$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft File: kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json) Hash identifier: E/1lOROcKabUGtQWNN4s0UJGdZvYVa/0tN7ZUNOpT+8= Subject key identifier: D2:46:29:EE:C0:3D:9C:E0:A7:F2:A0:4A:98:A2:71:42:35:63:BE:A2 Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 Certificate issuer: /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft Manifest number: 0705 Signing time: Mon 20 Jul 2026 22:29:57 +0000 Manifest this update: Mon 20 Jul 2026 22:29:57 +0000 Manifest next update: Mon 27 Jul 2026 22:29:57 +0000 Files and hashes: 1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: uHOPVX6cdrnNtUaZ/wK6LpYxvz7cpq3iXjIGrFpWjbc=) 2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: u0l6ewd10l3CnKNZWLyz/pX9vsxOgLw5k8pS9qZkY3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5 Validity Not Before: Jul 20 22:29:57 2026 GMT Not After : Jul 27 22:29:57 2026 GMT Subject: CN=6a5ea165-0fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:0d:22:b6:a6:15:b7:d1:ab:cb:0e:ad:19: 17:bb:bf:87:1e:46:37:c0:f1:23:21:f9:07:bf:3f: 1c:1e:65:24:28:c2:f1:f5:26:c1:42:4d:17:33:07: 91:3d:01:7b:e1:e9:ec:6f:31:44:9e:b6:fb:e6:7e: 8c:b0:3e:ea:f9:a5:94:0c:15:9e:ad:f6:9b:3e:b9: 63:69:79:e6:2a:b9:ba:e0:78:4d:a9:38:4a:a1:19: a9:bc:c5:49:aa:bf:b8:4d:9f:4e:02:b1:69:8b:1a: 96:30:e6:36:e8:34:a4:48:79:f7:ba:06:bc:2f:8c: 4d:6b:dc:59:d3:5e:73:1c:24:b5:4a:d4:03:5f:ec: ce:a0:5d:03:77:a5:25:1e:43:4b:0e:1e:81:51:da: 97:0f:1f:84:a6:d0:ce:c1:55:6b:f2:15:d9:cf:ea: 6e:a5:e4:fc:52:53:f0:cc:95:32:15:2e:8e:dd:0f: 5b:66:8d:b1:c2:51:b2:20:07:d9:5c:a3:4e:77:17: a4:b6:7f:90:09:35:9b:f1:c8:86:ef:a0:47:46:74: 52:24:3a:65:9c:75:f7:3e:1b:13:68:c4:11:08:a7: a0:3c:3b:3e:3f:a5:4a:5d:33:c0:fc:c1:25:50:fa: 02:fe:9d:66:e8:28:05:fd:10:f3:24:e5:03:46:5b: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:29:EE:C0:3D:9C:E0:A7:F2:A0:4A:98:A2:71:42:35:63:BE:A2 X509v3 Authority Key Identifier: keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4b:de:bc:9d:a0:a9:47:04:22:73:5e:b0:9b:6e:cb:8f:f6: 43:93:c1:bd:f6:8b:b9:68:55:77:a1:ca:e3:59:75:1b:e4:90: 6f:19:85:c4:0c:80:71:f8:36:d1:5f:0a:a4:6e:a0:8a:c4:26: 54:98:04:1b:f6:ca:77:00:87:c9:02:38:7b:e3:bd:f9:69:35: f6:58:36:64:33:a4:cb:1a:9f:9b:c8:28:73:63:04:e3:c3:75: a5:06:ac:a7:dd:fe:39:5d:2e:3f:8f:37:47:a0:e9:e9:9b:70: d2:c5:5d:f6:5b:83:79:66:0c:47:d6:06:78:d3:79:7b:de:12: 3e:87:3a:b9:6e:97:36:3e:fe:f0:f6:47:82:fe:6b:c1:2f:79: 94:bd:cf:44:d5:88:84:66:bc:8e:ae:1e:ca:49:fb:79:43:66: 2c:79:88:5c:cd:91:5f:44:77:ed:8c:6f:0d:53:30:15:ca:df: c9:68:cb:c0:71:75:a3:95:4b:31:ef:3d:46:1d:86:d4:40:ec: f4:2b:d2:6c:06:85:ed:a0:47:72:59:9f:cd:f9:c2:9d:04:a3: f0:06:04:07:ee:32:d1:ac:64:c1:c6:a7:67:50:a1:9d:83:97: 0f:cf:80:68:82:90:47:40:35:43:5e:9c:09:c3:75:be:ce:a3: bc:2f:70:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3 MkU3NTRDQjUwHhcNMjYwNzIwMjIyOTU3WhcNMjYwNzI3MjIyOTU3WjAYMRYwFAYD VQQDEw02YTVlYTE2NS0wZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ4NIramFbfRq8sOrRkXu7+HHkY3wPEjIfkHvz8cHmUkKMLx9SbBQk0XMweR PQF74ensbzFEnrb75n6MsD7q+aWUDBWerfabPrljaXnmKrm64HhNqThKoRmpvMVJ qr+4TZ9OArFpixqWMOY26DSkSHn3uga8L4xNa9xZ015zHCS1StQDX+zOoF0Dd6Ul HkNLDh6BUdqXDx+EptDOwVVr8hXZz+pupeT8UlPwzJUyFS6O3Q9bZo2xwlGyIAfZ XKNOdxektn+QCTWb8ciG76BHRnRSJDplnHX3PhsTaMQRCKegPDs+P6VKXTPA/MEl UPoC/p1m6CgF/RDzJOUDRlu4pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJGKe7A PZzgp/KgSpiicUI1Y76iMB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4 MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS82MzQ3Mzc1Njk4MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdy UkJfZDdlYl9QTk55NTFUTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiEvevJ2gqUcEInNesJtuy4/2Q5PBvfaLuWhVd6HK41l1G+SQbxmFxAyAcfg2 0V8KpG6gisQmVJgEG/bKdwCHyQI4e+O9+Wk19lg2ZDOkyxqfm8goc2ME48N1pQas p93+OV0uP483R6Dp6Ztw0sVd9luDeWYMR9YGeNN5e94SPoc6uW6XNj7+8PZHgv5r wS95lL3PRNWIhGa8jq4eykn7eUNmLHmIXM2RX0R37YxvDVMwFcrfyWjLwHF1o5VL Me89Rh2G1EDs9CvSbAaF7aBHclmfzfnCnQSj8AYEB+4y0axkwcanZ1ChnYOXD8+A aIKQR0A1Q16cCcN1vs6jvC9wDg== -----END CERTIFICATE-----Generated at Tue Jul 21 18:17:21 2026 by rpki-client