$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: SabFLXlf5imYp0PsdSCaCQut7gTj/YqMdMgUW7+ifhk= Subject key identifier: B8:35:F0:7E:BE:6A:3F:1B:89:7B:97:96:B7:3B:AD:A3:C5:F9:0D:37 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 27 Signing time: Fri 17 Jul 2026 10:13:29 +0000 Manifest this update: Fri 17 Jul 2026 10:13:29 +0000 Manifest next update: Fri 24 Jul 2026 10:13:29 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: FTCBvUwUBxR0h4yDXlY4qvMkD8iFJLx5NKwW0KAyJr0=) 2: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: k921Mcmu/cnS51QvFoRXejBwdAmHFdMNAue6ueGlIEg=) 3: DDFBF53064F811F18CD9A2CE7647A888.roa (hash: rnHtHer8GYacGwWfe6Ay6DpWc4MNGCoinmNNStme7Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Jul 17 10:13:29 2026 GMT Not After : Jul 24 10:13:29 2026 GMT Subject: CN=6a5a0049-9897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:ba:11:9d:0e:21:62:15:c6:40:0f:38:b0: 21:72:76:d9:da:23:db:70:84:80:f1:ff:b1:a6:41: 3f:75:44:df:67:07:fd:9f:f2:9a:99:e4:95:1b:2e: f4:8d:7d:15:a7:8b:ef:f8:68:b4:fe:e1:22:44:92: c6:92:b6:cc:74:2f:c9:f3:54:40:a7:2f:c6:99:9d: 82:5c:d3:e3:ec:24:b6:02:b6:e2:56:5d:3e:d0:49: 1b:02:ce:fd:f8:0c:c7:cd:17:77:78:ea:04:7a:1e: c2:0a:bf:bb:cb:0a:0f:a9:4b:d1:ec:b6:c6:6a:31: e3:6a:d8:82:ac:96:f5:56:31:3e:e1:99:0a:ca:ab: c6:dd:b2:e7:c9:64:80:aa:72:90:94:65:c1:34:c8: 6c:56:cd:cd:2d:2d:d6:b4:6b:89:8e:f5:40:77:9d: 77:2e:07:92:ea:ac:3d:15:62:35:47:33:61:04:f2: ea:ac:bc:f9:9d:68:1e:b4:58:0e:ce:6a:75:bf:63: 91:e5:32:ab:22:93:ba:d1:ce:b0:bc:fd:10:ad:45: c1:dd:c0:9c:3e:2c:5b:a3:84:37:14:be:0c:54:b0: b0:9e:5d:f6:10:14:b0:bd:b7:78:32:9d:e7:2d:be: aa:55:32:97:05:24:57:8e:98:78:10:b2:6c:f8:cd: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:35:F0:7E:BE:6A:3F:1B:89:7B:97:96:B7:3B:AD:A3:C5:F9:0D:37 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:77:9b:f0:4c:65:8e:fc:4d:9d:bd:bd:90:0e:00:87:90:73: 19:0a:f0:aa:27:55:19:2c:d9:03:d2:e0:a2:68:f3:11:e9:e2: 7c:44:08:3d:6d:28:10:f5:d9:47:68:24:5b:5f:56:40:99:ff: 89:69:fe:51:74:10:af:05:bc:0c:13:86:a9:55:49:5f:c4:de: a2:2c:6f:f9:be:ee:c4:8c:67:8b:dc:63:03:11:67:40:77:69: 4e:d5:0b:c3:52:fe:fa:f3:86:9f:75:ef:1f:b6:c8:59:db:34: df:12:4e:f6:d0:79:3a:47:ea:0c:7f:b0:ef:d3:f2:a2:c0:bb: 8d:3e:71:f0:f1:fa:4a:c7:d8:87:29:f9:50:31:f1:28:3a:ac: cc:2e:5d:7e:32:79:1c:37:47:18:c4:56:cb:64:07:31:01:67: f8:4f:90:f7:46:6b:5f:91:a9:16:b9:16:2d:7a:91:73:c6:98: 0c:34:ea:e6:cb:21:f4:c4:18:20:f2:91:ee:a7:ee:b4:ae:75: 73:99:12:ae:85:1a:8a:d3:1b:3f:b8:f5:11:a5:b9:65:d8:f7: b6:f7:e0:ee:d8:2a:4f:ad:77:6d:c1:c5:1a:d8:24:12:50:53: 49:ff:c3:d4:d4:02:1c:5c:b7:0c:91:4d:a1:8e:5c:25:03:da: 28:72:7c:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA3MTcxMDEzMjlaFw0yNjA3MjQxMDEzMjlaMBgxFjAUBgNV BAMTDTZhNWEwMDQ5LTk4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/dboRnQ4hYhXGQA84sCFydtnaI9twhIDx/7GmQT91RN9nB/2f8pqZ5JUbLvSN fRWni+/4aLT+4SJEksaStsx0L8nzVECnL8aZnYJc0+PsJLYCtuJWXT7QSRsCzv34 DMfNF3d46gR6HsIKv7vLCg+pS9HstsZqMeNq2IKslvVWMT7hmQrKq8bdsufJZICq cpCUZcE0yGxWzc0tLda0a4mO9UB3nXcuB5LqrD0VYjVHM2EE8uqsvPmdaB60WA7O anW/Y5HlMqsik7rRzrC8/RCtRcHdwJw+LFujhDcUvgxUsLCeXfYQFLC9t3gynect vqpVMpcFJFeOmHgQsmz4zYY7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuDXwfr5q PxuJe5eWtzuto8X5DTcwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3d5vwTGWO/E2dvb2QDgCHkHMZCvCqJ1UZLNkD0uCiaPMR6eJ8RAg9bSgQ9dlH aCRbX1ZAmf+Jaf5RdBCvBbwME4apVUlfxN6iLG/5vu7EjGeL3GMDEWdAd2lO1QvD Uv7684afde8ftshZ2zTfEk720Hk6R+oMf7Dv0/KiwLuNPnHw8fpKx9iHKflQMfEo OqzMLl1+MnkcN0cYxFbLZAcxAWf4T5D3RmtfkakWuRYtepFzxpgMNOrmyyH0xBgg 8pHup+60rnVzmRKuhRqK0xs/uPURpbll2Pe29+Du2CpPrXdtwcUa2CQSUFNJ/8PU 1AIcXLcMkU2hjlwlA9oocnxo -----END CERTIFICATE-----Generated at Sat Jul 18 05:32:04 2026 by rpki-client