$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: 8uS+VgQtMH7k9bbIdY/+HWWDRY25pypzlMLYfSrLDnI= Subject key identifier: 29:5B:37:F0:81:18:8B:2E:1C:CA:1B:42:40:31:CC:49:35:CC:24:CC Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 179C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 1783 Signing time: Wed 22 Jul 2026 16:39:50 +0000 Manifest this update: Wed 22 Jul 2026 16:39:50 +0000 Manifest next update: Wed 29 Jul 2026 16:39:50 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: Qm8BUwsIrtI8w0qwmKqRmQY+EqU7fW10epVA8T8WPt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6044 (0x179c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Jul 22 16:39:50 2026 GMT Not After : Jul 29 16:39:50 2026 GMT Subject: CN=6a60f256-b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:91:a0:48:7d:16:f7:d9:3f:e5:1c:c1:4b: 5c:77:72:6d:b6:7b:a5:f9:00:9d:df:58:23:dd:25: 32:68:34:64:0d:ae:71:cb:97:71:58:a7:79:4a:09: 53:30:31:cc:8d:58:92:b1:5c:f7:e6:2f:98:84:7d: 2d:56:4c:71:6a:29:49:84:de:ae:da:0f:00:85:ed: a9:58:5f:ce:59:16:db:ce:01:d8:ae:c0:17:f7:1e: 90:ee:67:3d:60:67:b2:ac:d9:38:70:a3:a4:95:ac: eb:98:57:3e:a1:d1:36:af:6b:c5:71:27:73:02:4a: 0a:32:5a:ab:a4:63:8a:3f:21:8a:dd:6d:37:77:b7: 65:77:83:aa:23:ff:5d:3a:2e:cf:4e:e5:c4:74:ca: 8d:06:a8:eb:7c:43:a2:84:b1:d4:fc:c5:ee:41:9f: ba:92:a8:ff:05:33:57:0b:9a:e0:28:5c:4a:51:cf: 9f:f5:ba:ba:ec:0f:bc:5b:93:3c:3a:79:cc:49:ae: ce:aa:2e:24:db:a3:13:ee:d3:84:30:92:f2:aa:12: a8:05:86:5d:b6:a8:6a:3f:52:d1:55:4c:ff:4b:0d: 9b:4f:71:b4:a0:40:73:9a:48:29:cf:ba:12:4a:9f: 1d:61:fe:f4:ac:32:20:ef:4d:ac:3c:83:c7:d7:9f: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:37:F0:81:18:8B:2E:1C:CA:1B:42:40:31:CC:49:35:CC:24:CC X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:8a:e8:c5:82:a9:7e:c0:47:8a:e3:80:c4:27:33:af:c7:0b: f0:88:a8:0d:71:4f:0d:e1:1f:ee:55:17:42:a6:83:b6:eb:a7: c1:cc:cc:be:e0:ef:95:85:c2:7a:4d:91:17:48:61:72:46:6b: c4:04:9a:13:d3:f8:41:c8:d5:4c:f2:11:33:f8:ec:8e:dd:ea: 5d:cd:2c:81:27:3a:55:3b:c4:2f:78:58:41:e8:eb:a6:86:10: 4d:88:c8:94:a9:6f:53:b8:a4:ca:49:c2:e6:ae:98:09:a9:88: bb:08:78:02:1e:b7:a9:74:22:71:a7:2c:bc:a8:8d:99:18:ef: e1:00:87:49:78:72:6c:85:11:07:ad:47:69:7f:bc:06:c6:61: 98:2a:7f:c0:1d:fc:09:f0:ed:33:6c:9f:89:b1:44:a2:b3:97: 9a:5a:38:ba:55:cb:7f:01:ef:b3:94:e2:4a:ca:dc:15:6e:2b: 05:de:64:90:0a:c2:3c:a8:b1:34:95:a7:ef:25:a9:ee:e0:24: 80:ad:99:ac:bc:b7:fa:22:07:b2:7b:7a:bd:d8:19:2c:17:1a: 3d:ca:7e:0c:c0:8a:0c:f3:44:65:05:77:ea:99:eb:40:e5:3f: 0a:dc:29:5a:50:2b:85:94:1f:46:9d:bf:c2:f9:ae:e3:8f:ec: db:6a:ef:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjYwNzIyMTYzOTUwWhcNMjYwNzI5MTYzOTUwWjAYMRYwFAYD VQQDEw02YTYwZjI1Ni1iMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpmRoEh9FvfZP+UcwUtcd3Jttnul+QCd31gj3SUyaDRkDa5xy5dxWKd5SglT MDHMjViSsVz35i+YhH0tVkxxailJhN6u2g8Ahe2pWF/OWRbbzgHYrsAX9x6Q7mc9 YGeyrNk4cKOklazrmFc+odE2r2vFcSdzAkoKMlqrpGOKPyGK3W03d7dld4OqI/9d Oi7PTuXEdMqNBqjrfEOihLHU/MXuQZ+6kqj/BTNXC5rgKFxKUc+f9bq67A+8W5M8 OnnMSa7Oqi4k26MT7tOEMJLyqhKoBYZdtqhqP1LRVUz/Sw2bT3G0oEBzmkgpz7oS Sp8dYf70rDIg702sPIPH158SRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClbN/CB GIsuHMobQkAxzEk1zCTMMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyYroxYKpfsBHiuOAxCczr8cL8IioDXFPDeEf7lUXQqaDtuunwczMvuDvlYXC ek2RF0hhckZrxASaE9P4QcjVTPIRM/jsjt3qXc0sgSc6VTvEL3hYQejrpoYQTYjI lKlvU7ikyknC5q6YCamIuwh4Ah63qXQicacsvKiNmRjv4QCHSXhybIURB61HaX+8 BsZhmCp/wB38CfDtM2yfibFEorOXmlo4ulXLfwHvs5TiSsrcFW4rBd5kkArCPKix NJWn7yWp7uAkgK2ZrLy3+iIHsnt6vdgZLBcaPcp+DMCKDPNEZQV36pnrQOU/Ctwp WlArhZQfRp2/wvmu44/s22rv9A== -----END CERTIFICATE-----Generated at Fri Jul 24 17:03:10 2026 by rpki-client