$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: JYQMN4faic7fZOSS4n84INIwnLiLK95GDb6AqKTHQRU= Subject key identifier: 44:D2:3A:A7:18:B9:B7:15:1E:0A:C7:AC:3A:6A:07:B4:83:81:3E:63 Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 045B Signing time: Mon 27 Jul 2026 01:14:00 +0000 Manifest this update: Mon 27 Jul 2026 01:13:59 +0000 Manifest next update: Mon 03 Aug 2026 01:13:59 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: gbNDH+DhvacOYFa2OKwGRB2iqlk5DS+mpM+p08L9Vcg=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: fIfbNfI4LK0sIc8YlB3yB2MWelYN+TJwvhzmec0KKmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Jul 27 01:13:59 2026 GMT Not After : Aug 3 01:13:59 2026 GMT Subject: CN=6a66b0d8-26d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:72:7e:9e:dd:b4:21:76:b1:56:91:2f:ce: a4:af:08:d5:48:86:f9:b0:60:63:82:4f:ad:17:c3: 4f:fa:bd:23:df:05:0c:91:47:5a:16:b6:25:c0:9e: ad:bb:69:33:00:fa:e4:fd:dc:21:98:d7:95:7e:a2: f6:08:42:93:db:61:3b:ac:ad:1c:17:e3:1a:e6:ec: 73:f0:81:c6:56:c3:42:25:7b:6b:32:eb:b9:00:91: e3:29:5f:f6:e3:13:1a:7e:a5:aa:50:68:63:72:dd: d5:99:05:78:d3:05:99:57:a6:5f:13:2f:41:37:27: 1b:7b:1c:e3:5e:c4:8e:de:a0:6b:28:bb:ed:7d:62: 1f:35:17:98:56:b7:a4:50:ed:e7:78:fd:55:3b:a6: 19:57:46:87:18:5c:f9:05:50:78:7e:9b:6c:62:29: 46:c8:67:9b:f5:51:39:2a:54:3e:f3:44:c8:14:13: 4a:e4:0d:2e:4e:e7:75:51:7d:be:7f:f8:6e:af:88: ee:24:ea:a5:87:d8:0a:ed:e6:6e:d7:dd:58:1c:6c: 4a:97:b6:a5:52:50:8c:bb:91:54:ee:f3:34:37:44: b4:1c:f7:b1:3c:69:4a:28:61:d4:e7:5b:e7:54:dd: 51:79:48:c9:8c:73:db:92:f8:54:48:4f:d1:cd:bb: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:3A:A7:18:B9:B7:15:1E:0A:C7:AC:3A:6A:07:B4:83:81:3E:63 X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:4c:a9:ba:ff:49:df:e3:01:9a:d5:25:4c:02:aa:0c:4c: 8d:19:5f:e7:59:d0:d2:69:db:27:4d:8a:27:08:6f:47:ac:3f: 23:0c:27:3c:73:85:ad:ef:39:82:ea:c9:a3:18:89:db:ed:9c: 03:c7:e0:5a:e2:40:dd:8e:c6:d7:b5:13:3f:0e:fc:c4:85:c8: 6f:1d:76:99:2b:3a:d7:7a:6f:8b:8e:7c:f6:1e:41:64:32:10: a3:f2:51:bc:a3:5e:7a:74:5f:0e:d2:20:a7:a1:ef:c0:89:a4: 43:65:15:cf:1f:f5:ef:23:61:7f:d9:7b:b4:64:0a:94:c0:58: 65:d9:38:65:df:95:35:50:b5:d8:6f:27:76:7f:be:9d:78:55: bf:7c:44:a7:22:33:23:ba:84:7b:69:da:ab:f7:59:9a:38:8c: a7:79:47:19:25:c9:86:dd:01:ac:d0:bd:3d:c1:e4:13:a6:70: 31:78:0b:7f:e4:69:87:3d:2a:23:09:9f:2f:89:4c:ee:fd:9b: 42:f9:e8:ca:61:3c:43:9a:15:04:72:58:00:56:0f:c9:e2:9a: 64:c4:50:0d:ff:ea:4f:a7:43:48:b3:eb:2c:8c:49:b7:b7:6a: e2:c5:02:cb:93:2f:e9:6a:66:bb:0a:d8:ef:73:f5:d5:4a:d1: 20:35:79:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYwNzI3MDExMzU5WhcNMjYwODAzMDExMzU5WjAYMRYwFAYD VQQDEw02YTY2YjBkOC0yNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW9yfp7dtCF2sVaRL86krwjVSIb5sGBjgk+tF8NP+r0j3wUMkUdaFrYlwJ6t u2kzAPrk/dwhmNeVfqL2CEKT22E7rK0cF+Ma5uxz8IHGVsNCJXtrMuu5AJHjKV/2 4xMafqWqUGhjct3VmQV40wWZV6ZfEy9BNycbexzjXsSO3qBrKLvtfWIfNReYVrek UO3neP1VO6YZV0aHGFz5BVB4fptsYilGyGeb9VE5KlQ+80TIFBNK5A0uTud1UX2+ f/hur4juJOqlh9gK7eZu191YHGxKl7alUlCMu5FU7vM0N0S0HPexPGlKKGHU51vn VN1ReUjJjHPbkvhUSE/RzbuoXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETSOqcY ubcVHgrHrDpqB7SDgT5jMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifZMqbr/Sd/jAZrVJUwCqgxMjRlf51nQ0mnbJ02KJwhvR6w/IwwnPHOFre85 gurJoxiJ2+2cA8fgWuJA3Y7G17UTPw78xIXIbx12mSs613pvi4589h5BZDIQo/JR vKNeenRfDtIgp6HvwImkQ2UVzx/17yNhf9l7tGQKlMBYZdk4Zd+VNVC12G8ndn++ nXhVv3xEpyIzI7qEe2naq/dZmjiMp3lHGSXJht0BrNC9PcHkE6ZwMXgLf+Rphz0q IwmfL4lM7v2bQvnoymE8Q5oVBHJYAFYPyeKaZMRQDf/qT6dDSLPrLIxJt7dq4sUC y5Mv6WpmuwrY73P11UrRIDV5Zw== -----END CERTIFICATE-----Generated at Tue Jul 28 03:15:50 2026 by rpki-client