$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: 9d8HcdG4hObgV0aM6jn7TJsvQSXl8GJnp4I88Zt9edM= Subject key identifier: 79:E9:B0:56:68:16:80:89:AD:33:42:A5:71:BC:CB:ED:88:E5:5D:D6 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 261A Signing time: Mon 20 Jul 2026 15:49:33 +0000 Manifest this update: Mon 20 Jul 2026 15:49:32 +0000 Manifest next update: Mon 27 Jul 2026 15:49:32 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: FUy3rD8Do8eWunAaQ77poxpAGZP8qBJ3Bx5dXbLtq0Q=) 2: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: U+tT529Q+GHL3QD7YEYw7NjVcXz/pyFy7z7T6MnIels=) 3: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lOvYt+0/Xr6pgMpv/63iUFQ210NPhZzouXW57Pt++DQ=) 4: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: dsoG1fAq1bgsphdBqoNIah+vGbeVpPNIP3lQ1EE01Tg=) 5: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=) 6: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw=) 7: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: PvlCjzRuVQS5z3Y7RAsjDxZGQj+lAI/1wkWEPf7utQs=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10071 (0x2757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 20 15:49:32 2026 GMT Not After : Jul 27 15:49:32 2026 GMT Subject: CN=6a5e438c-d129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:38:29:da:53:97:2b:71:95:e5:07:c6:46: 82:5b:ed:c9:e9:d3:2d:c8:5d:e3:d6:03:4b:80:b9: a6:1e:46:c0:c5:d9:31:7e:76:55:1c:b1:e8:37:07: 47:88:8e:77:3c:8b:78:67:70:76:ae:cb:66:96:79: 0e:18:06:53:5a:cd:25:74:88:18:ea:ad:60:d9:d4: a2:c8:ed:38:16:6c:eb:7c:01:21:86:66:8b:1a:4b: b7:7e:6c:52:a6:0d:e5:2e:3d:34:02:01:ba:99:67: fd:8e:f3:f4:ad:ff:23:43:72:b8:bb:8a:a7:a6:35: 23:cf:dc:2b:8e:4f:bb:db:6d:0e:4d:08:52:5d:cf: 95:a3:ce:55:9f:f1:b9:2c:c2:71:72:f5:11:56:b4: b8:a9:42:97:c0:2c:62:ab:18:1d:6d:a9:ca:cd:bb: 68:46:07:03:7e:a6:f5:4e:80:0a:b9:5f:f7:4f:aa: 4a:7d:69:c4:63:db:7a:63:2d:47:08:c6:31:8c:8e: e6:b2:dc:b8:cf:cd:13:07:1e:56:54:ea:c4:80:f8: 2f:0a:46:dc:67:e1:6b:39:78:17:07:58:17:ba:12: ec:a0:cf:9c:5d:ad:d4:44:19:df:6e:f1:9b:0c:dc: f7:e0:25:07:93:3e:f3:1e:67:32:02:74:89:bb:0d: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:B0:56:68:16:80:89:AD:33:42:A5:71:BC:CB:ED:88:E5:5D:D6 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:83:6a:9e:4c:24:57:8a:4d:e5:b9:38:85:00:14:e2:a4:7f: a6:21:0b:7e:0d:35:66:aa:40:a2:09:ed:94:4b:e1:58:00:15: 91:b0:d3:52:7f:e2:c4:b3:3c:f6:5c:e2:3e:6c:88:75:03:7a: fc:cb:35:01:9e:2c:7b:d9:68:62:5f:80:70:85:9e:10:53:bf: 02:fe:32:b0:f0:fb:d0:e9:ab:ac:aa:3d:fa:46:c0:a9:d7:d0: b9:5c:28:18:a4:e1:8c:d4:4a:2b:ee:1b:6f:eb:ec:98:e7:21: 78:9e:0c:9e:68:6d:da:12:a3:26:fb:09:c4:b5:a1:fb:30:c0: 87:ea:21:fd:38:15:4f:e7:d5:b3:37:1c:1a:70:e9:0c:b4:74: 93:32:23:0a:9d:1d:70:39:e9:e2:cc:95:c7:21:a2:4d:fb:45: 78:db:03:5d:d0:2a:8c:1f:53:45:73:05:ee:25:af:47:f5:a5: 89:23:22:94:c9:27:46:57:76:69:3e:79:89:26:bd:d9:38:2a: 69:80:33:f2:96:42:a4:5b:27:a0:e1:a9:0b:fc:ca:68:26:71: a3:dc:a3:34:38:db:3b:05:0a:7b:41:93:df:44:c0:f2:88:12: fd:97:a1:21:80:05:13:9d:3c:db:26:0e:ee:9b:6e:8f:ec:0e: 63:48:c4:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNzIwMTU0OTMyWhcNMjYwNzI3MTU0OTMyWjAYMRYwFAYD VQQDEw02YTVlNDM4Yy1kMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpc4KdpTlytxleUHxkaCW+3J6dMtyF3j1gNLgLmmHkbAxdkxfnZVHLHoNwdH iI53PIt4Z3B2rstmlnkOGAZTWs0ldIgY6q1g2dSiyO04FmzrfAEhhmaLGku3fmxS pg3lLj00AgG6mWf9jvP0rf8jQ3K4u4qnpjUjz9wrjk+7220OTQhSXc+Vo85Vn/G5 LMJxcvURVrS4qUKXwCxiqxgdbanKzbtoRgcDfqb1ToAKuV/3T6pKfWnEY9t6Yy1H CMYxjI7msty4z80TBx5WVOrEgPgvCkbcZ+FrOXgXB1gXuhLsoM+cXa3URBnfbvGb DNz34CUHkz7zHmcyAnSJuw3+7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHnpsFZo FoCJrTNCpXG8y+2I5V3WMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASINqnkwkV4pN5bk4hQAU4qR/piELfg01ZqpAogntlEvhWAAVkbDTUn/ixLM8 9lziPmyIdQN6/Ms1AZ4se9loYl+AcIWeEFO/Av4ysPD70OmrrKo9+kbAqdfQuVwo GKThjNRKK+4bb+vsmOcheJ4Mnmht2hKjJvsJxLWh+zDAh+oh/TgVT+fVszccGnDp DLR0kzIjCp0dcDnp4syVxyGiTftFeNsDXdAqjB9TRXMF7iWvR/WliSMilMknRld2 aT55iSa92TgqaYAz8pZCpFsnoOGpC/zKaCZxo9yjNDjbOwUKe0GT30TA8ogS/Zeh IYAFE5082yYO7ptuj+wOY0jECQ== -----END CERTIFICATE-----Generated at Tue Jul 21 07:08:49 2026 by rpki-client