$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft File: kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json) Hash identifier: upUS1Gnko8vpnZHNuYIqq1JDXKQ8ppCRyqzfwR3ve4E= Subject key identifier: C1:72:7B:BD:99:D7:D2:B9:4E:DC:37:F5:13:D4:26:79:63:29:74:40 Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A Certificate issuer: /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft Manifest number: 0CD5 Signing time: Wed 22 Jul 2026 18:45:24 +0000 Manifest this update: Wed 22 Jul 2026 18:45:23 +0000 Manifest next update: Wed 29 Jul 2026 18:45:23 +0000 Files and hashes: 1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: b68qGORiZW4X6fhmiFpME1waoa3mwbFOHaGZa7Ib8bE=) 2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: 8Kzq8ge3wSUVu+VYpnFOyTT3NcPx0P4ByioHfNwqHSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Validity Not Before: Jul 22 18:45:23 2026 GMT Not After : Jul 29 18:45:23 2026 GMT Subject: CN=6a610fc4-6050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:88:b2:ab:b5:1e:c5:67:60:2c:dc:be:37: ed:03:f6:92:e6:27:da:d4:4b:3c:15:db:ec:7a:b7: 31:71:10:bc:82:2a:fd:b2:f6:00:98:b6:f3:97:ce: da:54:b1:60:50:fc:c0:0c:41:a0:95:ed:7a:f6:41: b4:5b:b3:69:fa:8f:2f:85:9b:83:45:19:cd:f0:00: f4:a4:0b:7d:15:91:14:a7:69:61:93:1a:95:6d:27: e9:e3:43:1e:e8:15:37:8b:54:98:49:9f:de:37:9b: c0:d3:a8:35:64:aa:7a:f7:8f:68:74:38:c4:9c:35: 74:de:fe:a6:11:c5:25:2c:1b:59:10:5d:1e:2c:ea: ec:ed:8f:d3:b3:55:c2:9e:00:2a:83:b7:1e:95:95: 47:40:62:18:8f:5c:c6:3e:86:c5:23:5c:43:f3:c7: 4f:f0:70:8d:80:bc:98:c1:26:88:a4:cc:53:59:40: 5f:fd:b8:c8:69:6a:33:75:cb:2b:3a:8c:31:04:68: fb:d5:08:1e:30:9d:cd:91:aa:fa:e9:4c:6c:d7:b1: 8f:d6:ec:07:43:28:33:a3:cc:cc:4d:80:60:d5:95: 7b:fb:ac:c1:a5:4c:12:88:79:27:48:70:22:00:9a: 24:02:80:75:87:1b:82:17:47:f7:50:bc:ec:41:e5: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:7B:BD:99:D7:D2:B9:4E:DC:37:F5:13:D4:26:79:63:29:74:40 X509v3 Authority Key Identifier: keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:80:a4:6f:17:71:77:8e:db:3e:14:6c:70:65:d7:5e:b7:55: c8:4b:f2:46:64:b6:98:57:d5:03:ed:f5:7a:e7:a1:db:3d:27: 83:99:9a:e6:58:59:24:2a:d6:4d:f5:fc:01:8a:7d:49:1b:85: 8c:af:6e:52:5d:18:c2:d0:c5:d9:a2:db:1e:b0:6d:2f:c7:f0: 94:9d:f8:39:ef:ad:3d:04:c8:48:0a:b9:8c:da:98:90:19:b4: cc:28:60:cb:8d:82:6a:b1:60:37:54:c6:53:27:fb:9c:24:e8: 31:15:bf:ef:ff:3d:e2:63:42:02:ac:08:24:9b:a2:fc:d3:44: 4a:a5:93:54:fb:d1:a4:51:17:7a:2b:3f:44:28:00:d6:70:a2: f7:54:3a:23:b8:18:62:7f:92:be:e3:26:e1:c4:7b:4c:f6:82: 51:13:3a:0d:16:4e:e0:61:31:5b:92:72:6c:1f:d9:c4:f1:54: 05:1e:51:00:96:bb:90:51:84:18:b3:4c:a5:6a:ab:88:52:3a: b3:e0:89:d1:44:1f:88:75:4f:e6:bc:a4:50:5e:a5:77:7b:37: 44:77:bb:8d:ed:ee:00:ab:fe:7c:ec:86:3f:c3:64:8b:cc:32: da:f4:18:85:cd:9e:32:f1:07:7f:c4:f7:c0:6d:b0:b3:93:2b: f3:ac:3c:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwREUxMTAvBgNVBAUTKDkzM0M0Q0Q2RDg0MzVDMEY4QkUyRjUyMzQ3MjZENjYx MEY3RURBM0EwHhcNMjYwNzIyMTg0NTIzWhcNMjYwNzI5MTg0NTIzWjAYMRYwFAYD VQQDEw02YTYxMGZjNC02MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYGIsqu1HsVnYCzcvjftA/aS5ifa1Es8FdvsercxcRC8gir9svYAmLbzl87a VLFgUPzADEGgle169kG0W7Np+o8vhZuDRRnN8AD0pAt9FZEUp2lhkxqVbSfp40Me 6BU3i1SYSZ/eN5vA06g1ZKp6949odDjEnDV03v6mEcUlLBtZEF0eLOrs7Y/Ts1XC ngAqg7celZVHQGIYj1zGPobFI1xD88dP8HCNgLyYwSaIpMxTWUBf/bjIaWozdcsr OowxBGj71QgeMJ3Nkar66Uxs17GP1uwHQygzo8zMTYBg1ZV7+6zBpUwSiHknSHAi AJokAoB1hxuCF0f3ULzsQeV7qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFye72Z 19K5Ttw39RPUJnljKXRAMB8GA1UdIwQYMBaAFJM8TNbYQ1wPi+L1I0cm1mEPfto6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBERS9EQTQ1RDQzMDE1 MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhBLUw0dlVqUnliV1lROS0y am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6eE0xdGhEWEEtTDR2VWpSeWJXWVE5LTJqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBERS9EQTQ1RDQzMDE1MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhB LUw0dlVqUnliV1lROS0yam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYoCkbxdxd47bPhRscGXXXrdVyEvyRmS2mFfVA+31eueh2z0ng5ma5lhZJCrW TfX8AYp9SRuFjK9uUl0YwtDF2aLbHrBtL8fwlJ34Oe+tPQTISAq5jNqYkBm0zChg y42CarFgN1TGUyf7nCToMRW/7/894mNCAqwIJJui/NNESqWTVPvRpFEXeis/RCgA 1nCi91Q6I7gYYn+SvuMm4cR7TPaCURM6DRZO4GExW5JybB/ZxPFUBR5RAJa7kFGE GLNMpWqriFI6s+CJ0UQfiHVP5rykUF6ld3s3RHe7je3uAKv+fOyGP8Nki8wy2vQY hc2eMvEHf8T3wG2ws5Mr86w8/A== -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:58 2026 by rpki-client