$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json) Hash identifier: CW6xd5gKTpnXHFgOEiCT8MlamRIXekcE6C0TTQV/v48= Subject key identifier: 36:A0:A3:70:1A:05:07:5E:09:50:D3:7D:1E:38:D8:8D:0F:17:1F:37 Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1AAC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft Manifest number: 1A78 Signing time: Mon 31 Aug 2026 16:17:40 +0000 Manifest this update: Mon 31 Aug 2026 16:17:40 +0000 Manifest next update: Mon 07 Sep 2026 16:17:40 +0000 Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: CWr6v/jYDSeoA4dxVRTUr5FoJ1YnTY7AQhh/KTJ06Ms=) 2: 932C5CF28B2C11F1938379423E11F970.roa (hash: 6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=) 3: CB355B666EA911F1979A4FB45FA30FBC.roa (hash: EFHnA2af/j04RagH4w+3B1hjPaj4axNV+Q60XLb7eWc=) 4: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: 4taf7ltYE6M7p58XiP5zUTTzb89QrcQbwrr0YABbhPc=) 5: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (hash: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM=) 6: E7729178378211EF822BAA6EC4F9AE02.roa (hash: kWi4j9Wig93ekWVxphoEylI+bhEAyZFHwi2cC9HjPZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 16:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6828 (0x1aac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Aug 31 16:17:40 2026 GMT Not After : Sep 7 16:17:40 2026 GMT Subject: CN=6a95a924-5e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:4f:a4:c3:b1:55:6f:c2:48:a1:40:9e:65: 5f:bb:bf:ec:99:ec:10:7d:3c:07:2d:33:3c:bf:2c: 52:6d:d0:25:e1:14:70:7b:94:59:7c:35:2c:87:ba: 71:85:c9:f3:43:75:c7:95:d4:fc:41:16:91:75:a7: 1e:1a:c0:ea:56:4b:c7:6d:f6:e5:35:2e:fc:61:1f: c9:93:97:7d:fa:f2:d7:e0:8e:27:12:70:8d:d3:07: 4f:8f:df:6f:71:db:02:60:51:36:a5:ed:b6:45:84: 8c:35:5a:5c:f4:ff:9d:ef:39:ca:8f:12:f0:13:3c: 89:92:0c:48:ea:05:50:fa:77:a3:47:1d:5b:c4:53: 9c:82:6f:54:f9:aa:42:af:a5:9c:67:44:18:f6:0d: b6:33:89:ee:39:93:95:9b:71:ce:ae:4c:1a:7e:a4: 8f:e3:c3:d9:77:21:17:bf:2f:5f:4e:04:9b:bf:ce: b4:a2:4d:56:1f:7c:7d:f3:63:a4:c8:e8:c9:2b:18: 4c:d0:6b:ee:02:59:55:22:79:b4:4e:fa:11:3c:fd: fc:bb:60:93:bd:cd:7d:3a:a1:31:55:8f:e2:67:99: ce:66:37:18:d2:74:ec:78:3a:73:3f:43:88:77:fc: 92:93:1b:cf:fe:18:72:20:be:cb:9e:4f:d9:6b:f9: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A0:A3:70:1A:05:07:5E:09:50:D3:7D:1E:38:D8:8D:0F:17:1F:37 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d7:e4:f0:08:45:30:32:f8:1a:d6:1d:2e:00:fc:ae:5b:39: a5:8f:e5:6f:ff:da:ca:90:cc:b4:77:37:cf:96:00:b4:10:ca: 49:d3:8b:a5:0d:8b:0c:85:c1:15:ac:22:05:2b:4d:88:b9:93: 55:20:43:42:dc:cb:d5:0b:f7:67:cb:9f:08:1d:94:13:82:75: d4:b4:e0:f0:d2:45:da:2e:f7:1e:15:9d:37:b9:b3:c5:63:34: 28:5b:67:69:72:a2:8f:89:7f:7c:e6:7a:08:50:3c:66:b7:11: 02:63:e1:91:69:d5:a4:37:7d:1f:80:4f:56:b4:62:5f:ca:57: 90:7f:68:6a:e1:c9:8f:8c:e0:80:bf:16:32:ec:d4:b0:99:43: 53:1d:e5:1b:2b:47:00:f0:ec:26:00:18:0b:f3:d8:1f:74:b3: 02:2d:88:90:45:a0:84:88:b1:2e:08:d5:88:ad:64:4a:af:c7: 9a:55:94:81:1b:f2:ab:cb:7b:e1:9a:5b:88:69:d6:7a:ee:cf: 4e:8d:1b:7f:7f:3e:e3:0f:30:96:8f:b9:07:43:d6:d8:f0:46: f2:3a:d3:37:3f:67:52:50:7f:eb:03:2a:33:50:08:76:1d:82: e1:7f:dd:cf:50:67:b7:c1:b7:1f:56:6b:17:b6:44:f7:c6:c6: f5:76:6e:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwODMxMTYxNzQwWhcNMjYwOTA3MTYxNzQwWjAYMRYwFAYD VQQDEw02YTk1YTkyNC01ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvNPpMOxVW/CSKFAnmVfu7/smewQfTwHLTM8vyxSbdAl4RRwe5RZfDUsh7px hcnzQ3XHldT8QRaRdaceGsDqVkvHbfblNS78YR/Jk5d9+vLX4I4nEnCN0wdPj99v cdsCYFE2pe22RYSMNVpc9P+d7znKjxLwEzyJkgxI6gVQ+nejRx1bxFOcgm9U+apC r6WcZ0QY9g22M4nuOZOVm3HOrkwafqSP48PZdyEXvy9fTgSbv860ok1WH3x982Ok yOjJKxhM0GvuAllVInm0TvoRPP38u2CTvc19OqExVY/iZ5nOZjcY0nTseDpzP0OI d/ySkxvP/hhyIL7Lnk/Za/kzNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDago3Aa BQdeCVDTfR442I0PFx83MB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85M0JCNTAyRTZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFr U29jUVpMWkFldDVKUG1PbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAedfk8AhFMDL4GtYdLgD8rls5pY/lb//aypDMtHc3z5YAtBDKSdOLpQ2LDIXB FawiBStNiLmTVSBDQtzL1Qv3Z8ufCB2UE4J11LTg8NJF2i73HhWdN7mzxWM0KFtn aXKij4l/fOZ6CFA8ZrcRAmPhkWnVpDd9H4BPVrRiX8pXkH9oauHJj4zggL8WMuzU sJlDUx3lGytHAPDsJgAYC/PYH3SzAi2IkEWghIixLgjViK1kSq/HmlWUgRvyq8t7 4ZpbiGnWeu7PTo0bf38+4w8wlo+5B0PW2PBG8jrTNz9nUlB/6wMqM1AIdh2C4X/d z1Bnt8G3H1ZrF7ZE98bG9XZuRw== -----END CERTIFICATE-----Generated at Tue Sep 1 05:07:53 2026 by rpki-client