$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: Ul42QgSxzjtbK0VZE27GUWevxen2MBNlzAYtb638mvE= Subject key identifier: 09:9E:35:86:27:21:BA:67:1C:6D:14:CF:0A:2D:23:D2:1A:13:EF:D2 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 261B Signing time: Wed 22 Jul 2026 15:49:14 +0000 Manifest this update: Wed 22 Jul 2026 15:49:14 +0000 Manifest next update: Wed 29 Jul 2026 15:49:14 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: gq8YzPdPTPTPpznjHB5p/ag9AO3Louat4rnuKt9r4o8=) 2: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lOvYt+0/Xr6pgMpv/63iUFQ210NPhZzouXW57Pt++DQ=) 3: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: PvlCjzRuVQS5z3Y7RAsjDxZGQj+lAI/1wkWEPf7utQs=) 4: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=) 5: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=) 6: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg=) 7: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: U+tT529Q+GHL3QD7YEYw7NjVcXz/pyFy7z7T6MnIels=) 8: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10072 (0x2758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 22 15:49:14 2026 GMT Not After : Jul 29 15:49:14 2026 GMT Subject: CN=6a60e67a-0610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:40:a2:50:bd:ad:08:ca:e1:e4:4a:1d:69: 51:b0:be:4e:6a:c5:3b:65:19:1b:8c:82:26:a5:5e: 7c:37:4d:08:3a:75:08:57:83:b3:9a:d3:a5:6e:02: ab:57:ee:78:ab:60:5d:1e:83:09:f7:f0:9e:d5:a8: b0:09:5f:66:92:11:b5:7a:e2:cd:63:a1:74:14:2b: 34:94:6e:b7:94:56:2d:e6:37:1c:04:f6:b0:54:cc: c9:4e:f5:dc:45:8b:63:42:69:8f:c0:e5:85:6e:dc: d6:d1:f6:84:6d:c0:8c:25:80:1f:ca:c9:53:55:2c: 77:21:3b:01:f8:9b:58:1f:76:99:42:0e:3b:00:48: f0:37:0f:de:17:63:b2:9e:20:73:36:6f:2a:15:e8: 98:b0:f4:7c:9b:f4:6a:78:2a:c1:9b:2a:08:f6:19: 0e:dc:d8:2d:eb:fa:6f:63:50:f9:12:e4:02:0a:8f: 6c:97:f2:d1:9b:8f:3f:24:2e:90:3a:01:53:d4:dc: 16:5e:a7:d0:98:3c:42:29:3e:e6:12:7c:7f:9d:d6: bf:fd:51:ae:83:a6:78:6b:c2:c2:87:c9:e4:05:5f: 2c:97:fa:c2:f9:43:25:e8:1e:2e:d4:49:96:f5:44: f5:48:2c:c4:d1:3c:17:35:80:13:1c:ff:9e:1c:8f: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9E:35:86:27:21:BA:67:1C:6D:14:CF:0A:2D:23:D2:1A:13:EF:D2 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:05:d0:31:f5:5b:0d:87:2e:3a:81:5e:2b:bf:3c:f0:f7:ee: 70:e9:db:84:ee:3a:65:24:79:46:1e:ee:66:cf:ad:f5:2e:50: ee:1a:02:76:e2:0e:8d:29:ae:81:c9:88:9c:a7:74:03:56:ac: db:d6:63:d2:e9:d5:7a:21:18:8d:49:dc:22:5b:6e:80:42:af: 31:04:86:a0:5c:c9:dd:85:25:a5:12:6a:13:6a:ba:77:4c:89: bb:e3:30:67:c0:2d:b9:d0:fb:de:eb:48:6a:b7:5f:47:e8:9a: 1f:5a:ef:f3:0a:63:5a:91:f4:1b:cd:63:b9:71:ef:d4:8b:4f: df:e7:04:77:c3:b3:e2:c9:0a:bb:57:05:d4:72:4d:d6:d9:d0: 17:f1:48:fc:d9:24:c8:b9:6b:29:73:e9:aa:5f:55:92:f3:54: 6f:c1:9d:e4:94:dc:4e:5c:ae:56:d4:46:e2:31:b1:12:32:6c: c0:82:f2:c3:53:93:78:ba:1a:21:63:9e:50:36:e4:a4:53:f8: 43:0b:d7:7a:b9:12:9d:ce:ea:5a:6f:df:be:29:f7:3e:b2:fc: be:ee:df:b3:ff:d7:4b:f4:41:40:ae:5c:2e:b1:46:15:b5:db: 8e:ef:a0:41:b3:43:4c:90:af:e7:6c:e7:40:ea:fe:99:66:3f: ef:07:2a:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNzIyMTU0OTE0WhcNMjYwNzI5MTU0OTE0WjAYMRYwFAYD VQQDEw02YTYwZTY3YS0wNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwdAolC9rQjK4eRKHWlRsL5OasU7ZRkbjIImpV58N00IOnUIV4OzmtOlbgKr V+54q2BdHoMJ9/Ce1aiwCV9mkhG1euLNY6F0FCs0lG63lFYt5jccBPawVMzJTvXc RYtjQmmPwOWFbtzW0faEbcCMJYAfyslTVSx3ITsB+JtYH3aZQg47AEjwNw/eF2Oy niBzNm8qFeiYsPR8m/RqeCrBmyoI9hkO3Ngt6/pvY1D5EuQCCo9sl/LRm48/JC6Q OgFT1NwWXqfQmDxCKT7mEnx/nda//VGug6Z4a8LCh8nkBV8sl/rC+UMl6B4u1EmW 9UT1SCzE0TwXNYATHP+eHI/SIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmeNYYn IbpnHG0UzwotI9IaE+/SMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuwXQMfVbDYcuOoFeK7888PfucOnbhO46ZSR5Rh7uZs+t9S5Q7hoCduIOjSmu gcmInKd0A1as29Zj0unVeiEYjUncIltugEKvMQSGoFzJ3YUlpRJqE2q6d0yJu+Mw Z8AtudD73utIardfR+iaH1rv8wpjWpH0G81juXHv1ItP3+cEd8Oz4skKu1cF1HJN 1tnQF/FI/NkkyLlrKXPpql9VkvNUb8Gd5JTcTlyuVtRG4jGxEjJswILyw1OTeLoa IWOeUDbkpFP4QwvXerkSnc7qWm/fvin3PrL8vu7fs//XS/RBQK5cLrFGFbXbju+g QbNDTJCv52znQOr+mWY/7wcq8w== -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:15 2026 by rpki-client