$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: vJa5KAxgGXFe3P+tpBEDQy0Ld0Fbx3eWND7JO39d06I= Subject key identifier: 71:06:ED:8C:64:C0:8C:C4:9D:E9:63:5B:47:35:D8:95:21:ED:DF:9D Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0230 Signing time: Wed 23 Sep 2026 02:52:43 +0000 Manifest this update: Wed 23 Sep 2026 02:52:43 +0000 Manifest next update: Wed 30 Sep 2026 02:52:43 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: RlGvgMYjTBQRXt6PwghyxgNtX6XH0lDT7GWbdaBOBbk=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) 3: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 4: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Sep 23 02:52:43 2026 GMT Not After : Sep 30 02:52:43 2026 GMT Subject: CN=6ab33efb-6635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:b4:44:56:1d:08:33:f8:48:fa:60:73:fc: e8:37:85:73:ce:c2:23:3c:87:b0:6f:cd:5f:93:91: 30:16:c7:85:a5:78:a1:22:b3:13:9e:18:f0:fc:ff: 5a:36:75:fc:d8:f9:b7:68:88:f1:cf:15:12:f1:4b: d8:58:78:61:66:79:c7:27:24:cb:1b:1f:9b:36:77: b8:f6:14:24:f4:68:87:a0:83:03:de:0e:68:d3:36: ff:57:db:d6:c0:6c:9a:fd:53:6a:80:f0:d3:3b:c8: 8e:e4:15:75:86:f8:e5:b1:af:1b:6d:67:c9:43:b6: ae:aa:d7:e1:0e:71:5b:65:77:a0:db:41:d0:bc:fc: 9e:fa:e1:00:b9:0c:b4:7d:dd:33:06:50:a9:3a:64: 03:0a:a6:bf:d9:c5:3f:cb:0c:5d:92:55:62:b7:ca: 62:82:fd:39:da:e5:f0:08:4e:23:18:3e:c3:d3:3c: e2:d8:80:12:6a:08:fa:eb:72:92:b8:c1:85:80:3b: 7f:e9:b4:00:1d:9e:61:0e:98:45:66:a1:cb:0c:1e: d4:a3:56:15:15:02:f9:53:f0:a6:27:2d:36:12:1c: 31:55:49:10:44:12:b8:74:41:f4:22:a4:45:2f:20: e4:c9:15:67:34:5e:52:6f:a2:49:53:e9:7e:a5:36: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:ED:8C:64:C0:8C:C4:9D:E9:63:5B:47:35:D8:95:21:ED:DF:9D X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a7:3e:50:d3:f8:ba:1a:6e:e9:b4:25:22:75:07:6c:58:4d: 1f:4d:6e:74:bb:c0:19:ac:d9:cd:f7:cb:cd:0b:55:62:ad:bc: 4b:37:ac:df:89:d0:47:0e:05:19:f7:bb:84:2b:75:55:71:d2: 21:91:4e:ec:3e:37:05:3f:1a:ae:75:cc:ca:c3:a7:11:2f:f7: f8:75:cb:61:f8:f9:cc:41:5b:a8:cf:27:40:34:0f:0d:4d:cf: 95:46:65:66:79:1d:6b:10:e4:c6:69:55:e2:2f:bf:83:09:34: 3e:e9:66:9c:31:0b:9b:61:81:c7:9b:ad:4a:85:ef:b0:c2:99: 65:30:75:b8:89:18:93:8d:8e:bd:a4:b3:5c:a6:7d:14:c0:13: ec:7b:cd:21:b5:28:85:e3:92:01:bb:81:66:f1:85:7f:81:4f: 9b:ad:ec:ea:71:64:5a:57:4a:75:25:99:21:10:d4:8d:9e:60: 2e:04:94:2f:72:c2:2e:95:43:65:9f:ed:f9:aa:a5:38:63:5d: 7b:42:d6:e9:f7:d3:39:84:f8:78:6c:5f:b8:cf:e5:76:cf:ef: a4:cd:76:dc:69:d2:d9:6f:69:8f:f3:68:82:cf:48:b7:fb:06: 41:71:ef:e2:66:0a:0e:4b:27:61:84:ac:1b:58:43:92:47:4d: 98:49:2e:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwOTIzMDI1MjQzWhcNMjYwOTMwMDI1MjQzWjAYMRYwFAYD VQQDEw02YWIzM2VmYi02NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAm0RFYdCDP4SPpgc/zoN4VzzsIjPIewb81fk5EwFseFpXihIrMTnhjw/P9a NnX82Pm3aIjxzxUS8UvYWHhhZnnHJyTLGx+bNne49hQk9GiHoIMD3g5o0zb/V9vW wGya/VNqgPDTO8iO5BV1hvjlsa8bbWfJQ7auqtfhDnFbZXeg20HQvPye+uEAuQy0 fd0zBlCpOmQDCqa/2cU/ywxdklVit8pigv052uXwCE4jGD7D0zzi2IASagj663KS uMGFgDt/6bQAHZ5hDphFZqHLDB7Uo1YVFQL5U/CmJy02EhwxVUkQRBK4dEH0IqRF LyDkyRVnNF5Sb6JJU+l+pTYRcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEG7Yxk wIzEneljW0c12JUh7d+dMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvKc+UNP4uhpu6bQlInUHbFhNH01udLvAGazZzffLzQtVYq28Szes34nQRw4F Gfe7hCt1VXHSIZFO7D43BT8arnXMysOnES/3+HXLYfj5zEFbqM8nQDQPDU3PlUZl ZnkdaxDkxmlV4i+/gwk0PulmnDELm2GBx5utSoXvsMKZZTB1uIkYk42OvaSzXKZ9 FMAT7HvNIbUoheOSAbuBZvGFf4FPm63s6nFkWldKdSWZIRDUjZ5gLgSUL3LCLpVD ZZ/t+aqlOGNde0LW6ffTOYT4eGxfuM/lds/vpM123GnS2W9pj/Nogs9It/sGQXHv 4mYKDksnYYSsG1hDkkdNmEkudw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:21:32 2026 by rpki-client