$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json) Hash identifier: 5ZCQSxwsGs8SVUN591Jtv2Gor6Jmd4Bn5Z2uF6THFl0= Subject key identifier: 86:D4:A2:30:54:17:CF:0E:A8:C0:27:82:0F:F4:A3:14:D4:32:16:32 Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft Manifest number: 3E Signing time: Tue 21 Jul 2026 06:50:14 +0000 Manifest this update: Tue 21 Jul 2026 06:50:13 +0000 Manifest next update: Tue 28 Jul 2026 06:50:13 +0000 Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: W2KKthZ2haU9zPDT8rNv/9zu0bP3f5NWPlle+6+Njns=) 2: B8086D68733A11F1A07DD97E95A30FBC.roa (hash: bTVB+DDvlWg3BGswbEV0Wrf2VGFZJmesV6ILbWOzMg0=) 3: 792D74047BFE11F1AA9690E78EA30FBC.roa (hash: XTYptpNlRAo7alSvOyzI+cw6KIvbeNRndpdGXKdvGYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: Jul 21 06:50:13 2026 GMT Not After : Jul 28 06:50:13 2026 GMT Subject: CN=6a5f16a6-c986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:ea:13:61:57:9e:1a:c2:60:d8:4a:07:48: 93:de:e5:10:73:40:0a:8d:7c:bc:6c:f4:96:c2:9e: 16:b4:47:e3:32:6e:81:ad:ca:6e:1b:2c:8d:11:3b: 31:41:a9:88:f3:3a:25:92:84:00:9f:01:34:98:d1: 55:5f:49:8f:82:34:07:d5:8e:c5:c3:0d:80:2c:48: 89:dd:1b:2e:d7:a6:fc:a0:17:b6:56:c1:91:0f:b2: 5f:4b:96:31:c4:c5:79:41:e2:43:e8:54:50:18:f7: 0e:71:34:79:cb:0b:5d:97:f5:5d:a7:6c:cf:94:20: 45:e6:5d:e0:2c:79:a9:98:9b:9c:55:c2:d4:62:bc: 54:31:82:f4:22:e9:42:78:dc:63:aa:a1:2c:78:18: b6:56:da:e9:0c:ca:22:3e:60:ea:52:19:46:be:4f: ec:59:6e:1a:26:e7:79:ef:5d:af:70:57:b6:02:ba: 4b:ab:cf:29:25:ea:8c:00:b9:b7:bc:f2:9f:05:84: ef:0a:48:5d:4e:5c:80:63:29:35:20:e5:8e:fe:6b: 88:6a:43:19:00:4d:4f:42:13:9d:75:e0:98:97:82: 8b:6f:ff:50:95:a7:5b:2d:3a:1d:d7:d9:9f:84:63: fa:49:a0:88:dd:4e:15:98:c2:da:df:60:de:b7:4b: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:A2:30:54:17:CF:0E:A8:C0:27:82:0F:F4:A3:14:D4:32:16:32 X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:49:66:ee:02:4b:f2:0f:7f:e3:0f:b9:fd:72:67:25:d1: 9d:04:70:e8:f7:f5:74:4b:ec:df:2c:9f:1f:e4:95:2f:90:b4: ad:db:91:89:01:c0:c4:db:2f:9a:57:85:06:90:a4:3a:e7:95: a2:4b:cf:34:f8:ee:f7:7a:c3:bf:36:a4:59:cf:3b:89:c1:70: 46:82:57:50:1c:dc:e9:8a:a2:88:c8:39:ba:63:df:e8:26:31: 31:38:77:82:0f:e6:6d:8e:0e:8b:f0:28:8a:98:35:8d:c8:4c: 8b:c9:8a:ff:47:30:fd:f3:52:de:da:25:dc:ee:04:a0:18:1c: a2:d0:ba:4f:41:93:25:2c:37:d7:47:6a:85:dd:90:12:e4:77: 0e:d5:aa:98:07:e0:8b:a2:b3:e8:dd:ac:a1:18:a9:88:71:6d: ea:c0:d4:01:49:cb:02:1d:09:60:db:11:6f:2a:e6:02:db:f3: 1b:14:17:ac:5f:4b:1f:41:56:28:24:83:7b:00:e4:0a:34:c1: cb:33:bc:27:ff:2f:db:d8:21:bc:ee:c2:3f:18:8d:cd:51:88: 19:fd:ab:78:ed:ca:77:a6:79:7b:d1:c6:84:1f:d6:63:db:4d: da:a8:07:bf:b7:42:21:a1:e4:92:02:d3:fd:24:d2:75:27:94: 24:4b:2e:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjA3MjEwNjUwMTNaFw0yNjA3MjgwNjUwMTNaMBgxFjAUBgNV BAMTDTZhNWYxNmE2LWM5ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiR+oTYVeeGsJg2EoHSJPe5RBzQAqNfLxs9JbCnha0R+MyboGtym4bLI0ROzFB qYjzOiWShACfATSY0VVfSY+CNAfVjsXDDYAsSIndGy7XpvygF7ZWwZEPsl9LljHE xXlB4kPoVFAY9w5xNHnLC12X9V2nbM+UIEXmXeAseamYm5xVwtRivFQxgvQi6UJ4 3GOqoSx4GLZW2ukMyiI+YOpSGUa+T+xZbhom53nvXa9wV7YCukurzykl6owAube8 8p8FhO8KSF1OXIBjKTUg5Y7+a4hqQxkATU9CE5114JiXgotv/1CVp1stOh3X2Z+E Y/pJoIjdThWYwtrfYN63S2TVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhtSiMFQX zw6owCeCD/SjFNQyFjIwHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0L0RDNzcwMTBBMzU2OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVf dml3S05NWS1PWlBVVFlDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlcUlm7gJL8g9/4w+5/XJnJdGdBHDo9/V0S+zfLJ8f5JUvkLSt25GJAcDE2y+a V4UGkKQ655WiS880+O73esO/NqRZzzuJwXBGgldQHNzpiqKIyDm6Y9/oJjExOHeC D+Ztjg6L8CiKmDWNyEyLyYr/RzD981Le2iXc7gSgGByi0LpPQZMlLDfXR2qF3ZAS 5HcO1aqYB+CLorPo3ayhGKmIcW3qwNQBScsCHQlg2xFvKuYC2/MbFBesX0sfQVYo JIN7AOQKNMHLM7wn/y/b2CG87sI/GI3NUYgZ/at47cp3pnl70caEH9Zj203aqAe/ t0IhoeSSAtP9JNJ1J5QkSy4k -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:51 2026 by rpki-client