$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json) Hash identifier: uOPdNc7w149hff+f0nttrNZOQ0n1etbd9I5tvF1k5TY= Subject key identifier: F1:4A:7F:01:D3:AB:92:6C:AF:E7:4F:64:3A:8F:18:ED:9A:F7:33:E8 Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft Manifest number: 0121 Signing time: Thu 23 Jul 2026 07:26:14 +0000 Manifest this update: Thu 23 Jul 2026 07:26:14 +0000 Manifest next update: Thu 30 Jul 2026 07:26:14 +0000 Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: VfK2PffXW1LoD6zb8GFh8yzZOqubjd0Z+k1Kmtn2ff4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24 Validity Not Before: Jul 23 07:26:14 2026 GMT Not After : Jul 30 07:26:14 2026 GMT Subject: CN=6a61c216-1733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:59:7b:0d:7f:9e:de:1b:75:d2:64:83:f1: 29:64:15:17:0b:0e:a9:ad:fb:94:64:76:b8:a0:fe: ed:27:d3:82:48:5c:ba:32:0a:3f:62:01:e9:a3:07: d0:03:04:ab:52:71:51:14:97:50:c6:bd:bd:7e:4a: 01:57:1e:96:7d:00:ed:46:8a:f5:46:cd:00:5b:2a: a1:24:b3:ab:ef:f3:13:21:ca:34:4a:26:9d:fe:f6: 39:f5:30:82:6f:f9:94:63:0a:e3:f0:02:e0:c2:5e: 1a:53:e5:79:36:70:37:c7:6d:21:d1:54:1c:64:93: ae:8d:11:fc:88:4a:8c:7f:27:f7:f7:f0:d3:20:80: 8a:f3:29:07:1b:1d:40:70:48:6a:70:00:ae:86:b3: 24:73:7f:17:bf:62:7e:43:08:cb:a8:5e:a1:6f:00: 87:53:ab:93:d2:c0:62:a3:e3:a8:27:7b:22:7c:14: 6c:0b:5b:3d:65:be:20:9b:b8:e6:63:b9:c8:89:0f: 17:ba:01:f0:91:ef:7b:b2:76:e1:ac:65:ed:05:75: 8c:92:47:e0:8b:80:8e:47:a5:73:d0:28:d5:79:e7: 8d:84:57:a4:ce:90:02:fc:4c:da:67:67:06:a0:77: 72:4e:b7:a2:d6:7b:0e:28:e9:66:91:fd:c7:87:26: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4A:7F:01:D3:AB:92:6C:AF:E7:4F:64:3A:8F:18:ED:9A:F7:33:E8 X509v3 Authority Key Identifier: keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c6:6e:ea:e9:95:68:b5:e0:1f:66:53:85:b1:d1:43:da:c7: d6:f8:cd:fc:25:a7:a8:aa:47:36:77:ae:45:b4:4f:8e:48:1b: e0:6b:2b:3e:c0:05:a6:04:79:10:07:f3:a0:0e:66:f6:a0:b8: ac:3d:f6:31:99:a0:15:ff:49:36:1d:2c:ec:3b:0a:b2:9a:cf: 4f:62:d0:ed:39:c2:6e:70:fe:4d:47:29:d9:0c:8b:08:75:2d: b3:c0:19:6e:08:45:02:7b:5a:43:fd:af:08:52:d9:b4:1b:15: ed:aa:ca:59:a0:4c:20:e1:e3:45:2f:0b:13:ed:75:67:24:58: db:bc:1c:ae:12:93:86:20:06:46:9b:8d:c3:50:41:0b:44:00: 9d:27:dc:e5:ca:c0:42:a3:dd:4d:19:7c:d5:99:9c:9b:ff:0a: c1:4b:f2:e5:54:cc:e5:6b:3f:06:3c:db:9f:f7:36:eb:6d:7b: e0:38:5d:51:37:2a:22:13:e2:b4:54:9a:24:15:d9:f5:40:48: eb:9f:ee:0f:24:10:2c:e2:91:ae:d2:a9:76:9b:08:7b:bc:e9: 53:c6:4a:5d:d8:a3:e7:ab:79:22:01:2c:d2:c1:c7:86:ea:c5: 5c:02:66:66:7e:91:c0:84:dd:7a:be:c2:93:ea:2f:28:f6:a2: 55:84:ca:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzNzcxMTAvBgNVBAUTKDkwODBEQjUwRkYwQjc0M0ZGQTMyQjc5RDBERDVDMzE5 MDIxRDZFMjQwHhcNMjYwNzIzMDcyNjE0WhcNMjYwNzMwMDcyNjE0WjAYMRYwFAYD VQQDEw02YTYxYzIxNi0xNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5ZZew1/nt4bddJkg/EpZBUXCw6prfuUZHa4oP7tJ9OCSFy6Mgo/YgHpowfQ AwSrUnFRFJdQxr29fkoBVx6WfQDtRor1Rs0AWyqhJLOr7/MTIco0Siad/vY59TCC b/mUYwrj8ALgwl4aU+V5NnA3x20h0VQcZJOujRH8iEqMfyf39/DTIICK8ykHGx1A cEhqcACuhrMkc38Xv2J+QwjLqF6hbwCHU6uT0sBio+OoJ3sifBRsC1s9Zb4gm7jm Y7nIiQ8XugHwke97snbhrGXtBXWMkkfgi4COR6Vz0CjVeeeNhFekzpAC/EzaZ2cG oHdyTrei1nsOKOlmkf3HhybMGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFKfwHT q5Jsr+dPZDqPGO2a9zPoMB8GA1UdIwQYMBaAFJCA21D/C3Q/+jK3nQ3VwxkCHW4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTM3Ny9GM0M0NEE3OEND NTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGREXzZNcmVkRGRYREdRSWRi aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJRGJVUDhMZERfNk1yZWREZFhER1FJZGJpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTM3Ny9GM0M0NEE3OENDNTgxMUVGOTk5ODVEODZDNEY5QUUwMi9rSURiVVA4TGRE XzZNcmVkRGRYREdRSWRiaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGsZu6umVaLXgH2ZThbHRQ9rH1vjN/CWnqKpHNneuRbRPjkgb4GsrPsAFpgR5 EAfzoA5m9qC4rD32MZmgFf9JNh0s7DsKsprPT2LQ7TnCbnD+TUcp2QyLCHUts8AZ bghFAntaQ/2vCFLZtBsV7arKWaBMIOHjRS8LE+11ZyRY27wcrhKThiAGRpuNw1BB C0QAnSfc5crAQqPdTRl81Zmcm/8KwUvy5VTM5Ws/Bjzbn/c262174DhdUTcqIhPi tFSaJBXZ9UBI65/uDyQQLOKRrtKpdpsIe7zpU8ZKXdij56t5IgEs0sHHhurFXAJm Zn6RwITder7Ck+ovKPaiVYTKng== -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:51 2026 by rpki-client