$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: HUstKvj+NP/uArzAwh+DqUoTjHGK/rdFhhWRbrYb31g= Subject key identifier: EC:E6:C0:3B:C0:0B:0D:A0:CE:E9:9E:EF:F7:61:51:F1:68:CB:7F:5C Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 10E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 10C3 Signing time: Thu 20 Aug 2026 17:18:54 +0000 Manifest this update: Thu 20 Aug 2026 17:18:54 +0000 Manifest next update: Thu 27 Aug 2026 17:18:54 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: sSwIcPZVdo8NAf1rv/TUuiKganaT4rSWtRuPU/fKZQ8=) 2: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=) 3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=) 4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Aug 20 17:18:54 2026 GMT Not After : Aug 27 17:18:54 2026 GMT Subject: CN=6a8736fe-f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:94:ae:d2:e9:2c:59:8e:22:8a:92:70:63: 5e:e0:17:3c:72:89:91:04:2a:0c:d5:08:3f:42:c3: f9:81:53:87:68:70:34:4f:b6:ed:00:a2:dc:dc:09: 19:d8:a0:16:cd:de:60:14:24:17:74:6e:6f:3f:48: 58:ce:b3:a5:43:00:e8:da:9e:22:5f:85:81:22:76: 4e:df:7d:23:c9:0b:0f:91:8d:ae:ba:96:9c:ef:46: 59:03:c0:07:42:0f:4f:03:3f:4c:21:90:96:0f:e3: 4c:a6:b0:e6:57:96:77:b7:2a:50:d5:b9:5e:2d:64: e6:9a:d5:1b:08:9f:11:4f:1a:da:a7:5a:49:28:5b: 9d:5f:58:f1:34:d8:ab:98:de:ef:e7:4f:c0:11:13: ab:a8:26:bc:0d:f5:43:b6:7f:b9:ee:4b:b0:30:8b: a1:9b:32:2d:c9:a8:bb:52:b2:2c:2a:f2:60:16:8b: 7b:2a:4d:d1:5f:bc:68:6a:98:28:a9:32:9d:b8:f5: 76:89:6d:50:e5:df:9e:9b:d0:34:d3:d8:df:c0:2d: 6b:e2:70:07:35:cc:24:e2:25:a3:61:a3:ff:57:72: 1b:0b:fc:cc:a6:e6:0f:31:72:aa:b4:9b:06:ab:cb: bf:a1:45:93:2a:4d:03:d7:f7:92:4f:4f:18:17:0e: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:C0:3B:C0:0B:0D:A0:CE:E9:9E:EF:F7:61:51:F1:68:CB:7F:5C X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:1d:a2:7d:fe:06:c3:27:30:5e:58:54:b2:e9:19:c9:31:f3: ae:e1:25:36:51:96:64:dd:2f:fc:8d:c4:82:51:0d:4b:e8:d3: 4b:41:5f:02:54:33:6f:43:b1:25:67:99:09:cf:0b:2d:07:cb: 20:d6:b2:4f:19:05:01:73:00:1c:29:b8:b6:8c:58:82:e3:97: 39:a5:1a:dd:10:b5:69:d9:5c:7e:6f:74:a2:68:d7:20:32:f9: e2:7a:82:06:f4:0f:51:4c:ef:46:f2:50:4a:98:25:48:a7:f3: 0f:eb:4c:fa:7d:ad:c0:61:8d:3e:35:43:c3:e0:90:96:63:ce: 3f:d9:e3:89:ac:b5:d6:47:24:a9:07:3a:f7:7b:c5:92:36:c3: d0:99:57:08:7a:d3:71:9f:60:a4:8b:eb:eb:3d:25:ca:9d:df: d7:86:46:c3:55:92:68:b6:13:15:38:8b:ae:47:84:ac:27:ed: 32:8c:63:71:54:bd:1d:68:13:fb:75:76:e7:66:7a:99:d1:3d: 7b:c5:b3:a1:86:df:b9:5b:22:63:1d:bb:ab:10:6b:da:24:46: c6:bc:af:0a:44:40:6e:49:84:09:c9:c7:78:30:f3:59:52:16: 9e:c1:62:48:23:c5:59:00:13:53:7c:c4:36:a2:f2:e2:01:a6: 15:d4:21:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjYwODIwMTcxODU0WhcNMjYwODI3MTcxODU0WjAYMRYwFAYD VQQDEw02YTg3MzZmZS1mM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fCUrtLpLFmOIoqScGNe4Bc8comRBCoM1Qg/QsP5gVOHaHA0T7btAKLc3AkZ 2KAWzd5gFCQXdG5vP0hYzrOlQwDo2p4iX4WBInZO330jyQsPkY2uupac70ZZA8AH Qg9PAz9MIZCWD+NMprDmV5Z3typQ1bleLWTmmtUbCJ8RTxrap1pJKFudX1jxNNir mN7v50/AEROrqCa8DfVDtn+57kuwMIuhmzItyai7UrIsKvJgFot7Kk3RX7xoapgo qTKduPV2iW1Q5d+em9A009jfwC1r4nAHNcwk4iWjYaP/V3IbC/zMpuYPMXKqtJsG q8u/oUWTKk0D1/eST08YFw4HZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzmwDvA Cw2gzume7/dhUfFoy39cMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiB2iff4GwycwXlhUsukZyTHzruElNlGWZN0v/I3EglENS+jTS0FfAlQzb0Ox JWeZCc8LLQfLINayTxkFAXMAHCm4toxYguOXOaUa3RC1adlcfm90omjXIDL54nqC BvQPUUzvRvJQSpglSKfzD+tM+n2twGGNPjVDw+CQlmPOP9njiay11kckqQc693vF kjbD0JlXCHrTcZ9gpIvr6z0lyp3f14ZGw1WSaLYTFTiLrkeErCftMoxjcVS9HWgT +3V252Z6mdE9e8WzoYbfuVsiYx27qxBr2iRGxryvCkRAbkmECcnHeDDzWVIWnsFi SCPFWQATU3zENqLy4gGmFdQhAg== -----END CERTIFICATE-----Generated at Fri Aug 21 03:31:50 2026 by rpki-client