$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: PB15sa0VhyXiD/CkhYtiZKAjNpR+3B+0OPEah6BmN8o= Subject key identifier: 4C:40:4D:8C:C7:1C:74:1E:FC:C7:01:6F:E0:59:A5:D5:D4:D1:42:75 Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 0285 Signing time: Thu 23 Jul 2026 03:05:55 +0000 Manifest this update: Thu 23 Jul 2026 03:05:54 +0000 Manifest next update: Thu 30 Jul 2026 03:05:54 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: eaOXzdCXHufdouT4a2ZYhkV1CsMBStp08SPwZsaqM0g=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Jul 23 03:05:54 2026 GMT Not After : Jul 30 03:05:54 2026 GMT Subject: CN=6a618512-c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:a8:ac:f6:33:e9:62:92:2d:40:cc:8e:e9: 24:e1:c5:18:3e:e0:20:52:fe:e2:57:c3:fa:aa:1a: 77:ec:16:99:2a:da:f8:2b:eb:68:ff:41:86:68:eb: 05:37:09:f3:09:ea:a6:f9:81:9a:d1:8b:42:c3:43: f6:c2:42:13:f8:00:0e:db:1a:45:29:fb:24:ad:c9: 76:1d:b2:e6:8d:6c:e4:c0:66:53:74:7d:bd:02:c1: 07:58:35:69:0c:71:e7:8c:71:97:e5:0f:2a:14:97: 49:06:6e:09:09:fc:03:8e:ee:1d:a1:e5:16:69:cb: c1:0c:77:36:37:20:72:32:3c:9d:91:ef:d2:5d:a3: c4:c1:3d:70:19:e2:62:20:5f:5e:3f:f5:8d:ef:37: e3:98:35:6f:ac:db:8d:80:9f:17:cb:12:47:7a:15: a4:29:94:2a:65:0b:c5:84:9a:c8:a1:51:6a:4c:fb: c1:ed:f6:ce:ed:cd:b3:4e:63:db:d8:d4:85:c7:f0: 0f:c0:d4:e3:73:b8:5e:4f:ea:bc:04:06:9a:a0:b7: 38:56:3b:c8:c2:b2:dc:83:92:9f:60:d1:3f:4e:1b: 5e:2c:5a:5f:a7:1e:99:5f:94:b0:1e:08:43:77:0b: f8:43:8d:3e:8a:0b:36:fb:f4:1b:0e:09:76:28:53: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:40:4D:8C:C7:1C:74:1E:FC:C7:01:6F:E0:59:A5:D5:D4:D1:42:75 X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8c:72:d2:ee:f1:a7:b1:dd:c1:93:0b:43:cb:ad:19:02:27: e7:4c:f2:5b:89:5c:50:2f:5a:84:94:24:56:98:3e:88:da:45: b2:aa:41:fd:19:c7:a3:3a:ec:46:97:05:cf:aa:1c:fe:6f:ad: 5d:c2:13:9c:46:f3:85:51:ee:32:70:a0:b6:56:f5:77:5e:6a: 29:b9:3a:5a:1c:7b:60:f2:4d:94:16:91:cc:44:d1:60:bd:59: 8e:ad:8a:65:02:cf:39:3a:25:36:ca:61:cd:72:b6:31:35:8d: 06:64:93:9d:58:15:45:a1:b7:93:e5:38:e9:01:07:0c:d4:7d: 59:15:81:fd:f2:97:21:44:c5:8e:f1:ac:4e:54:3b:54:f5:2c: f5:f3:2e:22:b6:6a:ad:72:59:59:80:24:ed:26:15:12:c6:ef: 36:70:4d:a7:4a:29:50:33:05:30:17:d5:ac:f9:2e:3a:bf:1d: f9:4b:9d:0c:b4:76:a4:21:1b:5d:2b:07:b3:fa:8c:ec:f2:a7: 1e:fd:6e:16:42:3f:df:4b:b3:ab:b3:08:cf:4b:75:c7:ad:d6: 3a:14:c6:99:76:a7:ac:2e:fd:34:8d:86:34:66:a5:55:80:2d: 61:8a:4c:6c:1f:15:41:57:90:de:db:a5:d8:c1:71:3f:41:ad: 98:63:4c:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjYwNzIzMDMwNTU0WhcNMjYwNzMwMDMwNTU0WjAYMRYwFAYD VQQDEw02YTYxODUxMi1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D+orPYz6WKSLUDMjukk4cUYPuAgUv7iV8P6qhp37BaZKtr4K+to/0GGaOsF NwnzCeqm+YGa0YtCw0P2wkIT+AAO2xpFKfskrcl2HbLmjWzkwGZTdH29AsEHWDVp DHHnjHGX5Q8qFJdJBm4JCfwDju4doeUWacvBDHc2NyByMjydke/SXaPEwT1wGeJi IF9eP/WN7zfjmDVvrNuNgJ8XyxJHehWkKZQqZQvFhJrIoVFqTPvB7fbO7c2zTmPb 2NSFx/APwNTjc7heT+q8BAaaoLc4VjvIwrLcg5KfYNE/ThteLFpfpx6ZX5SwHghD dwv4Q40+igs2+/QbDgl2KFOBDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExATYzH HHQe/McBb+BZpdXU0UJ1MB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAIxy0u7xp7HdwZMLQ8utGQIn50zyW4lcUC9ahJQkVpg+iNpFsqpB/RnHozrs RpcFz6oc/m+tXcITnEbzhVHuMnCgtlb1d15qKbk6Whx7YPJNlBaRzETRYL1Zjq2K ZQLPOTolNsphzXK2MTWNBmSTnVgVRaG3k+U46QEHDNR9WRWB/fKXIUTFjvGsTlQ7 VPUs9fMuIrZqrXJZWYAk7SYVEsbvNnBNp0opUDMFMBfVrPkuOr8d+UudDLR2pCEb XSsHs/qM7PKnHv1uFkI/30uzq7MIz0t1x63WOhTGmXanrC79NI2GNGalVYAtYYpM bB8VQVeQ3tul2MFxP0GtmGNMMw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:43:14 2026 by rpki-client