Jq eTRyOG9zb1lYMXhJZHYwRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOfFVCaRE0Ln60jCaGdmoav9XwVranZ1R4Wqz8F5PeSP9ldI1H4+Fc6nmLKk xOoE/0Z4ojawCqutnle5bvCIlPfR1AF0xEfYOat/Axbpn/faxav5IWBsJraO99j4 0brBQ7uGHutgWhyeyzuonzv2dCQdRN4ULKneJxKPbNWrmIv6DZf4zqoErL9psElx lwmd03VELTBlYc5ThtiSiazZxQYNugV0Hlwmi7YBDN8zkGPGzgvA1OmATvNLyiS0 lp30MtH9pdNFH1m31qnqlU8N9PTLnybjgpZv80wwHNzuwdaRlwPZBFdRImXAc/i5 ipltM+bTr7dHwqcxpoc2i/YOLg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:03:53 2026 by rpki-client