$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: ccgQNQ+OZq/QBbtHWKQPVe1lBarz4OsVxYVGdjLjW6Q= Subject key identifier: 41:E2:83:A7:DB:23:64:34:97:C6:B1:6A:6D:A6:D5:E2:63:40:3F:97 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: 01CB Signing time: Wed 19 Aug 2026 04:23:50 +0000 Manifest this update: Wed 19 Aug 2026 04:23:49 +0000 Manifest next update: Wed 26 Aug 2026 04:23:49 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: XAeYNsX5nPERUSeuHZ5ftKuIAdcYk8mYYUYD5W5Jnno=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: DnFLfRNolDS9uaJNFyfTk6IoS5wsIvFbDILScGzhK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Aug 19 04:23:49 2026 GMT Not After : Aug 26 04:23:49 2026 GMT Subject: CN=6a852fd6-f321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:31:5d:1a:24:63:13:3e:72:f3:62:71:68:29: 34:b4:56:c5:86:6a:9b:b6:64:90:cb:7d:82:28:b8: 6a:30:ce:e6:9f:3f:87:2b:8c:ce:91:4a:4f:9a:84: a3:75:c5:77:b3:bd:9d:45:a2:0e:80:d8:ce:62:bd: d0:c8:b4:5f:b2:44:26:16:70:1d:0a:15:48:c2:97: d0:59:84:e0:88:af:50:6d:09:ce:1a:c5:43:2e:d2: 5e:11:12:34:39:1b:1c:b3:6f:c0:2f:06:98:f7:07: 11:d7:d3:77:98:e7:e0:90:84:bf:b7:e2:af:e6:e7: 44:f2:39:fb:4e:00:d7:20:f7:2b:07:d7:86:d1:8e: 13:68:95:41:33:79:8e:06:61:bf:66:32:4f:ee:d2: bb:dd:61:c8:af:92:15:e8:6c:22:7b:1e:e2:2f:0f: 3e:26:3d:fa:1f:04:a8:cf:ba:34:67:44:08:a8:84: 71:e5:17:a2:a9:55:3b:d8:36:e3:08:8c:70:1a:86: a9:64:1e:4a:4a:cf:91:ba:49:ab:58:0c:54:48:b7: 52:e6:07:31:47:26:bb:8e:90:b3:d0:2b:07:42:d6: c1:62:07:00:6f:80:93:25:42:0d:90:9c:df:5b:f8: 4c:f6:7d:ce:c0:04:62:41:d0:7e:27:22:84:8f:7b: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E2:83:A7:DB:23:64:34:97:C6:B1:6A:6D:A6:D5:E2:63:40:3F:97 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:56:11:ab:f9:0d:ad:0f:75:c7:76:c5:bb:a1:f9:6d:f2:a3: 85:67:c0:20:e6:72:44:aa:8b:90:36:64:07:7f:b8:1b:b2:46: c4:6b:73:0c:31:60:cf:84:83:10:c5:b2:32:32:13:0e:5e:4c: 2c:93:f7:b4:fa:36:c2:a0:fd:7a:c8:a3:92:33:6e:a9:a7:20: ea:d3:3b:17:2b:35:37:d5:da:08:0e:2d:cf:5e:02:8d:8c:d7: 51:89:36:9f:ee:67:d8:05:87:1e:5a:ce:83:df:d8:ed:7a:a0: c1:b3:90:fd:15:fb:6d:7a:d4:08:be:17:a1:da:27:84:22:b1: a8:39:f5:cb:bf:a6:2f:3f:8b:1f:9f:b6:a3:bf:d0:4a:e3:b8: c5:fc:dd:9d:83:e6:20:4a:b3:64:b5:96:69:c7:5d:de:23:48: 3d:74:72:3a:d1:bc:ec:48:91:1d:65:a5:83:75:63:14:0b:30: 2d:45:d9:8e:ea:5f:55:e3:e3:9f:91:2a:98:5f:28:53:6f:01: 3d:1e:ea:0e:18:5b:22:97:d8:71:2e:a4:5d:5d:5a:c2:64:66: 48:66:a7:3f:55:1a:ef:28:65:ff:70:be:73:ca:30:68:5d:61: 51:08:37:71:bb:ce:42:f3:df:9a:df:e5:27:31:7d:47:3c:de: 5b:26:c1:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjYwODE5MDQyMzQ5WhcNMjYwODI2MDQyMzQ5WjAYMRYwFAYD VQQDEw02YTg1MmZkNi1mMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TFdGiRjEz5y82JxaCk0tFbFhmqbtmSQy32CKLhqMM7mnz+HK4zOkUpPmoSj dcV3s72dRaIOgNjOYr3QyLRfskQmFnAdChVIwpfQWYTgiK9QbQnOGsVDLtJeERI0 ORscs2/ALwaY9wcR19N3mOfgkIS/t+Kv5udE8jn7TgDXIPcrB9eG0Y4TaJVBM3mO BmG/ZjJP7tK73WHIr5IV6Gwiex7iLw8+Jj36HwSoz7o0Z0QIqIRx5ReiqVU72Dbj CIxwGoapZB5KSs+RukmrWAxUSLdS5gcxRya7jpCz0CsHQtbBYgcAb4CTJUINkJzf W/hM9n3OwARiQdB+JyKEj3sATQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHig6fb I2Q0l8axam2m1eJjQD+XMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlYRq/kNrQ91x3bFu6H5bfKjhWfAIOZyRKqLkDZkB3+4G7JGxGtzDDFgz4SD EMWyMjITDl5MLJP3tPo2wqD9esijkjNuqacg6tM7Fys1N9XaCA4tz14CjYzXUYk2 n+5n2AWHHlrOg9/Y7XqgwbOQ/RX7bXrUCL4XodonhCKxqDn1y7+mLz+LH5+2o7/Q SuO4xfzdnYPmIEqzZLWWacdd3iNIPXRyOtG87EiRHWWlg3VjFAswLUXZjupfVePj n5EqmF8oU28BPR7qDhhbIpfYcS6kXV1awmRmSGanP1Ua7yhl/3C+c8owaF1hUQg3 cbvOQvPfmt/lJzF9RzzeWybBWg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:39 2026 by rpki-client