$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: WWbTCdfNXzD3Ad+8VyTVbZHTYwuE85g7fduYKuC8wxQ= Subject key identifier: B2:C1:64:A6:8B:8E:55:2E:8C:31:96:0D:37:4C:5F:CA:AE:2B:70:EE Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 7D Signing time: Fri 17 Jul 2026 08:55:30 +0000 Manifest this update: Fri 17 Jul 2026 08:55:30 +0000 Manifest next update: Fri 24 Jul 2026 08:55:30 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: jk+uMzx9hcDG42R8q0+eOtMFx/aVKL8zeOrcWICrWBY=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: HfEZG4t3DF1Mxy+ybb6Jvu5Sd5lj1h6Aq1UoSU2rExQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Jul 17 08:55:30 2026 GMT Not After : Jul 24 08:55:30 2026 GMT Subject: CN=6a59ee02-7f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:3c:85:0f:64:c3:5d:4d:d7:0c:87:c9:45: f0:ec:57:3a:2b:ba:8c:2c:ea:21:88:9a:60:6c:91: cc:3b:de:e5:9e:25:ac:aa:0f:c8:9b:8a:18:53:ba: 15:de:9b:76:a3:70:4c:99:f4:b7:b1:ca:08:9c:ca: ef:61:bd:13:f7:55:7b:4c:f6:a0:1f:31:4e:66:e9: 9c:bd:69:9b:61:ab:20:d8:92:bc:19:9b:d9:71:91: a7:6b:8b:6d:bc:87:a8:c0:1f:70:64:7f:dd:82:d3: 7c:6d:da:fb:52:30:a0:22:2f:71:94:2a:08:58:d1: af:8f:4c:5b:01:62:87:a3:e6:48:f2:6b:fb:85:ad: ec:3b:e5:74:96:57:61:5c:3d:0c:8c:30:6c:90:ea: d2:71:73:62:6b:8c:c7:4d:80:1d:ab:2d:34:41:4c: 37:fb:81:ff:ef:e9:7d:ad:5a:73:7c:5d:ad:4e:51: 50:84:70:42:19:74:00:bd:a4:93:85:38:3d:20:ec: 6b:02:42:e9:9a:1c:82:9a:98:aa:6c:3b:87:c5:7a: 98:59:7d:15:d8:cb:ac:53:53:9e:05:36:f0:47:8b: cd:c3:75:65:d6:79:33:4f:ee:ab:20:15:4c:11:6a: 35:9c:d1:94:cf:0f:57:f6:ff:7b:43:ab:00:0f:7c: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:64:A6:8B:8E:55:2E:8C:31:96:0D:37:4C:5F:CA:AE:2B:70:EE X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:06:3b:cc:d8:b0:66:f8:0d:30:1c:4c:89:28:28:11:07: 8b:4b:d0:1b:fa:c6:87:fa:77:01:5e:a4:49:02:4e:51:20:aa: 7a:ad:c1:43:f5:b9:8d:ff:30:ca:e9:65:13:06:56:6e:80:08: 3f:a2:c2:92:d8:ed:87:76:30:05:61:55:78:7c:d1:90:0e:36: 06:8c:0f:c4:49:73:34:4d:9a:41:c4:4e:c7:d0:82:bd:f3:11: 73:3f:bc:64:ef:dd:6c:64:6a:19:3a:39:2f:21:5d:04:25:0e: a5:36:e0:e7:f5:72:16:ea:20:59:9a:76:25:7a:20:2e:cd:0a: 8b:1a:89:1d:19:bd:94:75:40:74:c2:25:a3:8f:a2:41:65:f2: d8:0d:8f:c6:b4:22:19:58:6a:3b:d0:7a:3f:96:58:15:3a:11: 89:9d:79:fa:d8:76:40:46:7f:49:c3:93:64:cb:21:05:57:ab: d0:ac:4b:6b:1f:23:ee:ce:a3:1c:33:dc:0b:67:b8:24:3e:0c: b6:e6:d4:57:d7:70:29:76:cb:ff:90:07:fd:ea:be:d6:ae:fe: e8:cb:16:b4:46:dd:4c:e5:98:39:37:e1:1c:86:29:52:59:2a: ec:37:80:34:d4:8e:5a:81:3e:0d:77:fd:cd:d0:69:85:56:d1: 25:00:24:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC MzY0RTQzQzAwHhcNMjYwNzE3MDg1NTMwWhcNMjYwNzI0MDg1NTMwWjAYMRYwFAYD VQQDEw02YTU5ZWUwMi03ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogg8hQ9kw11N1wyHyUXw7Fc6K7qMLOohiJpgbJHMO97lniWsqg/Im4oYU7oV 3pt2o3BMmfS3scoInMrvYb0T91V7TPagHzFOZumcvWmbYasg2JK8GZvZcZGna4tt vIeowB9wZH/dgtN8bdr7UjCgIi9xlCoIWNGvj0xbAWKHo+ZI8mv7ha3sO+V0lldh XD0MjDBskOrScXNia4zHTYAdqy00QUw3+4H/7+l9rVpzfF2tTlFQhHBCGXQAvaST hTg9IOxrAkLpmhyCmpiqbDuHxXqYWX0V2MusU1OeBTbwR4vNw3Vl1nkzT+6rIBVM EWo1nNGUzw9X9v97Q6sAD3x9JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLLBZKaL jlUujDGWDTdMX8quK3DuMB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1 MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3 Tm9hYk82Z1F3a1d6Wk9ROEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjwkGO8zYsGb4DTAcTIkoKBEHi0vQG/rGh/p3AV6kSQJOUSCqeq3BQ/W5jf8w yullEwZWboAIP6LCktjth3YwBWFVeHzRkA42BowPxElzNE2aQcROx9CCvfMRcz+8 ZO/dbGRqGTo5LyFdBCUOpTbg5/VyFuogWZp2JXogLs0KixqJHRm9lHVAdMIlo4+i QWXy2A2PxrQiGVhqO9B6P5ZYFToRiZ15+th2QEZ/ScOTZMshBVer0KxLax8j7s6j HDPcC2e4JD4MtubUV9dwKXbL/5AH/eq+1q7+6MsWtEbdTOWYOTfhHIYpUlkq7DeA NNSOWoE+DXf9zdBphVbRJQAkZA== -----END CERTIFICATE-----Generated at Sat Jul 18 03:30:08 2026 by rpki-client