$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: 7yPkPS10p9PwKJzsgEyfZbtWcK2k1cpKwrs+YYW4Pe8= Subject key identifier: 9E:95:D0:D8:A8:EA:D3:4F:C6:89:EA:B9:74:D5:E9:96:FF:D6:0F:85 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 2A Signing time: Thu 23 Jul 2026 10:55:07 +0000 Manifest this update: Thu 23 Jul 2026 10:55:06 +0000 Manifest next update: Thu 30 Jul 2026 10:55:06 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: CfHKjqlsnd9lAxOC/RtdiOCLqdK4tvBMEFQK0SLSO9A=) 2: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: k921Mcmu/cnS51QvFoRXejBwdAmHFdMNAue6ueGlIEg=) 3: DDFBF53064F811F18CD9A2CE7647A888.roa (hash: rnHtHer8GYacGwWfe6Ay6DpWc4MNGCoinmNNStme7Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Jul 23 10:55:06 2026 GMT Not After : Jul 30 10:55:06 2026 GMT Subject: CN=6a61f30b-5a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:ec:74:bd:a6:e4:d5:69:e2:d4:a2:6f:a7: bf:80:e4:fa:b1:70:4b:09:8d:cc:f8:a1:a3:5f:20: 46:f2:34:32:c3:ac:c3:26:e1:8a:de:74:a2:52:68: d4:9b:a8:4b:fa:72:35:43:47:0b:5b:15:8c:f5:06: 43:17:bc:24:00:cf:ab:36:28:40:fc:e2:7d:ef:d3: 1d:b4:b6:28:7c:ed:b7:e6:e7:00:8e:44:f9:d0:3d: c4:e0:91:b3:e9:c2:9d:52:ed:a7:a5:57:92:1a:38: 90:40:26:b2:2e:c1:79:a3:fa:95:29:56:a6:24:cf: 1b:da:9e:b2:14:fd:2d:c0:cc:59:a8:68:89:1a:c6: f6:2c:b7:b5:68:90:e9:ae:89:b8:67:0c:cb:c6:85: 48:3d:04:b0:fd:a9:0e:b3:40:06:79:80:a8:09:c0: 9d:57:9f:58:7e:b3:de:8f:52:8d:56:d2:85:56:67: ae:a4:6c:de:6e:f1:ab:d0:94:91:b9:09:6a:53:4f: 4c:e7:3b:66:ed:7e:58:f4:77:fe:74:ae:06:33:d5: d1:d7:c2:b8:94:2b:b0:50:b8:08:44:b4:9c:27:5a: 93:b9:bf:88:9e:e0:73:8f:09:b6:db:28:6c:5c:84: 22:7e:ba:34:a8:15:36:2d:d2:50:5c:f4:f3:ce:7d: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:95:D0:D8:A8:EA:D3:4F:C6:89:EA:B9:74:D5:E9:96:FF:D6:0F:85 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:e1:c4:db:24:ba:6b:3d:fb:a4:eb:d6:b3:4f:44:ef:de: 43:ef:e0:99:a3:6c:5b:90:f2:04:09:08:1a:fe:99:b8:1b:6d: 32:ad:36:b6:26:4c:12:66:d9:65:78:f7:48:cd:01:c8:6d:c0: cd:2d:e2:50:b1:cd:99:be:80:a2:c1:f1:50:1e:64:f8:36:98: 9f:3d:09:b4:07:c8:cf:f1:f7:cf:99:d5:14:1c:13:34:92:6d: 87:82:db:cc:df:a9:49:11:57:0e:f2:05:44:e7:cc:2e:69:0e: 01:dc:7d:15:fe:17:eb:a6:e2:18:03:fa:dc:31:e5:6f:75:72: fb:99:77:04:18:d2:04:0c:2d:82:1a:10:3b:4d:85:2f:54:52: 4a:17:4a:6e:c5:6e:2b:4a:3b:6e:3f:d3:7f:df:a0:73:a9:55: 95:92:2f:b0:3f:19:06:fd:bc:ab:31:42:a1:bb:f9:4b:50:92: 39:eb:f5:b2:da:a1:e7:74:3d:54:84:7e:1f:29:e3:a8:a2:91: a4:68:16:98:60:06:4b:ad:f3:ca:17:bb:0b:e9:8b:3f:de:5a: 18:ba:ad:ba:80:de:08:a3:cf:bb:63:c4:56:d5:3f:90:a0:31: 4c:86:b9:36:40:29:f4:e5:e8:72:66:4e:1d:91:3b:f4:63:71: 75:94:6e:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA3MjMxMDU1MDZaFw0yNjA3MzAxMDU1MDZaMBgxFjAUBgNV BAMTDTZhNjFmMzBiLTVhODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTCex0vabk1Wni1KJvp7+A5PqxcEsJjcz4oaNfIEbyNDLDrMMm4YredKJSaNSb qEv6cjVDRwtbFYz1BkMXvCQAz6s2KED84n3v0x20tih87bfm5wCORPnQPcTgkbPp wp1S7aelV5IaOJBAJrIuwXmj+pUpVqYkzxvanrIU/S3AzFmoaIkaxvYst7VokOmu ibhnDMvGhUg9BLD9qQ6zQAZ5gKgJwJ1Xn1h+s96PUo1W0oVWZ66kbN5u8avQlJG5 CWpTT0znO2btflj0d/50rgYz1dHXwriUK7BQuAhEtJwnWpO5v4ie4HOPCbbbKGxc hCJ+ujSoFTYt0lBc9PPOfQEPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnpXQ2Kjq 00/Gieq5dNXplv/WD4UwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHVeHE2yS6az37pOvWs09E795D7+CZo2xbkPIECQga/pm4G20yrTa2JkwSZtll ePdIzQHIbcDNLeJQsc2ZvoCiwfFQHmT4NpifPQm0B8jP8ffPmdUUHBM0km2HgtvM 36lJEVcO8gVE58wuaQ4B3H0V/hfrpuIYA/rcMeVvdXL7mXcEGNIEDC2CGhA7TYUv VFJKF0puxW4rSjtuP9N/36BzqVWVki+wPxkG/byrMUKhu/lLUJI56/Wy2qHndD1U hH4fKeOoopGkaBaYYAZLrfPKF7sL6Ys/3loYuq26gN4Io8+7Y8RW1T+QoDFMhrk2 QCn05ehyZk4dkTv0Y3F1lG6b -----END CERTIFICATE-----Generated at Fri Jul 24 17:49:15 2026 by rpki-client