$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft File: kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft (raw, json) Hash identifier: n+JSHEpWN0BoyG6mOcPa8hBcrCKQjL5JdBBxeTgY5XE= Subject key identifier: D5:1D:B4:E9:99:3E:60:B0:A6:45:78:5F:3B:5F:DC:DD:94:00:B7:1D Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft Manifest number: 028D Signing time: Thu 23 Jul 2026 03:06:52 +0000 Manifest this update: Thu 23 Jul 2026 03:06:52 +0000 Manifest next update: Thu 30 Jul 2026 03:06:52 +0000 Files and hashes: 1: kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl (hash: /c/4Qtj376NftcFzAfaizxy1+8QyrSRO2wOdWTZk3do=) 2: F96174ECC27D11EDB8226F2DC4F9AE02.roa (hash: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Validity Not Before: Jul 23 03:06:52 2026 GMT Not After : Jul 30 03:06:52 2026 GMT Subject: CN=6a61854c-25cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:c7:ef:00:c8:03:dd:36:34:a5:b5:0e:bc: 1b:3c:f0:e8:e3:2f:fa:7f:8c:f9:7e:f0:04:4f:bd: 1a:d6:5d:3d:a9:4e:33:68:f2:af:7f:98:d2:41:cc: 62:b4:c4:64:aa:3b:07:24:3a:24:e3:a7:23:47:ea: 5d:94:69:89:74:5c:f8:14:e7:2e:29:8a:f1:52:e7: 7d:35:8a:90:31:59:ac:00:4d:70:01:8d:61:1d:bc: a9:a6:e7:df:cf:61:e9:c1:33:63:d7:bd:e9:30:de: 38:93:43:18:29:df:43:f5:5e:61:c0:6b:61:8e:f0: 37:74:7a:44:ad:a4:9f:54:a6:ae:17:64:fd:26:98: 0f:d3:3e:e0:f0:e6:87:12:3e:fe:38:18:be:eb:b3: 60:cb:c9:c5:12:ce:13:23:cd:80:fe:4c:67:c2:33: c9:85:7d:3d:17:a6:29:61:c8:f1:4c:6f:32:ab:69: 07:88:7f:a5:a1:75:98:f0:f0:98:02:3f:e5:47:6b: b9:8f:97:96:45:8f:be:4c:69:f9:0d:25:5c:fc:a2: e4:6b:32:ff:16:59:97:8a:98:05:29:4d:d8:b4:68: 54:86:f7:6b:26:97:c2:4e:e3:5e:c4:a6:34:a0:75: fa:90:31:55:b5:12:01:01:3f:b9:5d:7d:6f:d5:45: d9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:B4:E9:99:3E:60:B0:A6:45:78:5F:3B:5F:DC:DD:94:00:B7:1D X509v3 Authority Key Identifier: keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:22:ae:c1:f1:d6:78:93:59:51:a6:a0:5a:b7:b0:5d:7e:9c: 4e:2b:3f:71:7f:b9:94:cf:5f:28:3e:12:69:64:51:6c:68:eb: 59:3b:ed:44:1b:47:39:9f:e1:35:ab:5b:b3:fe:53:39:fa:8b: d7:96:fd:0c:ca:af:27:fe:6b:89:de:c5:53:18:91:39:be:83: a6:53:e5:0b:45:c2:9d:06:df:e7:f0:44:97:ad:4f:b9:a7:ef: 0c:73:bb:57:62:cc:1e:37:4c:9d:00:15:b4:43:94:bc:99:a7: a5:79:a7:d7:f8:49:5c:ac:eb:a3:6d:9d:b4:f9:0f:9d:93:84: 4b:10:67:9a:bf:a9:cd:1e:27:b6:4b:53:9f:c8:f3:f7:a5:10: 37:34:49:4f:60:d8:d7:6a:b7:4f:71:97:08:42:8d:e2:80:1c: bd:58:48:62:f6:f7:e8:39:7d:33:5a:b1:61:2c:58:fa:22:9b: ff:f2:c6:9f:38:cd:c6:fa:b7:ad:e3:35:33:b3:10:81:3c:81: 24:77:83:78:7c:9e:d2:03:31:d7:26:dd:ef:e3:32:63:ab:e6: d4:d0:94:85:e6:83:5f:62:25:a9:7d:16:36:60:c7:8d:50:22: 75:df:52:8f:b4:11:2f:12:3d:1a:aa:ed:de:98:74:48:ba:36: 48:72:37:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3 RTc5MTRBNDkwHhcNMjYwNzIzMDMwNjUyWhcNMjYwNzMwMDMwNjUyWjAYMRYwFAYD VQQDEw02YTYxODU0Yy0yNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFDH7wDIA902NKW1DrwbPPDo4y/6f4z5fvAET70a1l09qU4zaPKvf5jSQcxi tMRkqjsHJDok46cjR+pdlGmJdFz4FOcuKYrxUud9NYqQMVmsAE1wAY1hHbyppuff z2HpwTNj173pMN44k0MYKd9D9V5hwGthjvA3dHpEraSfVKauF2T9JpgP0z7g8OaH Ej7+OBi+67Ngy8nFEs4TI82A/kxnwjPJhX09F6YpYcjxTG8yq2kHiH+loXWY8PCY Aj/lR2u5j5eWRY++TGn5DSVc/KLkazL/FlmXipgFKU3YtGhUhvdrJpfCTuNexKY0 oHX6kDFVtRIBAT+5XX1v1UXZBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUdtOmZ PmCwpkV4Xztf3N2UALcdMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhV VlNHdlprQTFKNDUtZVJTa2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyKuwfHWeJNZUaagWrewXX6cTis/cX+5lM9fKD4SaWRRbGjrWTvtRBtHOZ/h Natbs/5TOfqL15b9DMqvJ/5rid7FUxiROb6DplPlC0XCnQbf5/BEl61PuafvDHO7 V2LMHjdMnQAVtEOUvJmnpXmn1/hJXKzro22dtPkPnZOESxBnmr+pzR4ntktTn8jz 96UQNzRJT2DY12q3T3GXCEKN4oAcvVhIYvb36Dl9M1qxYSxY+iKb//LGnzjNxvq3 reM1M7MQgTyBJHeDeHye0gMx1ybd7+MyY6vm1NCUheaDX2IlqX0WNmDHjVAidd9S j7QRLxI9Gqrt3ph0SLo2SHI3oA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:00:42 2026 by rpki-client