$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft File: jKszW_vzkiyQjyAPyLk4vIHMkwI.mft (raw, json) Hash identifier: EAPrQNpztCtu7qacmQYXeTvCHR4RbQcsGm0jNdixvhg= Subject key identifier: 46:A7:F7:AA:9D:C4:A2:38:A4:03:29:A9:53:09:2A:31:60:67:3E:AB Authority key identifier: 8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02 Certificate issuer: /CN=A91F8AD4/serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft Manifest number: 1C Signing time: Thu 23 Jul 2026 11:00:19 +0000 Manifest this update: Thu 23 Jul 2026 11:00:18 +0000 Manifest next update: Thu 30 Jul 2026 11:00:18 +0000 Files and hashes: 1: jKszW_vzkiyQjyAPyLk4vIHMkwI.crl (hash: +KOxctddHbo4JhT6Tc7uCe8Ie1nFniFnuo1wsleAD5o=) 2: 0D504AD25B6411F1BCACB5ED9D833773.roa (hash: 3iyJLgKvX9P6A2EKlBdLN7L+RbKwbi8Xb0hFQxLvoas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8AD4, serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302 Validity Not Before: Jul 23 11:00:18 2026 GMT Not After : Jul 30 11:00:18 2026 GMT Subject: CN=6a61f443-4c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:7a:18:9e:b0:cc:ef:74:f4:b5:4d:36:39: 96:35:4e:2e:86:c9:2f:52:fe:d5:ab:02:e1:e1:a0: 89:37:c0:c0:bf:60:b0:8c:51:55:d0:5d:ea:3f:a6: f0:ea:5b:45:11:ce:a7:9d:e3:1c:81:e2:f9:e3:a5: a1:3a:ae:e8:ba:d8:f3:d8:d6:74:73:36:9c:39:18: 13:60:d0:29:6a:33:a5:4a:ac:a1:3e:68:80:4c:67: be:81:da:6d:a3:45:5d:7e:3a:1f:45:8a:70:54:41: ce:fe:90:fd:18:da:79:c8:cb:0c:19:d8:70:35:fb: 7c:3d:64:08:23:d4:5a:22:41:7d:b1:71:14:30:5c: 5b:cd:3e:28:64:1b:92:7b:76:d2:60:5d:54:9f:44: aa:f7:ca:17:de:a5:86:5f:ca:13:fb:cd:1a:18:54: 59:fd:87:aa:a0:8a:c8:94:4f:7d:86:37:0c:05:ee: 03:5e:2a:53:8c:ef:42:72:0c:01:72:3f:3a:f6:ee: 12:9b:b4:a6:54:1a:69:e7:14:0d:36:e5:f9:15:16: fb:e3:2f:db:fc:30:7e:a7:11:7f:af:97:0a:03:6c: 58:81:d2:d0:d6:11:26:07:06:85:90:ca:fc:87:a4: 80:4a:fb:99:ff:0c:c2:a9:cf:b0:af:5f:35:64:98: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:F7:AA:9D:C4:A2:38:A4:03:29:A9:53:09:2A:31:60:67:3E:AB X509v3 Authority Key Identifier: keyid:8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:35:f7:4a:ef:0d:3b:4f:53:3f:01:34:96:71:e6:96:19:ea: f5:ab:f1:15:12:b9:02:b4:c4:a3:ef:d8:50:22:98:5f:e6:83: 79:4d:bf:6a:e1:1f:07:29:32:a9:89:f2:d5:d3:e5:d9:c1:cf: 54:66:82:6f:c0:a6:ca:8b:a0:e0:2f:d0:a4:f2:8f:e3:ea:89: 10:24:71:c4:64:41:0c:99:7f:70:c1:0c:ed:1f:8b:71:8a:29: 53:d5:1f:37:4a:b2:90:57:a1:ad:57:a9:de:09:ff:22:90:75: 21:c2:f5:f8:03:85:c0:81:d1:65:ec:31:68:f3:35:f2:bd:c4: 51:5b:73:1c:39:80:43:4d:5d:68:45:ab:0b:07:e6:6b:91:2a: f0:f4:bf:41:aa:80:37:c4:87:e0:1a:6b:9e:0c:86:16:60:64: ee:5a:a2:e2:24:0d:bd:90:ea:b6:7d:ad:ee:3b:e7:8c:5e:bc: 41:85:07:57:8b:00:44:9a:bb:d5:a1:14:be:af:ab:6d:29:f8: 77:0c:37:98:ca:f6:36:e8:b5:d8:bf:8a:87:70:0c:d1:f4:f3: 00:59:4a:f8:58:fa:9b:3c:e3:b9:f5:6c:b3:00:47:cb:19:e1: e6:1a:6d:da:a6:5c:3b:66:b9:48:4b:26:a2:e5:19:4b:1a:e5: 77:eb:7f:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OEFENDExMC8GA1UEBRMoOENBQjMzNUJGQkYzOTIyQzkwOEYyMDBGQzhCOTM4QkM4 MUNDOTMwMjAeFw0yNjA3MjMxMTAwMThaFw0yNjA3MzAxMTAwMThaMBgxFjAUBgNV BAMTDTZhNjFmNDQzLTRjMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4unoYnrDM73T0tU02OZY1Ti6GyS9S/tWrAuHhoIk3wMC/YLCMUVXQXeo/pvDq W0URzqed4xyB4vnjpaE6rui62PPY1nRzNpw5GBNg0ClqM6VKrKE+aIBMZ76B2m2j RV1+Oh9FinBUQc7+kP0Y2nnIywwZ2HA1+3w9ZAgj1FoiQX2xcRQwXFvNPihkG5J7 dtJgXVSfRKr3yhfepYZfyhP7zRoYVFn9h6qgisiUT32GNwwF7gNeKlOM70JyDAFy Pzr27hKbtKZUGmnnFA025fkVFvvjL9v8MH6nEX+vlwoDbFiB0tDWESYHBoWQyvyH pIBK+5n/DMKpz7CvXzVkmGLxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURqf3qp3E ojikAympUwkqMWBnPqswHwYDVR0jBBgwFoAUjKszW/vzkiyQjyAPyLk4vIHMkwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QUQ0LzlGQTE0QThDNUI2 MjExRjE5MzQwQjlFRTlDODMzNzczL2pLc3pXX3Z6a2l5UWp5QVB5TGs0dklITWt3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaktzeldfdnpraXlRanlBUHlMazR2SUhNa3dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 QUQ0LzlGQTE0QThDNUI2MjExRjE5MzQwQjlFRTlDODMzNzczL2pLc3pXX3Z6a2l5 UWp5QVB5TGs0dklITWt3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKNfdK7w07T1M/ATSWceaWGer1q/EVErkCtMSj79hQIphf5oN5Tb9q4R8HKTKp ifLV0+XZwc9UZoJvwKbKi6DgL9Ck8o/j6okQJHHEZEEMmX9wwQztH4txiilT1R83 SrKQV6GtV6neCf8ikHUhwvX4A4XAgdFl7DFo8zXyvcRRW3McOYBDTV1oRasLB+Zr kSrw9L9BqoA3xIfgGmueDIYWYGTuWqLiJA29kOq2fa3uO+eMXrxBhQdXiwBEmrvV oRS+r6ttKfh3DDeYyvY26LXYv4qHcAzR9PMAWUr4WPqbPOO59WyzAEfLGeHmGm3a plw7ZrlISyai5RlLGuV3639y -----END CERTIFICATE-----Generated at Fri Jul 24 11:42:21 2026 by rpki-client