$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: DEKiBLXZWoV1PT66xx3HhkYadAwag3vTlXMTp8hHfug= Subject key identifier: 2E:67:F1:D4:6F:5F:84:2E:FC:F9:F3:52:E5:E5:57:77:5C:5E:35:3E Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 0AE8 Signing time: Wed 22 Jul 2026 19:45:25 +0000 Manifest this update: Wed 22 Jul 2026 19:45:24 +0000 Manifest next update: Wed 29 Jul 2026 19:45:24 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: xb5C1FTzfYzifN++ZEr5NHXUVv9eDiOv20HzJo9R4Jk=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Validity Not Before: Jul 22 19:45:24 2026 GMT Not After : Jul 29 19:45:24 2026 GMT Subject: CN=6a611dd5-f0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2a:59:4e:14:ab:9d:0b:02:b5:84:de:13:ff: 99:82:ec:71:9e:58:36:69:53:42:de:36:f6:09:35: 0c:50:97:94:a7:45:c0:4a:0c:c5:10:1e:94:03:b0: 0f:24:eb:ae:bf:a4:1e:da:d6:b6:da:c6:78:d0:29: ba:a7:a1:30:e2:97:e9:94:e4:55:00:0e:d0:81:b6: 80:61:42:54:bf:43:2e:6b:4e:2f:9b:93:5a:96:bc: 76:87:5e:97:75:29:ec:41:d7:54:dd:d3:f0:16:73: 6f:b7:5b:1e:e9:11:1f:bd:e2:ae:e6:0d:13:ef:13: 67:73:ca:82:3a:53:ea:37:ab:a2:63:39:48:b0:f3: 9b:17:1f:12:cc:dd:24:a3:bf:62:f9:ee:13:51:2c: 2f:4c:13:0d:55:09:54:cc:30:48:97:03:52:5e:8c: b7:9d:99:b7:bd:d5:3a:00:1d:bd:10:7a:22:78:2f: ba:18:df:cf:14:45:b3:88:49:65:24:44:43:7a:d9: 0e:66:8d:a0:cb:30:e2:bf:44:64:ae:11:be:c4:7f: 4c:18:7a:ac:f8:17:e1:e3:a8:7b:81:ab:7f:0f:fa: 94:1f:de:85:6d:01:60:e2:c2:7a:c7:db:da:97:56: be:19:38:5a:03:32:7e:f9:aa:d4:4a:0e:55:d9:fc: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:67:F1:D4:6F:5F:84:2E:FC:F9:F3:52:E5:E5:57:77:5C:5E:35:3E X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b6:73:4b:51:a3:9e:0b:c2:ab:4e:46:40:8a:54:df:d1:28: 69:81:3b:24:b7:40:6a:62:69:1a:d8:8a:dd:6d:ee:46:ec:b6: ee:a6:fb:36:65:f3:21:50:e5:20:d7:7c:fe:3a:81:c9:5b:a2: 44:15:4b:d7:c8:ce:3d:82:c0:ce:52:21:0e:23:a0:38:c2:5b: c7:6a:9b:6b:55:6c:d2:f6:32:27:89:b9:52:b0:9e:0e:a2:fb: 26:40:8d:7f:5a:33:c2:6d:7e:45:53:7c:01:03:cd:ff:d2:15: 6b:ac:c8:e8:5e:2c:89:12:a6:a2:29:42:2a:14:e9:4e:ce:6f: d0:1b:5c:ca:47:ad:ff:25:28:d7:a6:cc:d8:3c:c6:37:4e:a2: 81:50:58:ca:c0:b2:cf:6e:61:16:bb:ea:a3:ec:d3:80:bd:61: 90:e5:33:02:84:f7:5f:5b:57:08:32:3e:89:7e:7e:48:c6:5d: 3b:28:97:02:ac:0f:19:2a:f2:e4:71:00:12:0f:ea:45:09:fb: f3:b9:7c:21:69:fa:6e:01:7e:34:11:e7:b2:7b:9e:d5:77:b0: 20:97:a4:8e:ff:94:7d:48:41:15:c0:54:a3:22:97:be:76:47: 7a:ec:6d:c3:c1:67:ab:2f:10:53:00:7e:40:b4:ff:a0:c2:47: aa:2c:1e:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjYwNzIyMTk0NTI0WhcNMjYwNzI5MTk0NTI0WjAYMRYwFAYD VQQDEw02YTYxMWRkNS1mMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SpZThSrnQsCtYTeE/+Zguxxnlg2aVNC3jb2CTUMUJeUp0XASgzFEB6UA7AP JOuuv6Qe2ta22sZ40Cm6p6Ew4pfplORVAA7QgbaAYUJUv0Mua04vm5Nalrx2h16X dSnsQddU3dPwFnNvt1se6REfveKu5g0T7xNnc8qCOlPqN6uiYzlIsPObFx8SzN0k o79i+e4TUSwvTBMNVQlUzDBIlwNSXoy3nZm3vdU6AB29EHoieC+6GN/PFEWziEll JERDetkOZo2gyzDiv0RkrhG+xH9MGHqs+Bfh46h7gat/D/qUH96FbQFg4sJ6x9va l1a+GThaAzJ++arUSg5V2fx5RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5n8dRv X4Qu/PnzUuXlV3dcXjU+MB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwLZzS1GjngvCq05GQIpU39EoaYE7JLdAamJpGtiK3W3uRuy27qb7NmXzIVDl INd8/jqByVuiRBVL18jOPYLAzlIhDiOgOMJbx2qba1Vs0vYyJ4m5UrCeDqL7JkCN f1ozwm1+RVN8AQPN/9IVa6zI6F4siRKmoilCKhTpTs5v0Btcyket/yUo16bM2DzG N06igVBYysCyz25hFrvqo+zTgL1hkOUzAoT3X1tXCDI+iX5+SMZdOyiXAqwPGSry 5HEAEg/qRQn787l8IWn6bgF+NBHnsnue1XewIJekjv+UfUhBFcBUoyKXvnZHeuxt w8Fnqy8QUwB+QLT/oMJHqiweCQ== -----END CERTIFICATE-----Generated at Fri Jul 24 21:07:17 2026 by rpki-client