$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: //9I1IiQ5cYQSc4r1w+IyfDqv7xgeXpxhhIAxF6ZRpI= Subject key identifier: E4:4C:61:76:9B:59:7A:C9:20:09:63:33:B0:71:B3:F9:97:D0:3A:B1 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 062D Signing time: Tue 22 Sep 2026 22:29:29 +0000 Manifest this update: Tue 22 Sep 2026 22:29:29 +0000 Manifest next update: Tue 29 Sep 2026 22:29:29 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: He6/z4rArQ0WrIspdpnjqDP7Bowv0URgfIAlUTirjJA=) 2: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=) 3: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Sep 22 22:29:29 2026 GMT Not After : Sep 29 22:29:29 2026 GMT Subject: CN=6ab30149-141b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:bd:06:22:a3:42:44:f1:f8:db:4a:aa:11: 1a:13:c7:d4:cd:da:89:9a:79:3a:5f:7a:aa:96:ab: b9:d7:24:3d:e3:39:e9:cb:40:32:a2:15:ee:e9:1b: b6:92:60:7b:11:2c:8d:1d:8d:84:84:39:58:6f:f0: 49:df:76:42:9e:db:e3:75:4a:bc:01:9a:2e:db:03: e9:78:8b:ee:69:da:71:43:93:d9:0f:2d:ec:cc:c3: b5:8d:ce:7a:35:ff:de:f6:99:2c:71:1d:93:fd:b7: b7:cb:c6:4a:ae:2b:d1:b6:a2:ef:41:10:8a:15:f3: 53:8f:66:49:19:32:21:2d:fa:78:d7:9d:a4:87:2a: 72:60:48:2e:28:01:a8:74:ba:4f:3f:6e:97:b6:4f: 1e:2e:cf:d5:da:2f:76:f3:72:67:3a:6c:d1:0d:87: 94:27:27:8e:08:43:a8:e3:02:30:0b:31:c1:25:5c: 91:84:5b:cc:e9:c8:1d:b7:69:f6:07:0f:28:31:d1: 06:d3:3f:4a:60:2e:92:9a:7e:b0:20:40:a5:9c:a6: 70:2e:bb:b3:3f:6e:d1:0e:05:16:d8:ae:3d:bf:b2: 0b:04:5e:fa:73:bc:0c:bb:da:71:55:bb:f0:64:45: 4f:62:48:2d:dc:b9:0a:29:e6:f7:8e:0a:f8:53:db: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:61:76:9B:59:7A:C9:20:09:63:33:B0:71:B3:F9:97:D0:3A:B1 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2f:60:1b:d2:e1:ea:b4:d6:f9:9a:08:d9:7a:6b:3f:74:db: 22:bd:bb:4c:75:60:09:72:33:0b:21:f5:c0:57:f6:a7:12:d7: 7a:e4:8e:c5:56:5d:1c:16:0a:a1:b5:21:23:3b:a1:a7:74:63: d7:cc:28:85:45:84:35:67:a4:72:8a:5c:a2:ad:20:c8:85:61: 27:3f:aa:48:4f:a7:0d:36:8e:be:1d:67:43:10:ea:48:a0:5b: 22:69:95:0e:ff:99:a4:05:4c:32:e7:92:12:9c:5a:73:e2:29: 46:98:8e:71:1c:6f:18:97:0f:64:85:b4:78:af:22:80:80:26: af:59:db:4e:83:11:59:7c:ba:ff:70:22:a9:9b:53:46:e8:0e: 1c:3a:96:55:ea:aa:c7:02:a1:1d:5e:79:1f:bd:10:9e:a5:f9: 48:ed:37:6a:1f:9a:d6:ba:1c:c3:2f:1c:53:ca:e3:64:57:9e: 3f:05:82:85:03:cd:72:ec:49:7a:e0:bf:53:5d:76:4d:6f:fa: bf:4e:f3:83:a7:8e:fa:18:16:47:29:6d:fc:75:81:df:28:da: 50:be:8e:8b:40:79:a0:0b:0a:4f:92:11:49:1c:fa:00:7a:41: 63:d7:61:38:fd:72:78:cd:ef:ec:5c:72:32:df:c8:e0:d3:cb: 5d:a1:12:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjYwOTIyMjIyOTI5WhcNMjYwOTI5MjIyOTI5WjAYMRYwFAYD VQQDEw02YWIzMDE0OS0xNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMW9BiKjQkTx+NtKqhEaE8fUzdqJmnk6X3qqlqu51yQ94znpy0AyohXu6Ru2 kmB7ESyNHY2EhDlYb/BJ33ZCntvjdUq8AZou2wPpeIvuadpxQ5PZDy3szMO1jc56 Nf/e9pkscR2T/be3y8ZKrivRtqLvQRCKFfNTj2ZJGTIhLfp4152khypyYEguKAGo dLpPP26Xtk8eLs/V2i9283JnOmzRDYeUJyeOCEOo4wIwCzHBJVyRhFvM6cgdt2n2 Bw8oMdEG0z9KYC6Smn6wIEClnKZwLruzP27RDgUW2K49v7ILBF76c7wMu9pxVbvw ZEVPYkgt3LkKKeb3jgr4U9vVxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORMYXab WXrJIAljM7Bxs/mX0DqxMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFC9gG9Lh6rTW+ZoI2XprP3TbIr27THVgCXIzCyH1wFf2pxLXeuSOxVZdHBYK obUhIzuhp3Rj18wohUWENWekcopcoq0gyIVhJz+qSE+nDTaOvh1nQxDqSKBbImmV Dv+ZpAVMMueSEpxac+IpRpiOcRxvGJcPZIW0eK8igIAmr1nbToMRWXy6/3AiqZtT RugOHDqWVeqqxwKhHV55H70QnqX5SO03ah+a1rocwy8cU8rjZFeePwWChQPNcuxJ euC/U112TW/6v07zg6eO+hgWRylt/HWB3yjaUL6Oi0B5oAsKT5IRSRz6AHpBY9dh OP1yeM3v7FxyMt/I4NPLXaESYw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:50 2026 by rpki-client