$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: 2q9PfQywD43VXrD0Zjzvrb/R0KqE+hmtxMSX5n0qVgI= Subject key identifier: D9:8E:F2:67:75:24:14:7E:1F:33:27:94:6E:EB:E5:84:43:6B:A4:C5 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 02AE Signing time: Thu 23 Jul 2026 02:34:20 +0000 Manifest this update: Thu 23 Jul 2026 02:34:20 +0000 Manifest next update: Thu 30 Jul 2026 02:34:20 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: it7vNXlsR8cygv2T56+DmyI1gpy65s5Og50liYa4B+c=) 2: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: kMMi/8OmT0mR/VhcquuqdqDaCulBhHLbbmKSYFipaTY=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: cjwShy2R/IX4SYp59PfaHcQX7DFi++AhauYtmORNm1w=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: u1hB8U1hN6pEx2UctdSv1a5Px7i9y+3zW2IYksB+Ljo=) 5: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: M5BB+4xyXJ07VUgtkrrHEOoWgM64NxOfbeW68iI1X3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jul 23 02:34:20 2026 GMT Not After : Jul 30 02:34:20 2026 GMT Subject: CN=6a617dac-6a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:09:bb:37:8b:d5:f4:7a:25:18:0a:ea:1e: 8c:02:49:d8:05:52:f9:4c:07:e5:87:74:60:dc:01: 58:2a:a2:fa:70:2e:50:40:51:3e:82:dc:10:37:67: 80:72:39:2b:21:4d:6d:7d:61:40:0f:c9:06:d9:4c: ab:3e:e0:4c:7d:48:f3:58:aa:33:e4:dd:fd:80:d1: 54:96:1f:7b:b0:7c:1c:16:e6:ed:11:8a:d1:3b:23: 32:d5:e9:2e:d9:52:d3:9c:6a:24:99:7e:d6:4f:17: 22:97:cf:4f:39:75:cf:17:88:42:19:64:0c:57:1a: a0:8e:21:51:fa:d7:d6:da:8e:0d:d1:e6:75:cb:41: 5f:fe:aa:b0:36:ae:d0:31:cd:03:ca:90:49:72:d1: 69:33:74:41:1c:36:17:8f:de:c3:af:dc:95:28:4e: e5:0a:57:4d:28:b9:25:8f:90:8e:2a:82:1b:08:57: 94:49:40:4a:d7:de:59:2e:d0:82:4e:ca:cf:62:3b: b2:69:45:ba:51:52:f2:26:6f:67:6a:96:c9:61:31: 27:35:6b:38:20:eb:66:42:2f:e7:98:e9:d4:95:be: df:36:88:00:cc:01:e8:e5:27:9f:43:36:26:a9:b6: a0:52:1d:b4:19:bc:6b:63:de:3f:56:3e:1a:55:2f: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:F2:67:75:24:14:7E:1F:33:27:94:6E:EB:E5:84:43:6B:A4:C5 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:24:41:2b:89:34:93:47:6f:fc:7c:55:95:47:27:69:83:77: 45:1f:b4:03:d2:54:dd:b9:e1:0d:0b:09:b7:e4:95:14:91:28: 6a:c8:7c:0e:46:61:e1:42:c5:73:04:7a:f5:fe:ee:ff:78:4a: 0d:0e:24:49:35:86:78:67:71:9c:26:5e:12:d2:75:52:ff:db: 82:28:85:11:ad:09:05:90:d5:7e:33:79:52:28:5d:11:65:67: 61:b1:31:93:87:5c:81:83:98:04:b5:d9:3b:33:4f:5c:e0:87: ea:52:c0:44:ce:63:cb:04:89:41:c2:69:ac:a2:4b:7b:d7:6a: 6f:9e:ff:53:93:d3:22:9c:ea:c8:1b:70:30:48:2e:fe:47:d7: ef:5e:3e:17:3c:57:fd:e5:4f:03:b8:20:88:1d:a8:27:94:3b: 9e:2e:55:79:a9:5a:e0:0a:8b:d7:54:3c:03:a9:55:df:32:6d: e5:35:9d:15:94:13:8a:f3:0b:22:78:71:8e:2e:20:a0:3a:01: 0f:14:c9:8b:30:6c:71:20:69:8f:cd:6c:20:f1:7d:eb:81:85: 4e:61:11:b1:27:cb:b6:50:9c:fc:75:79:9c:c5:b3:84:56:ba: 23:e7:4d:98:95:0b:59:70:60:c2:55:b6:2a:61:7c:10:6b:32: e4:c4:f4:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjYwNzIzMDIzNDIwWhcNMjYwNzMwMDIzNDIwWjAYMRYwFAYD VQQDEw02YTYxN2RhYy02YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS0JuzeL1fR6JRgK6h6MAknYBVL5TAflh3Rg3AFYKqL6cC5QQFE+gtwQN2eA cjkrIU1tfWFAD8kG2UyrPuBMfUjzWKoz5N39gNFUlh97sHwcFubtEYrROyMy1eku 2VLTnGokmX7WTxcil89POXXPF4hCGWQMVxqgjiFR+tfW2o4N0eZ1y0Ff/qqwNq7Q Mc0DypBJctFpM3RBHDYXj97Dr9yVKE7lCldNKLklj5COKoIbCFeUSUBK195ZLtCC TsrPYjuyaUW6UVLyJm9napbJYTEnNWs4IOtmQi/nmOnUlb7fNogAzAHo5SefQzYm qbagUh20GbxrY94/Vj4aVS+pZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmO8md1 JBR+HzMnlG7r5YRDa6TFMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUCRBK4k0k0dv/HxVlUcnaYN3RR+0A9JU3bnhDQsJt+SVFJEoash8DkZh4ULF cwR69f7u/3hKDQ4kSTWGeGdxnCZeEtJ1Uv/bgiiFEa0JBZDVfjN5UihdEWVnYbEx k4dcgYOYBLXZOzNPXOCH6lLARM5jywSJQcJprKJLe9dqb57/U5PTIpzqyBtwMEgu /kfX714+FzxX/eVPA7ggiB2oJ5Q7ni5Veala4AqL11Q8A6lV3zJt5TWdFZQTivML Inhxji4goDoBDxTJizBscSBpj81sIPF964GFTmERsSfLtlCc/HV5nMWzhFa6I+dN mJULWXBgwlW2KmF8EGsy5MT0FA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:55 2026 by rpki-client