$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: qrrAUxQAXC6GU0hPSsEO6YH9R0fYk9UkifJWZM5L4L0= Subject key identifier: B7:BA:DF:2F:2E:86:23:51:1F:2B:4F:B6:38:A9:C3:CF:3B:25:CC:0C Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: DA Signing time: Thu 23 Jul 2026 08:35:28 +0000 Manifest this update: Thu 23 Jul 2026 08:35:27 +0000 Manifest next update: Thu 30 Jul 2026 08:35:27 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: +XsqWHiC2DST03dt+mP64mcEevl6F0eTtFNlWsdn8sE=) 2: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) 3: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jul 23 08:35:27 2026 GMT Not After : Jul 30 08:35:27 2026 GMT Subject: CN=6a61d250-2f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:d1:4c:cf:7c:90:19:bf:cd:f6:80:e5:b1: 3f:d7:ba:72:dc:9e:d0:11:b6:cf:dd:d8:dc:f6:7e: be:7b:74:fe:c6:7c:62:d9:e4:a0:5d:d3:d9:10:94: df:9f:e6:19:a5:06:0d:62:74:76:fd:a4:49:5d:1d: 80:47:e7:29:3a:17:e1:64:2f:cc:1c:84:d8:c3:69: c8:40:46:08:65:49:64:d3:95:cd:bd:5d:fb:88:c0: d0:53:73:11:27:be:2f:6d:dc:48:59:5f:48:ef:43: cb:95:2d:f1:d0:c5:18:01:18:a3:89:08:ed:5e:f5: 87:77:b1:b5:80:a7:14:cd:16:17:f5:87:fa:b5:cd: b9:63:3d:94:d1:d3:68:94:44:ab:72:fd:6f:2e:5c: 47:7f:2c:74:80:58:dd:cd:45:cf:79:b3:36:cd:2c: 0e:35:04:fd:39:78:da:d4:45:bb:66:6d:83:7c:30: 5a:c6:e5:4e:50:38:20:de:8e:76:be:17:f4:3a:f5: 9b:52:b3:f1:01:ec:e3:7e:51:fe:d0:5e:8f:2c:1c: e8:d2:16:00:a5:27:93:18:8e:fc:7c:90:60:c8:f0: 5e:c8:75:6f:a7:0e:4e:f6:9e:66:97:d4:80:61:02: eb:37:9d:66:c4:d9:aa:7e:86:80:5b:c2:cc:61:07: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:DF:2F:2E:86:23:51:1F:2B:4F:B6:38:A9:C3:CF:3B:25:CC:0C X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7b:73:5a:a4:4d:9a:e1:02:d2:14:bf:e8:b5:4b:83:ee:c0: 64:1c:52:98:ca:d5:32:d6:5b:fa:21:68:d5:a3:bd:40:62:e7: d4:0f:60:85:18:eb:87:cd:70:ba:ef:d8:a7:d3:2d:65:27:87: 66:20:b9:e0:27:fa:9a:a3:cf:6e:f9:83:5e:ae:68:bd:07:42: 4b:89:3b:62:4e:c9:9b:50:e4:87:69:06:e3:ec:ea:c8:ba:82: b8:13:d4:5b:97:08:75:9e:e5:4b:ed:9c:e6:02:0d:87:13:fe: 21:6a:ca:dd:69:0c:01:ba:38:ac:80:31:d5:68:2a:78:96:86: 7d:d9:3d:c8:38:a0:0c:54:da:c9:d0:5a:a6:77:79:bd:43:87: 8c:f9:cc:40:75:03:c1:24:f7:42:19:fc:16:60:77:aa:0e:d6: fe:d4:82:0d:53:dc:b6:23:4a:4f:10:d9:c4:b4:23:6e:c8:2a: f0:2c:48:c5:b0:70:6c:e3:ab:48:75:ed:2c:fc:9f:bf:bc:40: ee:43:89:6a:aa:e5:4b:a0:59:c3:22:18:4d:98:f9:6b:20:68: 40:bb:ce:b9:96:92:2a:e1:f1:d1:ac:9f:56:d4:fd:c2:9a:f3: 1f:48:71:5b:35:c1:36:dd:d2:c7:04:bb:52:2f:8f:48:78:2f: 07:9d:f3:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwNzIzMDgzNTI3WhcNMjYwNzMwMDgzNTI3WjAYMRYwFAYD VQQDEw02YTYxZDI1MC0yZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6zRTM98kBm/zfaA5bE/17py3J7QEbbP3djc9n6+e3T+xnxi2eSgXdPZEJTf n+YZpQYNYnR2/aRJXR2AR+cpOhfhZC/MHITYw2nIQEYIZUlk05XNvV37iMDQU3MR J74vbdxIWV9I70PLlS3x0MUYARijiQjtXvWHd7G1gKcUzRYX9Yf6tc25Yz2U0dNo lESrcv1vLlxHfyx0gFjdzUXPebM2zSwONQT9OXja1EW7Zm2DfDBaxuVOUDgg3o52 vhf0OvWbUrPxAezjflH+0F6PLBzo0hYApSeTGI78fJBgyPBeyHVvpw5O9p5ml9SA YQLrN51mxNmqfoaAW8LMYQfLewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLe63y8u hiNRHytPtjipw887JcwMMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHtzWqRNmuEC0hS/6LVLg+7AZBxSmMrVMtZb+iFo1aO9QGLn1A9ghRjrh81w uu/Yp9MtZSeHZiC54Cf6mqPPbvmDXq5ovQdCS4k7Yk7Jm1Dkh2kG4+zqyLqCuBPU W5cIdZ7lS+2c5gINhxP+IWrK3WkMAbo4rIAx1WgqeJaGfdk9yDigDFTaydBapnd5 vUOHjPnMQHUDwST3Qhn8FmB3qg7W/tSCDVPctiNKTxDZxLQjbsgq8CxIxbBwbOOr SHXtLPyfv7xA7kOJaqrlS6BZwyIYTZj5ayBoQLvOuZaSKuHx0ayfVtT9wprzH0hx WzXBNt3SxwS7Ui+PSHgvB53zUA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:50:23 2026 by rpki-client