$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft File: KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json) Hash identifier: mOSUFTEG/p+MdutLvZEzbbNEHofLSS/ONvR3ZJO+MGc= Subject key identifier: 7D:22:08:85:F9:EA:1A:19:4E:0A:1A:E2:BF:0E:6C:85:A8:3C:CD:09 Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft Manifest number: 0161 Signing time: Thu 23 Jul 2026 06:32:33 +0000 Manifest this update: Thu 23 Jul 2026 06:32:33 +0000 Manifest next update: Thu 30 Jul 2026 06:32:33 +0000 Files and hashes: 1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: gNVh3jzWy2sy4YpY4ka9SRBg0cRs/YjVb8nJO57m5/M=) 2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Validity Not Before: Jul 23 06:32:33 2026 GMT Not After : Jul 30 06:32:33 2026 GMT Subject: CN=6a61b581-65af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:df:30:0b:cb:98:9d:d7:aa:cf:02:80:26: da:61:b4:dc:46:45:66:ad:61:73:7e:44:f3:53:ab: 66:63:2a:bf:dd:45:c5:e0:f9:da:98:a6:cf:33:cf: 7c:69:72:1d:fd:25:06:3c:c5:9a:1f:5d:cf:40:0a: 1c:5c:98:52:8f:b0:d9:fd:c8:00:bd:39:ba:ac:61: 73:8b:be:26:f6:f9:0d:88:98:e8:63:89:d3:b8:b4: b8:c4:8f:56:79:4e:97:0f:2e:0b:e7:72:fa:8f:39: bf:ea:54:91:de:c0:9b:f5:fc:eb:c2:00:7b:5d:40: ec:af:0f:f2:75:e9:38:8f:da:26:26:96:17:3e:ba: 37:af:32:73:da:73:9a:01:35:d5:f5:f0:40:fa:44: 14:8c:69:40:51:bb:94:28:b2:ae:d3:d6:c3:29:85: 0e:0d:87:bd:90:d1:26:e0:ff:03:e4:d6:e0:e5:c0: fd:ba:a2:39:c4:1e:c1:78:0b:d5:b1:58:c4:f4:ac: 81:28:6c:e0:df:5c:a0:13:57:c6:c2:9e:d4:e7:9b: 18:71:35:1f:e4:fb:7a:1c:9d:0c:e3:81:37:14:7a: 9e:be:7c:26:83:86:5e:cf:c7:82:5c:65:53:00:7b: 4a:88:bc:b4:d5:10:93:f7:c3:39:4a:6e:9c:c5:51: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:22:08:85:F9:EA:1A:19:4E:0A:1A:E2:BF:0E:6C:85:A8:3C:CD:09 X509v3 Authority Key Identifier: keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bf:40:e5:3f:5a:8e:39:26:86:2a:b1:8a:68:d9:12:2d:66: 3a:12:8b:62:ad:1d:90:96:9c:21:d5:c7:0e:03:f1:5c:0d:4c: bb:c7:67:9e:25:0d:cc:92:97:95:77:01:50:6b:ea:89:10:fc: b8:ff:99:81:68:cc:c8:64:36:54:46:d8:93:59:ca:23:81:38: 67:39:f7:06:a8:e3:60:35:64:70:2a:dd:66:65:8c:b7:87:9e: e0:e6:a5:0b:00:60:19:bd:28:5a:93:18:d8:9c:b5:d4:42:be: d1:10:3d:ce:95:b1:23:37:74:7a:55:94:61:7a:5f:23:29:00: a3:43:5b:46:27:7a:9a:59:11:63:9d:69:9e:b0:b8:51:70:f0: 0d:be:f0:38:13:20:54:66:d1:4e:85:4e:3c:04:3e:88:7d:8c: 61:bd:af:80:c0:18:cf:e4:15:3d:4a:27:0f:7c:bf:43:6f:f8: aa:75:37:e3:4a:81:71:ee:e4:6b:1b:e6:1c:0e:de:da:ca:4f: 0a:69:c9:4c:f8:7c:2d:be:91:92:e2:b3:14:7a:e8:75:a1:07: 6d:40:19:38:84:e4:88:59:0a:b3:31:3b:38:67:9b:67:51:44: 3b:ae:5c:26:2d:69:3a:b1:e1:ac:cf:9b:3a:f6:f8:cf:6a:f1: 2b:ca:c4:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDI5MDM3QkJGOTJGMkIwRjRDMzMwQTFDREQ0QTc2MjU2 Q0Q3QTU0MjIwHhcNMjYwNzIzMDYzMjMzWhcNMjYwNzMwMDYzMjMzWjAYMRYwFAYD VQQDEw02YTYxYjU4MS02NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt47fMAvLmJ3Xqs8CgCbaYbTcRkVmrWFzfkTzU6tmYyq/3UXF4PnamKbPM898 aXId/SUGPMWaH13PQAocXJhSj7DZ/cgAvTm6rGFzi74m9vkNiJjoY4nTuLS4xI9W eU6XDy4L53L6jzm/6lSR3sCb9fzrwgB7XUDsrw/ydek4j9omJpYXPro3rzJz2nOa ATXV9fBA+kQUjGlAUbuUKLKu09bDKYUODYe9kNEm4P8D5Nbg5cD9uqI5xB7BeAvV sVjE9KyBKGzg31ygE1fGwp7U55sYcTUf5Pt6HJ0M44E3FHqevnwmg4Zez8eCXGVT AHtKiLy01RCT98M5Sm6cxVHynwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0iCIX5 6hoZTgoa4r8ObIWoPM0JMB8GA1UdIwQYMBaAFCkDe7+S8rD0wzChzdSnYlbNelQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS80MzY3QzIwRTZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQVERNS0hOMUtkaVZzMTZW Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRTjd2NUx5c1BURE1LSE4xS2RpVnMxNlZDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS80MzY3QzIwRTZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQ VERNS0hOMUtkaVZzMTZWQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj79A5T9ajjkmhiqximjZEi1mOhKLYq0dkJacIdXHDgPxXA1Mu8dnniUNzJKX lXcBUGvqiRD8uP+ZgWjMyGQ2VEbYk1nKI4E4Zzn3BqjjYDVkcCrdZmWMt4ee4Oal CwBgGb0oWpMY2Jy11EK+0RA9zpWxIzd0elWUYXpfIykAo0NbRid6mlkRY51pnrC4 UXDwDb7wOBMgVGbRToVOPAQ+iH2MYb2vgMAYz+QVPUonD3y/Q2/4qnU340qBce7k axvmHA7e2spPCmnJTPh8Lb6RkuKzFHrodaEHbUAZOITkiFkKszE7OGebZ1FEO65c Ji1pOrHhrM+bOvb4z2rxK8rEEA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:20:10 2026 by rpki-client