$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: SyRA+WEKr3TXSMc7aJuslZyDqPXtAt4kjd/gAnIkQP4= Subject key identifier: F6:58:17:D1:ED:CF:47:70:37:B3:49:D0:5F:14:AA:30:A6:4F:01:D4 Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 0459 Signing time: Thu 23 Jul 2026 01:04:02 +0000 Manifest this update: Thu 23 Jul 2026 01:04:02 +0000 Manifest next update: Thu 30 Jul 2026 01:04:02 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: yA9P7TNVUgdoxoQVaDLTbsEphxQ4K6vtky0H+9tfVTU=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: fIfbNfI4LK0sIc8YlB3yB2MWelYN+TJwvhzmec0KKmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Jul 23 01:04:02 2026 GMT Not After : Jul 30 01:04:02 2026 GMT Subject: CN=6a616882-e518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:74:37:40:9c:28:aa:bc:15:c7:f9:48:98: b7:f3:40:bf:15:d5:56:df:f5:51:2a:a8:32:d4:5b: ef:99:23:78:8e:1b:30:c4:08:81:fd:8e:81:e9:54: 22:6c:01:28:ee:97:5f:08:22:81:d9:2e:c4:bf:aa: f5:4c:0f:a3:ca:59:ab:40:94:d5:7b:5a:4e:37:49: cf:e2:4d:3b:13:83:55:74:bc:cc:75:14:d9:66:47: d0:a0:59:11:a9:b4:96:25:23:94:c0:31:55:d5:07: 2c:04:d4:b6:0e:c0:f6:eb:3c:cf:c1:34:c3:05:46: d6:af:46:d2:d0:93:88:0d:e1:b4:4e:2f:2e:0a:a0: de:99:3b:8e:39:8e:ba:ef:b4:26:a1:b7:fe:94:76: df:89:b6:4a:d6:ca:9d:65:36:e3:be:1d:bd:ba:e2: 1e:81:09:0d:ec:8c:0f:1f:af:d9:cd:f5:75:1b:e9: 15:a7:8a:11:28:4e:5d:c7:ce:94:44:20:48:bc:73: e8:cb:bc:ff:3d:26:ac:bb:0b:3e:2b:ea:65:51:38: f4:8e:b4:03:6a:2d:77:b9:dd:62:c3:d5:32:25:90: 5e:fa:8d:9e:e8:cd:8f:a7:db:15:4a:6f:fc:d6:a4: 4c:28:0e:36:1a:a4:08:06:a1:f1:b5:03:22:5e:da: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:17:D1:ED:CF:47:70:37:B3:49:D0:5F:14:AA:30:A6:4F:01:D4 X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:e4:2f:31:a5:a8:5b:a8:36:9f:01:e2:c0:d8:86:6c:6f: 28:8f:f1:79:be:94:67:d6:7f:77:19:80:73:ac:b7:fd:d2:18: a9:29:f6:79:a9:36:c8:e7:a3:82:25:7c:69:22:3c:ed:36:7c: 22:5b:06:c8:d7:fa:fb:68:ef:87:0e:76:64:c5:33:24:2a:94: a8:da:89:4f:fa:59:84:96:16:18:c8:cc:bc:20:8c:2e:23:3d: db:f0:c5:53:fc:b5:44:cd:b6:a0:63:91:3b:85:2b:81:b3:34: 04:78:f1:38:a9:56:e8:3a:f7:32:b7:1b:44:7b:83:6a:ac:55: e7:83:c9:ed:59:a5:da:7c:fd:68:be:58:32:c1:05:ef:91:6c: 0e:9e:36:15:42:18:38:d1:0f:09:3a:7e:a4:45:f7:2d:b1:13: 94:c6:bb:28:8a:6c:9c:c1:9d:46:2c:d0:ff:68:e5:bf:b4:c5: d9:fe:9c:24:e1:d5:a0:3e:28:0c:f3:24:42:17:7d:33:4f:e9: 93:47:e8:b9:30:1a:ca:3b:d0:9a:9b:98:35:bf:21:29:59:16: 0e:cd:e7:2d:de:bd:14:ca:3e:81:6c:79:6f:d9:4a:af:a6:32: c0:08:87:6a:d1:54:08:1e:7c:f7:e7:88:99:01:05:61:15:41: bf:b1:47:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYwNzIzMDEwNDAyWhcNMjYwNzMwMDEwNDAyWjAYMRYwFAYD VQQDEw02YTYxNjg4Mi1lNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSx0N0CcKKq8Fcf5SJi380C/FdVW3/VRKqgy1FvvmSN4jhswxAiB/Y6B6VQi bAEo7pdfCCKB2S7Ev6r1TA+jylmrQJTVe1pON0nP4k07E4NVdLzMdRTZZkfQoFkR qbSWJSOUwDFV1QcsBNS2DsD26zzPwTTDBUbWr0bS0JOIDeG0Ti8uCqDemTuOOY66 77Qmobf+lHbfibZK1sqdZTbjvh29uuIegQkN7IwPH6/ZzfV1G+kVp4oRKE5dx86U RCBIvHPoy7z/PSasuws+K+plUTj0jrQDai13ud1iw9UyJZBe+o2e6M2Pp9sVSm/8 1qRMKA42GqQIBqHxtQMiXtq8MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZYF9Ht z0dwN7NJ0F8UqjCmTwHUMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvHkLzGlqFuoNp8B4sDYhmxvKI/xeb6UZ9Z/dxmAc6y3/dIYqSn2eak2yOej giV8aSI87TZ8IlsGyNf6+2jvhw52ZMUzJCqUqNqJT/pZhJYWGMjMvCCMLiM92/DF U/y1RM22oGORO4UrgbM0BHjxOKlW6Dr3MrcbRHuDaqxV54PJ7Vml2nz9aL5YMsEF 75FsDp42FUIYONEPCTp+pEX3LbETlMa7KIpsnMGdRizQ/2jlv7TF2f6cJOHVoD4o DPMkQhd9M0/pk0fouTAayjvQmpuYNb8hKVkWDs3nLd69FMo+gWx5b9lKr6YywAiH atFUCB589+eImQEFYRVBv7FHbA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:32:43 2026 by rpki-client