$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft File: KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json) Hash identifier: idYrXj0shAgBnBR+OnDlKfC+WpHlP0mG+Oqf1M2TdtQ= Subject key identifier: 37:69:2C:4B:77:8D:38:32:AB:06:E5:C3:C7:70:DC:B5:86:F4:2A:83 Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1 Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft Manifest number: 01D3 Signing time: Thu 23 Jul 2026 04:59:59 +0000 Manifest this update: Thu 23 Jul 2026 04:59:58 +0000 Manifest next update: Thu 30 Jul 2026 04:59:58 +0000 Files and hashes: 1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: BV12CPwWXC3davLPRyiDQkSHqoMgwcmvZ3c2veyjNwM=) 2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1 Validity Not Before: Jul 23 04:59:58 2026 GMT Not After : Jul 30 04:59:58 2026 GMT Subject: CN=6a619fcf-c053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:22:da:9b:0a:e6:85:4d:dd:f3:ec:0b:06: 0c:fb:ec:b7:ce:b4:bf:c1:50:d0:54:05:e3:4e:8b: 24:82:e0:72:f7:a7:36:ba:15:96:b6:72:85:61:de: a1:0b:c5:2a:7d:48:ca:1a:22:3a:b2:25:b4:9b:8c: 65:ab:65:4f:53:7a:f8:27:bb:48:b9:cd:ed:40:07: ed:f9:79:b2:5c:e6:1b:05:7b:be:d5:cf:3d:85:08: 52:9b:6d:02:4b:98:17:a1:e9:35:57:69:2c:98:3a: 4d:d2:df:3e:39:31:19:20:4b:bd:3e:81:ab:d9:de: 2b:4b:14:85:a0:27:b9:ef:81:0e:83:b1:a6:80:8f: 82:23:02:65:17:fe:00:fd:ad:ba:d1:39:98:4d:d2: 9f:b3:e2:82:79:a6:03:cd:54:45:55:4d:72:97:10: 4f:66:af:f8:18:28:6a:1e:23:c5:91:f1:af:a4:f6: ef:d7:e5:97:40:7c:d8:c8:12:ea:b8:d4:cb:93:a3: e9:3d:9d:ad:00:3a:b0:67:c0:a3:b9:84:78:1e:7a: f3:45:3f:f4:46:ab:d5:97:dd:7f:2c:d8:e4:39:0e: c8:fb:67:e4:c1:9d:30:f6:2f:a1:95:82:87:d5:53: 4d:99:6a:7f:8e:3c:d1:b5:a5:40:f3:1f:dc:b6:a0: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:69:2C:4B:77:8D:38:32:AB:06:E5:C3:C7:70:DC:B5:86:F4:2A:83 X509v3 Authority Key Identifier: keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:77:e0:3b:d6:50:51:e3:84:39:4a:17:3f:de:5c:6b:52:d9: e2:51:67:84:c4:4d:71:5d:4e:b6:65:ec:ab:ff:37:2e:0e:de: 62:07:7c:7a:e7:35:0d:5c:44:de:48:14:f7:39:55:f1:3f:52: 2d:4b:1e:07:4e:76:a9:9f:a3:d3:84:73:72:94:4c:00:87:e6: 1f:9d:d0:71:cb:ef:08:c9:5f:ae:50:75:ef:0c:af:66:fa:ce: 6b:e0:d3:f4:52:aa:5e:5d:51:72:a0:9a:47:35:a2:0e:3d:d3: ca:21:8b:f9:0d:81:01:38:ed:c8:71:73:37:fc:de:bf:5f:d4: c7:eb:3c:5f:c9:65:66:6b:5f:e5:83:9f:48:9b:e8:1c:01:25: c9:ce:6b:d7:29:41:62:ee:08:01:7c:ac:7a:fd:30:b3:7d:22: a0:d3:11:81:b7:cc:f7:a7:be:8b:96:57:f6:58:23:09:4a:7b: f3:81:3d:27:11:e5:04:31:96:76:4e:a9:76:de:31:ca:8c:e5: 47:f7:94:18:26:89:04:b6:c4:47:30:33:0e:dd:98:e8:5f:95: 59:34:34:7c:75:4a:39:76:1f:12:b7:31:70:4e:34:dd:11:6c: 52:58:7f:0c:d4:36:3b:ee:57:98:17:76:54:27:53:e8:c7:a2: bf:c2:e7:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGMjcxMTAvBgNVBAUTKDJBRDNEODhCNUU4RTBCMDUxNDFBM0JDOTJGODVFNDI3 M0EwNTYyQTEwHhcNMjYwNzIzMDQ1OTU4WhcNMjYwNzMwMDQ1OTU4WjAYMRYwFAYD VQQDEw02YTYxOWZjZi1jMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IYi2psK5oVN3fPsCwYM++y3zrS/wVDQVAXjToskguBy96c2uhWWtnKFYd6h C8UqfUjKGiI6siW0m4xlq2VPU3r4J7tIuc3tQAft+XmyXOYbBXu+1c89hQhSm20C S5gXoek1V2ksmDpN0t8+OTEZIEu9PoGr2d4rSxSFoCe574EOg7GmgI+CIwJlF/4A /a260TmYTdKfs+KCeaYDzVRFVU1ylxBPZq/4GChqHiPFkfGvpPbv1+WXQHzYyBLq uNTLk6PpPZ2tADqwZ8CjuYR4HnrzRT/0RqvVl91/LNjkOQ7I+2fkwZ0w9i+hlYKH 1VNNmWp/jjzRtaVA8x/ctqBDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdpLEt3 jTgyqwblw8dw3LWG9CqDMB8GA1UdIwQYMBaAFCrT2ItejgsFFBo7yS+F5Cc6BWKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkYyNy83QUNERjlBQUJC NkMxMUVFQTY4MEFFNkRDNEY5QUUwMi9LdFBZaTE2T0N3VVVHanZKTDRYa0p6b0ZZ cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t0UFlpMTZPQ3dVVUdqdkpMNFhrSnpvRllxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkYyNy83QUNERjlBQUJCNkMxMUVFQTY4MEFFNkRDNEY5QUUwMi9LdFBZaTE2T0N3 VVVHanZKTDRYa0p6b0ZZcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXfgO9ZQUeOEOUoXP95ca1LZ4lFnhMRNcV1OtmXsq/83Lg7eYgd8euc1DVxE 3kgU9zlV8T9SLUseB052qZ+j04RzcpRMAIfmH53QccvvCMlfrlB17wyvZvrOa+DT 9FKqXl1RcqCaRzWiDj3TyiGL+Q2BATjtyHFzN/zev1/Ux+s8X8llZmtf5YOfSJvo HAElyc5r1ylBYu4IAXysev0ws30ioNMRgbfM96e+i5ZX9lgjCUp784E9JxHlBDGW dk6pdt4xyozlR/eUGCaJBLbERzAzDt2Y6F+VWTQ0fHVKOXYfErcxcE403RFsUlh/ DNQ2O+5XmBd2VCdT6Meiv8LnLQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:37 2026 by rpki-client