$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: 5LQ/Q6BlR3B8TqUJ1S/u0GvUXvWqfM1buUQUTMI2J3o= Subject key identifier: AD:5B:EC:A9:57:E2:90:7D:D7:54:63:E9:46:01:C5:B0:EC:1A:5D:89 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 0463 Signing time: Tue 21 Jul 2026 01:03:12 +0000 Manifest this update: Tue 21 Jul 2026 01:03:12 +0000 Manifest next update: Tue 28 Jul 2026 01:03:12 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: Yx9lmYBB0Q0O8H981UCmRAhMHx49dgG3AJe25Juhz9I=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 01:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Jul 21 01:03:12 2026 GMT Not After : Jul 28 01:03:12 2026 GMT Subject: CN=6a5ec550-a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:b6:6c:aa:36:90:1f:6a:db:41:f4:7a:5e: 0c:de:7e:11:d3:f1:e3:c7:b4:c3:38:1c:56:27:17: 97:4d:55:90:b5:c0:13:3c:4d:ee:b0:2b:fc:b3:ee: 6e:57:9a:2d:c3:0c:88:9c:ef:5b:79:2c:05:12:58: 19:d2:63:61:77:ac:71:b9:02:7c:e5:62:7e:f7:77: 0a:40:18:ab:71:ce:ac:50:9a:e3:f9:51:cb:fe:a3: 84:a9:9c:74:8b:b8:c5:8e:a3:0e:ad:6a:56:4e:f9: 6d:64:cc:a4:25:34:5c:01:9e:c1:be:2b:d6:30:20: 2c:38:35:1f:c2:32:eb:42:f5:af:a4:2b:eb:5a:75: f9:c7:ef:2d:27:e5:8f:39:92:be:23:2d:7f:5f:4b: fc:9f:de:9d:6a:4b:64:bd:01:80:07:8e:24:b1:c8: c8:49:6e:78:ba:83:eb:b2:bf:b1:85:7a:4c:da:e0: 7b:34:89:49:d5:6a:9d:57:b9:f0:3e:6d:ad:80:eb: 77:13:80:9c:4b:6e:95:12:cc:3b:68:98:d0:ab:ea: b1:30:fa:06:45:a6:d6:be:f8:a4:4c:14:39:66:ae: 8c:ff:a3:e3:50:77:9f:ef:ff:77:a4:d2:e9:f7:5d: 2a:c7:87:0d:37:1e:28:6e:33:13:f4:38:4b:c5:4b: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5B:EC:A9:57:E2:90:7D:D7:54:63:E9:46:01:C5:B0:EC:1A:5D:89 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:95:1a:67:07:f0:28:9e:a1:74:4e:ab:8a:9b:be:a0:f7:bc: 2d:52:c1:62:df:fe:6a:bf:1f:f3:2f:11:14:7a:18:1f:15:f8: 23:2f:3d:c4:1f:f4:d0:1f:fe:3a:14:47:ec:c5:6d:fc:94:0f: 86:d9:ca:31:52:e6:48:5a:43:03:f7:54:52:2d:c2:e4:96:72: f7:63:98:99:bd:de:b0:8b:b4:3b:3a:dd:da:33:28:e3:6d:53: 0f:b9:49:93:09:cb:30:b9:86:30:9a:e1:34:97:d1:9f:8f:15: dd:81:dc:01:a8:7e:b7:b2:6f:1b:7c:9d:ff:7b:f4:83:ff:92: 6f:1a:43:43:2c:33:c5:bd:e5:56:c6:fe:a1:15:41:bd:0d:ab: 3f:a1:2f:5d:00:d7:14:5a:1b:08:d4:db:63:0b:40:7f:db:44: 9c:89:e1:37:a7:47:a0:8f:67:2d:8f:28:ee:fe:38:ce:36:de: c3:38:59:97:21:70:06:3c:ea:fc:94:72:ff:65:0a:cd:70:d9: 6c:93:92:0a:05:09:16:f3:5e:0a:8b:0c:74:95:f4:99:a2:36: 9d:da:54:78:ae:a4:34:85:9e:04:40:75:fd:4e:96:f9:a0:0d: 63:9f:df:ce:a9:e5:ec:5c:45:73:7e:7e:ee:19:a1:6e:05:c1: 5e:f0:09:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjYwNzIxMDEwMzEyWhcNMjYwNzI4MDEwMzEyWjAYMRYwFAYD VQQDEw02YTVlYzU1MC1hNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDq2bKo2kB9q20H0el4M3n4R0/Hjx7TDOBxWJxeXTVWQtcATPE3usCv8s+5u V5otwwyInO9beSwFElgZ0mNhd6xxuQJ85WJ+93cKQBircc6sUJrj+VHL/qOEqZx0 i7jFjqMOrWpWTvltZMykJTRcAZ7BvivWMCAsODUfwjLrQvWvpCvrWnX5x+8tJ+WP OZK+Iy1/X0v8n96daktkvQGAB44kscjISW54uoPrsr+xhXpM2uB7NIlJ1WqdV7nw Pm2tgOt3E4CcS26VEsw7aJjQq+qxMPoGRabWvvikTBQ5Zq6M/6PjUHef7/93pNLp 910qx4cNNx4objMT9DhLxUtb0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1b7KlX 4pB911Rj6UYBxbDsGl2JMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArpUaZwfwKJ6hdE6ripu+oPe8LVLBYt/+ar8f8y8RFHoYHxX4Iy89xB/00B/+ OhRH7MVt/JQPhtnKMVLmSFpDA/dUUi3C5JZy92OYmb3esIu0Ozrd2jMo421TD7lJ kwnLMLmGMJrhNJfRn48V3YHcAah+t7JvG3yd/3v0g/+SbxpDQywzxb3lVsb+oRVB vQ2rP6EvXQDXFFobCNTbYwtAf9tEnInhN6dHoI9nLY8o7v44zjbewzhZlyFwBjzq /JRy/2UKzXDZbJOSCgUJFvNeCosMdJX0maI2ndpUeK6kNIWeBEB1/U6W+aANY5/f zqnl7FxFc35+7hmhbgXBXvAJ5Q== -----END CERTIFICATE-----Generated at Wed Jul 22 02:02:55 2026 by rpki-client