$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft File: KJS89-I5RAOCbTtLS4B6RKekFoI.mft (raw, json) Hash identifier: cVdwYtzV9R7stBlznleobZF/T8GRH4Y3Z9+DjXn9CB4= Subject key identifier: 68:69:37:26:A5:87:D4:6C:A5:E9:1C:62:B9:A8:A9:23:49:CE:4B:E2 Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft Manifest number: 07 Signing time: Thu 23 Jul 2026 11:18:53 +0000 Manifest this update: Thu 23 Jul 2026 11:18:53 +0000 Manifest next update: Thu 30 Jul 2026 11:18:53 +0000 Files and hashes: 1: KJS89-I5RAOCbTtLS4B6RKekFoI.crl (hash: iTG/jMLedNLWrHh016RFCSrJym7ll30BXRdfZ7/dXNM=) 2: 2A71D75884B211F18866DC898FA30FBC.roa (hash: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU=) 3: 35BF0DAA84B811F1831C967990A30FBC.roa (hash: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Jul 23 11:18:53 2026 GMT Not After : Jul 30 11:18:53 2026 GMT Subject: CN=6a61f89d-dfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:ed:90:2c:41:41:3b:40:b9:1d:e5:90:eb: a9:cf:3f:b9:23:2a:fb:53:0b:e2:e9:32:3a:c0:90: f7:9f:f2:ec:33:80:d0:e6:bc:1a:0d:d0:66:76:f0: d3:7f:75:f7:82:d9:a9:93:11:1b:1b:9d:2a:b1:df: f5:a6:a3:0d:dd:e6:e9:0e:42:28:51:f4:70:9c:52: d9:68:fa:41:fc:3c:12:df:94:e8:5d:3f:54:86:0b: f0:2b:12:c9:06:eb:11:f4:75:22:2c:3b:54:16:1b: f4:ca:50:9e:b4:7d:f3:df:52:d0:56:e2:72:84:b4: a6:b8:23:ff:3a:e2:f2:6b:29:7b:ce:78:6c:4b:62: 0d:cd:ba:6d:ad:6d:53:40:dd:65:b2:2f:b5:2e:80: 4c:25:ed:f0:a2:3a:11:3a:a9:c2:3a:49:9a:db:2b: eb:a4:85:04:b6:19:06:6c:53:cf:1d:35:21:e8:c6: 0e:82:f2:e8:04:9f:65:8b:72:2a:85:13:dc:94:95: db:c3:7a:5e:2c:ff:60:9d:49:25:83:4c:90:13:eb: 73:ea:da:02:d0:9d:da:33:8b:32:46:0a:79:91:7a: ed:a3:50:17:df:87:ee:f9:db:70:b7:22:21:60:6f: bb:b9:aa:56:02:ea:8b:43:f3:93:79:49:a6:6b:4e: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:69:37:26:A5:87:D4:6C:A5:E9:1C:62:B9:A8:A9:23:49:CE:4B:E2 X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b1:7f:46:a2:37:65:af:88:f6:e5:ec:f2:2d:8d:a5:f9:f2: 3e:2a:fd:c8:85:26:7a:4e:e1:af:ad:5b:7b:cf:ae:26:63:96: f2:80:33:3d:03:57:c2:11:4e:a6:79:04:b4:49:eb:f5:a0:44: c4:d1:3b:e4:e5:a8:b2:96:e0:be:d1:25:73:06:e3:ae:17:15: 22:9e:73:12:19:9c:96:b8:3d:02:d5:02:cc:9e:87:80:2a:1f: 29:a2:11:c0:47:5c:8a:fd:e4:3d:38:a8:95:19:5d:bc:1a:44: f0:28:1d:87:78:37:5d:9f:9e:e0:bc:a7:35:1e:39:fa:20:71: eb:66:2b:1e:a1:c6:09:a7:d3:8a:6f:81:4f:f3:35:8c:37:d9: 6a:72:81:f3:d7:b3:c1:ef:b4:9c:d6:a2:a8:a4:db:83:e2:5f: bd:8e:d0:08:12:9b:50:60:6c:82:0f:b0:e0:36:8b:b6:6d:bb: 81:bf:6b:22:71:be:16:42:76:0c:2b:fc:1f:33:e8:65:e7:98: 88:32:b0:24:7e:ef:95:0c:35:b5:c3:30:83:ca:39:af:03:21: 8a:7c:b2:e0:17:e5:ae:0e:f1:99:8f:f6:bf:c4:0f:1d:c1:c1: 09:b6:6d:b7:cb:ed:ab:76:94:3f:5f:df:75:75:bb:f0:00:90: d3:fb:77:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA3MjMxMTE4NTNaFw0yNjA3MzAxMTE4NTNaMBgxFjAUBgNV BAMTDTZhNjFmODlkLWRmZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbau2QLEFBO0C5HeWQ66nPP7kjKvtTC+LpMjrAkPef8uwzgNDmvBoN0GZ28NN/ dfeC2amTERsbnSqx3/Wmow3d5ukOQihR9HCcUtlo+kH8PBLflOhdP1SGC/ArEskG 6xH0dSIsO1QWG/TKUJ60ffPfUtBW4nKEtKa4I/864vJrKXvOeGxLYg3Num2tbVNA 3WWyL7UugEwl7fCiOhE6qcI6SZrbK+ukhQS2GQZsU88dNSHoxg6C8ugEn2WLciqF E9yUldvDel4s/2CdSSWDTJAT63Pq2gLQndozizJGCnmReu2jUBffh+7523C3IiFg b7u5qlYC6otD85N5SaZrTqzvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaGk3JqWH 1Gyl6RxiuaipI0nOS+IwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUVELzczNjRGMTBDODE1NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFP Q2JUdExTNEI2Uktla0ZvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC9sX9Gojdlr4j25ezyLY2l+fI+Kv3IhSZ6TuGvrVt7z64mY5bygDM9A1fCEU6m eQS0Sev1oETE0Tvk5aiyluC+0SVzBuOuFxUinnMSGZyWuD0C1QLMnoeAKh8pohHA R1yK/eQ9OKiVGV28GkTwKB2HeDddn57gvKc1Hjn6IHHrZiseocYJp9OKb4FP8zWM N9lqcoHz17PB77Sc1qKopNuD4l+9jtAIEptQYGyCD7DgNou2bbuBv2sicb4WQnYM K/wfM+hl55iIMrAkfu+VDDW1wzCDyjmvAyGKfLLgF+WuDvGZj/a/xA8dwcEJtm23 y+2rdpQ/X991dbvwAJDT+3dW -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:51 2026 by rpki-client