$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json) Hash identifier: OJAunqpoouT1GqlLDmjvzhaytKUG5jsEQ26K4rwGXAw= Subject key identifier: 5E:63:66:7C:4C:AE:6B:9D:EF:BB:52:E9:90:A9:B5:83:B2:E6:B9:DC Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Certificate serial: 10D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft Manifest number: 10C4 Signing time: Tue 22 Sep 2026 17:15:13 +0000 Manifest this update: Tue 22 Sep 2026 17:15:12 +0000 Manifest next update: Tue 29 Sep 2026 17:15:12 +0000 Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: KjbcTCMwEn+b/f+BeFdT/kDvqX4FmsaaM0WLJCr4NF4=) 2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: N/R+8vPZJokbXr/3RDT9z/N8TcDj96G+vFNXOa/HDA8=) 3: B1KZ7cH7Yd28WHi5niYgvVkmwgA.asa (hash: kxCLSwl7XpcMSeevC/G8alM16UxyV3Qsw0G0d2H8j6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4310 (0x10d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Validity Not Before: Sep 22 17:15:12 2026 GMT Not After : Sep 29 17:15:12 2026 GMT Subject: CN=6ab2b7a1-7d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:0a:07:0c:d1:92:82:35:85:00:75:4d:9d: 30:83:43:33:a8:8c:20:00:03:eb:73:7e:c2:5c:9d: b4:22:3d:94:6e:a7:b2:ce:3d:bd:f9:d4:af:d9:72: 43:1d:64:fe:48:71:bd:64:f5:e6:f6:82:1f:44:60: 53:1a:8f:9e:a3:c7:ae:12:eb:fc:8d:86:da:d1:09: 9a:d2:78:8b:98:a8:0e:68:ab:86:e2:7a:5c:a0:07: c3:45:c3:d0:1e:4f:3a:a3:96:0c:c7:a9:ec:14:23: 95:c5:92:c9:b4:43:cb:ea:31:69:a3:83:5b:50:af: 1f:cc:63:3e:c7:00:ec:e4:dd:61:05:8f:3e:91:a6: 66:ea:1b:76:d9:f1:86:eb:51:3f:8b:c8:d4:ed:6a: 58:f2:61:2e:00:7f:9e:1e:9b:a6:95:86:4d:37:fc: de:51:a7:5b:48:94:cc:20:39:8e:31:47:fd:13:96: 91:b6:e0:6d:f3:fb:12:88:b7:72:60:09:2a:c6:fc: fe:4f:0c:91:1b:1c:e2:fb:d0:3c:8a:18:4a:dd:7a: f6:15:7f:2d:3c:8c:4b:b0:06:41:0b:2b:a4:c7:cd: e1:c7:fd:0f:49:59:29:c2:27:c8:04:cf:a7:1a:75: c1:77:76:79:9f:df:fb:32:5e:a0:42:db:2b:e9:33: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:66:7C:4C:AE:6B:9D:EF:BB:52:E9:90:A9:B5:83:B2:E6:B9:DC X509v3 Authority Key Identifier: keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:ba:de:7a:af:d5:4d:6f:a4:71:50:5f:d1:c9:a0:c2:d9: 43:a6:16:a4:b7:5c:5d:c8:d5:74:4d:5f:58:33:7a:e0:89:a6: 40:eb:ee:32:29:ce:f9:57:f2:a4:91:4a:8e:42:77:9d:24:19: 34:94:bc:20:bc:e4:3c:95:58:61:fc:fe:f4:00:10:36:5d:5c: 69:c5:24:a8:bb:1d:10:1c:ff:6b:2b:3f:fe:5c:1e:24:20:05: cc:c3:d2:df:06:64:06:fc:d6:db:40:26:bf:eb:de:88:d3:fd: b5:cf:c3:a4:72:3d:24:03:50:f5:77:52:f4:bc:e1:84:61:32: 34:81:ac:47:6b:fd:ed:d4:d6:94:32:4d:09:78:90:7f:3d:30: 3d:00:f8:60:c0:fa:25:ef:66:94:91:a4:db:86:3c:cd:c0:9f: cf:08:32:e4:06:e7:9b:2c:95:59:1b:53:43:81:bf:77:45:36: 43:67:e3:d7:f2:e7:ef:50:4e:01:52:2b:39:57:1e:73:03:0e: e4:ff:08:e4:23:04:44:c3:53:9b:48:fd:5e:59:31:ec:0c:05: ed:21:ed:15:28:1c:a7:fa:c8:0e:30:b9:0e:74:fd:12:6b:30: 1b:9a:6b:be:a5:0c:ab:d0:ae:bd:9d:f4:9a:9f:00:86:30:1d: 16:54:db:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICENYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3 MzJEOUREQTYwHhcNMjYwOTIyMTcxNTEyWhcNMjYwOTI5MTcxNTEyWjAYMRYwFAYD VQQDEw02YWIyYjdhMS03ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoYKBwzRkoI1hQB1TZ0wg0MzqIwgAAPrc37CXJ20Ij2Ubqeyzj29+dSv2XJD HWT+SHG9ZPXm9oIfRGBTGo+eo8euEuv8jYba0Qma0niLmKgOaKuG4npcoAfDRcPQ Hk86o5YMx6nsFCOVxZLJtEPL6jFpo4NbUK8fzGM+xwDs5N1hBY8+kaZm6ht22fGG 61E/i8jU7WpY8mEuAH+eHpumlYZNN/zeUadbSJTMIDmOMUf9E5aRtuBt8/sSiLdy YAkqxvz+TwyRGxzi+9A8ihhK3Xr2FX8tPIxLsAZBCyukx83hx/0PSVkpwifIBM+n GnXBd3Z5n9/7Ml6gQtsr6TMPhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5jZnxM rmud77tS6ZCptYOy5rncMB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1 RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU5Ni9FREE2NUFDNDU1RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlB bXZIc21lbW54LUp6TFozYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7663nqv1U1vpHFQX9HJoMLZQ6YWpLdcXcjVdE1fWDN64ImmQOvuMinO+Vfy pJFKjkJ3nSQZNJS8ILzkPJVYYfz+9AAQNl1cacUkqLsdEBz/ays//lweJCAFzMPS 3wZkBvzW20Amv+veiNP9tc/DpHI9JANQ9XdS9LzhhGEyNIGsR2v97dTWlDJNCXiQ fz0wPQD4YMD6Je9mlJGk24Y8zcCfzwgy5AbnmyyVWRtTQ4G/d0U2Q2fj1/Ln71BO AVIrOVcecwMO5P8I5CMERMNTm0j9Xlkx7AwF7SHtFSgcp/rIDjC5DnT9EmswG5pr vqUMq9CuvZ30mp8AhjAdFlTbIA== -----END CERTIFICATE-----Generated at Tue Sep 22 21:57:55 2026 by rpki-client