$ rpki-client -vvf rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft File: KXr2WH-YpJnreNLMrjYW70KfV1A.mft (raw, json) Hash identifier: caTuxovo8PoSwazSeDbu9xjEkDEadKQM/QVzChX/REw= Subject key identifier: B8:D6:BD:0B:4E:32:6E:62:D5:9B:6A:CF:0D:8E:A0:20:69:EC:96:91 Authority key identifier: 29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 Certificate issuer: /CN=A91411BC/serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Certificate serial: 1402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft Manifest number: 13F7 Signing time: Wed 22 Jul 2026 17:01:51 +0000 Manifest this update: Wed 22 Jul 2026 17:01:50 +0000 Manifest next update: Wed 29 Jul 2026 17:01:50 +0000 Files and hashes: 1: KXr2WH-YpJnreNLMrjYW70KfV1A.crl (hash: 1racC90nJ0VGqktXNvhqWO6bJ2gSRNpbZwiytir8Lp4=) 2: B4996A22AC3411E88623474BC4F9AE02.roa (hash: RPjXeL3Zl8P6QkaRaUeCd76+wyQHC30Y9Dr1jaF8lPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5122 (0x1402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411BC, serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Validity Not Before: Jul 22 17:01:50 2026 GMT Not After : Jul 29 17:01:50 2026 GMT Subject: CN=6a60f77f-34a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:27:25:69:32:1d:41:70:e2:6c:51:a7:c7: 3d:8f:0e:17:82:96:d8:af:2e:9e:5e:0f:11:93:f4: 69:9d:79:01:f1:5b:42:dc:df:d5:94:bf:cc:60:48: 5d:7b:05:f1:85:91:2b:d1:bc:81:bd:2b:5b:0c:70: 79:5d:59:f5:46:29:06:06:f7:ef:6a:53:a4:ee:73: ea:8a:b7:31:93:cb:94:26:7b:3c:aa:13:03:d3:01: 81:7d:d7:8a:6e:76:5e:c5:57:62:b2:ec:5a:a7:91: e9:32:5f:cc:d0:28:34:bf:84:b8:7c:a2:c5:c4:1a: 53:4b:a1:9e:ca:87:87:b2:39:e0:1f:d1:ed:a5:17: 02:a4:5f:2a:f9:ef:13:8a:b0:8d:fe:74:f8:7f:da: 54:34:e0:a0:18:34:c6:08:92:ff:a4:2b:04:8f:f5: 9b:3b:7f:95:a3:6d:d2:09:9a:39:fc:22:f4:df:c7: e9:89:4a:4e:02:c8:17:ca:43:7f:c4:3f:e7:c0:d7: 7f:9f:f0:a0:cf:d2:8f:c3:04:ba:a0:25:4f:8d:f4: 08:45:b3:9f:ca:08:b4:94:98:ba:d5:47:dc:1b:20: 3d:66:8f:4f:02:ee:03:e8:df:86:4c:1a:39:eb:d2: 1d:62:3a:39:b1:21:f1:6e:32:2d:b5:ab:5e:a1:e4: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:BD:0B:4E:32:6E:62:D5:9B:6A:CF:0D:8E:A0:20:69:EC:96:91 X509v3 Authority Key Identifier: keyid:29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:12:f0:41:45:7d:aa:eb:be:c4:4b:47:91:c2:2d:6c:f9:ba: 89:3a:a1:4c:de:29:cf:4a:96:c0:ca:45:36:37:19:76:4b:60: a6:51:19:49:bc:cf:86:f3:46:86:29:a8:9c:ae:7b:03:ee:54: e9:8a:ce:1d:cc:06:de:21:0c:08:78:23:19:f3:a6:e1:e5:75: 02:53:bb:f6:5f:72:70:20:e1:d2:c6:cc:f7:f4:dd:7f:e3:c6: 72:08:e3:3c:de:5e:64:d2:83:21:23:a3:30:0b:2a:4f:b5:e1: b3:d9:a2:f7:15:40:3c:0f:43:d1:e0:0c:fa:a3:07:55:4c:ce: f3:f4:d4:a6:fb:10:9f:25:d8:d6:be:7f:75:97:fe:02:16:d4: 9d:bd:ba:31:29:42:fb:6b:17:c6:71:6c:90:94:01:d8:0c:ac: ab:af:24:04:a9:85:83:f8:4a:71:c3:88:3b:d0:74:67:2b:65: 06:17:d4:a8:e5:34:f2:45:ab:8f:5d:36:dc:c7:fb:8e:10:be: 89:b4:1a:ce:c7:01:af:15:b5:7b:21:51:fd:a7:d6:10:b5:77: 54:d2:f8:9c:e8:1a:4e:7a:ee:7a:4a:47:28:6e:22:db:f0:1c: 5b:51:ba:1d:84:fd:c9:0c:f8:44:9b:60:7a:b6:8c:cb:e9:a1: 03:d2:0b:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQkMxMTAvBgNVBAUTKDI5N0FGNjU4N0Y5OEE0OTlFQjc4RDJDQ0FFMzYxNkVG NDI5RjU3NTAwHhcNMjYwNzIyMTcwMTUwWhcNMjYwNzI5MTcwMTUwWjAYMRYwFAYD VQQDEw02YTYwZjc3Zi0zNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDInJWkyHUFw4mxRp8c9jw4XgpbYry6eXg8Rk/RpnXkB8VtC3N/VlL/MYEhd ewXxhZEr0byBvStbDHB5XVn1RikGBvfvalOk7nPqircxk8uUJns8qhMD0wGBfdeK bnZexVdisuxap5HpMl/M0Cg0v4S4fKLFxBpTS6GeyoeHsjngH9HtpRcCpF8q+e8T irCN/nT4f9pUNOCgGDTGCJL/pCsEj/WbO3+Vo23SCZo5/CL038fpiUpOAsgXykN/ xD/nwNd/n/Cgz9KPwwS6oCVPjfQIRbOfygi0lJi61UfcGyA9Zo9PAu4D6N+GTBo5 69IdYjo5sSHxbjIttateoeQlcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjWvQtO Mm5i1Ztqzw2OoCBp7JaRMB8GA1UdIwQYMBaAFCl69lh/mKSZ63jSzK42Fu9Cn1dQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCQy9FMzE3MUIwMkFD MzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBKbnJlTkxNcmpZVzcwS2ZW MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYcjJXSC1ZcEpucmVOTE1yallXNzBLZlYxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCQy9FMzE3MUIwMkFDMzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBK bnJlTkxNcmpZVzcwS2ZWMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArhLwQUV9quu+xEtHkcItbPm6iTqhTN4pz0qWwMpFNjcZdktgplEZSbzPhvNG himonK57A+5U6YrOHcwG3iEMCHgjGfOm4eV1AlO79l9ycCDh0sbM9/Tdf+PGcgjj PN5eZNKDISOjMAsqT7Xhs9mi9xVAPA9D0eAM+qMHVUzO8/TUpvsQnyXY1r5/dZf+ AhbUnb26MSlC+2sXxnFskJQB2Aysq68kBKmFg/hKccOIO9B0ZytlBhfUqOU08kWr j1023Mf7jhC+ibQazscBrxW1eyFR/afWELV3VNL4nOgaTnruekpHKG4i2/AcW1G6 HYT9yQz4RJtgeraMy+mhA9ILMQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:03:36 2026 by rpki-client