$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json) Hash identifier: /VmBKq9PdKQcRPP71E8BGO0mjfA1/4gGVgl2zD9VEJM= Subject key identifier: BE:BB:87:CC:7C:BB:15:7D:B4:D2:6D:DD:69:78:92:0F:F8:70:FB:04 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 3579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft Manifest number: 356A Signing time: Mon 20 Jul 2026 14:54:19 +0000 Manifest this update: Mon 20 Jul 2026 14:54:19 +0000 Manifest next update: Mon 27 Jul 2026 14:54:19 +0000 Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: tbGIH5SOmsoXcz7qUDtMX55Zazq2rmehXqQ/ISGfmGM=) 2: 62D956E4706B11F1BCF9211474A30FBC.roa (hash: qIR0Cnf/Tw3jmEWlP5g5lhVl5hdbItrkQSAnuy1RWvs=) 3: F5223048791711F195779BF068A30FBC.roa (hash: Ip9KlCOMbvhc6/B4kC7ZdY9+c9TB/U/rlC7Je99Icbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13689 (0x3579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Jul 20 14:54:19 2026 GMT Not After : Jul 27 14:54:19 2026 GMT Subject: CN=6a5e369b-2c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:c7:26:d3:11:e3:ca:b2:06:b5:71:08:4a: 00:81:0d:27:66:cd:16:b3:8e:59:72:83:90:cb:2e: 18:2d:6c:39:cb:0c:70:72:61:56:1a:4f:7b:0c:16: 19:2f:d3:9a:c8:d5:93:3f:e7:47:48:39:84:da:dc: 82:7b:6d:b3:11:7d:46:97:f2:7e:d5:e8:0c:18:c2: 63:59:3c:26:fc:57:82:1e:61:3a:4f:1b:5f:c0:01: 4e:c4:b4:91:2c:50:6d:bb:2b:b3:b1:22:ce:b6:4b: ae:76:53:cb:19:9f:b0:bf:6e:4c:4e:3f:03:ad:bb: ef:32:e0:a1:46:46:ed:bd:c5:d3:58:c8:3c:79:d1: 48:88:cb:df:76:a4:2a:8d:24:1f:fb:34:dc:3d:90: 5b:31:c1:77:51:e1:0b:43:11:a0:f0:61:51:25:36: 05:0f:79:08:d3:1c:e2:51:3f:d4:ea:55:01:39:9d: 03:a6:0e:d2:e3:9c:03:af:06:10:cb:0a:94:94:32: 71:57:19:fd:b0:0c:c7:c1:71:21:c7:b4:c1:d6:9c: 7c:98:95:60:3c:7e:eb:31:e5:d8:76:47:2e:0a:31: c0:12:41:29:b6:6d:ca:f9:3e:dc:d2:c7:3f:85:12: 38:e4:eb:fb:69:d5:84:78:e6:3f:4f:cc:0b:8b:51: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:87:CC:7C:BB:15:7D:B4:D2:6D:DD:69:78:92:0F:F8:70:FB:04 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:93:85:9f:8f:fe:fc:0f:eb:0e:66:fd:2c:f7:f5:55:ca: a8:c7:cd:5f:20:34:f1:de:5c:54:22:4c:2b:1d:f7:19:77:df: 78:21:d4:8a:8b:31:3c:ea:88:76:e2:81:07:ef:ab:13:23:48: cb:9a:3f:a4:a5:1b:df:f0:ac:86:1f:fc:7d:b0:9c:7b:f6:10: 5d:a0:f4:cf:f9:f9:26:19:22:07:50:e9:f1:38:23:68:8d:25: 32:90:c5:63:04:95:dd:ee:0e:98:4e:a3:d0:17:74:20:78:33: 15:b3:1c:85:aa:70:4c:f3:b3:9d:c3:14:c9:9d:06:97:39:8a: 66:32:f2:e6:b5:f9:22:bb:3c:2c:67:be:b9:3c:4d:58:13:32: 53:b8:df:15:24:00:e1:21:d6:4b:2e:8a:ed:13:8b:1a:53:14: 95:68:0a:fe:90:95:13:8c:29:d5:0e:e6:b6:e7:18:e3:16:05: f1:77:0d:40:0e:9c:b3:e2:a8:28:3b:b7:e4:59:31:79:bc:a0: 1d:85:2b:eb:a3:a3:ab:fb:50:52:2f:9d:68:19:94:c0:eb:27: 30:bd:e7:a8:d8:8a:19:8d:8d:a5:07:a9:0d:64:06:54:5f:cf: 70:f4:85:7c:36:7a:4d:bf:58:0b:39:ce:f1:f1:62:e1:6c:74: 81:cb:b2:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYwNzIwMTQ1NDE5WhcNMjYwNzI3MTQ1NDE5WjAYMRYwFAYD VQQDEw02YTVlMzY5Yi0yYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcnHJtMR48qyBrVxCEoAgQ0nZs0Ws45ZcoOQyy4YLWw5ywxwcmFWGk97DBYZ L9OayNWTP+dHSDmE2tyCe22zEX1Gl/J+1egMGMJjWTwm/FeCHmE6TxtfwAFOxLSR LFBtuyuzsSLOtkuudlPLGZ+wv25MTj8DrbvvMuChRkbtvcXTWMg8edFIiMvfdqQq jSQf+zTcPZBbMcF3UeELQxGg8GFRJTYFD3kI0xziUT/U6lUBOZ0Dpg7S45wDrwYQ ywqUlDJxVxn9sAzHwXEhx7TB1px8mJVgPH7rMeXYdkcuCjHAEkEptm3K+T7c0sc/ hRI45Ov7adWEeOY/T8wLi1E0pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL67h8x8 uxV9tNJt3Wl4kg/4cPsEMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91 Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdmThZ+P/vwP6w5m/Sz39VXKqMfNXyA08d5cVCJMKx33GXffeCHUiosxPOqI duKBB++rEyNIy5o/pKUb3/Cshh/8fbCce/YQXaD0z/n5JhkiB1Dp8TgjaI0lMpDF YwSV3e4OmE6j0Bd0IHgzFbMchapwTPOzncMUyZ0GlzmKZjLy5rX5Irs8LGe+uTxN WBMyU7jfFSQA4SHWSy6K7ROLGlMUlWgK/pCVE4wp1Q7mtucY4xYF8XcNQA6cs+Ko KDu35FkxebygHYUr66Ojq/tQUi+daBmUwOsnML3nqNiKGY2NpQepDWQGVF/PcPSF fDZ6Tb9YCznO8fFi4Wx0gcuyfA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:34:56 2026 by rpki-client