$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: vO0/I8yv3NV+GDTgNNqXfWofcfhsuVZTr75Hekx9mGQ= Subject key identifier: 04:9B:28:E5:A2:10:E9:C7:DE:6A:6E:AE:8B:EB:FE:32:28:37:1E:C1 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0843 Signing time: Wed 22 Jul 2026 21:35:29 +0000 Manifest this update: Wed 22 Jul 2026 21:35:28 +0000 Manifest next update: Wed 29 Jul 2026 21:35:28 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: kGd/29MjJ67JwkKp/bPnY7jZTVBUKGgV86AoOluVjWs=) 2: EE2BD31C64D011F1BE18E4E96947A888.roa (hash: OhuM84ltUspKHkQbXefrgZ3TkNQ2XBw3NffUArldnvU=) 3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) 4: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 5: FF7010DCAE9811F081180758C4F9AE02.roa (hash: qpMk4y0602U3X2w4CmvfK35aoL6m9wVB631uaMX4Chc=) 6: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=) 7: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: QMfdlVqqG7b7DNLEI3s6n/xVYtcpjR63MA+xJ2kfQVA=) 8: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Jul 22 21:35:28 2026 GMT Not After : Jul 29 21:35:28 2026 GMT Subject: CN=6a6137a1-4fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:ac:38:c8:b5:b6:fb:7a:41:67:f9:ab:ff: 3e:6c:a1:d4:7d:1a:22:0c:81:dd:a5:8c:70:ae:a0: 7c:4f:17:d8:90:d9:d6:08:83:26:6b:8a:40:7f:ab: ba:01:56:37:e5:d1:38:53:04:23:fb:16:db:2a:35: 1b:e1:df:0f:a3:ed:7e:a0:26:b4:60:bc:9e:1e:17: 56:e3:ba:51:f3:55:42:6d:86:c7:84:27:73:13:26: c3:97:af:90:3a:a5:1c:40:b3:8c:ae:96:35:d4:00: c0:05:29:63:b2:f5:7e:a3:cc:19:d6:7b:71:dc:08: 48:44:4a:12:ce:82:7a:73:12:42:06:80:40:aa:ce: db:7a:a5:8b:03:f1:02:90:75:a1:0e:27:56:06:1f: b6:58:1c:e8:ac:8c:f5:c8:7c:11:a3:5f:da:d3:c2: 7b:b7:ef:19:87:7e:5d:65:1e:24:88:2a:f8:04:00: 6f:1a:ec:55:39:ad:c4:a8:95:52:a2:36:2c:cf:16: da:f0:5a:11:54:da:a6:91:7c:d5:86:33:d9:e1:20: 9d:a4:eb:48:fd:12:5d:0c:fb:48:f7:81:a9:98:2d: a1:0f:98:07:1f:d2:9d:f8:aa:a2:1d:b4:22:4a:89: d0:53:e2:31:5e:8f:a8:43:c9:cc:71:02:fe:c5:59: 16:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9B:28:E5:A2:10:E9:C7:DE:6A:6E:AE:8B:EB:FE:32:28:37:1E:C1 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:19:51:c7:2f:7f:9f:58:28:a1:97:68:a5:cd:9c:54:e2:ea: cb:67:9e:26:8c:8b:e8:62:77:3f:5a:84:61:d1:92:04:77:cb: e6:20:33:fc:f3:45:d4:d0:64:65:39:d0:79:2e:b1:17:a3:c1: 0c:a7:ee:7a:15:92:05:e1:d8:88:12:1b:36:e1:51:df:20:c9: cb:ba:e1:4b:87:08:c3:b2:e5:31:29:b6:f2:bd:a9:48:aa:cf: cd:f5:e2:cc:da:ff:9d:dc:12:fb:c5:28:35:77:4a:60:0d:66: c2:f2:c8:c5:ca:71:a0:47:98:6a:fe:86:45:39:75:91:1b:c9: 48:41:4e:3a:f7:c2:68:f8:8d:b1:be:0f:0c:8a:bb:f5:d2:3a: 0a:23:b0:47:1c:73:d4:11:37:6e:ce:2d:5d:3b:68:84:bc:af: e6:3c:63:ef:51:a5:de:51:de:f5:cf:ba:85:d5:26:36:7f:80: 78:29:9e:91:c5:e4:af:6b:7c:e0:e0:f2:9c:39:a2:91:6f:26: 65:f6:db:98:1e:95:45:8a:c4:55:62:67:98:6a:11:06:b8:ac: 64:12:1d:20:92:cb:85:ab:0e:1a:02:02:f4:ad:ab:de:d3:a3: 46:c9:43:f6:8b:0b:aa:09:ca:8d:3c:3b:da:71:12:47:0e:19: fc:2d:71:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwNzIyMjEzNTI4WhcNMjYwNzI5MjEzNTI4WjAYMRYwFAYD VQQDEw02YTYxMzdhMS00ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUasOMi1tvt6QWf5q/8+bKHUfRoiDIHdpYxwrqB8TxfYkNnWCIMma4pAf6u6 AVY35dE4UwQj+xbbKjUb4d8Po+1+oCa0YLyeHhdW47pR81VCbYbHhCdzEybDl6+Q OqUcQLOMrpY11ADABSljsvV+o8wZ1ntx3AhIREoSzoJ6cxJCBoBAqs7beqWLA/EC kHWhDidWBh+2WBzorIz1yHwRo1/a08J7t+8Zh35dZR4kiCr4BABvGuxVOa3EqJVS ojYszxba8FoRVNqmkXzVhjPZ4SCdpOtI/RJdDPtI94GpmC2hD5gHH9Kd+KqiHbQi SonQU+IxXo+oQ8nMcQL+xVkWpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASbKOWi EOnH3mpurovr/jIoNx7BMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADxlRxy9/n1gooZdopc2cVOLqy2eeJoyL6GJ3P1qEYdGSBHfL5iAz/PNF1NBk ZTnQeS6xF6PBDKfuehWSBeHYiBIbNuFR3yDJy7rhS4cIw7LlMSm28r2pSKrPzfXi zNr/ndwS+8UoNXdKYA1mwvLIxcpxoEeYav6GRTl1kRvJSEFOOvfCaPiNsb4PDIq7 9dI6CiOwRxxz1BE3bs4tXTtohLyv5jxj71Gl3lHe9c+6hdUmNn+AeCmekcXkr2t8 4ODynDmikW8mZfbbmB6VRYrEVWJnmGoRBrisZBIdIJLLhasOGgIC9K2r3tOjRslD 9osLqgnKjTw72nESRw4Z/C1xuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:54:09 2026 by rpki-client