$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft File: KJS89-I5RAOCbTtLS4B6RKekFoI.mft (raw, json) Hash identifier: yXmSeiRMfv3vZveoZ7GVy7mf35mRfhZaQyCMZ+00+hg= Subject key identifier: 55:4D:82:BB:B8:A0:9B:D7:50:90:BF:2C:8C:EA:7F:9C:4A:8C:EF:43 Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft Manifest number: 0E Signing time: Wed 05 Aug 2026 10:54:03 +0000 Manifest this update: Wed 05 Aug 2026 10:54:02 +0000 Manifest next update: Wed 12 Aug 2026 10:54:02 +0000 Files and hashes: 1: KJS89-I5RAOCbTtLS4B6RKekFoI.crl (hash: Lsq6hpNTNdRzFKooulBIalB2w8AP7mdtefxO6zN3iPs=) 2: 35BF0DAA84B811F1831C967990A30FBC.roa (hash: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=) 3: 2A71D75884B211F18866DC898FA30FBC.roa (hash: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 10:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Aug 5 10:54:02 2026 GMT Not After : Aug 12 10:54:02 2026 GMT Subject: CN=6a73164a-c196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:c7:4b:dd:8b:d8:25:70:16:fd:a6:76:e5: 85:e0:7a:cd:d7:65:0b:b6:96:95:49:c1:cc:d2:d4: 7d:a6:dd:83:03:cd:41:75:ea:fc:c0:00:01:0d:2d: 87:ad:79:7b:f6:e2:73:c2:95:4f:48:d4:19:45:95: c6:bf:c7:26:23:f4:11:8c:79:9b:0a:86:90:1c:2d: b5:38:49:f3:65:00:d0:de:6f:28:68:b5:59:6c:3c: 53:8d:fe:b3:f5:09:b8:f8:f4:82:ec:5d:e8:3e:58: 11:ce:de:db:6e:66:1a:8a:19:b0:af:3f:9b:e1:bd: 7d:4a:53:5e:30:17:cf:e9:88:49:73:36:ca:59:19: 32:cf:4d:dc:02:da:c4:bf:d0:cd:aa:34:85:3c:43: 3b:e4:1e:f1:2e:79:18:cf:be:82:12:0f:72:1a:7f: 86:f8:4a:20:b0:b9:62:71:21:18:4d:b2:58:57:75: 13:2a:e8:e5:17:d8:59:8c:62:27:69:04:e4:03:c3: 63:ee:0f:fc:98:d6:5a:3d:05:3b:57:25:ec:57:20: 6a:d9:86:c8:48:7a:a6:23:27:9f:8e:7a:c6:9d:fc: b8:c3:be:41:83:69:da:0f:94:db:1a:4b:55:5f:32: f3:1e:1a:f0:af:ac:9d:ed:88:67:4b:c5:88:f8:3a: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4D:82:BB:B8:A0:9B:D7:50:90:BF:2C:8C:EA:7F:9C:4A:8C:EF:43 X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e9:56:02:20:4a:57:40:32:a8:5b:00:a2:b0:cd:2d:7f:57: d4:14:b5:a5:ad:eb:38:21:a9:52:0f:7d:98:62:fe:48:81:b2: 02:08:c4:11:b0:3e:2b:ca:ed:34:0d:f4:33:99:8b:c3:12:9e: 99:30:c8:de:76:6c:97:99:43:7c:1e:00:1d:1a:61:e9:07:3c: d0:4a:8d:c7:7e:a6:a5:ba:9b:e1:2c:74:fb:45:2c:06:e3:0b: ee:93:4f:77:8d:26:c1:9c:88:1f:02:6a:ae:cb:b4:e1:32:6e: c5:ad:ea:ca:d3:bb:31:32:bb:2a:d0:33:cc:0e:78:75:70:99: 0b:34:c6:a4:48:06:9c:a1:9d:7c:45:30:28:e2:05:6b:25:d9: 2d:cc:7b:5a:f0:cf:96:75:d6:11:33:30:03:92:09:ba:90:1f: bd:90:a7:05:1b:e5:33:eb:71:8e:d0:0f:6d:91:8e:d0:96:1c: 1e:c2:ef:71:82:e5:9e:65:55:03:3f:97:54:fa:b4:f8:dc:d4: 26:bf:ed:39:dd:4f:ba:ba:6b:82:69:5e:c9:cf:b2:f1:9a:6f: 54:14:82:9d:24:b0:2b:38:a9:10:97:e5:19:0a:bb:69:11:02: e8:1a:02:b7:1f:3c:9d:d2:32:49:95:63:2d:05:3c:46:8e:9b: 3b:88:99:ce -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA4MDUxMDU0MDJaFw0yNjA4MTIxMDU0MDJaMBgxFjAUBgNV BAMTDTZhNzMxNjRhLWMxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPXMdL3YvYJXAW/aZ25YXges3XZQu2lpVJwczS1H2m3YMDzUF16vzAAAENLYet eXv24nPClU9I1BlFlca/xyYj9BGMeZsKhpAcLbU4SfNlANDebyhotVlsPFON/rP1 Cbj49ILsXeg+WBHO3ttuZhqKGbCvP5vhvX1KU14wF8/piElzNspZGTLPTdwC2sS/ 0M2qNIU8QzvkHvEueRjPvoISD3Iaf4b4SiCwuWJxIRhNslhXdRMq6OUX2FmMYidp BOQDw2PuD/yY1lo9BTtXJexXIGrZhshIeqYjJ5+Oesad/LjDvkGDadoPlNsaS1Vf MvMeGvCvrJ3tiGdLxYj4OkJpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVU2Cu7ig m9dQkL8sjOp/nEqM70MwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUVELzczNjRGMTBDODE1NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFP Q2JUdExTNEI2Uktla0ZvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCw6VYCIEpXQDKoWwCisM0tf1fUFLWlres4IalSD32YYv5IgbICCMQRsD4ryu00 DfQzmYvDEp6ZMMjedmyXmUN8HgAdGmHpBzzQSo3HfqalupvhLHT7RSwG4wvuk093 jSbBnIgfAmquy7ThMm7FrerK07sxMrsq0DPMDnh1cJkLNMakSAacoZ18RTAo4gVr JdktzHta8M+WddYRMzADkgm6kB+9kKcFG+Uz63GO0A9tkY7Qlhwewu9xguWeZVUD P5dU+rT43NQmv+053U+6umuCaV7Jz7Lxmm9UFIKdJLArOKkQl+UZCrtpEQLoGgK3 Hzyd0jJJlWMtBTxGjps7iJnO -----END CERTIFICATE-----Generated at Thu Aug 6 20:53:39 2026 by rpki-client