$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json) Hash identifier: EllaHhUS1WlJRsu8LoTSp+3IW6nHajixiZN17hyOwi8= Subject key identifier: CA:B1:5A:2D:6A:23:1A:B5:E4:F1:B1:E8:9B:DF:59:B7:02:93:BD:36 Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft Manifest number: D0 Signing time: Thu 23 Jul 2026 08:31:00 +0000 Manifest this update: Thu 23 Jul 2026 08:31:00 +0000 Manifest next update: Thu 30 Jul 2026 08:31:00 +0000 Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: xfTF6668iVf1hTcZhnxRF3Nxs6hUfRNNJaYgOKnIsks=) 2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: YZdUm7+WLurwEjDF7nwXv0d6iTCyzNott8Mq+jpg6ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Validity Not Before: Jul 23 08:31:00 2026 GMT Not After : Jul 30 08:31:00 2026 GMT Subject: CN=6a61d144-2b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:f9:7b:5f:8b:f5:cf:8d:03:ad:97:ea:05: 6c:c5:86:f3:fe:e0:8b:a3:4f:88:4d:1f:a6:d2:cd: b1:fe:94:4f:e9:39:8d:a0:e2:b2:d6:aa:fa:03:5f: 62:1d:e5:c2:3d:ea:16:a3:6a:5d:17:00:26:85:f5: 83:b8:4e:92:eb:9d:84:14:ac:e8:1b:84:98:f2:08: ae:f3:28:29:36:d1:ee:77:58:0f:2b:8a:79:22:1f: 95:47:47:ba:58:44:47:90:77:b6:4c:56:d9:89:1d: 01:65:80:f9:a7:2c:87:31:3a:49:07:29:93:be:ba: b6:66:3e:88:3d:68:a9:2a:ce:42:4e:06:1a:17:1c: 85:80:13:59:4b:f9:75:40:55:c1:9c:e4:71:cb:a6: ee:be:e2:a1:cc:7a:3d:1f:e6:d4:1e:50:28:49:53: bf:06:9b:a5:b1:15:fd:6d:6a:cf:84:21:75:51:d2: eb:23:b2:8f:67:d2:31:a0:be:5a:0d:8e:24:49:0d: a7:9e:f9:aa:7c:17:42:50:aa:2b:56:2c:b2:36:99: 78:07:32:5c:f5:43:69:0e:26:3e:3e:b1:b3:08:a4: 22:40:57:6c:28:b1:ee:c4:6d:89:44:55:66:c7:8b: 17:17:37:69:cf:1f:24:0b:b1:e0:65:0e:c4:78:c5: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:5A:2D:6A:23:1A:B5:E4:F1:B1:E8:9B:DF:59:B7:02:93:BD:36 X509v3 Authority Key Identifier: keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5a:f7:23:37:2a:f9:ca:94:40:83:6b:09:a6:9f:00:5e:18: 15:57:78:a3:05:5b:94:60:99:34:1c:17:71:f4:08:51:9f:7a: ba:6f:7b:84:fa:a9:18:f8:d2:c0:75:74:01:d6:e8:25:44:a7: 45:f0:8c:8d:fd:d2:62:1a:ce:ac:25:02:fa:0b:6f:1f:7e:62: 89:f0:5b:7a:5a:27:4f:d2:bd:81:0c:ea:a9:49:0f:d1:cc:f3: a4:86:a3:65:41:c4:d2:b0:49:d7:5f:cc:c5:6c:df:0d:a9:94: 95:4d:85:89:5c:42:b8:94:c9:f6:03:bf:6e:f0:c0:5b:32:78: e4:87:ca:1b:aa:33:1b:ae:5f:f7:50:02:7e:c8:22:4f:9c:12: 8c:49:b5:40:83:62:68:89:dc:39:3c:00:62:2c:ce:20:59:fd: 74:2b:93:c1:03:2b:44:71:da:e2:ae:d9:a0:41:05:f9:9b:e8: 9e:53:f8:9b:07:6f:fb:20:b3:c3:2d:3f:1d:59:f6:f1:91:f7: 88:b9:54:c3:40:05:bb:60:6a:41:9f:30:12:03:76:b8:06:32: e0:81:4a:a5:a2:a2:f6:59:e3:98:db:39:9a:85:cf:1e:7d:96: f9:c4:19:70:41:9a:5f:b6:5c:16:aa:c8:f2:36:b4:2f:75:4b: 16:24:53:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4QjIxMTAvBgNVBAUTKDI5QzlCMzM3RDY3QjBGMTQ0NDgxNzk4QjRENUIwRDcz RDc4OEFGMkIwHhcNMjYwNzIzMDgzMTAwWhcNMjYwNzMwMDgzMTAwWjAYMRYwFAYD VQQDEw02YTYxZDE0NC0yYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAf5e1+L9c+NA62X6gVsxYbz/uCLo0+ITR+m0s2x/pRP6TmNoOKy1qr6A19i HeXCPeoWo2pdFwAmhfWDuE6S652EFKzoG4SY8giu8ygpNtHud1gPK4p5Ih+VR0e6 WERHkHe2TFbZiR0BZYD5pyyHMTpJBymTvrq2Zj6IPWipKs5CTgYaFxyFgBNZS/l1 QFXBnORxy6buvuKhzHo9H+bUHlAoSVO/BpulsRX9bWrPhCF1UdLrI7KPZ9IxoL5a DY4kSQ2nnvmqfBdCUKorViyyNpl4BzJc9UNpDiY+PrGzCKQiQFdsKLHuxG2JRFVm x4sXFzdpzx8kC7HgZQ7EeMV8nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqxWi1q Ixq15PGx6JvfWbcCk702MB8GA1UdIwQYMBaAFCnJszfWew8URIF5i01bDXPXiK8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDhCMi9DOTVBNDlBRTRB NTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4UkVnWG1MVFZzTmM5ZUly eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDhCMi9DOTVBNDlBRTRBNTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4 UkVnWG1MVFZzTmM5ZUlyeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1r3Izcq+cqUQINrCaafAF4YFVd4owVblGCZNBwXcfQIUZ96um97hPqpGPjS wHV0AdboJUSnRfCMjf3SYhrOrCUC+gtvH35iifBbelonT9K9gQzqqUkP0czzpIaj ZUHE0rBJ11/MxWzfDamUlU2FiVxCuJTJ9gO/bvDAWzJ45IfKG6ozG65f91ACfsgi T5wSjEm1QINiaIncOTwAYizOIFn9dCuTwQMrRHHa4q7ZoEEF+ZvonlP4mwdv+yCz wy0/HVn28ZH3iLlUw0AFu2BqQZ8wEgN2uAYy4IFKpaKi9lnjmNs5moXPHn2W+cQZ cEGaX7ZcFqrI8ja0L3VLFiRTXA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:21:00 2026 by rpki-client