$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: lwyGYL2tmd4Qo6WaeqQxBwqWYhRPvNJTyqmRNJvrN30= Subject key identifier: ED:B1:F2:3C:D3:31:6D:7F:7C:53:60:68:B5:61:0A:E3:83:59:F8:70 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 023D Signing time: Mon 27 Jul 2026 04:00:50 +0000 Manifest this update: Mon 27 Jul 2026 04:00:50 +0000 Manifest next update: Mon 03 Aug 2026 04:00:50 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: N1Kti+rHqSdbn84nWcjUbRuSMVlGgbT2ni7Z18+humU=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: 03kLR+C25ViK6svptIQQKIVeWD8uwE8Zv/L1lnXYNuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Jul 27 04:00:50 2026 GMT Not After : Aug 3 04:00:50 2026 GMT Subject: CN=6a66d7f2-8e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:a2:d1:be:18:23:74:88:2f:96:73:af:e5: e1:da:51:ba:e2:bc:80:6e:06:41:da:9f:29:ab:9e: bb:04:2b:a7:ca:e0:63:95:5d:eb:c1:33:9c:8f:5c: a2:cc:f6:59:29:e2:2a:31:6f:28:f2:fe:ce:1f:0b: f7:7f:50:f6:a9:dc:88:0b:b3:91:1a:e2:19:3c:a0: 9a:1d:26:3b:f4:b9:92:b7:f1:72:5b:ee:65:3b:84: 8b:90:01:36:f8:97:71:7c:68:12:24:e1:b3:1c:5f: e1:5b:3d:ee:74:ec:dd:a0:1f:41:b6:42:f9:17:7b: 53:58:f4:6b:60:94:34:df:03:69:b7:89:29:bc:b5: 21:ab:cb:d3:32:a9:3c:20:27:c1:a5:48:21:6d:b0: 64:1a:18:ed:e0:3a:8a:f6:4d:2b:f8:d9:81:9d:a9: f3:c3:78:20:aa:6c:e8:5a:6f:35:4c:90:64:6a:0c: 7d:41:23:ec:ad:c3:40:c0:88:3f:c7:6b:c3:bb:21: 1c:f0:04:5a:16:ea:ae:da:79:3e:2c:9b:bc:94:72: b6:ab:ac:4e:9e:5c:8e:c9:ea:ab:d1:aa:75:65:87: 2d:4f:45:08:8c:72:f3:0c:18:17:27:d3:0b:57:7a: 47:25:d0:c9:a9:e9:e6:6e:52:c7:c3:bd:5e:6d:1e: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B1:F2:3C:D3:31:6D:7F:7C:53:60:68:B5:61:0A:E3:83:59:F8:70 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:99:0c:65:2e:d4:21:6e:1c:a6:da:4f:18:17:23:6a:de: 63:2e:68:2a:f7:64:64:80:35:90:e0:dc:b4:cc:7f:8f:b3:b9: b0:89:fc:3b:6a:a4:fc:5f:2c:5f:f7:46:71:47:24:c0:0b:b9: 65:4b:23:16:e9:88:00:61:70:08:b0:70:68:85:71:4f:34:64: 84:4f:b9:ad:4a:80:37:62:d6:f1:38:88:a0:ee:13:c7:3c:1a: 0b:45:53:6d:34:80:d1:79:48:59:e5:28:82:97:e9:7a:e7:10: bb:52:0b:f7:4c:c0:08:b2:af:d2:b0:b5:4e:6c:b6:20:ca:2a: 7d:fd:ee:73:28:28:3c:ea:a9:25:ea:06:58:ca:2f:de:28:b0: b1:fd:eb:63:3d:ef:e5:45:6b:0b:a8:73:0c:79:b1:23:98:71: e9:9f:cd:98:34:5b:84:11:f5:48:49:13:18:a6:23:11:f5:70: e2:48:f2:dc:a2:52:2e:91:00:53:c4:4c:6f:e7:b9:ff:e7:1c: 3b:23:e4:45:5a:cc:ba:89:aa:43:65:57:95:ba:4f:ca:94:a3: 82:40:dc:77:5a:c8:89:67:dd:ae:ff:92:07:17:8c:d0:21:83: 89:a7:4c:9b:f9:c4:ce:7b:fc:a1:fd:5b:be:d2:5e:fb:97:43: 6f:1d:aa:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjYwNzI3MDQwMDUwWhcNMjYwODAzMDQwMDUwWjAYMRYwFAYD VQQDEw02YTY2ZDdmMi04ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOKi0b4YI3SIL5Zzr+Xh2lG64ryAbgZB2p8pq567BCunyuBjlV3rwTOcj1yi zPZZKeIqMW8o8v7OHwv3f1D2qdyIC7ORGuIZPKCaHSY79LmSt/FyW+5lO4SLkAE2 +JdxfGgSJOGzHF/hWz3udOzdoB9BtkL5F3tTWPRrYJQ03wNpt4kpvLUhq8vTMqk8 ICfBpUghbbBkGhjt4DqK9k0r+NmBnanzw3ggqmzoWm81TJBkagx9QSPsrcNAwIg/ x2vDuyEc8ARaFuqu2nk+LJu8lHK2q6xOnlyOyeqr0ap1ZYctT0UIjHLzDBgXJ9ML V3pHJdDJqenmblLHw71ebR7UiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2x8jzT MW1/fFNgaLVhCuODWfhwMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMciZDGUu1CFuHKbaTxgXI2reYy5oKvdkZIA1kODctMx/j7O5sIn8O2qk/F8s X/dGcUckwAu5ZUsjFumIAGFwCLBwaIVxTzRkhE+5rUqAN2LW8TiIoO4TxzwaC0VT bTSA0XlIWeUogpfpeucQu1IL90zACLKv0rC1Tmy2IMoqff3ucygoPOqpJeoGWMov 3iiwsf3rYz3v5UVrC6hzDHmxI5hx6Z/NmDRbhBH1SEkTGKYjEfVw4kjy3KJSLpEA U8RMb+e5/+ccOyPkRVrMuomqQ2VXlbpPypSjgkDcd1rIiWfdrv+SBxeM0CGDiadM m/nEznv8of1bvtJe+5dDbx2q8A== -----END CERTIFICATE-----Generated at Tue Jul 28 19:05:39 2026 by rpki-client