$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: dzeV4kWmCSArl7vto8PryAPojX4/fXfrKEGMMt9ZlWk= Subject key identifier: 80:D7:93:F7:2B:19:97:3F:C3:0B:74:7B:81:24:F4:7C:57:7A:61:CF Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0FB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F4C Signing time: Fri 28 Aug 2026 17:39:27 +0000 Manifest this update: Fri 28 Aug 2026 17:39:27 +0000 Manifest next update: Fri 04 Sep 2026 17:39:27 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: JicE99mSwa/Q6Rukjucxz0XUq37i64wjHuAfmkuC+sc=) 2: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: aZPZjU2X9q7Uezgbc+/YwtYMqbcTXMspTEvxkBuOs1c=) 3: UekbYDpQxrYo0CAiaXiBXjiYX7Y.asa (hash: 35cN/LTsr4AjmNFcJwEXa21fvMZF8t50qcF2L+i5uRs=) 4: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: w5d0LH96WqLLdOjMnBfiuhx00FMURmhDRlkPHPYAqNM=) 5: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: fWUBv/Gp2qw1UZEr3XjxQsuXEeaBLIJR0Xh74UCm7Ts=) 6: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: Ja4/CMw03eHsoSI1SxDv/gmDoWhVR1WIiVpoLLzR9uI=) 7: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: 9k8Fht4Br+99Bt5Yrwgpw9dr0xvUubqA6YyCzt85eWA=) 8: 10E905682CCE11F1BB1925E192833773.roa (hash: HkIXrKm45gEIaL69eK9NolITOExBggdE2/CFBbaKfNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 17:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4023 (0xfb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Aug 28 17:39:27 2026 GMT Not After : Sep 4 17:39:27 2026 GMT Subject: CN=6a91c7cf-ab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:71:62:19:e0:1e:21:99:b9:03:ba:b1:92: 40:3d:42:00:59:53:c1:04:52:54:c2:ea:98:83:7f: 60:78:c5:cc:cb:25:8c:65:b4:45:d2:92:4e:48:0a: 3b:a1:02:0e:e4:7d:c2:b6:68:fa:2f:d8:88:2a:fe: 65:83:3d:94:28:b3:4d:f3:27:8b:f6:99:49:77:a1: 43:4a:17:50:ce:77:a1:a4:c3:56:da:f5:97:f9:12: ba:dc:df:a8:b4:67:1c:88:f1:87:f0:30:fb:66:c4: ce:0d:70:cb:9f:1e:e7:82:75:07:5b:6f:4e:3d:17: 64:0d:09:28:ad:1b:98:a0:f2:f8:00:bb:3a:75:e0: 80:02:60:ca:b7:1f:05:9d:20:86:f6:87:27:7b:94: a0:4d:35:43:9e:46:70:92:ed:37:dd:16:da:4f:43: de:bf:27:5c:f7:e7:fc:1b:0e:22:43:96:d4:d5:77: 24:48:2c:83:a8:62:75:a2:9c:c7:cd:d9:3d:ec:2b: 38:75:aa:d8:ac:06:d9:bc:c8:7b:af:0d:13:f2:79: 34:8a:8c:a3:6a:44:08:16:e8:22:bb:1a:62:77:e2: f4:0d:b6:9b:b2:63:22:a1:54:a7:fa:de:d2:ab:d6: 49:21:e3:46:0d:cc:e1:01:3c:a2:b1:5f:bf:1e:e1: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:93:F7:2B:19:97:3F:C3:0B:74:7B:81:24:F4:7C:57:7A:61:CF X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:07:74:18:5f:cd:76:d4:66:18:26:48:e9:ad:78:a4:1a:d6: bb:4d:03:25:11:69:c9:3f:fd:a6:bc:e2:39:11:f4:2b:72:f2: e9:ae:df:82:79:5f:28:16:68:53:cd:20:df:cf:93:5d:98:af: 6b:a4:dd:55:86:6d:49:4c:c9:92:2e:76:4b:39:8a:54:ad:f5: 40:1a:74:a2:8a:5a:54:14:05:d9:e3:ee:51:9d:59:64:17:3d: 85:3d:da:f0:97:ab:46:b4:e8:fc:a0:8b:51:f4:15:ec:18:f1: 22:57:dc:31:ee:72:1a:4b:44:18:31:61:53:ac:8e:8e:3a:96: 80:2d:84:a3:8b:af:f4:66:9e:8f:22:07:65:5a:b6:72:b8:64: b7:62:e5:96:70:84:1b:73:a6:79:aa:06:cf:b1:06:19:3a:6b: 37:52:8c:5d:16:13:59:93:bf:85:61:9f:0c:a0:57:7b:00:8c: ac:41:d2:99:29:cb:8b:5d:a8:71:ea:8e:a9:2b:70:e5:56:20: a4:d6:0b:85:c5:83:fe:e9:58:4f:5f:9a:87:02:ab:94:74:4f: 18:54:27:b2:ab:83:c8:8e:b9:ce:a7:42:cb:a3:a6:8b:71:e8: a1:bc:27:a0:5b:da:24:b1:b4:1b:5f:d2:36:e3:bb:4c:62:d7: 61:fd:69:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwODI4MTczOTI3WhcNMjYwOTA0MTczOTI3WjAYMRYwFAYD VQQDEw02YTkxYzdjZi1hYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmJxYhngHiGZuQO6sZJAPUIAWVPBBFJUwuqYg39geMXMyyWMZbRF0pJOSAo7 oQIO5H3Ctmj6L9iIKv5lgz2UKLNN8yeL9plJd6FDShdQznehpMNW2vWX+RK63N+o tGcciPGH8DD7ZsTODXDLnx7ngnUHW29OPRdkDQkorRuYoPL4ALs6deCAAmDKtx8F nSCG9ocne5SgTTVDnkZwku033RbaT0Pevydc9+f8Gw4iQ5bU1XckSCyDqGJ1opzH zdk97Cs4darYrAbZvMh7rw0T8nk0ioyjakQIFugiuxpid+L0DbabsmMioVSn+t7S q9ZJIeNGDczhATyisV+/HuHSnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDXk/cr GZc/wwt0e4Ek9HxXemHPMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwd0GF/NdtRmGCZI6a14pBrWu00DJRFpyT/9prziORH0K3Ly6a7fgnlfKBZo U80g38+TXZiva6TdVYZtSUzJki52SzmKVK31QBp0oopaVBQF2ePuUZ1ZZBc9hT3a 8JerRrTo/KCLUfQV7BjxIlfcMe5yGktEGDFhU6yOjjqWgC2Eo4uv9GaejyIHZVq2 crhkt2LllnCEG3OmeaoGz7EGGTprN1KMXRYTWZO/hWGfDKBXewCMrEHSmSnLi12o ceqOqStw5VYgpNYLhcWD/ulYT1+ahwKrlHRPGFQnsquDyI65zqdCy6Omi3Hoobwn oFvaJLG0G1/SNuO7TGLXYf1pZQ== -----END CERTIFICATE-----Generated at Sat Aug 29 08:53:41 2026 by rpki-client