$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json) Hash identifier: QluFh4DzLE26vRjEBNTv22TOWz7yUXb6yNR/90UF7jI= Subject key identifier: 84:32:5A:22:17:87:86:C7:EB:5A:02:96:78:42:29:CA:38:A6:3F:05 Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft Manifest number: 012E Signing time: Mon 21 Sep 2026 05:40:51 +0000 Manifest this update: Mon 21 Sep 2026 05:40:50 +0000 Manifest next update: Mon 28 Sep 2026 05:40:50 +0000 Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: x0i5Gb8x2TRZKPa6QBk/GgjZXwpb9AcioqRYOBAow1g=) 2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: XSHyVNH2Yl8hdD9tcMuYUvfuAnK7i0Nr+EqjZN7rZBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Validity Not Before: Sep 21 05:40:50 2026 GMT Not After : Sep 28 05:40:50 2026 GMT Subject: CN=6ab0c363-71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:19:a1:46:2d:92:08:38:50:5a:6c:56:c4: 43:d6:83:3b:55:2f:f7:76:f5:fe:74:de:89:f4:49: d1:5d:80:69:e1:3d:8f:f1:38:89:6b:66:65:e2:a8: a1:6a:60:c6:f2:59:b4:4e:6d:8c:fa:99:f2:17:62: 45:a4:e5:58:5a:87:34:48:7d:40:0a:0c:13:42:9f: 71:d4:10:83:e4:79:ad:9b:01:af:69:f1:74:12:7b: f1:66:8e:5e:cd:e0:c3:cf:e9:70:4f:7a:1b:de:88: 86:ed:2c:c0:5f:58:b6:1f:7e:d9:5e:f2:78:bb:18: 2e:92:b8:8e:01:51:83:6e:79:01:02:13:2d:41:a5: 1c:e7:aa:a7:13:44:a0:8a:bb:88:21:c5:1b:1d:68: 94:92:85:d7:5c:88:69:60:ea:c7:01:b0:07:a2:08: f7:87:d7:61:ff:61:b5:3b:de:1d:5d:5c:b9:79:0a: f5:df:ea:2a:1f:05:64:30:0d:11:5a:75:08:cf:e3: 9e:ed:a9:22:c9:78:ba:17:6c:30:2d:b9:93:9a:a0: 5e:ce:d1:12:35:5b:1f:63:54:5c:5a:93:b7:c2:e0: 1e:48:3c:a5:c0:31:ac:1b:f1:42:1b:d4:e6:06:74: 29:61:31:5a:73:47:f2:45:9e:a7:04:cf:02:05:8a: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:5A:22:17:87:86:C7:EB:5A:02:96:78:42:29:CA:38:A6:3F:05 X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7e:f8:23:31:2f:1d:a7:c5:11:fd:fa:3c:ae:fb:6f:e7:83: 0c:10:60:89:94:51:68:d9:0b:3f:ed:0d:c5:50:cc:42:6a:9e: be:78:8c:51:55:12:5e:53:51:2b:0c:1e:07:37:72:89:f1:9e: fc:da:23:87:cc:cd:9c:de:ec:62:1f:97:9f:4c:3b:cb:cd:ba: 76:b3:6a:e5:8a:ac:76:9f:86:86:89:e6:fb:7f:a8:e2:d0:66: 34:6a:b6:62:6c:7f:b4:6d:e3:d4:3c:a6:df:a5:9c:50:ef:3f: 8b:8a:bd:c2:46:8b:cc:03:5f:ac:a4:14:57:2b:78:d8:34:ca: 4e:68:a0:70:dd:56:c1:10:dc:49:81:77:03:07:4c:ba:88:bc: 50:4f:7c:15:b6:39:4c:b8:84:86:d6:69:70:6b:71:27:16:40: 48:2a:c8:67:46:1c:27:e1:33:99:b7:b0:a2:6c:4e:dd:6b:fd: 62:f1:d6:2e:d6:17:2e:40:23:96:c2:69:07:9c:a7:d7:55:b6: 08:9e:29:70:ff:c6:e0:9b:bb:2e:98:ef:53:f2:e8:47:28:f0: dd:5b:f5:67:cd:80:17:94:ea:a7:13:d0:f6:ee:3e:1d:96:38: 15:6d:89:e4:6e:99:9c:9f:64:55:0d:bb:f9:77:7a:3b:e3:ec: 49:a5:9f:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2NzkxMTAvBgNVBAUTKDkyODBGMDcwNzQ3NzUzMzg3QjZCQTY1NzMyRDZERDc5 OTJCMzUwQzEwHhcNMjYwOTIxMDU0MDUwWhcNMjYwOTI4MDU0MDUwWjAYMRYwFAYD VQQDEw02YWIwYzM2My03MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QwZoUYtkgg4UFpsVsRD1oM7VS/3dvX+dN6J9EnRXYBp4T2P8TiJa2Zl4qih amDG8lm0Tm2M+pnyF2JFpOVYWoc0SH1ACgwTQp9x1BCD5HmtmwGvafF0EnvxZo5e zeDDz+lwT3ob3oiG7SzAX1i2H37ZXvJ4uxgukriOAVGDbnkBAhMtQaUc56qnE0Sg iruIIcUbHWiUkoXXXIhpYOrHAbAHogj3h9dh/2G1O94dXVy5eQr13+oqHwVkMA0R WnUIz+Oe7akiyXi6F2wwLbmTmqBeztESNVsfY1RcWpO3wuAeSDylwDGsG/FCG9Tm BnQpYTFac0fyRZ6nBM8CBYpQcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQyWiIX h4bH61oClnhCKco4pj8FMB8GA1UdIwQYMBaAFJKA8HB0d1M4e2umVzLW3XmSs1DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODY3OS9DQjJDQjNDRUVB NzcxMUVGQTU2MzU2ODBDNEY5QUUwMi9rb0R3Y0hSM1V6aDdhNlpYTXRiZGVaS3pV TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODY3OS9DQjJDQjNDRUVBNzcxMUVGQTU2MzU2ODBDNEY5QUUwMi9rb0R3Y0hSM1V6 aDdhNlpYTXRiZGVaS3pVTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaH74IzEvHafFEf36PK77b+eDDBBgiZRRaNkLP+0NxVDMQmqevniMUVUSXlNR KwweBzdyifGe/Nojh8zNnN7sYh+Xn0w7y826drNq5Yqsdp+Ghonm+3+o4tBmNGq2 Ymx/tG3j1Dym36WcUO8/i4q9wkaLzANfrKQUVyt42DTKTmigcN1WwRDcSYF3AwdM uoi8UE98FbY5TLiEhtZpcGtxJxZASCrIZ0YcJ+EzmbewomxO3Wv9YvHWLtYXLkAj lsJpB5yn11W2CJ4pcP/G4Ju7LpjvU/LoRyjw3Vv1Z82AF5TqpxPQ9u4+HZY4FW2J 5G6ZnJ9kVQ27+Xd6O+PsSaWfyA== -----END CERTIFICATE-----Generated at Wed Sep 23 06:49:08 2026 by rpki-client