$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: 0uljMJlUdXAKskWe4+A+I6KbItXWxVhX3BJ+qGoAuRY= Subject key identifier: 60:33:46:4B:7A:4F:61:75:BB:03:3D:BC:4D:8E:C0:2B:82:C8:9D:6D Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 03 Signing time: Thu 23 Jul 2026 03:00:47 +0000 Manifest this update: Thu 23 Jul 2026 03:00:46 +0000 Manifest next update: Thu 30 Jul 2026 03:00:46 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: dpbi9y3nYMsYVnzy4DfeD3Zk8ozZTPGnXIbC5mX2a4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Jul 23 03:00:46 2026 GMT Not After : Jul 30 03:00:46 2026 GMT Subject: CN=6a6183de-f2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:ac:53:6e:08:47:fd:63:63:a1:2d:87:07: ce:d8:6a:cd:a7:b3:9f:e9:9f:c4:fe:56:cd:22:8d: 53:7f:10:88:5f:35:fb:f2:21:5d:08:91:61:48:3d: 2c:39:a0:49:43:75:5f:b9:b1:10:90:21:b9:d0:02: 03:54:3a:66:05:6c:d1:cf:7e:ee:3f:5c:8b:b2:c4: 0a:cb:f7:11:23:8a:e0:8e:d9:5b:d8:c8:8c:02:38: b5:d0:16:24:81:35:be:77:e4:5e:50:f5:fc:6f:95: f5:c4:35:a7:8d:c9:31:79:59:ce:6d:3c:62:da:2f: 65:f2:d6:21:2b:d8:e0:69:61:37:2b:0f:89:f6:8f: ee:09:dd:ed:5e:ad:40:37:8d:e6:60:c6:95:36:93: 1c:07:f6:d8:e9:f9:59:4f:48:cb:c5:a7:9f:59:bb: cd:68:70:fa:5d:0c:d8:1e:b2:3d:a6:0a:37:94:19: 4e:ff:fb:74:55:54:80:74:f7:6a:63:40:b9:81:19: 21:b3:5d:bd:e3:a7:43:2f:7b:9d:54:10:4c:0e:f0: 51:2f:aa:c8:56:95:e7:fd:a2:3a:55:7c:25:c2:72: 9e:07:bb:88:0c:1f:d6:0c:d5:dd:76:70:0f:bd:77: e1:cd:ab:01:b1:83:dc:b5:37:d4:71:ed:d7:ff:ae: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:46:4B:7A:4F:61:75:BB:03:3D:BC:4D:8E:C0:2B:82:C8:9D:6D X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:29:2f:36:48:55:5f:c6:d5:fe:65:3b:94:1e:6a:3a:91:86: e2:ee:44:8e:d9:9e:97:21:34:e4:7e:72:96:2f:c0:b5:8e:58: ad:30:e2:f3:15:60:20:86:33:96:0f:e0:e8:ed:42:4b:80:1a: 49:2f:5b:5b:a6:0a:86:99:11:1c:1d:ee:17:d2:48:65:04:d7: f6:d8:4a:5d:dc:23:82:06:f2:ce:97:cb:13:c5:72:3a:03:6e: 4b:3f:00:d2:ff:e1:b3:23:45:2c:a1:7b:5c:b5:cb:5b:41:5d: a2:19:bf:d4:b5:48:33:f3:93:79:25:f8:cf:09:92:0c:11:61: 97:89:82:fd:e5:2d:b7:b7:b0:3b:0f:89:14:62:6a:35:45:92: ed:96:d4:58:0e:80:b3:ef:c2:29:04:bc:1b:97:f7:9a:e2:6f: cc:8a:c8:73:31:19:b1:da:45:42:79:cd:1d:34:76:42:09:28: 43:a3:da:20:30:22:8e:c2:3a:a6:a5:25:22:7a:5e:bf:a4:19: eb:31:8d:a9:63:4e:12:26:54:38:f7:5c:19:b5:22:d6:81:7d: ea:7e:18:ea:f4:1b:76:16:7b:85:58:fb:ac:99:d6:14:dd:0a: 15:91:18:75:bc:8a:1d:eb:0f:05:c7:be:f0:b3:86:d3:9d:79: 08:56:3d:9e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjA3MjMwMzAwNDZaFw0yNjA3MzAwMzAwNDZaMBgxFjAUBgNV BAMTDTZhNjE4M2RlLWYyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrEKxTbghH/WNjoS2HB87Yas2ns5/pn8T+Vs0ijVN/EIhfNfvyIV0IkWFIPSw5 oElDdV+5sRCQIbnQAgNUOmYFbNHPfu4/XIuyxArL9xEjiuCO2VvYyIwCOLXQFiSB Nb535F5Q9fxvlfXENaeNyTF5Wc5tPGLaL2Xy1iEr2OBpYTcrD4n2j+4J3e1erUA3 jeZgxpU2kxwH9tjp+VlPSMvFp59Zu81ocPpdDNgesj2mCjeUGU7/+3RVVIB092pj QLmBGSGzXb3jp0Mve51UEEwO8FEvqshWlef9ojpVfCXCcp4Hu4gMH9YM1d12cA+9 d+HNqwGxg9y1N9Rx7df/ro4nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYDNGS3pP YXW7Az28TY7AK4LInW0wHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWKS82SFVfxtX+ZTuUHmo6kYbi7kSO2Z6XITTkfnKWL8C1jlitMOLzFWAghjOW D+Do7UJLgBpJL1tbpgqGmREcHe4X0khlBNf22Epd3COCBvLOl8sTxXI6A25LPwDS /+GzI0UsoXtctctbQV2iGb/UtUgz85N5JfjPCZIMEWGXiYL95S23t7A7D4kUYmo1 RZLtltRYDoCz78IpBLwbl/ea4m/MishzMRmx2kVCec0dNHZCCShDo9ogMCKOwjqm pSUiel6/pBnrMY2pY04SJlQ491wZtSLWgX3qfhjq9Bt2FnuFWPusmdYU3QoVkRh1 vIod6w8Fx77ws4bTnXkIVj2e -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:56 2026 by rpki-client