$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft File: Knm5FIbofS1169kQvW5xlzfdglk.mft (raw, json) Hash identifier: 5y5BzdjAXUKXfH3rVzHaLxCTspjrOlHB2MmJEoZ6kiQ= Subject key identifier: 6B:E8:B0:D8:CF:E9:3F:37:67:EE:33:8C:D3:82:A7:30:95:EA:76:39 Authority key identifier: 2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59 Certificate issuer: /CN=A911B432/serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft Manifest number: 1E Signing time: Sun 11 Oct 2026 09:38:19 +0000 Manifest this update: Sun 11 Oct 2026 09:38:19 +0000 Manifest next update: Sun 18 Oct 2026 09:38:19 +0000 Files and hashes: 1: Knm5FIbofS1169kQvW5xlzfdglk.crl (hash: 7rPIbYuT5+oZOKRa1IwFF3u6VCa31ewdr72oFVt8I7c=) 2: BB1FA2F09F7C11F1B87752203B11F970.roa (hash: IAfsBvQacuhtNdOUREbUyMQwJzL25wN9OZvl4YWyX9c=) 3: 72EFC76C9F7C11F1ADDC3D1C3B11F970.roa (hash: stcwTILI7jYqbP/8Ad56tb/Lm2uiKLB+57zQTKtqH80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B432, serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259 Validity Not Before: Oct 11 09:38:19 2026 GMT Not After : Oct 18 09:38:19 2026 GMT Subject: CN=6acb590b-3090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:aa:bf:82:01:f8:5c:43:19:f7:c2:fb:b2: 77:3f:78:e9:38:8a:26:44:24:74:9e:1e:d7:fc:86: 9d:22:b7:b0:aa:b1:4d:e5:31:36:54:c3:ee:7f:9b: 05:93:c7:bd:fc:2f:54:f5:1c:86:91:80:db:16:a3: e5:11:96:bc:a8:f6:39:98:c8:e1:e8:9b:4b:c5:3b: a2:ae:3b:34:c2:ba:03:23:81:81:90:28:1b:ef:d3: ea:1e:71:0e:9a:95:e1:91:da:8b:d3:17:d9:be:e5: 59:22:34:69:7c:5a:ce:4d:b2:2d:61:c5:b9:be:99: dc:77:41:3d:b7:4e:e6:08:30:be:95:0b:23:0a:5a: df:05:55:f0:96:d7:68:60:e4:b7:46:15:55:21:62: 8e:c0:83:c4:80:f0:82:b4:26:00:76:60:aa:1b:61: 78:0f:b7:ed:dd:b7:c8:da:40:a9:a1:2f:f9:e3:cd: b7:70:9f:f9:e1:7d:57:5f:ae:ae:cf:b4:3e:ac:90: 94:1e:5e:97:b0:1f:17:af:a2:be:fe:c2:29:8e:28: e4:9c:8b:f0:25:85:6f:de:f2:26:5b:ee:68:95:50: 54:6b:33:f8:1c:c9:05:5e:86:39:bf:e2:24:13:7f: d5:1b:cc:19:41:84:a9:ed:e9:9c:32:92:8d:39:d5: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E8:B0:D8:CF:E9:3F:37:67:EE:33:8C:D3:82:A7:30:95:EA:76:39 X509v3 Authority Key Identifier: keyid:2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:50:d9:69:a3:11:11:fb:d6:49:e8:0a:b2:39:2a:0c:1e:0e: 31:91:f0:ee:53:74:49:44:43:1f:63:e5:65:64:7d:27:b5:e5: 28:ae:57:1c:d9:71:7f:20:9b:57:71:cd:95:58:3f:0c:6c:ba: a0:cd:b8:0d:99:9c:35:c8:0a:1e:b7:cb:26:8d:5b:12:4f:90: 00:93:68:0f:45:45:93:1c:71:02:6b:36:02:1e:c6:d2:8f:f0: cd:af:c5:e2:68:81:b6:f4:40:84:31:e9:a3:7e:fa:b3:05:44: 0a:55:01:0a:b7:94:4c:e5:fa:e5:e1:60:33:11:a3:d7:a6:ba: f7:7a:77:4a:1f:2b:52:b9:cc:89:5e:e3:be:5c:6d:24:ed:67: 80:8b:df:a2:b9:18:cc:a1:aa:da:91:a0:7f:2c:b7:28:f7:be: c1:37:da:94:c2:52:de:f4:0a:07:32:e9:02:82:a9:97:c5:02: 9f:8c:1e:18:04:3d:52:e2:c8:ee:90:2e:da:04:63:26:16:20: 6f:ce:06:d7:1e:36:8a:93:0b:f7:8d:45:c0:fb:60:e6:00:fb: 79:be:f6:94:8d:1b:d2:64:26:74:8c:10:cf:36:74:cb:83:d1: 6e:ed:4d:88:6b:2c:76:a1:f1:43:95:ad:ed:f0:68:78:8c:4b: 4b:ff:c4:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjQzMjExMC8GA1UEBRMoMkE3OUI5MTQ4NkU4N0QyRDc1RUJEOTEwQkQ2RTcxOTcz N0REODI1OTAeFw0yNjEwMTEwOTM4MTlaFw0yNjEwMTgwOTM4MTlaMBgxFjAUBgNV BAMTDTZhY2I1OTBiLTMwOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeMaq/ggH4XEMZ98L7snc/eOk4iiZEJHSeHtf8hp0it7CqsU3lMTZUw+5/mwWT x738L1T1HIaRgNsWo+URlryo9jmYyOHom0vFO6KuOzTCugMjgYGQKBvv0+oecQ6a leGR2ovTF9m+5VkiNGl8Ws5Nsi1hxbm+mdx3QT23TuYIML6VCyMKWt8FVfCW12hg 5LdGFVUhYo7Ag8SA8IK0JgB2YKobYXgPt+3dt8jaQKmhL/njzbdwn/nhfVdfrq7P tD6skJQeXpewHxevor7+wimOKOSci/AlhW/e8iZb7miVUFRrM/gcyQVehjm/4iQT f9UbzBlBhKnt6Zwyko051fN3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUa+iw2M/p Pzdn7jOM04KnMJXqdjkwHwYDVR0jBBgwFoAUKnm5FIbofS1169kQvW5xlzfdglkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNDMyL0UyNEI5OUM2OUY3 QTExRjFBQTA5RTFGNjNBMTFGOTcwL0tubTVGSWJvZlMxMTY5a1F2VzV4bHpmZGds ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS25tNUZJYm9mUzExNjlrUXZXNXhsemZkZ2xrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NDMyL0UyNEI5OUM2OUY3QTExRjFBQTA5RTFGNjNBMTFGOTcwL0tubTVGSWJvZlMx MTY5a1F2VzV4bHpmZGdsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGUNlpoxER+9ZJ6AqyOSoMHg4xkfDuU3RJREMfY+VlZH0nteUorlcc2XF/IJtX cc2VWD8MbLqgzbgNmZw1yAoet8smjVsST5AAk2gPRUWTHHECazYCHsbSj/DNr8Xi aIG29ECEMemjfvqzBUQKVQEKt5RM5frl4WAzEaPXprr3endKHytSucyJXuO+XG0k 7WeAi9+iuRjMoarakaB/LLco977BN9qUwlLe9AoHMukCgqmXxQKfjB4YBD1S4sju kC7aBGMmFiBvzgbXHjaKkwv3jUXA+2DmAPt5vvaUjRvSZCZ0jBDPNnTLg9Fu7U2I ayx2ofFDla3t8Gh4jEtL/8S8 -----END CERTIFICATE-----Generated at Sun Oct 11 18:45:24 2026 by rpki-client