$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: Nop5Uzd5Mhxl9MWUFZ34UzZpFgN55ZWdt9HWzC8HfGc= Subject key identifier: 61:51:0C:78:E0:46:4E:26:4A:A2:41:9A:67:2E:91:37:7D:3E:F6:20 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0440 Signing time: Sat 15 Aug 2026 00:12:45 +0000 Manifest this update: Sat 15 Aug 2026 00:12:44 +0000 Manifest next update: Sat 22 Aug 2026 00:12:44 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: C/OlS8h0T9AXS/QXcFsUDdIPYN5oxOzq9jI1kMoZvtU=) 2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=) 3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 00:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Aug 15 00:12:44 2026 GMT Not After : Aug 22 00:12:44 2026 GMT Subject: CN=6a7faefc-12c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:92:5a:2a:a0:83:d8:18:d6:27:32:48:62: ff:e6:c9:dd:01:ec:5c:d8:f1:e2:fc:c0:f2:1d:dc: 7e:ec:c8:03:d1:16:38:79:60:e8:01:34:0a:b3:bb: f1:b5:78:bb:00:8c:43:c2:23:89:78:ec:3a:4b:91: b1:d7:0a:7b:51:e1:8e:11:ba:64:53:c3:c5:03:3e: a5:36:72:f7:3c:42:c5:3f:d7:68:ce:08:e8:de:63: 73:44:ab:b3:4e:b7:13:15:de:a8:0d:32:73:ae:4f: 56:0c:4e:39:60:06:47:f3:87:6c:f9:1d:67:2f:1d: e3:00:55:29:60:1d:e4:14:77:5d:b6:f9:e1:9a:15: 8f:92:49:53:b1:b1:8b:d1:65:b7:79:8f:8a:45:8a: 8f:89:9a:62:9f:a4:fc:78:65:1a:35:90:bc:b3:21: 28:33:64:94:38:29:e4:7b:06:bb:ca:e9:86:2f:e2: 27:66:3e:d0:7f:2b:44:f6:68:08:5d:25:9f:71:bc: 22:96:0a:f1:3c:26:52:60:8f:0f:da:15:fb:b0:9b: 6a:8b:3e:00:17:20:2a:ee:51:42:55:1b:dd:7a:a1: ed:2f:7d:29:3e:ba:25:c4:ca:93:89:09:be:82:96: 93:d4:8f:84:d2:e7:fc:2f:41:80:89:9b:d9:9b:e9: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:51:0C:78:E0:46:4E:26:4A:A2:41:9A:67:2E:91:37:7D:3E:F6:20 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f7:48:4a:a5:94:4e:e3:56:0b:c9:74:f7:81:53:68:56:da: e3:3e:e5:34:f9:cb:0c:d2:81:bc:f5:4e:b6:0a:d3:cf:df:56: f1:4e:de:de:2a:09:2a:60:44:fe:d5:e8:ea:78:66:34:8f:ff: b7:b2:2e:66:7d:0a:85:19:8b:b7:30:cf:ca:35:77:b2:8c:0e: af:68:8d:f3:42:a5:81:98:9a:f8:13:19:f5:46:c3:53:8c:73: da:1e:48:72:68:49:dc:6f:3f:57:2b:a3:18:40:34:f1:16:2d: 14:e1:aa:dd:aa:60:a9:55:c6:f7:58:17:ef:48:87:bf:c4:88: 16:52:85:9c:21:66:4b:ab:9e:86:08:b8:d0:cc:4d:a4:4d:b0: ae:dc:f0:a8:12:53:d8:4f:ce:88:88:1a:4f:38:5e:0e:b9:d7: c6:6a:de:fb:d2:db:ce:fe:a7:69:6f:16:e0:56:c9:af:1e:74: 15:55:3f:3a:05:04:7f:c4:1e:39:29:f4:0b:c4:6c:07:a4:ec: 2a:a7:90:f7:28:f7:1c:93:7f:59:f7:12:24:b0:77:34:c3:3a: 5c:7b:0c:27:2e:f8:28:7b:0e:40:33:d9:44:59:99:e6:d9:52: 2e:74:1d:7a:a1:f0:ae:43:0c:d2:00:c9:62:03:5a:cf:79:46: c4:2f:59:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYwODE1MDAxMjQ0WhcNMjYwODIyMDAxMjQ0WjAYMRYwFAYD VQQDEw02YTdmYWVmYy0xMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsiSWiqgg9gY1icySGL/5sndAexc2PHi/MDyHdx+7MgD0RY4eWDoATQKs7vx tXi7AIxDwiOJeOw6S5Gx1wp7UeGOEbpkU8PFAz6lNnL3PELFP9dozgjo3mNzRKuz TrcTFd6oDTJzrk9WDE45YAZH84ds+R1nLx3jAFUpYB3kFHddtvnhmhWPkklTsbGL 0WW3eY+KRYqPiZpin6T8eGUaNZC8syEoM2SUOCnkewa7yumGL+InZj7QfytE9mgI XSWfcbwilgrxPCZSYI8P2hX7sJtqiz4AFyAq7lFCVRvdeqHtL30pProlxMqTiQm+ gpaT1I+E0uf8L0GAiZvZm+mJbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFRDHjg Rk4mSqJBmmcukTd9PvYgMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPPdISqWUTuNWC8l094FTaFba4z7lNPnLDNKBvPVOtgrTz99W8U7e3ioJKmBE /tXo6nhmNI//t7IuZn0KhRmLtzDPyjV3sowOr2iN80KlgZia+BMZ9UbDU4xz2h5I cmhJ3G8/VyujGEA08RYtFOGq3apgqVXG91gX70iHv8SIFlKFnCFmS6uehgi40MxN pE2wrtzwqBJT2E/OiIgaTzheDrnXxmre+9Lbzv6naW8W4FbJrx50FVU/OgUEf8Qe OSn0C8RsB6TsKqeQ9yj3HJN/WfcSJLB3NMM6XHsMJy74KHsOQDPZRFmZ5tlSLnQd eqHwrkMM0gDJYgNaz3lGxC9ZKQ== -----END CERTIFICATE-----Generated at Sat Aug 15 05:40:36 2026 by rpki-client