$ rpki-client -vvvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: 1mUxGU2o/NF71HT0Ei8ROhJGOpBIGJU5+CC6V79Il3Y= Subject key identifier: DA:64:D9:07:30:A3:CF:51:56:56:12:3C:43:57:5E:13:6C:B9:59:0D Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0F58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0F4D Signing time: Thu 24 Sep 2026 17:30:26 +0000 Manifest this update: Thu 24 Sep 2026 17:30:25 +0000 Manifest next update: Thu 01 Oct 2026 17:30:25 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: /z7j9wJfNhU3lKydtBfxXdg5eULApBd0JJvN4pNV3y0=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3928 (0xf58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Sep 24 17:30:25 2026 GMT Not After : Oct 1 17:30:25 2026 GMT Subject: CN=6ab55e31-6651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:2d:63:9b:c8:e2:a6:79:16:f6:df:8d:4d: 24:6b:eb:09:da:44:0d:fa:4b:19:cd:20:53:e4:60: 29:eb:ff:e8:9c:66:20:4a:b9:c5:68:3a:f3:e9:59: dd:59:67:4e:e1:cc:c0:a2:d2:33:4b:a5:a0:bc:ae: c6:12:1b:64:38:98:91:5b:16:fe:61:e5:a5:06:32: 5f:03:ed:95:91:f9:20:fc:a4:13:6e:73:a6:91:8c: f7:b9:52:29:88:6a:4b:af:dc:bb:02:96:67:43:35: 1a:e7:6f:c6:cc:3f:71:19:eb:38:9e:36:a4:0c:20: 4b:b4:33:0f:54:e4:9e:dd:9a:42:f1:ae:f9:a3:66: 5e:3e:1c:05:bf:54:9c:d5:df:10:cd:ab:93:0f:37: 6d:63:be:7d:0b:1c:4d:6d:f0:bc:56:7d:94:eb:0b: 93:40:32:ba:ed:95:f3:81:a8:57:41:ee:f1:ff:07: da:80:31:b7:f2:1f:32:a5:d8:e4:ae:f5:23:05:9d: 29:a2:ec:92:85:07:35:4a:ee:58:88:f7:0d:64:a8: 44:f2:f8:e5:17:dc:c4:c4:65:4f:c5:e5:71:2c:cf: 84:63:e7:05:6d:53:40:85:6a:d0:3d:f1:bd:4d:b8: d4:66:28:c8:db:9f:e7:4f:e1:0d:5d:55:e7:10:e0: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:D9:07:30:A3:CF:51:56:56:12:3C:43:57:5E:13:6C:B9:59:0D X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:38:3c:87:07:68:70:ff:d6:8c:f5:3d:f4:57:63:6c:91:7c: 89:05:80:6d:f2:1c:2a:b8:fa:a2:a8:b8:7f:f9:7d:79:1f:7c: 21:2d:2e:35:35:71:a8:fa:1f:7d:1c:44:d1:3b:16:3f:dc:9a: b5:79:b3:79:64:87:09:d3:54:db:0c:d2:3c:87:b6:2b:9f:a3: 16:ba:b2:16:27:16:df:e6:bf:9c:24:8a:f1:03:74:e5:82:f3: d6:a9:77:11:94:96:39:01:1c:a2:cf:80:79:f8:03:b2:c9:3e: 74:13:df:46:a6:10:42:2f:1b:f9:f8:68:86:57:38:ee:f1:ef: 1d:eb:a8:2c:8b:8b:1d:5a:c5:5f:15:48:31:2d:b5:9a:f9:c6: 65:65:24:4c:1e:29:c5:b6:90:c8:18:9a:69:32:08:99:48:3c: 8d:6e:28:54:08:5a:27:10:84:26:fb:25:97:27:8d:7a:38:a4: 06:b5:21:18:85:9e:6e:12:4a:fe:b1:4d:cf:3a:9e:94:7c:28: 2b:27:a9:f1:ba:d3:a0:aa:f5:1a:be:7e:0e:a6:5c:3f:e5:14: 3b:62:29:0c:4e:89:02:7a:d7:f6:8c:91:d2:7a:cd:ef:20:f4: 89:79:92:23:25:3d:5a:d0:80:cb:77:a7:06:7a:e9:58:a6:55: 98:ca:bb:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjYwOTI0MTczMDI1WhcNMjYxMDAxMTczMDI1WjAYMRYwFAYD VQQDEw02YWI1NWUzMS02NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc8tY5vI4qZ5FvbfjU0ka+sJ2kQN+ksZzSBT5GAp6//onGYgSrnFaDrz6Vnd WWdO4czAotIzS6WgvK7GEhtkOJiRWxb+YeWlBjJfA+2Vkfkg/KQTbnOmkYz3uVIp iGpLr9y7ApZnQzUa52/GzD9xGes4njakDCBLtDMPVOSe3ZpC8a75o2ZePhwFv1Sc 1d8QzauTDzdtY759CxxNbfC8Vn2U6wuTQDK67ZXzgahXQe7x/wfagDG38h8ypdjk rvUjBZ0pouyShQc1Su5YiPcNZKhE8vjlF9zExGVPxeVxLM+EY+cFbVNAhWrQPfG9 TbjUZijI25/nT+ENXVXnEOAksQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpk2Qcw o89RVlYSPENXXhNsuVkNMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANjg8hwdocP/WjPU99FdjbJF8iQWAbfIcKrj6oqi4f/l9eR98IS0uNTVxqPof fRxE0TsWP9yatXmzeWSHCdNU2wzSPIe2K5+jFrqyFicW3+a/nCSK8QN05YLz1ql3 EZSWOQEcos+AefgDssk+dBPfRqYQQi8b+fhohlc47vHvHeuoLIuLHVrFXxVIMS21 mvnGZWUkTB4pxbaQyBiaaTIImUg8jW4oVAhaJxCEJvsllyeNejikBrUhGIWebhJK /rFNzzqelHwoKyep8brToKr1Gr5+DqZcP+UUO2IpDE6JAnrX9oyR0nrN7yD0iXmS IyU9WtCAy3enBnrpWKZVmMq7GQ== -----END CERTIFICATE-----Generated at Sat Sep 26 06:41:08 2026 by rpki-client