$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: m+8okN4NYbI2e3sUo1FL3mzCAmXq4+vsOyQhjNKMnc8= Subject key identifier: 0E:0B:47:0A:5A:16:99:DB:3D:C9:8C:42:B9:82:38:7D:5D:2A:62:F9 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 29 Signing time: Fri 17 Jul 2026 10:06:59 +0000 Manifest this update: Fri 17 Jul 2026 10:06:58 +0000 Manifest next update: Fri 24 Jul 2026 10:06:58 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: H5ZtlfKUovnhMW9LL1hCsOgyy9zq1UFUJCI7ZCk1pUk=) 2: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) 3: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Jul 17 10:06:58 2026 GMT Not After : Jul 24 10:06:58 2026 GMT Subject: CN=6a59fec2-fb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:33:2c:64:82:77:c4:69:7a:36:b2:f6:0c: b1:09:10:1c:4e:9f:86:55:a4:3d:9f:3c:47:e4:a8: 73:d9:e2:ed:4d:6d:35:a0:44:8c:35:63:f4:77:48: 05:9c:67:5f:cc:d4:ef:38:43:2a:a0:1d:9f:bb:3c: 1f:ed:55:67:cc:f2:7c:c2:a3:d1:21:d1:27:22:a3: 4a:30:a8:c9:76:9e:a4:6b:7b:34:d6:4d:75:fb:5f: 82:54:2e:9e:e2:35:4a:3e:5f:0e:31:3d:db:6b:fb: c0:22:df:33:54:af:6c:a4:a1:63:e1:4e:3e:fe:2e: 45:ef:4d:4e:93:3f:45:e9:cf:8e:4f:6e:1a:6c:71: d5:32:02:86:80:60:cf:0a:25:88:34:1b:f5:c1:11: de:e5:cc:89:42:cf:03:da:aa:a7:5c:8d:41:79:cb: 5a:a0:65:23:b5:53:6d:bb:15:95:c3:24:ad:f1:67: 2d:9c:7b:26:ff:da:19:43:56:19:fa:b4:a0:d3:5c: cf:33:9c:07:dd:81:b1:4d:f1:8e:94:f5:7d:3f:a3: 1d:a0:72:87:45:fa:05:b2:dc:96:ab:cc:9a:e6:e3: 78:1b:9a:43:d6:dc:0b:c9:1d:60:87:51:e5:83:6a: 37:c2:62:2f:32:33:70:8a:b8:d7:e1:a8:b5:bf:d1: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:47:0A:5A:16:99:DB:3D:C9:8C:42:B9:82:38:7D:5D:2A:62:F9 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:1e:95:18:46:59:94:a5:40:d5:c3:90:79:29:72:03:58:a8: b5:ee:9b:26:c1:15:d8:3c:74:3b:f3:c7:99:b4:df:93:c6:75: cd:f9:6a:93:b1:be:6a:27:fe:68:dc:51:a8:67:04:bc:02:85: 83:31:43:a3:84:99:44:47:49:84:ba:f6:4e:eb:55:97:55:27: 48:65:0a:b9:52:96:10:ae:12:35:48:e5:ec:d3:de:45:6a:d9: 93:cc:c6:ea:d7:36:25:9a:6f:b9:d0:01:4b:22:23:09:1b:46: 7a:2e:02:70:64:d0:2b:aa:ed:51:84:9f:3a:44:3a:f6:d4:42: 48:55:18:dd:d1:26:80:ce:49:74:b7:69:91:56:fc:14:33:08: ac:1e:8a:3c:8a:fa:34:c4:08:f3:71:51:72:30:0c:6f:de:0d: f7:b5:f0:7d:94:78:d9:85:74:af:a1:0d:e8:c8:2b:f5:1a:10: 0f:14:49:c8:66:e9:b5:51:c5:02:3e:ba:24:1c:e5:d8:45:50: 3b:8c:87:2b:35:6a:31:56:60:01:e7:4d:ae:4d:09:9c:a7:14: 2f:0c:ae:cb:36:b1:58:02:70:13:26:9b:ed:35:3c:b5:9f:e6: 95:cd:53:d0:2c:1d:87:d0:56:60:77:02:65:d8:f8:9b:3c:f9: 05:40:9b:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA3MTcxMDA2NThaFw0yNjA3MjQxMDA2NThaMBgxFjAUBgNV BAMTDTZhNTlmZWMyLWZiN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTjjMsZIJ3xGl6NrL2DLEJEBxOn4ZVpD2fPEfkqHPZ4u1NbTWgRIw1Y/R3SAWc Z1/M1O84QyqgHZ+7PB/tVWfM8nzCo9Eh0Scio0owqMl2nqRrezTWTXX7X4JULp7i NUo+Xw4xPdtr+8Ai3zNUr2ykoWPhTj7+LkXvTU6TP0Xpz45PbhpscdUyAoaAYM8K JYg0G/XBEd7lzIlCzwPaqqdcjUF5y1qgZSO1U227FZXDJK3xZy2ceyb/2hlDVhn6 tKDTXM8znAfdgbFN8Y6U9X0/ox2gcodF+gWy3JarzJrm43gbmkPW3AvJHWCHUeWD ajfCYi8yM3CKuNfhqLW/0SbbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDgtHCloW mds9yYxCuYI4fV0qYvkwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC3HpUYRlmUpUDVw5B5KXIDWKi17psmwRXYPHQ788eZtN+TxnXN+WqTsb5qJ/5o 3FGoZwS8AoWDMUOjhJlER0mEuvZO61WXVSdIZQq5UpYQrhI1SOXs095FatmTzMbq 1zYlmm+50AFLIiMJG0Z6LgJwZNArqu1RhJ86RDr21EJIVRjd0SaAzkl0t2mRVvwU MwisHoo8ivo0xAjzcVFyMAxv3g33tfB9lHjZhXSvoQ3oyCv1GhAPFEnIZum1UcUC ProkHOXYRVA7jIcrNWoxVmAB502uTQmcpxQvDK7LNrFYAnATJpvtNTy1n+aVzVPQ LB2H0FZgdwJl2PibPPkFQJuB -----END CERTIFICATE-----Generated at Sat Jul 18 03:30:05 2026 by rpki-client