$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: e+7JKxqELkL85YO5Doe8NaeS58OBQTTCa/76cQfqYcM= Subject key identifier: 91:BE:06:C4:F9:EA:45:78:F6:48:F8:24:99:03:D3:11:D3:2C:6F:82 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F37 Signing time: Wed 22 Jul 2026 17:49:20 +0000 Manifest this update: Wed 22 Jul 2026 17:49:19 +0000 Manifest next update: Wed 29 Jul 2026 17:49:19 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: 2WOQR8JIkTNJNJxFN/KIvtwXoO38fOrd+/2Z1PATHHo=) 2: UekbYDpQxrYo0CAiaXiBXjiYX7Y.asa (hash: 35cN/LTsr4AjmNFcJwEXa21fvMZF8t50qcF2L+i5uRs=) 3: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: g+9ZIN0bzKl4hPUjZROdg1CsqMAMZorZF/Wv0UBIawM=) 4: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: rIqL842ksTXKO2fhExD42Yq0dnrl1cNwx4ESowKkH4A=) 5: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: KOAlra/c7OfhaqRuBqqmBdCQXMOimlFzYXSJ4DGlkSM=) 6: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: yBAKdOeuYpOHwpfvu2EJBrKJc+IZbXKkxfMi4yfRU/Q=) 7: 10E905682CCE11F1BB1925E192833773.roa (hash: 6g6Ja4w+RYbHzuKLTfgElgeDFmZnmZ9tKzWcakJqqZs=) 8: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: j5kN5uvsFGRLFFFzFP46xJ6l0wo2CCqq8dwowySMLUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3996 (0xf9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Jul 22 17:49:19 2026 GMT Not After : Jul 29 17:49:19 2026 GMT Subject: CN=6a6102a0-899d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:a9:f7:ef:66:b7:eb:67:ca:3f:e4:b4:a8: c3:d3:02:6e:d8:40:de:53:b6:ff:6d:e5:b4:f9:cf: 52:4a:7d:64:66:4c:bf:e7:05:a9:c6:fa:22:e9:ad: 74:40:e7:02:95:1b:0f:0a:a5:3c:c1:20:f3:71:6a: a6:ed:aa:0b:ca:21:62:49:2e:16:56:f5:62:00:6e: b3:49:a2:0c:31:21:3c:0b:22:ac:1d:11:98:b5:2b: b2:65:06:67:dd:10:e2:d8:21:2d:40:f1:14:03:39: 21:fc:1d:5e:b8:d8:c6:ea:28:53:58:7e:f6:f0:39: a6:59:96:b4:be:fa:ce:9c:ec:d6:73:d3:85:62:d9: 62:ab:35:57:8b:79:c5:09:4e:ca:c4:9c:07:24:d5: 2f:4b:31:ad:fb:76:ed:dc:8b:e4:78:43:e7:b5:3d: 9d:b1:5a:a5:21:70:0f:ae:2d:c6:39:a7:1d:f2:01: 82:06:0d:a9:60:24:0e:5b:dd:33:5b:20:26:52:89: d8:24:c0:a7:9e:5b:73:c4:e4:24:ee:6c:89:b8:48: 83:c3:f4:49:8b:e1:90:60:d3:eb:60:4e:0a:7d:db: 59:fc:da:93:5b:84:38:6a:71:ed:9b:15:5b:85:2f: cc:d2:b8:43:af:c3:49:70:74:c7:67:60:c6:c1:0b: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:06:C4:F9:EA:45:78:F6:48:F8:24:99:03:D3:11:D3:2C:6F:82 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:26:91:bf:4a:cb:e5:da:8d:de:c7:ef:1d:95:bd:de:bc:00: 35:72:79:2c:0a:50:54:6c:1c:e1:a2:06:7f:c7:cb:cd:6b:22: cc:9a:80:8a:e9:8f:3d:63:83:55:eb:2b:4d:09:25:2e:3a:2d: 86:92:0a:c4:63:fe:42:f4:d6:69:86:fd:c2:0b:e5:fe:af:88: 51:af:a0:75:ff:eb:27:af:a6:22:6c:b0:8c:5f:bf:b5:c7:57: 56:83:d1:b5:c3:0b:22:79:57:8e:1f:c5:02:69:7d:1a:69:91: 19:88:27:de:b1:da:f7:bf:fd:64:87:8a:4e:b5:18:9f:f4:da: 41:2f:c7:a2:c9:96:0f:47:18:d0:a8:3b:62:fb:c9:34:b5:32: a4:31:76:c1:48:3a:cb:1c:e3:30:23:a1:ed:83:46:10:d5:50: e9:36:af:6d:15:38:61:0a:58:a1:fa:ff:96:f7:17:7a:8c:cf: 8b:dc:4d:77:1e:f1:d6:8e:f0:c2:e0:29:0a:a6:22:19:88:3f: 91:ef:28:23:de:98:b5:89:92:e8:41:12:4d:b3:f8:d0:b6:f4: 78:ac:9e:1b:a5:5e:73:8d:a0:d3:00:2a:46:1b:de:b3:a7:16: 39:19:e4:50:db:6a:fe:72:0b:e9:e7:de:fb:02:5e:7b:e6:b7: d6:9d:a1:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwNzIyMTc0OTE5WhcNMjYwNzI5MTc0OTE5WjAYMRYwFAYD VQQDEw02YTYxMDJhMC04OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgqp9+9mt+tnyj/ktKjD0wJu2EDeU7b/beW0+c9SSn1kZky/5wWpxvoi6a10 QOcClRsPCqU8wSDzcWqm7aoLyiFiSS4WVvViAG6zSaIMMSE8CyKsHRGYtSuyZQZn 3RDi2CEtQPEUAzkh/B1euNjG6ihTWH728DmmWZa0vvrOnOzWc9OFYtliqzVXi3nF CU7KxJwHJNUvSzGt+3bt3IvkeEPntT2dsVqlIXAPri3GOacd8gGCBg2pYCQOW90z WyAmUonYJMCnnltzxOQk7myJuEiDw/RJi+GQYNPrYE4KfdtZ/NqTW4Q4anHtmxVb hS/M0rhDr8NJcHTHZ2DGwQuPqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG+BsT5 6kV49kj4JJkD0xHTLG+CMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEiaRv0rL5dqN3sfvHZW93rwANXJ5LApQVGwc4aIGf8fLzWsizJqAiumPPWOD VesrTQklLjothpIKxGP+QvTWaYb9wgvl/q+IUa+gdf/rJ6+mImywjF+/tcdXVoPR tcMLInlXjh/FAml9GmmRGYgn3rHa97/9ZIeKTrUYn/TaQS/HosmWD0cY0Kg7YvvJ NLUypDF2wUg6yxzjMCOh7YNGENVQ6TavbRU4YQpYofr/lvcXeozPi9xNdx7x1o7w wuApCqYiGYg/ke8oI96YtYmS6EESTbP40Lb0eKyeG6Vec42g0wAqRhves6cWORnk UNtq/nIL6efe+wJee+a31p2haQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:30 2026 by rpki-client