$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft File: KbnmrAGSmMyglt6Jcancj3144dk.mft (raw, json) Hash identifier: xxlBE7sxY3M4/3xZO/HavkQX6HjIbmu3Morm0senLes= Subject key identifier: 3C:48:9D:92:77:1D:DB:12:8F:9F:FF:08:33:7A:40:0C:06:0C:12:F6 Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 12A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft Manifest number: 1298 Signing time: Wed 22 Jul 2026 17:11:10 +0000 Manifest this update: Wed 22 Jul 2026 17:11:10 +0000 Manifest next update: Wed 29 Jul 2026 17:11:10 +0000 Files and hashes: 1: KbnmrAGSmMyglt6Jcancj3144dk.crl (hash: L8yEYkSb/7t8lPQW6/Gtq7wy5maNSlus311fMA/1k8c=) 2: B6C2A27AF16A11E89550B621C4F9AE02.roa (hash: h+tzRhpe2AsXoHJ8CBPjL2tTeLXiRNNuDMYfrMmyPpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4774 (0x12a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Jul 22 17:11:10 2026 GMT Not After : Jul 29 17:11:10 2026 GMT Subject: CN=6a60f9ae-5213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:02:13:b4:01:8b:2a:e4:ce:c3:f1:ad:2d: 65:1f:76:56:ff:86:6f:4a:ac:d5:c3:5a:1b:c6:b9: 4c:46:50:00:82:17:63:3e:a1:2d:a3:f3:a6:af:86: 2c:5c:95:9d:5e:0e:05:2d:e8:09:a5:c0:dc:bf:f2: ca:56:9c:05:63:b0:d8:3b:20:0b:96:23:b8:80:a0: aa:e6:c4:9e:cd:3e:9a:61:db:77:aa:86:79:3d:4c: 42:e8:f8:88:88:e0:9e:06:1e:52:c9:39:10:ef:c4: 2f:3b:eb:c2:3f:5f:db:2f:e6:99:5d:ac:80:f1:ac: 0c:ca:29:31:86:ce:f6:7f:01:54:bb:9c:65:ae:ed: 44:81:7a:d3:94:ee:b7:25:36:d4:ab:b5:fe:5d:c3: 6c:07:b3:1e:2e:87:a0:f3:66:1c:47:7f:98:22:89: b3:d4:e4:f4:8a:fe:3a:54:32:bd:f4:36:08:e9:91: f4:7d:c2:ef:3c:11:25:6c:7c:8f:04:0c:19:c4:96: ba:39:20:a6:24:29:43:e4:2a:7e:9e:1c:51:d4:82: ab:c1:00:d9:6b:4b:23:b7:e1:2a:38:88:3b:7d:c9: f0:d9:22:a9:d7:a2:36:af:2f:b2:4c:be:67:2c:cb: 27:f0:03:d0:8b:65:05:30:d4:d5:83:2c:7a:4c:3b: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:9D:92:77:1D:DB:12:8F:9F:FF:08:33:7A:40:0C:06:0C:12:F6 X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7b:e7:ec:f0:ec:8f:92:d6:37:e3:4d:7e:1c:05:a2:e5:60: 61:fd:a7:28:b2:9d:e3:bf:76:66:f5:f8:21:11:91:ed:0a:fc: 5c:b3:ef:f4:e0:d0:89:a6:4b:45:9f:8e:54:3d:a7:7c:f1:ba: 70:96:b1:8d:c5:d1:d0:34:ef:61:a9:72:60:26:42:c8:ec:e9: 3d:5e:d3:a8:77:db:5e:72:74:1a:f1:3e:2f:9b:ac:72:7e:0c: 6b:5f:d2:e6:8a:09:e8:ef:c3:25:7c:b1:66:a0:89:6e:66:8b: 93:48:31:58:3b:86:33:70:92:de:77:4a:7c:89:a5:a9:a0:7b: ee:4d:a2:90:80:2e:ba:43:66:de:1a:6a:58:87:db:27:73:86: 8c:7f:c7:b1:7d:a2:96:c3:77:6f:1c:63:91:b3:95:d9:47:79: db:64:ad:ca:52:ba:af:eb:00:3e:57:a6:7d:97:df:40:e4:9e: 47:61:e0:54:bb:91:65:5e:c2:26:c1:48:e5:8f:32:1d:ea:1b: 74:13:8b:b0:5b:cf:6a:23:c1:ea:c1:91:2b:c2:74:b0:26:f0: 91:15:d6:3f:27:99:76:5e:e4:52:14:c3:82:6a:eb:d6:22:e3: 30:f5:c6:64:e6:8f:6c:a2:ff:25:a0:53:57:56:d8:61:9d:e1: 48:cc:2c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjYwNzIyMTcxMTEwWhcNMjYwNzI5MTcxMTEwWjAYMRYwFAYD VQQDEw02YTYwZjlhZS01MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u0CE7QBiyrkzsPxrS1lH3ZW/4ZvSqzVw1obxrlMRlAAghdjPqEto/Omr4Ys XJWdXg4FLegJpcDcv/LKVpwFY7DYOyALliO4gKCq5sSezT6aYdt3qoZ5PUxC6PiI iOCeBh5SyTkQ78QvO+vCP1/bL+aZXayA8awMyikxhs72fwFUu5xlru1EgXrTlO63 JTbUq7X+XcNsB7MeLoeg82YcR3+YIomz1OT0iv46VDK99DYI6ZH0fcLvPBElbHyP BAwZxJa6OSCmJClD5Cp+nhxR1IKrwQDZa0sjt+EqOIg7fcnw2SKp16I2ry+yTL5n LMsn8APQi2UFMNTVgyx6TDuRswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxInZJ3 HdsSj5//CDN6QAwGDBL2MB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzFFNC8zODI0N0E3MEYxNjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21N eWdsdDZKY2FuY2ozMTQ0ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3vn7PDsj5LWN+NNfhwFouVgYf2nKLKd4792ZvX4IRGR7Qr8XLPv9ODQiaZL RZ+OVD2nfPG6cJaxjcXR0DTvYalyYCZCyOzpPV7TqHfbXnJ0GvE+L5uscn4Ma1/S 5ooJ6O/DJXyxZqCJbmaLk0gxWDuGM3CS3ndKfImlqaB77k2ikIAuukNm3hpqWIfb J3OGjH/HsX2ilsN3bxxjkbOV2Ud522StylK6r+sAPlemfZffQOSeR2HgVLuRZV7C JsFI5Y8yHeobdBOLsFvPaiPB6sGRK8J0sCbwkRXWPyeZdl7kUhTDgmrr1iLjMPXG ZOaPbKL/JaBTV1bYYZ3hSMwsmQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:21 2026 by rpki-client