$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: BTFqM3XHPZBYv4WuQN1xFJrmDyaPC2FqaeAtm/vCF2M= Subject key identifier: 7A:18:68:FF:FA:FE:BB:75:E2:19:84:3C:46:F8:E0:A2:95:DE:2C:93 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0712 Signing time: Tue 22 Sep 2026 20:43:18 +0000 Manifest this update: Tue 22 Sep 2026 20:43:17 +0000 Manifest next update: Tue 29 Sep 2026 20:43:17 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: UL08ZQ06oHIcsGVP2pbT8R1c3tENNaMC4yxoYo7P/TI=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Sep 22 20:43:17 2026 GMT Not After : Sep 29 20:43:17 2026 GMT Subject: CN=6ab2e866-7563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:9f:6e:75:02:d7:ef:a8:16:4c:41:11:ac: ed:0f:1c:94:02:48:6a:79:98:94:c3:a1:a3:70:06: be:e8:25:6a:f7:9a:65:33:da:1d:f0:83:07:b3:7b: 8d:4c:b6:fd:d9:38:52:b7:c2:e3:6a:c5:ee:9f:e4: 47:65:09:65:4f:53:11:9c:c2:3d:99:f3:68:d0:63: dc:cf:3c:cf:1b:ac:96:14:02:b9:c7:69:52:46:f4: 31:bc:0b:7b:3e:7c:ef:75:0c:23:3a:98:aa:31:61: 2c:9c:ff:19:9e:dd:e4:76:7f:7a:61:e6:fd:28:7f: 61:c1:1e:e4:dd:30:9d:80:c5:6f:62:fb:36:81:93: 08:43:67:bb:c6:b8:16:77:32:a2:79:16:f3:7f:69: 7d:de:92:c6:e8:a5:5a:51:48:17:c9:c6:aa:e1:79: 61:0d:f7:81:2c:dc:89:2c:68:3b:3e:75:dc:1f:91: 39:c6:22:c3:5d:1a:3c:f3:0b:83:c2:a4:8d:14:0f: 07:b5:81:a3:f8:58:00:b1:0a:b3:22:76:a3:43:de: 97:2e:61:55:14:94:a2:cc:bd:9f:3f:15:00:2f:9c: 49:61:d6:b4:68:89:35:7d:cf:0a:d4:6d:df:05:8d: cd:36:86:00:c5:7f:a7:a1:81:39:24:e1:9e:8f:09: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:68:FF:FA:FE:BB:75:E2:19:84:3C:46:F8:E0:A2:95:DE:2C:93 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8b:6c:b8:e9:77:73:6c:26:37:ab:4c:69:87:e2:94:9a:65: 5b:90:bb:a2:89:0f:a7:71:14:7b:97:62:6b:57:ed:76:71:98: a9:ee:b0:73:0e:02:b3:2c:6b:d6:29:2d:f8:75:77:07:06:4b: 3a:30:75:84:c4:f9:4f:88:a5:69:a2:f9:86:e7:58:52:ef:cf: 06:7d:4d:d5:a4:32:7b:97:0a:30:38:13:67:1a:b6:67:64:2f: 5f:c9:9a:ad:30:70:ca:45:80:11:47:6d:51:9e:2a:23:5b:4b: 9f:dc:6d:15:38:c8:c9:fd:b2:38:3b:94:e0:1a:73:aa:ca:53: 95:a8:db:9a:ff:86:25:cd:9f:43:81:93:95:7f:37:74:fc:a0: f8:65:2e:d8:49:fb:a1:4d:a3:64:18:5c:cc:fc:ff:bd:66:f1: c9:39:e2:09:4d:4b:62:75:ea:02:26:93:0a:2b:7d:e8:3c:2e: 9f:03:80:73:66:35:7a:94:23:67:d5:48:fa:2a:ba:eb:34:45: 9f:23:0a:d2:1b:2a:6c:98:26:27:cd:36:62:c8:25:ac:e8:37: 34:fa:5a:2c:4a:6d:f1:b5:62:d4:6b:b9:4e:c4:29:7a:ca:05: 29:df:e8:7c:e7:83:92:8e:58:92:2b:3b:64:49:01:06:8d:fa: b1:01:f6:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjYwOTIyMjA0MzE3WhcNMjYwOTI5MjA0MzE3WjAYMRYwFAYD VQQDEw02YWIyZTg2Ni03NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNWfbnUC1++oFkxBEaztDxyUAkhqeZiUw6GjcAa+6CVq95plM9od8IMHs3uN TLb92ThSt8LjasXun+RHZQllT1MRnMI9mfNo0GPczzzPG6yWFAK5x2lSRvQxvAt7 PnzvdQwjOpiqMWEsnP8Znt3kdn96Yeb9KH9hwR7k3TCdgMVvYvs2gZMIQ2e7xrgW dzKieRbzf2l93pLG6KVaUUgXycaq4XlhDfeBLNyJLGg7PnXcH5E5xiLDXRo88wuD wqSNFA8HtYGj+FgAsQqzInajQ96XLmFVFJSizL2fPxUAL5xJYda0aIk1fc8K1G3f BY3NNoYAxX+noYE5JOGejwmnKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoYaP/6 /rt14hmEPEb44KKV3iyTMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc4tsuOl3c2wmN6tMaYfilJplW5C7ookPp3EUe5dia1ftdnGYqe6wcw4Csyxr 1ikt+HV3BwZLOjB1hMT5T4ilaaL5hudYUu/PBn1N1aQye5cKMDgTZxq2Z2QvX8ma rTBwykWAEUdtUZ4qI1tLn9xtFTjIyf2yODuU4BpzqspTlajbmv+GJc2fQ4GTlX83 dPyg+GUu2En7oU2jZBhczPz/vWbxyTniCU1LYnXqAiaTCit96DwunwOAc2Y1epQj Z9VI+iq66zRFnyMK0hsqbJgmJ802YsglrOg3NPpaLEpt8bVi1Gu5TsQpesoFKd/o fOeDko5Ykis7ZEkBBo36sQH2/Q== -----END CERTIFICATE-----Generated at Thu Sep 24 12:18:17 2026 by rpki-client