$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft File: KKyX2Zh-eNvuncufA3NcKDvOGGI.mft (raw, json) Hash identifier: P8IsTDiW5QKAJBGd1Kh/0OWYuwush0IT3hdr2cw91xM= Subject key identifier: 3B:CA:CA:D3:18:8A:E5:C9:4E:0A:50:05:3F:91:3D:B8:FA:30:CA:DA Authority key identifier: 28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 Certificate issuer: /CN=A9157BC3/serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft Manifest number: 0295 Signing time: Thu 23 Jul 2026 02:50:10 +0000 Manifest this update: Thu 23 Jul 2026 02:50:09 +0000 Manifest next update: Thu 30 Jul 2026 02:50:09 +0000 Files and hashes: 1: KKyX2Zh-eNvuncufA3NcKDvOGGI.crl (hash: SyqE60qfL9v1YWy9xNykYKRQ/SzqINTEQ7bq3GIFVJ8=) 2: 1FCD9DE2926611EDA99A9419C4F9AE02.roa (hash: VdzI+wpbVcWCFABnPCYqXynsNBJPpDkJq/yCZxhlV3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BC3, serialNumber=28AC97D9987E78DBEE9DCB9F03735C283BCE1862 Validity Not Before: Jul 23 02:50:09 2026 GMT Not After : Jul 30 02:50:09 2026 GMT Subject: CN=6a618162-a652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:8b:95:92:df:14:e3:39:32:96:08:e7:a9: 31:2b:30:c7:66:dd:8e:e3:8c:22:b7:d7:75:14:b0: d2:5d:b7:14:f4:9e:73:9e:c1:b1:9a:38:6d:8a:82: 11:c8:62:be:45:24:65:fe:c8:40:9f:30:19:83:ff: bb:2b:98:7f:ff:dd:6c:18:e0:cb:d7:81:90:0c:6d: f7:8d:e7:8c:de:46:80:27:f3:2a:74:ab:30:fa:be: 13:15:46:04:e5:4a:a7:05:95:00:0c:c1:f2:b0:09: dc:69:79:a4:47:53:70:c8:91:06:03:e2:f2:d6:97: 32:cd:05:58:b4:fb:6c:e4:fd:60:38:c7:7a:2e:83: 14:47:4e:c3:43:85:25:ae:32:d0:8b:91:f1:89:53: bc:7d:b9:44:30:a7:c0:11:0f:ed:f2:c6:c3:47:c0: c4:68:38:fd:49:86:d3:de:d4:d4:85:0b:92:42:da: 7c:41:5e:9b:8f:c9:57:d2:9d:aa:24:7b:72:6e:28: bb:e7:2a:fa:28:c2:be:9f:65:95:a3:17:59:46:3d: fb:a3:f1:aa:d8:c6:85:cd:54:dd:9c:d8:01:ed:94: 78:3a:c5:05:28:bf:d3:20:46:d4:36:66:fc:39:f7: 51:fa:11:26:cc:d4:20:b4:2a:a9:a5:85:17:d1:e7: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:CA:D3:18:8A:E5:C9:4E:0A:50:05:3F:91:3D:B8:FA:30:CA:DA X509v3 Authority Key Identifier: keyid:28:AC:97:D9:98:7E:78:DB:EE:9D:CB:9F:03:73:5C:28:3B:CE:18:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KKyX2Zh-eNvuncufA3NcKDvOGGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BC3/708E6F68926111EDA5204E64C4F9AE02/KKyX2Zh-eNvuncufA3NcKDvOGGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3a:26:54:13:f4:16:46:c8:80:9b:74:ed:6d:fa:21:3a:f5: 6b:dd:60:de:95:0a:40:a4:76:d1:be:6b:45:80:9e:9f:43:f7: 37:5f:bf:6a:40:ef:23:61:ec:a9:ca:97:cd:60:2f:c4:18:f0: 08:bd:39:53:ce:d4:43:d4:88:ba:8b:50:19:40:31:59:d8:27: 9c:44:37:13:fd:75:ae:ea:65:ec:ff:35:ed:7e:27:2b:9a:6c: 07:e9:65:9c:33:14:3d:4d:4b:68:f0:73:9b:e5:a6:b7:44:3b: 4e:77:88:c7:b6:44:a6:fb:09:38:29:f6:8e:78:ea:61:4d:2f: 5a:20:70:f4:66:58:4b:ab:d3:2f:82:67:0d:28:11:1f:f2:b7: a3:54:6a:7d:c4:76:c3:ce:5c:93:30:fd:11:89:25:23:99:d4: b5:69:28:8e:77:2c:16:02:02:59:d3:f6:2c:fd:d4:b1:e2:9e: a5:6f:71:50:5a:fc:1c:e6:ac:99:85:fc:2a:b8:f4:10:38:4d: 86:d5:d3:cc:2d:0d:3e:b6:35:06:89:fb:78:9e:10:5d:85:d4: 7b:8b:ab:40:c5:7f:aa:58:a0:b2:b9:e6:47:56:46:b6:ba:15: 75:fd:86:ad:04:9d:90:b0:9e:74:cd:f1:8f:8c:74:57:8f:1a: 9b:a1:a0:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCQzMxMTAvBgNVBAUTKDI4QUM5N0Q5OTg3RTc4REJFRTlEQ0I5RjAzNzM1QzI4 M0JDRTE4NjIwHhcNMjYwNzIzMDI1MDA5WhcNMjYwNzMwMDI1MDA5WjAYMRYwFAYD VQQDEw02YTYxODE2Mi1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPOLlZLfFOM5MpYI56kxKzDHZt2O44wit9d1FLDSXbcU9J5znsGxmjhtioIR yGK+RSRl/shAnzAZg/+7K5h//91sGODL14GQDG33jeeM3kaAJ/MqdKsw+r4TFUYE 5UqnBZUADMHysAncaXmkR1NwyJEGA+Ly1pcyzQVYtPts5P1gOMd6LoMUR07DQ4Ul rjLQi5HxiVO8fblEMKfAEQ/t8sbDR8DEaDj9SYbT3tTUhQuSQtp8QV6bj8lX0p2q JHtybii75yr6KMK+n2WVoxdZRj37o/Gq2MaFzVTdnNgB7ZR4OsUFKL/TIEbUNmb8 OfdR+hEmzNQgtCqppYUX0eenNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvKytMY iuXJTgpQBT+RPbj6MMraMB8GA1UdIwQYMBaAFCisl9mYfnjb7p3LnwNzXCg7zhhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JDMy83MDhFNkY2ODky NjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVOdnVuY3VmQTNOY0tEdk9H R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tLeVgyWmgtZU52dW5jdWZBM05jS0R2T0dHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JDMy83MDhFNkY2ODkyNjExMUVEQTUyMDRFNjRDNEY5QUUwMi9LS3lYMlpoLWVO dnVuY3VmQTNOY0tEdk9HR0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvjomVBP0FkbIgJt07W36ITr1a91g3pUKQKR20b5rRYCen0P3N1+/akDvI2Hs qcqXzWAvxBjwCL05U87UQ9SIuotQGUAxWdgnnEQ3E/11rupl7P817X4nK5psB+ll nDMUPU1LaPBzm+Wmt0Q7TneIx7ZEpvsJOCn2jnjqYU0vWiBw9GZYS6vTL4JnDSgR H/K3o1RqfcR2w85ckzD9EYklI5nUtWkojncsFgICWdP2LP3UseKepW9xUFr8HOas mYX8Krj0EDhNhtXTzC0NPrY1Bon7eJ4QXYXUe4urQMV/qligsrnmR1ZGtroVdf2G rQSdkLCedM3xj4x0V48am6GgRg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:16 2026 by rpki-client