$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: EK1wg9YloPPNoDq5q/7RMXb+Re61xGG/DX/j5iWVzks= Subject key identifier: EF:21:35:9C:11:99:25:94:CF:82:08:07:38:A4:32:32:10:73:C4:01 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 0216 Signing time: Thu 23 Jul 2026 04:07:55 +0000 Manifest this update: Thu 23 Jul 2026 04:07:55 +0000 Manifest next update: Thu 30 Jul 2026 04:07:55 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: 04PaepumSIjkKaMKZPylt8J/LzV8mIyMJ04lrqgDB54=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Jul 23 04:07:55 2026 GMT Not After : Jul 30 04:07:55 2026 GMT Subject: CN=6a61939b-2e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e9:74:90:d5:83:39:69:52:56:68:58:4f:46: 27:d7:6e:67:80:63:81:f3:3b:39:52:93:4f:a0:c6: 86:52:80:a1:e2:4c:c0:98:3d:1e:34:ac:39:8a:d8: c6:85:29:1b:86:44:f0:a0:58:0d:b2:2d:c8:6e:71: 63:df:79:47:75:d9:0d:3e:37:9b:75:15:98:38:f6: 40:17:07:64:e8:ed:80:84:3d:66:74:82:36:0f:9f: e5:7c:22:0d:13:48:cd:35:0b:20:ed:41:4f:4e:38: 72:3d:7a:2b:b7:74:b5:ad:29:9d:84:70:14:35:20: d4:e1:51:3a:2d:f3:37:72:4e:f9:19:d7:9e:fc:a3: f9:7f:62:f7:b0:50:cd:ec:ed:8d:e5:38:93:0b:bc: b4:12:6e:b5:26:d6:7d:9b:37:d6:07:9d:4a:bd:ea: a0:ae:2f:bb:b7:6a:96:c3:44:1b:2f:25:d8:ef:4b: 25:a7:16:15:cc:93:0a:1c:e2:fb:4b:53:99:88:43: ef:39:5d:46:6c:de:5b:5f:4e:94:a2:ef:dd:fe:1c: f2:ef:11:33:e7:53:d3:ac:09:c0:8d:e0:f8:7e:69: fb:e0:fe:7a:6b:9d:37:82:cd:35:59:ca:25:5f:65: d5:1b:d1:0a:ab:51:41:21:f8:dd:96:e7:14:8c:e8: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:21:35:9C:11:99:25:94:CF:82:08:07:38:A4:32:32:10:73:C4:01 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8a:30:07:ef:3c:8b:36:b8:05:13:5d:27:9d:60:f4:77:68: aa:4b:c7:4d:25:f5:6a:31:e9:70:87:ad:39:9d:b2:f7:a2:4c: dd:0e:87:26:ac:80:38:fb:ba:26:99:00:d5:bc:4b:ef:e7:ca: 55:a7:bb:9b:a8:28:09:22:c0:46:94:3f:19:59:b1:68:2c:55: ae:30:ca:f1:c0:81:31:47:cb:f2:05:98:4a:57:ec:e8:ec:1c: 5e:9c:1d:d7:1b:f4:94:f6:bc:dd:3d:6b:1d:c1:7d:bd:1f:c5: 90:4a:3d:25:70:29:7b:dc:6a:1a:19:04:df:a9:6e:23:b6:9e: 96:40:d5:39:a1:30:ec:2d:c0:03:25:cc:67:4e:27:cf:f0:7a: 72:58:aa:e6:e3:5a:95:ac:56:31:bc:95:1e:48:bb:6e:00:78: 94:80:4d:66:cb:89:b8:8b:03:4d:0f:f4:6a:d6:21:7b:1f:cf: ff:67:cf:fb:53:98:63:10:48:2e:81:25:13:dc:c8:93:88:00: 3e:bb:13:db:9a:b6:45:06:bf:89:f3:c0:6d:f3:9f:42:61:dd: 59:d4:2b:21:1e:dd:16:16:c9:37:0c:aa:58:21:ec:06:d8:39: b0:ef:4c:a2:34:a2:c1:73:be:53:dc:87:df:8b:7c:39:e0:64: 38:2d:6d:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwNzIzMDQwNzU1WhcNMjYwNzMwMDQwNzU1WjAYMRYwFAYD VQQDEw02YTYxOTM5Yi0yZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjel0kNWDOWlSVmhYT0Yn125ngGOB8zs5UpNPoMaGUoCh4kzAmD0eNKw5itjG hSkbhkTwoFgNsi3IbnFj33lHddkNPjebdRWYOPZAFwdk6O2AhD1mdII2D5/lfCIN E0jNNQsg7UFPTjhyPXort3S1rSmdhHAUNSDU4VE6LfM3ck75Gdee/KP5f2L3sFDN 7O2N5TiTC7y0Em61JtZ9mzfWB51Kveqgri+7t2qWw0QbLyXY70slpxYVzJMKHOL7 S1OZiEPvOV1GbN5bX06Uou/d/hzy7xEz51PTrAnAjeD4fmn74P56a503gs01Wcol X2XVG9EKq1FBIfjdlucUjOjRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8hNZwR mSWUz4IIBzikMjIQc8QBMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYowB+88iza4BRNdJ51g9HdoqkvHTSX1ajHpcIetOZ2y96JM3Q6HJqyAOPu6 JpkA1bxL7+fKVae7m6goCSLARpQ/GVmxaCxVrjDK8cCBMUfL8gWYSlfs6OwcXpwd 1xv0lPa83T1rHcF9vR/FkEo9JXApe9xqGhkE36luI7aelkDVOaEw7C3AAyXMZ04n z/B6cliq5uNalaxWMbyVHki7bgB4lIBNZsuJuIsDTQ/0atYhex/P/2fP+1OYYxBI LoElE9zIk4gAPrsT25q2RQa/ifPAbfOfQmHdWdQrIR7dFhbJNwyqWCHsBtg5sO9M ojSiwXO+U9yH34t8OeBkOC1tIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:36 2026 by rpki-client