$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: BmiejFA8klMtAIfskl6ajKO8kBePbmygVLOM5JADXE4= Subject key identifier: 6A:A4:57:CC:38:42:BA:8E:B1:53:F6:A9:1E:BC:97:14:76:8E:4A:EA Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: 011C Signing time: Tue 21 Jul 2026 06:39:28 +0000 Manifest this update: Tue 21 Jul 2026 06:39:28 +0000 Manifest next update: Tue 28 Jul 2026 06:39:28 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: v+krK8FSUX56OOTprRPteaM4v2OUlcyyCj+gcnzxeTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Jul 21 06:39:28 2026 GMT Not After : Jul 28 06:39:28 2026 GMT Subject: CN=6a5f1420-fc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:e7:63:8d:f4:06:18:44:07:c8:34:a9:a2: d2:0a:f3:16:38:82:41:3b:71:13:70:2e:32:81:46: 5a:b2:67:94:9e:09:0e:eb:8b:b0:14:5f:21:90:38: 97:43:42:84:3d:c3:6c:e4:f3:70:cf:87:db:4c:be: 05:63:97:9b:57:81:88:7b:8c:77:56:65:af:5f:16: 2f:ed:42:ad:24:f7:7c:65:44:fb:6f:b1:3f:a1:6c: c4:9c:e2:37:26:89:a7:97:68:d1:46:33:21:36:f4: 70:9b:03:c6:d4:4d:3f:1d:52:9c:32:1c:29:6b:17: e8:ff:ed:9c:46:74:84:7e:d7:9e:58:0e:34:14:80: b7:d5:f3:0a:70:10:51:f7:43:8b:79:3f:ed:e6:86: 9f:1c:9d:b0:1a:61:a0:f4:24:c7:75:09:30:d9:93: cf:87:59:a7:96:89:40:d8:83:05:cd:ed:f7:72:c2: bf:9a:6e:af:4c:95:fd:2c:cc:02:e2:85:ed:49:e1: fe:6a:05:33:a3:86:66:3e:35:a3:01:35:75:54:f2: ad:5e:80:70:95:4e:2d:c5:12:b9:a1:0d:d5:49:92: ba:47:8d:44:c2:f4:b3:6e:13:1d:d2:95:e5:15:09: 3c:53:c4:4f:f6:fd:a4:2e:ec:d9:ea:1f:f9:08:98: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A4:57:CC:38:42:BA:8E:B1:53:F6:A9:1E:BC:97:14:76:8E:4A:EA X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:be:20:0d:4c:80:79:a0:5b:85:f1:3f:95:ec:99:2a:89:7c: b1:5b:34:d1:12:de:f3:10:a7:4d:87:a2:d4:e7:46:29:0b:62: 34:c2:94:75:9f:73:88:1d:9e:08:48:30:60:fc:cd:aa:18:ae: 85:a2:b6:7e:cb:1c:30:d0:9a:a3:29:37:51:dc:ee:b7:5e:97: c4:73:7f:d8:60:04:7d:24:af:ea:5c:8d:4a:31:28:e6:9a:62: fe:7b:4d:92:89:60:90:87:01:38:e2:42:4b:0b:2c:8a:34:8c: 32:1a:73:ec:79:fb:34:3c:b3:07:c1:36:06:68:82:9b:6c:8c: 96:4b:1d:30:3c:75:1a:93:d3:5e:0d:63:6a:67:2b:ef:bc:85: 7f:41:a6:ca:12:0e:6a:53:2d:80:7f:9f:66:ab:68:1a:42:04: c4:9d:b7:95:bf:92:c8:8e:e1:94:f9:5c:ed:60:49:00:a7:fc: 21:d4:c1:09:43:fb:b9:6b:46:a8:34:f0:bf:5f:d7:d5:99:f3: 89:8e:e4:63:07:95:b1:0c:00:1d:22:ae:bd:d6:4b:27:84:3d: c8:54:4b:b1:24:12:7f:8f:49:b6:fa:b1:45:c0:5b:36:bd:be: bd:3e:b8:ef:2c:39:d7:42:ea:46:4e:21:4f:18:14:e4:4f:f3: 5c:aa:26:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDI4RURBN0I5NUQ1RThENDU2MkE3NTk3NEM2REQ3REE2 NEMyQTJBODYwHhcNMjYwNzIxMDYzOTI4WhcNMjYwNzI4MDYzOTI4WjAYMRYwFAYD VQQDEw02YTVmMTQyMC1mYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cPnY430BhhEB8g0qaLSCvMWOIJBO3ETcC4ygUZasmeUngkO64uwFF8hkDiX Q0KEPcNs5PNwz4fbTL4FY5ebV4GIe4x3VmWvXxYv7UKtJPd8ZUT7b7E/oWzEnOI3 Jomnl2jRRjMhNvRwmwPG1E0/HVKcMhwpaxfo/+2cRnSEfteeWA40FIC31fMKcBBR 90OLeT/t5oafHJ2wGmGg9CTHdQkw2ZPPh1mnlolA2IMFze33csK/mm6vTJX9LMwC 4oXtSeH+agUzo4ZmPjWjATV1VPKtXoBwlU4txRK5oQ3VSZK6R41EwvSzbhMd0pXl FQk8U8RP9v2kLuzZ6h/5CJg6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqkV8w4 QrqOsVP2qR68lxR2jkrqMB8GA1UdIwQYMBaAFCjtp7ldXo1FYqdZdMbdfaZMKiqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS9ENDA5RjgyQUQx NjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpVVmlwMWwweHQxOXBrd3FL b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS9ENDA5RjgyQUQxNjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpV VmlwMWwweHQxOXBrd3FLb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAb4gDUyAeaBbhfE/leyZKol8sVs00RLe8xCnTYei1OdGKQtiNMKUdZ9ziB2e CEgwYPzNqhiuhaK2fsscMNCaoyk3Udzut16XxHN/2GAEfSSv6lyNSjEo5ppi/ntN kolgkIcBOOJCSwssijSMMhpz7Hn7NDyzB8E2BmiCm2yMlksdMDx1GpPTXg1jamcr 77yFf0GmyhIOalMtgH+fZqtoGkIExJ23lb+SyI7hlPlc7WBJAKf8IdTBCUP7uWtG qDTwv1/X1ZnziY7kYweVsQwAHSKuvdZLJ4Q9yFRLsSQSf49JtvqxRcBbNr2+vT64 7yw510LqRk4hTxgU5E/zXKomwQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:53 2026 by rpki-client