$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: EOr7vq5pfgPNeUS74u/qPgPX7dlVAAilrbcRVCVbFRQ= Subject key identifier: 5B:3F:AA:15:FB:54:3D:24:BA:24:48:32:F1:9B:9F:D4:24:7F:AE:8E Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 3D Signing time: Thu 23 Jul 2026 10:33:36 +0000 Manifest this update: Thu 23 Jul 2026 10:33:35 +0000 Manifest next update: Thu 30 Jul 2026 10:33:35 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: 4BWZZ65E+8jjfNrKS/4nWKBCreq+UhYkazOU+WphK+s=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Jul 23 10:33:35 2026 GMT Not After : Jul 30 10:33:35 2026 GMT Subject: CN=6a61ee00-222d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:9c:52:6e:f0:a2:a9:50:6d:e1:dd:f0:59: 91:f5:ee:8b:ed:6a:ab:ba:61:6c:db:14:38:98:21: 1e:68:10:90:69:69:04:3c:6e:5d:ac:c9:fa:e6:f8: 84:12:d4:ca:08:5a:6c:97:b8:e0:a2:7d:c7:03:7f: 87:56:7b:0d:3c:1d:aa:99:7e:b4:c1:36:11:7f:0c: e5:84:2b:8c:54:37:df:e5:5a:84:76:b4:86:c8:85: d0:3a:04:6a:9c:ea:22:bd:58:37:96:58:16:9d:20: 6e:8d:b9:fc:2e:e5:ca:0e:93:b6:86:69:a1:b5:43: 51:35:ef:a1:0c:f9:89:a1:fa:1d:f3:84:c2:6b:f7: 3b:98:b9:13:f0:e3:b8:65:35:9e:aa:aa:2e:37:33: 61:8f:d6:b0:e4:83:d2:ff:f1:a4:3f:c9:b1:81:a2: 4f:8b:ca:26:74:14:a6:5f:f5:35:78:0f:d2:8b:fd: 6b:54:9f:d2:b1:4a:f9:b8:ec:66:4e:c6:90:8d:88: d9:f9:87:30:2e:3c:d1:9a:90:4a:16:8a:78:b0:bb: d2:8d:e3:70:46:8a:ae:00:29:c8:ec:b8:65:b3:22: 6a:29:f7:b9:f3:6c:7e:3f:0c:da:d6:74:fc:e9:4f: bf:1f:c3:2d:6d:7c:df:14:da:a9:c5:37:f1:61:55: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:AA:15:FB:54:3D:24:BA:24:48:32:F1:9B:9F:D4:24:7F:AE:8E X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:cd:4e:10:8c:b0:d4:d7:a1:f0:ba:d1:39:08:f9:74:34:8e: dc:3a:5b:59:17:78:44:38:20:4f:3e:64:67:28:93:bc:fa:42: 38:9c:04:8d:1f:c7:bc:0d:06:cf:da:16:4e:b0:ce:7b:cb:49: 86:f7:9a:dc:6b:67:ae:ce:ca:3f:ea:0c:ec:ff:b0:3a:8e:3a: e7:ce:49:07:cf:5c:2b:1b:56:81:53:60:34:4d:10:ac:29:ff: 6a:04:c1:e8:63:24:e1:72:ee:ea:6e:96:40:af:3f:bb:9a:2b: f2:7d:36:69:fb:34:a7:ba:56:a4:a3:12:6f:f2:a8:12:ce:32: 69:34:aa:47:79:72:e7:63:e5:90:55:f1:ae:0e:13:2e:82:ef: bd:7e:9e:90:ce:7e:2e:fc:4c:30:f4:1e:da:3c:4f:70:16:a3: ea:cb:79:c8:7d:21:80:15:dc:7e:ae:58:ea:50:b3:31:47:83: 99:eb:7a:cc:1c:9a:ae:3b:b1:48:db:8a:ac:56:13:c6:91:38: 61:97:78:01:9c:ea:72:94:71:e3:a3:fa:c8:7a:a0:0d:08:ae: 54:9c:5c:bc:ae:a9:ed:81:5d:de:50:ba:f8:f9:1e:9d:59:e4: a7:fd:47:f2:09:03:01:3d:c1:e6:e0:d4:1c:05:8c:95:5e:1b: 19:71:5c:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA3MjMxMDMzMzVaFw0yNjA3MzAxMDMzMzVaMBgxFjAUBgNV BAMTDTZhNjFlZTAwLTIyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGUpxSbvCiqVBt4d3wWZH17ovtaqu6YWzbFDiYIR5oEJBpaQQ8bl2syfrm+IQS 1MoIWmyXuOCifccDf4dWew08HaqZfrTBNhF/DOWEK4xUN9/lWoR2tIbIhdA6BGqc 6iK9WDeWWBadIG6Nufwu5coOk7aGaaG1Q1E176EM+Ymh+h3zhMJr9zuYuRPw47hl NZ6qqi43M2GP1rDkg9L/8aQ/ybGBok+LyiZ0FKZf9TV4D9KL/WtUn9KxSvm47GZO xpCNiNn5hzAuPNGakEoWiniwu9KN43BGiq4AKcjsuGWzImop97nzbH4/DNrWdPzp T78fwy1tfN8U2qnFN/FhVVLhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWz+qFftU PSS6JEgy8Zuf1CR/ro4wHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRzU4QjLDU16HwutE5CPl0NI7cOltZF3hEOCBPPmRnKJO8+kI4nASNH8e8DQbP 2hZOsM57y0mG95rca2euzso/6gzs/7A6jjrnzkkHz1wrG1aBU2A0TRCsKf9qBMHo YyThcu7qbpZArz+7mivyfTZp+zSnulakoxJv8qgSzjJpNKpHeXLnY+WQVfGuDhMu gu+9fp6Qzn4u/Eww9B7aPE9wFqPqy3nIfSGAFdx+rljqULMxR4OZ63rMHJquO7FI 24qsVhPGkThhl3gBnOpylHHjo/rIeqANCK5UnFy8rqntgV3eULr4+R6dWeSn/Ufy CQMBPcHm4NQcBYyVXhsZcVyX -----END CERTIFICATE-----Generated at Fri Jul 24 03:17:19 2026 by rpki-client