$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: kPgcyXFB0sXxGaCdu3T7JvHG4vmVbCNsq6mT41r/yrw= Subject key identifier: FF:3D:A0:60:AB:EC:9A:B9:62:17:9E:67:B4:6E:70:2D:08:DD:F3:74 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1B1A Signing time: Thu 16 Jul 2026 16:21:30 +0000 Manifest this update: Thu 16 Jul 2026 16:21:29 +0000 Manifest next update: Thu 23 Jul 2026 16:21:29 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: UBo6G3m4SQz/eD1PztsHtL/lng7fQbiZKoi+rbfriW0=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 16:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6976 (0x1b40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Jul 16 16:21:29 2026 GMT Not After : Jul 23 16:21:29 2026 GMT Subject: CN=6a590509-f40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:2d:17:0f:f3:73:7a:02:82:9b:14:1e:72: de:e3:1a:3b:5d:11:98:8c:55:4f:3c:00:e0:dc:e3: 22:3e:7c:0d:1b:46:c8:74:4f:60:67:33:ef:53:4a: 7c:9f:e3:1a:34:4f:3b:3f:42:4a:72:a7:4b:7c:39: 4d:17:f7:41:ab:8f:02:86:35:80:2d:a3:42:ee:b6: a0:df:80:08:fe:45:51:91:f5:3d:b3:66:04:e6:bf: 6c:5d:4e:78:1e:f8:40:34:66:21:54:9a:da:e3:9b: ad:03:c1:09:35:e5:65:46:89:39:82:44:d0:4e:88: ec:85:39:b0:b6:a6:0f:fe:47:55:a8:e2:ec:d1:25: 6f:ce:88:03:42:e4:3c:70:54:56:ac:57:27:6e:81: b4:72:8d:a8:ac:93:a7:21:89:dd:57:a7:f7:3b:10: 87:3d:80:4e:4f:28:8c:25:13:59:56:2c:32:d9:66: 24:eb:52:4f:bd:8a:ad:42:b5:11:b4:df:19:59:fb: 79:01:17:1a:e0:3c:54:47:d0:fd:26:73:b6:0c:43: 1f:80:40:2a:71:10:ab:41:bb:fe:d0:00:82:e2:ba: 17:73:05:b8:e3:4c:65:d6:33:3c:02:63:e4:7b:ba: da:72:25:92:85:19:b9:1b:27:60:26:85:ca:a0:a4: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:A0:60:AB:EC:9A:B9:62:17:9E:67:B4:6E:70:2D:08:DD:F3:74 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:10:38:95:d1:b0:a7:57:c8:e7:c8:d0:d3:fb:5e:1d:b3:b4: 6f:5c:29:c0:f9:e3:b5:fe:c5:8d:55:e1:0a:e8:3b:20:14:ac: 9f:4f:59:fb:b1:c6:0d:a2:31:94:ca:ff:da:4d:14:f7:8b:b7: d3:9f:9d:e1:27:8e:01:77:ac:0c:3e:11:54:1c:a6:b0:fb:c4: be:b5:c9:1a:56:1e:c6:f8:42:bc:f5:ec:7f:4a:89:b0:87:f2: 6e:b9:ec:60:c0:65:16:3c:89:8e:45:84:c3:44:18:8b:8b:fb: c2:77:43:da:d2:a1:a3:b7:31:ec:d6:6f:e3:86:e9:7f:06:98: e4:79:20:ac:5f:54:02:58:3d:54:d7:c2:e2:5b:cb:2d:1c:01: f2:39:00:28:04:8c:8a:62:53:89:a9:2a:cc:ca:0e:a7:9e:05: 7d:28:f7:1c:38:d1:70:a4:8c:52:64:4f:98:dd:c7:d7:ac:7f: de:5e:d1:4c:a5:8e:a9:af:b3:c0:97:36:f8:29:f3:b7:fc:d3: ea:42:da:bc:83:29:69:c0:ab:32:80:6f:45:68:aa:03:51:3c: ca:5f:b7:fa:83:19:cc:8c:d7:3d:7f:1a:f8:79:ca:e1:7a:37: 67:a1:50:0c:9c:ad:40:1c:1b:66:b8:bf:0e:86:ff:6b:ef:95: 85:15:06:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwNzE2MTYyMTI5WhcNMjYwNzIzMTYyMTI5WjAYMRYwFAYD VQQDEw02YTU5MDUwOS1mNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX4tFw/zc3oCgpsUHnLe4xo7XRGYjFVPPADg3OMiPnwNG0bIdE9gZzPvU0p8 n+MaNE87P0JKcqdLfDlNF/dBq48ChjWALaNC7rag34AI/kVRkfU9s2YE5r9sXU54 HvhANGYhVJra45utA8EJNeVlRok5gkTQTojshTmwtqYP/kdVqOLs0SVvzogDQuQ8 cFRWrFcnboG0co2orJOnIYndV6f3OxCHPYBOTyiMJRNZViwy2WYk61JPvYqtQrUR tN8ZWft5ARca4DxUR9D9JnO2DEMfgEAqcRCrQbv+0ACC4roXcwW440xl1jM8AmPk e7raciWShRm5GydgJoXKoKQfzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP89oGCr 7Jq5YheeZ7RucC0I3fN0MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxA4ldGwp1fI58jQ0/teHbO0b1wpwPnjtf7FjVXhCug7IBSsn09Z+7HGDaIx lMr/2k0U94u305+d4SeOAXesDD4RVBymsPvEvrXJGlYexvhCvPXsf0qJsIfybrns YMBlFjyJjkWEw0QYi4v7wndD2tKho7cx7NZv44bpfwaY5HkgrF9UAlg9VNfC4lvL LRwB8jkAKASMimJTiakqzMoOp54FfSj3HDjRcKSMUmRPmN3H16x/3l7RTKWOqa+z wJc2+Cnzt/zT6kLavIMpacCrMoBvRWiqA1E8yl+3+oMZzIzXPX8a+HnK4Xo3Z6FQ DJytQBwbZri/Dob/a++VhRUGcA== -----END CERTIFICATE-----Generated at Sat Jul 18 08:12:13 2026 by rpki-client