$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: fVeYhW46p9EWmpbyeyyLox5tpZ3dFffFKTZ7pc2Cyjw= Subject key identifier: 47:04:58:E1:4D:1E:31:F4:F5:FC:D4:39:E7:B6:81:6A:75:28:EF:F4 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1B1D Signing time: Wed 22 Jul 2026 16:23:38 +0000 Manifest this update: Wed 22 Jul 2026 16:23:38 +0000 Manifest next update: Wed 29 Jul 2026 16:23:38 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: XuH+pJG9CxRN6HmYVmLNFvBP4r9WkwkRFjkLrMo0kVY=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6979 (0x1b43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Jul 22 16:23:38 2026 GMT Not After : Jul 29 16:23:38 2026 GMT Subject: CN=6a60ee8a-8e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:b5:75:5c:df:b5:d3:23:01:2c:95:26:b1: 53:95:31:19:54:a0:13:ea:ea:81:ec:a6:cd:83:63: 1d:7a:cc:1a:69:8f:f1:2d:33:cf:7d:c5:ab:2c:b9: 77:8c:25:e8:d7:8c:9d:8d:77:33:e9:3b:8a:80:5c: aa:5c:d2:9e:1c:c8:35:88:84:73:9a:c6:e9:54:8a: 02:ee:7f:ba:5b:16:7b:a0:fc:49:78:17:71:68:bf: c8:47:e0:56:8b:ec:a6:ce:19:bc:7a:99:cd:57:f8: 00:d3:f4:4e:50:f1:0d:4e:e0:3c:58:1e:6c:52:db: 67:29:4d:08:2f:ed:ce:68:f3:4d:88:68:bf:43:cd: f6:af:8e:2b:52:59:b0:8a:fc:09:73:00:6b:ec:ac: 73:a7:4f:2d:5c:09:a8:f6:fd:2a:65:64:28:c8:de: d2:79:df:ba:5f:7e:ab:86:eb:d6:54:0e:cb:34:e7: 7e:18:90:cc:6a:84:d8:1f:20:a9:02:d6:e0:44:c9: 56:35:cb:f3:5d:fb:28:90:da:15:3e:8a:fa:33:49: af:2b:f5:e6:a7:7f:df:54:98:0a:eb:8c:c9:12:58: a0:2b:a3:1d:52:83:f3:b8:07:9c:5f:b2:52:3e:67: e4:af:b3:b3:70:ed:ac:df:2d:db:bb:84:b8:69:e3: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:58:E1:4D:1E:31:F4:F5:FC:D4:39:E7:B6:81:6A:75:28:EF:F4 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:f2:c6:7d:14:90:19:7c:e5:8d:28:3e:88:b6:9f:2f:d8: ba:2b:0d:e3:ff:32:3c:ba:b7:b7:4b:ef:29:4f:d1:64:73:25: 68:43:21:57:ca:1b:bc:8e:35:31:60:58:03:ef:ae:72:2b:8c: 5d:d2:9e:68:7e:02:8b:d7:fc:70:50:36:8e:a6:b1:a2:40:6a: a3:e2:c6:11:59:c0:4d:35:2c:32:f7:66:e1:66:d6:69:c1:1d: 15:03:39:55:af:13:0d:cc:b8:a6:64:09:81:58:df:65:8e:bf: 19:8c:08:2e:cd:e5:39:81:64:0b:8e:ba:bc:f4:95:da:fd:dd: 1e:0e:4a:a2:3a:a0:63:84:16:6a:e8:75:81:01:ca:11:23:7a: f5:17:80:63:79:fe:94:c9:2d:3a:c2:8b:31:0e:db:4b:38:d3: 7c:dd:79:62:f2:e3:aa:5f:70:a7:4c:d7:12:71:ea:e6:45:39: 6c:42:fb:d4:da:cf:2f:fe:a9:7f:f8:67:a6:62:7d:80:75:41: 00:45:64:81:4f:18:e7:3d:12:e5:37:4f:95:7f:c5:cc:7d:e4: d7:31:b4:b3:05:2b:f0:1f:eb:98:fc:2d:0e:2c:81:67:46:80: 5d:4c:41:2f:2c:8d:2b:bf:f8:7c:2d:44:28:05:6c:54:45:12: 8d:74:ae:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwNzIyMTYyMzM4WhcNMjYwNzI5MTYyMzM4WjAYMRYwFAYD VQQDEw02YTYwZWU4YS04ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1a1dVzftdMjASyVJrFTlTEZVKAT6uqB7KbNg2MdeswaaY/xLTPPfcWrLLl3 jCXo14ydjXcz6TuKgFyqXNKeHMg1iIRzmsbpVIoC7n+6WxZ7oPxJeBdxaL/IR+BW i+ymzhm8epnNV/gA0/ROUPENTuA8WB5sUttnKU0IL+3OaPNNiGi/Q832r44rUlmw ivwJcwBr7Kxzp08tXAmo9v0qZWQoyN7Sed+6X36rhuvWVA7LNOd+GJDMaoTYHyCp AtbgRMlWNcvzXfsokNoVPor6M0mvK/Xmp3/fVJgK64zJEligK6MdUoPzuAecX7JS Pmfkr7OzcO2s3y3bu4S4aeNZXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcEWOFN HjH09fzUOee2gWp1KO/0MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsIbyxn0UkBl85Y0oPoi2ny/YuisN4/8yPLq3t0vvKU/RZHMlaEMhV8obvI41 MWBYA++uciuMXdKeaH4Ci9f8cFA2jqaxokBqo+LGEVnATTUsMvdm4WbWacEdFQM5 Va8TDcy4pmQJgVjfZY6/GYwILs3lOYFkC466vPSV2v3dHg5KojqgY4QWauh1gQHK ESN69ReAY3n+lMktOsKLMQ7bSzjTfN15YvLjql9wp0zXEnHq5kU5bEL71NrPL/6p f/hnpmJ9gHVBAEVkgU8Y5z0S5TdPlX/FzH3k1zG0swUr8B/rmPwtDiyBZ0aAXUxB LyyNK7/4fC1EKAVsVEUSjXSugQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:22:19 2026 by rpki-client