$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: kGFdfItr1CCCgdzf5rwlSCccCg5lot4xBf9ERehAKvE= Subject key identifier: A1:5A:EB:32:E4:C6:2B:5D:F9:B0:D7:51:33:06:D0:96:25:B2:D3:67 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0863 Signing time: Tue 22 Sep 2026 20:44:13 +0000 Manifest this update: Tue 22 Sep 2026 20:44:13 +0000 Manifest next update: Tue 29 Sep 2026 20:44:13 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: E0o/ns0ejBsL/8k+3jJJ4YBl0zaTnl29xfCyfqggUwM=) 2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 3: FF7010DCAE9811F081180758C4F9AE02.roa (hash: qpMk4y0602U3X2w4CmvfK35aoL6m9wVB631uaMX4Chc=) 4: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: QMfdlVqqG7b7DNLEI3s6n/xVYtcpjR63MA+xJ2kfQVA=) 5: EE2BD31C64D011F1BE18E4E96947A888.roa (hash: OhuM84ltUspKHkQbXefrgZ3TkNQ2XBw3NffUArldnvU=) 6: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=) 7: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) 8: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Sep 22 20:44:13 2026 GMT Not After : Sep 29 20:44:13 2026 GMT Subject: CN=6ab2e89d-bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:28:91:21:c1:63:59:52:a3:0e:98:08:32: e0:bc:bb:c0:4c:1c:49:bd:f7:a9:73:31:43:3a:16: 37:e2:52:00:c0:5f:9a:ee:fb:06:21:ca:03:a7:98: 38:2d:72:24:97:46:f3:ea:10:c5:e0:b9:21:e7:c8: 6c:fc:85:22:b4:cb:cb:3d:48:fd:09:ad:f4:4e:c7: 8c:3b:6c:e1:97:f6:cd:65:e2:7e:cb:6d:16:10:9b: d6:97:21:0e:88:e1:c9:de:80:af:ed:89:8c:11:f3: 8d:a8:c9:fa:84:8f:8c:52:8a:2d:0f:30:93:ca:e7: 94:c6:26:db:e6:e6:a0:8d:af:50:78:90:45:99:f5: c4:f5:0c:81:6c:af:b8:1e:38:2c:7c:55:24:e4:98: 5e:27:45:f8:53:2f:16:4d:87:a3:74:7b:ae:3c:56: 2c:cd:7d:31:30:86:a5:2c:1e:bd:ed:93:51:d1:db: 8d:39:bf:76:e3:52:54:3c:d6:f8:be:06:88:8d:6a: 08:91:6c:ef:1c:51:8a:05:9d:de:a7:c6:bf:c2:42: 47:96:29:80:1f:e4:ca:ad:89:bb:69:15:7e:b8:de: c5:e5:95:1e:96:9a:8d:87:e8:61:98:86:fb:c7:e9: 59:87:89:a2:92:c9:39:49:10:a0:fd:d1:b5:12:18: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:EB:32:E4:C6:2B:5D:F9:B0:D7:51:33:06:D0:96:25:B2:D3:67 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:60:e3:12:af:3e:e2:16:fa:e4:1f:64:61:48:f9:60:37: 52:b5:10:aa:f9:43:c9:49:49:da:68:ed:93:e5:53:fa:bf:73: d3:8a:96:3b:22:ab:d2:9c:44:8b:74:cf:e5:ef:b8:d3:2e:16: 2f:94:eb:d7:2b:a8:76:14:2f:5b:eb:12:9c:49:27:0a:23:b0: ad:08:6e:13:6d:46:6c:ba:da:4d:68:21:1e:bc:bc:d2:a1:9d: 78:52:3a:f1:16:64:b6:32:67:cd:3d:8c:19:34:c7:ea:ba:1b: 73:2f:f0:41:8b:9e:ab:24:88:7f:9b:80:a1:df:b2:74:3d:c0: 45:c9:ef:66:83:bc:33:90:0c:a6:c4:a3:8c:52:c7:c5:75:86: cf:38:a9:ba:ba:15:72:8a:af:1d:b1:84:30:bd:d2:69:b0:68: aa:19:36:e7:77:85:8e:86:f6:56:91:de:a9:82:80:ac:43:65: a6:db:0f:18:c6:bb:ac:75:1f:2d:05:75:37:ba:d7:ba:e0:8a: f7:5f:79:1c:94:18:01:d9:e0:cf:8f:99:42:93:ef:f5:ff:29: fd:cb:6f:b2:68:a9:61:87:d0:05:d2:6d:b8:bd:92:f4:3f:74: 01:42:de:11:2c:07:b4:bc:d4:9b:d2:e9:d7:51:1f:df:3b:6d: e5:eb:6e:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwOTIyMjA0NDEzWhcNMjYwOTI5MjA0NDEzWjAYMRYwFAYD VQQDEw02YWIyZTg5ZC1iZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVIokSHBY1lSow6YCDLgvLvATBxJvfepczFDOhY34lIAwF+a7vsGIcoDp5g4 LXIkl0bz6hDF4Lkh58hs/IUitMvLPUj9Ca30TseMO2zhl/bNZeJ+y20WEJvWlyEO iOHJ3oCv7YmMEfONqMn6hI+MUootDzCTyueUxibb5uagja9QeJBFmfXE9QyBbK+4 HjgsfFUk5JheJ0X4Uy8WTYejdHuuPFYszX0xMIalLB697ZNR0duNOb9241JUPNb4 vgaIjWoIkWzvHFGKBZ3ep8a/wkJHlimAH+TKrYm7aRV+uN7F5ZUelpqNh+hhmIb7 x+lZh4miksk5SRCg/dG1EhhU1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFa6zLk xitd+bDXUTMG0JYlstNnMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPpBg4xKvPuIW+uQfZGFI+WA3UrUQqvlDyUlJ2mjtk+VT+r9z04qWOyKr0pxE i3TP5e+40y4WL5Tr1yuodhQvW+sSnEknCiOwrQhuE21GbLraTWghHry80qGdeFI6 8RZktjJnzT2MGTTH6robcy/wQYueqySIf5uAod+ydD3ARcnvZoO8M5AMpsSjjFLH xXWGzzipuroVcoqvHbGEML3SabBoqhk253eFjob2VpHeqYKArENlptsPGMa7rHUf LQV1N7rXuuCK9195HJQYAdngz4+ZQpPv9f8p/ctvsmipYYfQBdJtuL2S9D90AULe ESwHtLzUm9Lp11Ef3ztt5etubA== -----END CERTIFICATE-----Generated at Wed Sep 23 01:44:04 2026 by rpki-client