$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: YCQgOYX5Mp86CdPc9ebGDREjeIAEmFHPL+92jAF5CB8= Subject key identifier: 05:02:9F:9F:9C:AB:71:82:10:FC:62:6B:EB:99:40:6D:7B:EF:2E:5B Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 2C Signing time: Thu 23 Jul 2026 10:48:27 +0000 Manifest this update: Thu 23 Jul 2026 10:48:26 +0000 Manifest next update: Thu 30 Jul 2026 10:48:26 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: RCS0x0c9WVqOr4JoXFCzQGSAnonQmxkI3GUq8M/ec7Y=) 2: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) 3: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Jul 23 10:48:26 2026 GMT Not After : Jul 30 10:48:26 2026 GMT Subject: CN=6a61f17b-cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5b:ca:c5:72:45:5b:63:ac:9c:09:d6:b1:b5: 28:c3:ea:8f:a2:e0:40:17:59:01:1c:1b:d6:0b:00: 7d:02:60:cd:d0:c2:94:d8:c0:65:95:d5:64:3d:38: 8c:94:d7:23:c0:33:08:1d:e4:02:c8:b0:33:2a:21: 35:0a:6e:6a:fb:58:22:ba:1e:7b:67:0e:98:8c:76: 59:cb:54:b7:70:0d:79:51:81:d9:f6:9e:cd:fe:a7: a3:9e:d2:ea:e7:09:9e:7b:a7:8b:33:8d:e2:17:23: b6:55:ef:c1:07:fa:16:be:16:ee:54:84:d9:6e:46: 90:71:bf:90:06:11:8f:58:e6:ae:8f:5a:85:dc:bb: 3c:e0:d3:86:5f:7b:38:cf:32:e1:b3:de:c3:3b:2a: 5c:60:4b:73:33:fe:0d:1d:3d:f5:73:4b:89:16:3e: 2f:6d:d6:e5:7a:ee:3f:28:bf:3f:62:fd:f0:fa:84: 0c:74:b1:c9:96:15:bc:b6:4c:5f:70:7f:39:97:51: d8:38:aa:a8:76:b2:53:50:6d:32:00:3c:e9:b8:af: bd:ca:ef:68:1f:05:84:95:90:21:15:1f:b2:cc:c1: bf:40:ba:64:97:aa:1f:f4:35:b3:45:84:bd:fc:1f: 75:1f:e0:61:0a:99:e9:f0:a3:03:a2:24:ec:1b:98: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:02:9F:9F:9C:AB:71:82:10:FC:62:6B:EB:99:40:6D:7B:EF:2E:5B X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e0:7e:bb:78:73:1a:56:cb:95:23:de:06:ec:a0:0c:21:c4: 2d:0c:ea:93:0f:6f:db:6d:0a:87:60:18:31:db:59:ff:fe:c6: 8a:8d:cd:76:0d:e9:99:f6:db:ff:12:71:18:de:e9:6d:59:80: dc:c9:53:43:44:f2:09:8e:00:20:8a:cc:8b:d3:6c:8b:f0:88: 66:20:6c:00:2a:28:2b:e3:d9:b9:af:e6:04:f9:00:ac:ff:43: e3:c0:ff:92:7a:1f:f8:de:f9:9e:04:45:6c:b4:85:8c:53:eb: 70:96:9c:34:29:7e:0d:29:bc:12:47:ad:80:4b:6e:d9:4c:c3: 24:bf:97:b6:0e:6b:bc:ab:cb:45:5d:34:65:87:fb:f9:46:2e: 07:46:aa:65:ec:65:e8:ee:c8:f5:e8:d9:b0:79:14:ec:4b:e7: 87:12:ae:80:b0:05:7f:77:69:63:b6:fa:7c:e2:ec:97:e4:32: 12:3a:2c:50:e6:c6:0d:a9:a0:ba:b6:29:13:49:ba:75:28:7c: ca:c2:5c:d5:a9:36:83:c4:cd:23:fe:47:cc:00:56:b6:30:a3: 8e:77:a4:cc:fc:37:2a:cf:d8:3a:29:4c:7e:56:58:44:17:b4: 53:2e:36:1c:10:17:f1:8f:16:60:ed:c7:9b:13:aa:95:6d:3b: 96:fe:69:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA3MjMxMDQ4MjZaFw0yNjA3MzAxMDQ4MjZaMBgxFjAUBgNV BAMTDTZhNjFmMTdiLWNkNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGW8rFckVbY6ycCdaxtSjD6o+i4EAXWQEcG9YLAH0CYM3QwpTYwGWV1WQ9OIyU 1yPAMwgd5ALIsDMqITUKbmr7WCK6HntnDpiMdlnLVLdwDXlRgdn2ns3+p6Oe0urn CZ57p4szjeIXI7ZV78EH+ha+Fu5UhNluRpBxv5AGEY9Y5q6PWoXcuzzg04ZfezjP MuGz3sM7KlxgS3Mz/g0dPfVzS4kWPi9t1uV67j8ovz9i/fD6hAx0scmWFby2TF9w fzmXUdg4qqh2slNQbTIAPOm4r73K72gfBYSVkCEVH7LMwb9AumSXqh/0NbNFhL38 H3Uf4GEKmenwowOiJOwbmOh7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBQKfn5yr cYIQ/GJr65lAbXvvLlswHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAa4H67eHMaVsuVI94G7KAMIcQtDOqTD2/bbQqHYBgx21n//saKjc12DemZ9tv/ EnEY3ultWYDcyVNDRPIJjgAgisyL02yL8IhmIGwAKigr49m5r+YE+QCs/0PjwP+S eh/43vmeBEVstIWMU+twlpw0KX4NKbwSR62AS27ZTMMkv5e2Dmu8q8tFXTRlh/v5 Ri4HRqpl7GXo7sj16NmweRTsS+eHEq6AsAV/d2ljtvp84uyX5DISOixQ5sYNqaC6 tikTSbp1KHzKwlzVqTaDxM0j/kfMAFa2MKOOd6TM/Dcqz9g6KUx+VlhEF7RTLjYc EBfxjxZg7cebE6qVbTuW/mmj -----END CERTIFICATE-----Generated at Fri Jul 24 00:58:28 2026 by rpki-client