$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json) Hash identifier: naxE7ji7YVOtUANmLrmFVIR0LzB4A7NUsDg0pPtsb2c= Subject key identifier: 98:E5:CA:E4:B8:26:94:B0:CC:75:49:94:58:86:8C:1E:42:7B:CF:EC Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft Manifest number: 3579 Signing time: Fri 24 Jul 2026 14:24:35 +0000 Manifest this update: Fri 24 Jul 2026 14:24:34 +0000 Manifest next update: Fri 31 Jul 2026 14:24:34 +0000 Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: y1FbIWVmRnVTDu9vzRt8RhCBUZyKygdBxrTOZpGWmZs=) 2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 14:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Validity Not Before: Jul 24 14:24:34 2026 GMT Not After : Jul 31 14:24:34 2026 GMT Subject: CN=6a6375a3-550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:00:f0:4a:c9:9a:94:c2:5d:c8:09:f3:17: 90:da:69:20:91:50:74:f1:d8:ab:32:4d:fe:b5:9c: 13:eb:69:e5:83:3a:0f:00:d3:08:95:48:ee:bf:24: f7:60:7c:ac:c6:9a:13:f0:4b:e5:40:14:99:ba:cd: 7f:a5:74:ca:57:e7:09:85:87:b1:a9:5f:66:9c:8a: cd:5f:8f:c4:ce:ab:39:6e:7e:8b:d4:04:ee:2a:f4: 82:a9:04:80:60:83:e9:ca:2e:d1:f8:e3:77:3f:ef: 57:3a:07:31:a8:1e:2d:1b:9a:4c:12:1a:6b:9b:f4: 90:08:6c:c8:a9:71:57:46:80:5b:73:2d:1d:5d:6f: 4f:e1:9d:b2:a9:be:2b:f7:7f:41:92:86:db:cd:b4: 20:8c:9b:8a:81:7c:3c:01:09:a4:db:0e:25:24:8c: 9a:ef:2b:b9:15:c3:09:4f:28:d6:3d:54:4f:cb:8b: ad:3d:99:b0:63:b9:06:ce:39:d9:6e:0f:0e:c1:34: 30:73:e4:ee:a2:c7:cf:74:e2:55:ae:26:cb:dc:e7: 90:58:54:80:f8:64:3c:92:81:24:f6:2c:10:8d:b2: 5f:5b:a5:58:80:e8:ad:20:c0:00:c0:0b:d8:03:67: 6f:31:e0:89:a1:56:f4:09:21:2c:20:a2:a4:22:7f: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E5:CA:E4:B8:26:94:B0:CC:75:49:94:58:86:8C:1E:42:7B:CF:EC X509v3 Authority Key Identifier: keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:3e:76:1e:ef:c8:99:e6:33:46:8a:23:8f:bd:3b:0b:46: 76:0c:5a:68:5d:8d:39:a2:65:7a:b4:00:40:ba:9a:89:f1:94: da:01:7f:72:51:4d:0a:01:d4:82:ed:5d:c8:64:f4:66:2e:de: ae:72:ce:c0:23:21:be:33:89:04:10:d2:69:e5:6e:cd:45:12: 1e:64:fe:d0:2f:55:ca:5f:61:8c:9a:8d:65:c8:77:86:68:e0: 15:f0:28:de:33:c3:e1:8e:9e:e3:99:be:22:0a:3c:d3:c5:d8: 46:3a:a3:0a:23:9a:d8:2c:14:86:16:84:76:c7:fa:00:47:2a: 24:c2:13:fd:06:0a:3d:5d:85:9c:df:17:33:fc:95:66:8c:fc: 49:7e:2a:ff:eb:69:5c:69:e2:c4:fb:b2:84:1c:43:26:1d:8c: f0:14:4e:91:df:e0:b9:4a:fe:3b:c2:f8:99:87:e7:a9:b8:62: 00:de:6d:d6:5b:70:76:38:97:ef:54:b2:65:04:86:46:f1:26: 8b:c4:9a:2f:92:af:97:12:06:c1:ee:d9:b6:84:28:bb:10:fc: 04:0f:7c:0a:80:c1:33:4b:b2:75:08:33:14:6f:e6:20:04:52: b5:09:26:16:59:d4:cf:a1:26:5d:f6:0f:6d:6f:37:cd:fe:ed: 4d:92:5d:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyNUQxMTAvBgNVBAUTKEZGRTJBMDM3MjlGMzJEMzIyMjdBOTlDOTI1MTU4Qzgy Q0E1NEI5NTcwHhcNMjYwNzI0MTQyNDM0WhcNMjYwNzMxMTQyNDM0WjAYMRYwFAYD VQQDEw02YTYzNzVhMy01NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQ8A8ErJmpTCXcgJ8xeQ2mkgkVB08dirMk3+tZwT62nlgzoPANMIlUjuvyT3 YHysxpoT8EvlQBSZus1/pXTKV+cJhYexqV9mnIrNX4/Ezqs5bn6L1ATuKvSCqQSA YIPpyi7R+ON3P+9XOgcxqB4tG5pMEhprm/SQCGzIqXFXRoBbcy0dXW9P4Z2yqb4r 939BkobbzbQgjJuKgXw8AQmk2w4lJIya7yu5FcMJTyjWPVRPy4utPZmwY7kGzjnZ bg8OwTQwc+TuosfPdOJVribL3OeQWFSA+GQ8koEk9iwQjbJfW6VYgOitIMAAwAvY A2dvMeCJoVb0CSEsIKKkIn9VUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjlyuS4 JpSwzHVJlFiGjB5Ce8/sMB8GA1UdIwQYMBaAFP/ioDcp8y0yInqZySUVjILKVLlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjI1RC8xRjU1MDgzMDFE ODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxUSWllcG5KSlJXTWdzcFV1 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tS2dOeW56TFRJaWVwbkpKUldNZ3NwVXVWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjI1RC8xRjU1MDgzMDFEODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxU SWllcG5KSlJXTWdzcFV1VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqE+dh7vyJnmM0aKI4+9OwtGdgxaaF2NOaJlerQAQLqaifGU2gF/clFNCgHU gu1dyGT0Zi7ernLOwCMhvjOJBBDSaeVuzUUSHmT+0C9Vyl9hjJqNZch3hmjgFfAo 3jPD4Y6e45m+Igo808XYRjqjCiOa2CwUhhaEdsf6AEcqJMIT/QYKPV2FnN8XM/yV Zoz8SX4q/+tpXGnixPuyhBxDJh2M8BROkd/guUr+O8L4mYfnqbhiAN5t1ltwdjiX 71SyZQSGRvEmi8SaL5KvlxIGwe7ZtoQouxD8BA98CoDBM0uydQgzFG/mIARStQkm FlnUz6EmXfYPbW83zf7tTZJd5A== -----END CERTIFICATE-----Generated at Fri Jul 24 16:02:40 2026 by rpki-client