$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json) Hash identifier: ye4d+Fk4vzz2N3I6kFUJ+OVV7De3NSegk9Xu//HmwAc= Subject key identifier: 5D:85:ED:4F:A5:26:53:11:9F:01:24:00:27:74:CB:DE:14:8B:98:0D Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15 Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft Manifest number: 0264 Signing time: Mon 21 Sep 2026 02:10:27 +0000 Manifest this update: Mon 21 Sep 2026 02:10:27 +0000 Manifest next update: Mon 28 Sep 2026 02:10:27 +0000 Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: sfSq4Wyc3CD6pd4d4Jmu8M85JfPV+jX6RPzZS7V/5p8=) 2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: BdCHR64jQmcQxz2LQIkbVjA0OA0jAQdPiVvvMKyKatQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415 Validity Not Before: Sep 21 02:10:27 2026 GMT Not After : Sep 28 02:10:27 2026 GMT Subject: CN=6ab09213-8b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:f8:cd:d4:59:de:36:e2:35:57:c9:57:b3: fc:5f:da:53:32:38:ad:58:3a:01:7b:54:0a:30:00: d3:f9:3a:bb:ac:16:89:e0:9b:93:84:c2:27:81:ff: ce:dd:ba:45:84:d1:65:f8:4a:61:0d:13:3f:c9:19: 50:b2:13:d5:ef:0d:7a:be:81:d7:cb:8a:73:3e:ef: 8c:c8:f5:93:04:ff:fb:73:bc:4b:14:64:75:69:2f: ba:45:60:39:71:27:0a:81:ca:af:de:5f:1a:07:77: a4:aa:54:64:eb:b8:a2:da:56:2c:49:2b:53:f5:05: d1:98:0d:7d:0e:95:7d:c0:18:40:13:1a:9d:e0:9b: 93:65:08:33:85:26:e3:5c:5d:1c:cf:0b:b7:c0:d4: 11:ec:1d:12:bf:84:c7:fe:2c:af:cc:83:5a:ca:4e: 69:1e:0b:95:51:fa:cf:4e:6e:55:78:e4:8d:ea:98: 8b:ad:65:57:d0:5e:da:c2:ce:45:e2:bd:a6:94:ce: fe:71:63:d8:1a:6f:87:46:0d:61:b7:b6:46:db:6a: da:ee:05:f9:a8:f0:91:74:4a:58:b2:55:19:3c:47: fc:1c:cc:6c:2e:97:8a:3a:31:39:a9:e6:0b:6f:15: 8d:4d:5b:46:2f:5c:fc:cf:af:c4:f9:be:6c:e0:da: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:85:ED:4F:A5:26:53:11:9F:01:24:00:27:74:CB:DE:14:8B:98:0D X509v3 Authority Key Identifier: keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b4:42:9f:f7:71:48:b0:26:2c:4a:fb:1f:f1:f4:c4:0b:98: f6:c6:f1:a7:91:96:cd:f1:20:59:f5:97:21:c0:4c:9b:fa:73: e7:7b:86:f8:e6:c0:2c:ce:59:3e:0a:73:3d:20:5b:51:0d:50: ed:38:cb:07:36:0e:fd:90:bb:31:5f:f9:44:05:6d:24:3b:4b: ae:d3:7f:a2:9c:2f:22:b6:0f:bd:c8:81:ab:3d:40:db:8f:95: 0b:c1:4f:74:02:64:74:bf:9e:c2:99:bd:93:b7:1c:ba:7a:4b: 29:33:dc:17:71:ea:1d:6f:d0:ba:57:bf:d9:8f:c1:03:2c:3c: 90:0a:b5:fd:d9:9a:0e:04:2f:25:eb:0f:80:78:f3:31:0d:67: 67:55:6e:ed:cd:44:e5:fd:8e:c5:1a:9d:9c:fd:a1:f5:cc:9f: 8b:5f:ea:b3:89:ec:01:ef:81:6d:d9:68:8e:99:02:1b:bb:ff: 42:29:ab:28:09:4e:50:4a:ce:8b:91:c3:3b:b5:a4:29:e0:a0: e1:4f:06:47:75:d8:c2:55:21:9f:1a:4d:6d:77:7d:a7:6d:1a: 76:93:97:6d:9b:96:bc:1e:5a:2c:15:03:75:71:29:4b:58:3f: e5:20:5b:0d:5c:d0:7e:ee:f9:3b:90:48:b3:f5:99:49:31:d4: f8:31:ce:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0RUQxMTAvBgNVBAUTKDkwOEU3ODkwMzRGMTg0MTVEODc1OUMyNkEzNDZFQjgx MEVGNUE0MTUwHhcNMjYwOTIxMDIxMDI3WhcNMjYwOTI4MDIxMDI3WjAYMRYwFAYD VQQDEw02YWIwOTIxMy04YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA74zdRZ3jbiNVfJV7P8X9pTMjitWDoBe1QKMADT+Tq7rBaJ4JuThMIngf/O 3bpFhNFl+EphDRM/yRlQshPV7w16voHXy4pzPu+MyPWTBP/7c7xLFGR1aS+6RWA5 cScKgcqv3l8aB3ekqlRk67ii2lYsSStT9QXRmA19DpV9wBhAExqd4JuTZQgzhSbj XF0czwu3wNQR7B0Sv4TH/iyvzINayk5pHguVUfrPTm5VeOSN6piLrWVX0F7aws5F 4r2mlM7+cWPYGm+HRg1ht7ZG22ra7gX5qPCRdEpYslUZPEf8HMxsLpeKOjE5qeYL bxWNTVtGL1z8z6/E+b5s4NrlZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2F7U+l JlMRnwEkACd0y94Ui5gNMB8GA1UdIwQYMBaAFJCOeJA08YQV2HWcJqNG64EO9aQV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjRFRC9GQTRCMEFDNDBG MzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhCWFlkWndtbzBicmdRNzFw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJNTRrRFR4aEJYWWRad21vMGJyZ1E3MXBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjRFRC9GQTRCMEFDNDBGMzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhC WFlkWndtbzBicmdRNzFwQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrRCn/dxSLAmLEr7H/H0xAuY9sbxp5GWzfEgWfWXIcBMm/pz53uG+ObALM5Z PgpzPSBbUQ1Q7TjLBzYO/ZC7MV/5RAVtJDtLrtN/opwvIrYPvciBqz1A24+VC8FP dAJkdL+ewpm9k7ccunpLKTPcF3HqHW/Qule/2Y/BAyw8kAq1/dmaDgQvJesPgHjz MQ1nZ1Vu7c1E5f2OxRqdnP2h9cyfi1/qs4nsAe+BbdlojpkCG7v/QimrKAlOUErO i5HDO7WkKeCg4U8GR3XYwlUhnxpNbXd9p20adpOXbZuWvB5aLBUDdXEpS1g/5SBb DVzQfu75O5BIs/WZSTHU+DHO5A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:23:06 2026 by rpki-client