$ rpki-client -vvvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json) Hash identifier: l2dA5VUgvrqwhNDUk0/vl0KDOs/4Eucl0f8CBYtZrDE= Subject key identifier: A7:2E:73:BB:BD:B3:C4:E5:DC:F5:4D:54:40:34:23:85:9B:F7:3C:2D Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft Manifest number: 02AA Signing time: Fri 11 Sep 2026 01:39:00 +0000 Manifest this update: Fri 11 Sep 2026 01:38:59 +0000 Manifest next update: Fri 18 Sep 2026 01:38:59 +0000 Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: z4T9B6B6/YKSfOSNaXiad/bQDJoLQ57J4w+7Px9thOc=) 2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=) 3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Validity Not Before: Sep 11 01:38:59 2026 GMT Not After : Sep 18 01:38:59 2026 GMT Subject: CN=6aa35bb4-c562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:7b:c6:40:bf:11:70:1f:fa:e2:25:a3:a3: 5e:b7:af:7e:10:76:ab:65:5d:3a:70:5c:8f:a6:bc: 40:03:35:99:72:b5:2b:2a:95:7e:54:e6:58:26:7e: e6:1b:11:f8:c3:b2:0a:8f:f0:fb:22:be:bb:74:cf: 9a:59:0e:9e:cf:87:cc:00:87:2f:ed:17:32:85:1b: c6:91:62:1d:96:61:90:8d:a5:5f:fe:f5:ae:ba:34: 05:03:6c:6c:3d:89:7c:35:1b:10:ba:42:1b:75:93: ae:3a:05:a3:ae:0b:c8:8f:6b:a2:70:9a:5e:a1:17: 51:7f:18:e6:be:38:f5:cc:c0:2a:ea:2a:ac:1e:49: 9a:34:24:3f:c7:25:0a:23:14:06:54:ee:9b:40:9a: 3f:06:51:07:f9:8f:6d:5e:f1:9d:7b:ac:55:d2:64: 4e:8c:1e:80:65:d5:64:77:43:96:6b:3c:aa:91:87: db:31:83:ef:dc:8b:2d:b9:12:35:f5:c3:8c:18:7e: 4b:87:76:9c:65:3d:55:4c:86:f6:0d:76:d1:41:e5: cd:b0:60:f7:60:2a:df:2c:ab:75:a3:19:49:33:93: 42:db:c2:66:f3:90:29:17:a9:98:2a:ef:68:94:3f: 5f:45:9d:3a:b9:53:82:e8:6b:ce:b7:2c:f7:63:07: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2E:73:BB:BD:B3:C4:E5:DC:F5:4D:54:40:34:23:85:9B:F7:3C:2D X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ae:9a:07:05:bb:e8:89:8a:5e:6d:93:05:1e:e9:d6:15:df: 5b:d1:0f:a4:5c:f3:5c:7e:26:33:98:19:74:a4:a7:ca:e5:81: 77:10:34:ef:2c:e0:5e:40:6c:b3:46:2c:d0:bc:e2:f3:34:9a: 97:63:ea:86:46:b7:ad:6b:4d:6e:96:16:2a:08:19:b2:cc:08: c1:39:a0:b2:cb:a9:66:c6:07:a6:b9:9a:a8:0c:0a:d8:b4:14: 6b:13:15:80:72:ab:99:29:02:b3:4e:ca:fb:71:b5:c0:c1:0c: 4d:c7:79:dc:99:8c:ab:d1:c7:eb:74:09:66:c8:03:37:ea:6d: cd:51:72:36:80:75:04:88:fc:b2:f5:dd:1a:3e:ea:c8:29:a8: 11:df:03:f8:61:76:13:0a:36:a1:c0:ba:a4:f2:4d:16:4e:e1: 53:6b:12:e7:97:79:0a:a8:06:6b:4a:e0:62:f3:f5:67:7f:80: d7:2f:8e:c0:39:d2:7f:fb:8b:b5:70:0c:1a:17:0b:1f:63:35: 91:11:42:15:5b:8e:5f:6e:cd:02:eb:93:21:f0:c1:b2:02:10: 84:e7:0d:53:c3:c8:73:2b:a7:de:93:29:45:31:93:00:c8:75: 00:6e:dd:d3:c4:46:69:3b:78:45:0b:4e:14:f6:bc:84:c7:16: 15:5c:e8:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjYwOTExMDEzODU5WhcNMjYwOTE4MDEzODU5WjAYMRYwFAYD VQQDEw02YWEzNWJiNC1jNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkR7xkC/EXAf+uIlo6Net69+EHarZV06cFyPprxAAzWZcrUrKpV+VOZYJn7m GxH4w7IKj/D7Ir67dM+aWQ6ez4fMAIcv7RcyhRvGkWIdlmGQjaVf/vWuujQFA2xs PYl8NRsQukIbdZOuOgWjrgvIj2uicJpeoRdRfxjmvjj1zMAq6iqsHkmaNCQ/xyUK IxQGVO6bQJo/BlEH+Y9tXvGde6xV0mROjB6AZdVkd0OWazyqkYfbMYPv3IstuRI1 9cOMGH5Lh3acZT1VTIb2DXbRQeXNsGD3YCrfLKt1oxlJM5NC28Jm85ApF6mYKu9o lD9fRZ06uVOC6GvOtyz3YwdM0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcuc7u9 s8Tl3PVNVEA0I4Wb9zwtMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDNFOS8xNzYxMzIzNEFDM0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhL V2xBYlYxQnZyazVjRWFIWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKq6aBwW76ImKXm2TBR7p1hXfW9EPpFzzXH4mM5gZdKSnyuWBdxA07yzgXkBs s0Ys0Lzi8zSal2Pqhka3rWtNbpYWKggZsswIwTmgssupZsYHprmaqAwK2LQUaxMV gHKrmSkCs07K+3G1wMEMTcd53JmMq9HH63QJZsgDN+ptzVFyNoB1BIj8svXdGj7q yCmoEd8D+GF2Ewo2ocC6pPJNFk7hU2sS55d5CqgGa0rgYvP1Z3+A1y+OwDnSf/uL tXAMGhcLH2M1kRFCFVuOX27NAuuTIfDBsgIQhOcNU8PIcyun3pMpRTGTAMh1AG7d 08RGaTt4RQtOFPa8hMcWFVzo2w== -----END CERTIFICATE-----Generated at Fri Sep 11 12:29:35 2026 by rpki-client