$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: f7RtnHAdSHJ0Qt1e75o6DkCN4oD5MreYlzPE1QoHAR0= Subject key identifier: D2:36:E2:79:BD:5D:E7:1E:F6:B6:DD:B5:3D:9F:B3:0B:72:24:3C:FF Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 06CF Signing time: Wed 22 Jul 2026 16:04:11 +0000 Manifest this update: Wed 22 Jul 2026 16:04:10 +0000 Manifest next update: Wed 29 Jul 2026 16:04:10 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: gkHNwIz5a2rH+8WCx7jtQLzUEQKMZA+W6pbHWBHiPXU=) 2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yCmJKCeUjCX4/1rndfEcZXyyAy1UCnlaRalfod8v7Ts=) 3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: po/i8uxPFYRsNFTlJU1d5KEDrihE5XxUDGJv65GiON0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Jul 22 16:04:10 2026 GMT Not After : Jul 29 16:04:10 2026 GMT Subject: CN=6a60e9fa-927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:42:54:4d:78:1b:fe:ad:ab:c5:7d:c1:5d: 40:84:3d:f6:89:4d:96:a3:a4:36:f2:0c:c8:59:e4: bd:b0:bc:2f:ed:66:eb:14:ea:65:3b:58:66:fd:1f: c5:a5:c8:5e:04:9f:b0:97:bc:3f:30:10:b7:df:d0: df:96:4a:2c:3f:7a:88:96:92:79:f6:ab:3c:ae:67: 8d:90:24:1b:b7:3e:aa:e5:73:26:c9:a6:1a:d9:09: 75:fe:b5:94:32:4f:71:a4:fd:6d:15:60:87:c3:4c: 7a:1e:15:42:ff:d4:2f:79:79:fa:49:c6:24:9c:79: 62:b9:a2:aa:59:5d:3b:da:ce:b0:39:d6:b7:0c:b8: 9c:51:b9:fe:52:25:08:fb:d1:2c:da:7d:94:9e:ce: 13:41:c0:17:1c:10:b2:fa:4a:d8:02:0b:a6:65:07: 97:94:08:c5:e5:60:59:2c:c3:a3:cf:f7:05:71:5e: 18:29:20:5a:ca:1f:92:be:55:87:86:cb:79:25:60: 52:5d:e2:be:af:bd:59:1f:b2:72:8f:68:dc:57:0f: 5d:3e:73:84:db:49:33:54:55:6c:c8:83:8f:0e:71: 00:9f:e1:fb:4c:da:ad:d0:94:32:14:9c:87:e9:7e: 0a:b1:f6:3c:2f:9b:3f:c1:a3:73:2b:8c:34:c6:fe: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:E2:79:BD:5D:E7:1E:F6:B6:DD:B5:3D:9F:B3:0B:72:24:3C:FF X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b2:9d:cf:f4:8b:05:9b:aa:ac:3f:fa:1e:d0:16:91:cc:c6: 9e:93:50:56:17:31:75:33:45:c4:02:7a:93:db:81:18:29:aa: 5f:c9:d7:f7:c3:72:70:69:85:84:47:1b:0a:dd:36:42:e3:be: df:2f:3c:21:b9:df:72:94:45:f7:b9:e2:fc:6f:52:b9:c4:01: 54:f8:5b:c9:73:75:f1:47:34:25:30:3c:b2:69:46:a3:c1:94: d4:db:9f:6f:22:b4:3c:d8:86:96:ec:62:11:b3:9e:1e:3b:91: 49:3a:5d:6f:68:85:b9:b4:fb:af:fe:c8:ca:df:d1:70:e0:39: b7:cf:28:9f:8f:cc:d5:2c:f3:32:d3:c2:4e:b1:12:d1:f7:ca: d8:14:06:03:bf:e5:e6:60:fa:71:1f:8b:d9:24:c1:16:21:7e: e5:95:cf:6a:2b:92:e8:3e:2e:12:19:6b:c8:8e:5f:01:a0:14: 2c:d1:8f:3a:b3:12:7b:01:a7:b6:3c:b6:aa:c4:1a:0a:a2:46: 88:d2:d6:8f:cb:a1:16:79:f0:b8:78:1c:e0:4f:7b:6b:53:48: de:f8:3b:bb:9e:08:ed:30:63:58:2d:ba:a6:d6:2f:7c:39:10: 43:a2:34:dc:2d:ee:aa:26:f0:d8:80:ee:61:a9:f8:5a:ec:6d: 06:f6:c0:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwNzIyMTYwNDEwWhcNMjYwNzI5MTYwNDEwWjAYMRYwFAYD VQQDEw02YTYwZTlmYS05MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrlCVE14G/6tq8V9wV1AhD32iU2Wo6Q28gzIWeS9sLwv7WbrFOplO1hm/R/F pcheBJ+wl7w/MBC339DflkosP3qIlpJ59qs8rmeNkCQbtz6q5XMmyaYa2Ql1/rWU Mk9xpP1tFWCHw0x6HhVC/9QveXn6ScYknHliuaKqWV072s6wOda3DLicUbn+UiUI +9Es2n2Uns4TQcAXHBCy+krYAgumZQeXlAjF5WBZLMOjz/cFcV4YKSBayh+SvlWH hst5JWBSXeK+r71ZH7Jyj2jcVw9dPnOE20kzVFVsyIOPDnEAn+H7TNqt0JQyFJyH 6X4KsfY8L5s/waNzK4w0xv5VkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNI24nm9 Xece9rbdtT2fswtyJDz/MB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABbKdz/SLBZuqrD/6HtAWkczGnpNQVhcxdTNFxAJ6k9uBGCmqX8nX98NycGmF hEcbCt02QuO+3y88IbnfcpRF97ni/G9SucQBVPhbyXN18Uc0JTA8smlGo8GU1Nuf byK0PNiGluxiEbOeHjuRSTpdb2iFubT7r/7Iyt/RcOA5t88on4/M1SzzMtPCTrES 0ffK2BQGA7/l5mD6cR+L2STBFiF+5ZXPaiuS6D4uEhlryI5fAaAULNGPOrMSewGn tjy2qsQaCqJGiNLWj8uhFnnwuHgc4E97a1NI3vg7u54I7TBjWC26ptYvfDkQQ6I0 3C3uqibw2IDuYan4WuxtBvbAUQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:08 2026 by rpki-client