$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: 29W65X1mjFeQzaw2VfdnmYIy2B6VYydUM5woyOCPkJc= Subject key identifier: D3:3E:AD:FC:A6:0F:3B:12:BB:7A:73:E3:58:B6:D0:8E:C6:86:6C:AD Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 0213 Signing time: Fri 17 Jul 2026 03:48:55 +0000 Manifest this update: Fri 17 Jul 2026 03:48:55 +0000 Manifest next update: Fri 24 Jul 2026 03:48:55 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: Yh/4dBp0ecrmuTv/LUqdDm1d0v4J8LtWwyIeAhfOs64=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 03:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Jul 17 03:48:55 2026 GMT Not After : Jul 24 03:48:55 2026 GMT Subject: CN=6a59a627-5496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:8d:77:dc:32:e5:15:e4:94:4a:65:e5:f3: ae:0d:e7:24:1d:6d:de:cd:8d:3f:ab:bb:00:4c:6a: aa:e2:e8:eb:a2:bc:7e:69:1d:6a:32:13:f5:54:75: 43:29:b0:65:fa:1f:6a:ff:cf:26:bc:26:a8:db:94: 7e:45:9b:e9:36:1b:fd:58:76:48:31:ef:1a:20:40: 11:03:f1:58:48:e1:89:18:2f:22:93:8e:0a:ef:f0: 1b:64:57:c8:e7:ed:10:93:6f:cc:ec:5f:de:0f:c4: 04:4a:bd:2b:73:71:f3:b6:da:d8:27:e6:66:73:65: b2:a4:39:d4:71:28:be:b8:7c:6d:b7:c9:5f:2a:a9: 9f:85:86:68:78:5d:d1:06:94:53:bd:f5:e6:46:0e: fb:f1:a7:7a:da:1e:48:28:6b:8e:af:e5:89:71:f3: 54:80:a3:35:14:f7:bb:0f:58:bb:77:40:8c:ca:92: ff:e5:96:5c:5e:68:3a:bb:58:0f:28:f0:20:6b:fc: 2a:34:5d:35:53:f5:94:39:fe:45:bf:35:a8:41:ed: 3b:76:f5:1a:14:55:5a:64:bf:b3:3d:17:59:86:7d: 79:3e:0b:b8:11:53:a7:a6:38:88:d2:5d:14:8b:08: d3:f8:c8:e5:14:ba:38:34:56:aa:d3:f6:71:82:42: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:AD:FC:A6:0F:3B:12:BB:7A:73:E3:58:B6:D0:8E:C6:86:6C:AD X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ca:be:47:d2:87:1a:07:d2:08:cb:1e:21:4a:e0:d1:ec:f8: 4e:16:dc:74:52:ae:6d:67:66:ee:6f:82:91:6c:97:ea:2f:5c: de:44:0f:79:75:c1:69:15:a9:82:a4:45:b3:9c:de:3f:f5:56: 19:7e:c2:40:cb:07:0e:34:23:de:d8:5b:2e:03:72:8e:14:d1: 58:df:a2:cc:54:76:5c:1e:8e:5c:ce:1a:be:8a:86:d2:87:3b: 7d:89:43:71:f2:b3:e3:bc:a4:74:25:d2:f1:3f:a2:ab:9b:f4: b7:a7:ea:11:09:2c:27:27:78:e1:12:5c:8e:60:2b:68:ce:93: 88:61:11:ff:66:5f:f7:5d:09:d5:6b:c7:b8:d1:ae:4a:f2:ca: d7:b6:84:d5:09:26:db:12:6d:4d:5b:dd:55:2a:30:66:ff:39: fc:76:e7:3a:6f:e0:cc:98:c7:96:82:e6:a9:1b:7a:10:89:4e: 22:d7:4f:14:82:24:a3:22:0b:1f:fe:32:1c:82:4d:dc:f6:22: ef:76:ac:2b:95:45:29:9e:00:37:80:a0:7d:06:85:3f:11:aa: c1:c4:12:cf:70:0b:f3:e7:b9:d2:da:1f:ad:b7:1b:e1:dc:e4: a9:0b:fa:ac:b9:cb:b6:4c:b0:85:43:12:6b:7a:b4:95:57:86: c4:1c:4a:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwNzE3MDM0ODU1WhcNMjYwNzI0MDM0ODU1WjAYMRYwFAYD VQQDEw02YTU5YTYyNy01NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxuNd9wy5RXklEpl5fOuDeckHW3ezY0/q7sATGqq4ujrorx+aR1qMhP1VHVD KbBl+h9q/88mvCao25R+RZvpNhv9WHZIMe8aIEARA/FYSOGJGC8ik44K7/AbZFfI 5+0Qk2/M7F/eD8QESr0rc3HzttrYJ+Zmc2WypDnUcSi+uHxtt8lfKqmfhYZoeF3R BpRTvfXmRg778ad62h5IKGuOr+WJcfNUgKM1FPe7D1i7d0CMypL/5ZZcXmg6u1gP KPAga/wqNF01U/WUOf5FvzWoQe07dvUaFFVaZL+zPRdZhn15Pgu4EVOnpjiI0l0U iwjT+MjlFLo4NFaq0/ZxgkIVRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM+rfym DzsSu3pz41i20I7GhmytMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdcq+R9KHGgfSCMseIUrg0ez4ThbcdFKubWdm7m+CkWyX6i9c3kQPeXXBaRWp gqRFs5zeP/VWGX7CQMsHDjQj3thbLgNyjhTRWN+izFR2XB6OXM4avoqG0oc7fYlD cfKz47ykdCXS8T+iq5v0t6fqEQksJyd44RJcjmAraM6TiGER/2Zf910J1WvHuNGu SvLK17aE1Qkm2xJtTVvdVSowZv85/HbnOm/gzJjHloLmqRt6EIlOItdPFIIkoyIL H/4yHIJN3PYi73asK5VFKZ4AN4CgfQaFPxGqwcQSz3AL8+e50tofrbcb4dzkqQv6 rLnLtkywhUMSa3q0lVeGxBxKxQ== -----END CERTIFICATE-----Generated at Sat Jul 18 17:05:21 2026 by rpki-client