$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: wcu+dcLTMDsP+JvgDHQ1MyARhg0x/tjzjpzgtj/zIFE= Subject key identifier: 92:9E:BA:35:CE:E9:F5:47:87:31:7A:8D:F6:05:27:90:AD:F2:D4:0D Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01C5 Signing time: Thu 23 Jul 2026 05:11:21 +0000 Manifest this update: Thu 23 Jul 2026 05:11:20 +0000 Manifest next update: Thu 30 Jul 2026 05:11:20 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: 32bNFl3AxeZAT2O/Z24SHBRho7w2DPai3zLWdHlNmZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Jul 23 05:11:20 2026 GMT Not After : Jul 30 05:11:20 2026 GMT Subject: CN=6a61a279-ee7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:ac:2f:99:64:b9:8f:59:7b:77:f6:d9:b3: c6:b8:27:45:14:26:44:91:f2:a4:de:40:75:79:a9: b1:ff:ed:10:5d:02:e6:89:68:64:29:d4:a3:db:c2: bc:d5:06:55:53:eb:3b:57:d9:4b:5b:b0:b8:b5:eb: 6d:f0:40:96:3e:d4:e5:7a:d9:1d:d4:ca:fa:0d:c0: 94:72:26:10:60:a0:0e:40:19:fe:e0:0d:93:f4:9b: 6d:de:ce:96:bf:d9:51:f4:e2:6b:1d:a9:5a:e6:45: 33:37:28:18:53:b9:e7:61:23:68:c3:c5:ba:b2:03: 8d:91:2c:2c:2c:2a:aa:5e:45:60:4a:22:68:de:3b: 54:70:7e:a1:08:3b:d7:79:b3:9a:1f:18:05:74:2f: c0:db:27:2f:ec:e9:30:4c:e9:e4:1d:38:86:23:41: c3:54:3c:29:ee:a4:fc:a2:2d:57:3f:02:64:e8:5a: ab:a6:2b:d0:8c:ef:39:d6:7b:3d:3d:0e:86:bc:1b: 56:96:ac:1f:04:e9:42:24:fc:16:ff:aa:26:f9:26: 97:61:d0:3f:bb:67:82:54:80:d8:09:12:6d:0c:4d: 7e:68:8f:49:da:49:3c:a1:9c:a9:df:b2:e7:e7:a5: bf:a6:67:27:c1:29:d9:44:52:15:cd:cd:92:c0:1a: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9E:BA:35:CE:E9:F5:47:87:31:7A:8D:F6:05:27:90:AD:F2:D4:0D X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e8:1b:96:0a:a2:fd:6d:7a:12:1d:db:0a:b5:92:f2:88:68: fd:b0:a5:ef:78:dc:80:d6:39:f8:b4:8e:6e:a6:df:78:e9:e3: 78:98:49:26:ec:9e:b0:d5:bb:f9:a4:b8:44:77:83:b6:da:b8: 31:e4:c5:db:5e:8c:54:ce:17:40:22:f9:36:a7:e4:fa:3e:1b: 25:25:bc:22:e0:cd:e7:8a:94:d1:0e:09:27:ed:f5:e0:b6:6f: 27:95:1f:16:8e:46:35:67:53:1f:22:2c:df:7e:3e:a2:fa:03: 06:dc:26:30:f3:a0:34:ce:18:ca:29:7a:a9:ca:8f:e5:af:6e: c1:81:06:7c:b4:0a:c6:00:36:f5:73:55:cb:89:d9:76:39:a0: 4b:96:8d:a7:59:70:b0:2d:87:3c:ae:9f:9f:ab:9e:12:4d:b0: e1:19:a4:3d:3e:df:c0:12:68:48:9b:09:a8:76:96:72:a1:25: 90:90:06:16:8e:da:00:cd:f4:0e:57:b7:f4:ec:57:79:3f:08: 86:7e:99:14:4a:ec:2a:b1:0b:46:eb:5b:03:78:c0:68:25:85: ab:ca:98:3a:96:3a:1a:74:22:4d:a5:73:64:0a:fe:33:c5:a5: ea:3d:be:2a:47:67:41:09:17:c6:a7:41:6b:f1:4d:5d:ce:be: a3:94:a6:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwNzIzMDUxMTIwWhcNMjYwNzMwMDUxMTIwWjAYMRYwFAYD VQQDEw02YTYxYTI3OS1lZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtesL5lkuY9Ze3f22bPGuCdFFCZEkfKk3kB1eamx/+0QXQLmiWhkKdSj28K8 1QZVU+s7V9lLW7C4tett8ECWPtTletkd1Mr6DcCUciYQYKAOQBn+4A2T9Jtt3s6W v9lR9OJrHala5kUzNygYU7nnYSNow8W6sgONkSwsLCqqXkVgSiJo3jtUcH6hCDvX ebOaHxgFdC/A2ycv7OkwTOnkHTiGI0HDVDwp7qT8oi1XPwJk6FqrpivQjO851ns9 PQ6GvBtWlqwfBOlCJPwW/6om+SaXYdA/u2eCVIDYCRJtDE1+aI9J2kk8oZyp37Ln 56W/pmcnwSnZRFIVzc2SwBqFhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKeujXO 6fVHhzF6jfYFJ5Ct8tQNMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOgblgqi/W16Eh3bCrWS8oho/bCl73jcgNY5+LSObqbfeOnjeJhJJuyesNW7 +aS4RHeDttq4MeTF216MVM4XQCL5Nqfk+j4bJSW8IuDN54qU0Q4JJ+314LZvJ5Uf Fo5GNWdTHyIs334+ovoDBtwmMPOgNM4Yyil6qcqP5a9uwYEGfLQKxgA29XNVy4nZ djmgS5aNp1lwsC2HPK6fn6ueEk2w4RmkPT7fwBJoSJsJqHaWcqElkJAGFo7aAM30 Dle39OxXeT8Ihn6ZFErsKrELRutbA3jAaCWFq8qYOpY6GnQiTaVzZAr+M8Wl6j2+ KkdnQQkXxqdBa/FNXc6+o5SmwQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:44:23 2026 by rpki-client