$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json) Hash identifier: vQGtDLmll82bMGQZ3DWhWoczHxYus56dz7pMQMSNADY= Subject key identifier: 01:B3:2F:E9:5F:F2:A2:32:0B:36:D7:58:56:CB:0B:B1:BB:C5:3F:AF Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft Manifest number: 0473 Signing time: Thu 23 Jul 2026 01:15:06 +0000 Manifest this update: Thu 23 Jul 2026 01:15:06 +0000 Manifest next update: Thu 30 Jul 2026 01:15:06 +0000 Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: ka14KNDzGoWNI/wuIZq51l9OJi8kyqeJGFBYKife1/s=) 2: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=) 3: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=) 4: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=) 5: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=) 6: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=) 7: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=) 8: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=) 9: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=) 10: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=) 11: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=) 12: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=) 13: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=) 14: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=) 15: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=) 16: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=) 17: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Jul 23 01:15:06 2026 GMT Not After : Jul 30 01:15:06 2026 GMT Subject: CN=6a616b1a-9c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:6d:04:e5:e5:59:8f:38:29:a8:e0:c7:f0: 30:57:d5:e2:bc:08:c8:0a:82:bc:a9:fd:36:fd:fe: 51:2a:14:ce:06:dc:d2:03:de:fd:a6:0f:15:ff:3c: eb:d2:eb:83:b0:d2:e3:ab:6d:1b:9d:4f:f7:6c:dc: ef:d9:7f:d5:63:15:17:b8:54:a7:f5:57:c8:4d:83: 3e:d6:10:99:2b:cb:4c:59:df:39:b1:db:be:bb:23: 9f:dd:ee:a6:37:26:31:58:d5:f4:ef:c1:e4:ed:0c: 64:91:0a:82:ea:75:4b:d7:10:42:0a:03:32:81:47: 01:75:1a:3d:1f:80:2f:32:32:74:b8:e4:a3:46:58: 70:7e:08:3a:54:04:8b:2d:23:9d:16:42:00:4a:5e: 88:be:7b:3e:c1:29:b2:a9:ce:49:21:40:e5:73:42: 04:aa:43:fe:40:75:14:13:14:63:90:45:5c:b0:ee: df:c8:29:66:f7:da:f9:2e:b0:10:ae:21:2b:bb:70: 23:c3:f5:7c:52:ee:91:0b:5d:f6:40:57:2b:43:93: 1b:5c:f5:ef:94:c2:a2:d9:82:c0:db:09:a4:ad:c4: 09:9e:99:2a:32:0e:fb:12:77:1b:9e:ba:2b:19:d2: 7c:8c:57:c1:6a:8a:41:b2:1a:8e:3a:10:9e:7a:4f: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:2F:E9:5F:F2:A2:32:0B:36:D7:58:56:CB:0B:B1:BB:C5:3F:AF X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:07:83:9e:fa:f9:03:13:c2:3d:27:47:0e:ae:50:97:6f: ca:74:1c:95:4d:de:6d:dd:26:fe:d3:43:d3:95:1d:4d:95:b4: 4d:04:84:ef:0d:33:64:36:0d:a9:05:0c:06:42:7a:fa:f5:98: 8d:ae:c1:8d:3b:d3:f3:d5:bb:aa:78:5f:41:d3:4e:7b:64:88: f0:ea:b4:45:92:fa:9d:f4:47:86:53:33:47:4f:56:14:6f:8b: 04:b3:17:f9:17:e3:cb:40:d8:dd:20:ba:4c:fe:2b:b5:01:4c: fa:ad:b4:a2:e6:2b:38:df:46:56:2d:f1:f7:52:be:35:7c:80: cc:aa:58:e9:a9:d9:e4:a1:a8:84:29:bc:95:fe:9f:5a:21:10: 2e:c2:7a:55:de:0a:05:79:9f:9a:27:82:84:30:df:73:d9:dd: 70:c1:ed:db:51:67:3f:ec:38:94:64:a7:ff:f7:0a:ac:64:c1: b7:58:fa:1e:1b:e2:12:89:ad:c8:4a:dc:a1:12:37:4b:ac:e0: 64:8f:b8:8e:31:70:59:f8:a9:67:4e:43:8a:30:48:3d:b3:4d: 9b:fa:23:54:26:72:34:a6:e7:5e:03:46:0f:1f:9f:dc:d6:d3: 8d:bc:a1:07:da:dd:48:cf:83:38:b1:12:de:7e:c1:c0:1f:85: 9a:11:78:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjYwNzIzMDExNTA2WhcNMjYwNzMwMDExNTA2WjAYMRYwFAYD VQQDEw02YTYxNmIxYS05YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0udtBOXlWY84Kajgx/AwV9XivAjICoK8qf02/f5RKhTOBtzSA979pg8V/zzr 0uuDsNLjq20bnU/3bNzv2X/VYxUXuFSn9VfITYM+1hCZK8tMWd85sdu+uyOf3e6m NyYxWNX078Hk7QxkkQqC6nVL1xBCCgMygUcBdRo9H4AvMjJ0uOSjRlhwfgg6VASL LSOdFkIASl6Ivns+wSmyqc5JIUDlc0IEqkP+QHUUExRjkEVcsO7fyClm99r5LrAQ riEru3Ajw/V8Uu6RC132QFcrQ5MbXPXvlMKi2YLA2wmkrcQJnpkqMg77Encbnror GdJ8jFfBaopBshqOOhCeek9g1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGzL+lf 8qIyCzbXWFbLC7G7xT+vMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda cUV3d2xURU9hYl9TWUtxWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUHQHg576+QMTwj0nRw6uUJdvynQclU3ebd0m/tND05UdTZW0TQSE7w0zZDYN qQUMBkJ6+vWYja7BjTvT89W7qnhfQdNOe2SI8Oq0RZL6nfRHhlMzR09WFG+LBLMX +Rfjy0DY3SC6TP4rtQFM+q20ouYrON9GVi3x91K+NXyAzKpY6anZ5KGohCm8lf6f WiEQLsJ6Vd4KBXmfmieChDDfc9ndcMHt21FnP+w4lGSn//cKrGTBt1j6HhviEomt yErcoRI3S6zgZI+4jjFwWfipZ05DijBIPbNNm/ojVCZyNKbnXgNGDx+f3NbTjbyh B9rdSM+DOLES3n7BwB+FmhF4JA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:09:05 2026 by rpki-client