$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: NZFFIxnVfhDNPPSUcFzvVEnj19ukpjWoUBsbM8lb0t4= Subject key identifier: 7D:6A:82:F3:1B:A7:42:00:49:99:F7:C9:63:0E:23:FB:9A:C5:E6:6B Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: D7 Signing time: Fri 17 Jul 2026 08:02:18 +0000 Manifest this update: Fri 17 Jul 2026 08:02:18 +0000 Manifest next update: Fri 24 Jul 2026 08:02:18 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: 9LFb/66erO4HwDr8/ZIThvlqfoaQamyDp5m7RlV9hi4=) 2: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) 3: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jul 17 08:02:18 2026 GMT Not After : Jul 24 08:02:18 2026 GMT Subject: CN=6a59e18a-2438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:c6:bb:60:10:24:80:a5:b4:7d:47:df:73: 01:c5:8f:82:7b:d4:22:b2:67:ab:3c:a3:11:55:d3: 1e:c5:8b:ef:16:36:0c:ea:ee:41:2c:3d:3c:f3:82: 8f:d4:7c:96:97:84:16:b4:81:82:8b:93:25:c8:9c: c8:6a:ef:85:3c:03:68:1e:fa:ee:2b:8b:d6:46:10: 2b:6a:88:8c:7a:1b:92:03:22:9e:bb:2b:02:c8:8a: be:4c:c5:a9:d2:37:57:e2:8d:c2:a5:7d:b5:96:90: d4:61:84:7f:ef:6b:77:5c:02:90:fc:d4:45:f2:0c: 5f:77:8c:de:2f:24:ab:c3:31:19:8a:4c:e2:e0:ab: b3:dd:61:38:11:aa:0e:91:c6:cb:f6:17:4d:9a:69: 7d:e4:6a:0e:d1:0e:af:aa:6e:0e:cc:4f:42:40:5f: d7:14:b2:eb:0e:8c:32:88:e6:96:8e:81:12:eb:be: c4:7c:62:62:2c:10:7d:22:24:85:96:35:45:00:80: 30:d0:c3:53:8f:12:e9:f7:0b:5c:87:14:f3:a4:9f: ef:91:bd:80:9f:08:27:5c:18:f6:93:9c:4a:03:d9: 23:e0:27:25:63:cf:c8:23:e9:9b:d4:75:2a:aa:0e: bc:66:f8:e8:26:f8:62:a6:b2:d9:98:05:a7:e2:76: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:82:F3:1B:A7:42:00:49:99:F7:C9:63:0E:23:FB:9A:C5:E6:6B X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:29:43:7c:ea:4d:2e:d0:dc:65:1b:cb:5d:b0:d8:0e:be:e5: 31:2e:c1:b7:ca:8b:3c:24:bc:46:e1:9f:cb:a0:b5:e6:ce:fc: c1:f8:9d:05:e5:99:8f:5d:62:ed:84:38:26:bf:61:92:13:ad: f9:0a:52:bc:2d:ac:96:a6:d3:a8:f4:cb:90:91:03:d4:06:ad: 30:ea:7e:1a:e6:71:f5:e5:1c:c2:42:c7:20:95:ad:c0:11:10: 4e:7b:19:af:3a:94:7d:f3:9c:27:4d:58:4f:15:51:77:2f:85: 3f:77:f9:4a:6c:dd:56:93:0d:22:b6:65:87:51:6d:d8:de:16: 85:26:cd:62:30:14:7d:53:01:c0:ca:66:21:41:96:da:3e:9b: ba:f9:01:ca:80:ed:df:a1:93:c8:2a:0e:bc:3b:1d:2c:51:77: 09:49:82:f4:42:25:3d:fa:ca:d9:eb:6c:55:d8:49:13:56:8b: 1f:16:74:b3:33:84:ce:10:f9:43:00:c4:a5:4b:a3:67:d4:f0: 7a:1e:de:8e:a5:23:83:ec:47:6e:b3:d5:c9:94:82:2b:52:f4: 7e:a9:7a:f5:f4:a7:24:e2:1e:67:42:ad:ae:bb:bf:76:a9:74: aa:fe:b3:b3:c3:0f:53:dd:14:ef:d4:26:ce:c2:c9:b2:2e:20: 0d:dc:1c:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwNzE3MDgwMjE4WhcNMjYwNzI0MDgwMjE4WjAYMRYwFAYD VQQDEw02YTU5ZTE4YS0yNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgnGu2AQJICltH1H33MBxY+Ce9QismerPKMRVdMexYvvFjYM6u5BLD0884KP 1HyWl4QWtIGCi5MlyJzIau+FPANoHvruK4vWRhAraoiMehuSAyKeuysCyIq+TMWp 0jdX4o3CpX21lpDUYYR/72t3XAKQ/NRF8gxfd4zeLySrwzEZikzi4Kuz3WE4EaoO kcbL9hdNmml95GoO0Q6vqm4OzE9CQF/XFLLrDowyiOaWjoES677EfGJiLBB9IiSF ljVFAIAw0MNTjxLp9wtchxTzpJ/vkb2AnwgnXBj2k5xKA9kj4CclY8/II+mb1HUq qg68ZvjoJvhiprLZmAWn4nYUWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1qgvMb p0IASZn3yWMOI/uaxeZrMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMSlDfOpNLtDcZRvLXbDYDr7lMS7Bt8qLPCS8RuGfy6C15s78wfidBeWZj11i 7YQ4Jr9hkhOt+QpSvC2slqbTqPTLkJED1AatMOp+GuZx9eUcwkLHIJWtwBEQTnsZ rzqUffOcJ01YTxVRdy+FP3f5SmzdVpMNIrZlh1Ft2N4WhSbNYjAUfVMBwMpmIUGW 2j6buvkByoDt36GTyCoOvDsdLFF3CUmC9EIlPfrK2etsVdhJE1aLHxZ0szOEzhD5 QwDEpUujZ9Tweh7ejqUjg+xHbrPVyZSCK1L0fql69fSnJOIeZ0Ktrru/dql0qv6z s8MPU90U79QmzsLJsi4gDdwc/A== -----END CERTIFICATE-----Generated at Sat Jul 18 07:17:47 2026 by rpki-client