$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: 2uXCeeFEpACGPnziCRg8bd/+7cwcOseI5ldlQY4wXe8= Subject key identifier: A4:33:B9:CF:E3:74:EF:31:D5:A3:24:F1:7B:79:5F:3E:3E:19:F2:90 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1B3E Signing time: Thu 24 Sep 2026 16:16:16 +0000 Manifest this update: Thu 24 Sep 2026 16:16:16 +0000 Manifest next update: Thu 01 Oct 2026 16:16:16 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: A4CByGtTPhRjJF/s2EztUl9Xs2b+0eCFBSeh0cvgrBk=) 2: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7012 (0x1b64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Sep 24 16:16:16 2026 GMT Not After : Oct 1 16:16:16 2026 GMT Subject: CN=6ab54cd0-3714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:ad:26:2c:7f:de:64:1b:c9:81:ca:87:ac: f9:ce:94:dd:ae:86:10:5f:1c:8a:76:8f:7f:43:7f: 69:e0:29:11:59:c6:73:08:2f:7a:d5:18:af:7f:b4: b9:b7:87:b0:d0:83:93:69:d6:2e:c8:1e:f9:93:12: 9d:35:48:7d:05:01:ac:9d:ed:8b:58:30:22:17:2d: e8:fc:f9:6b:c8:ff:23:40:10:83:0d:5d:24:3b:29: 0a:9e:cf:e8:f3:0d:fa:08:af:8c:27:da:87:6f:7f: 83:a3:4d:5e:86:5c:88:d2:e6:2e:2a:be:19:7a:c6: 46:29:95:a7:eb:58:37:c7:3e:0d:76:11:d5:09:ab: 5d:ea:39:4f:ec:d3:12:79:da:4a:2b:70:28:33:a4: 39:b2:79:23:dc:90:de:b2:64:4f:87:ac:bb:d3:79: bb:f4:6f:d6:4f:df:b4:9e:6e:b1:b1:e5:2f:3f:f1: 23:b3:5d:0c:33:d8:6c:b8:c9:41:6e:6c:dd:cd:71: b3:f1:2a:59:d9:0c:37:91:90:7e:e2:82:7e:02:1c: ee:e9:ea:f7:cb:bb:a3:7a:81:88:c8:a0:ce:4c:dc: 54:b5:2f:32:17:ea:31:db:b2:94:bb:bc:71:e9:c8: c8:59:5f:20:44:a0:f1:a9:6a:99:11:cf:df:d8:c7: e1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:B9:CF:E3:74:EF:31:D5:A3:24:F1:7B:79:5F:3E:3E:19:F2:90 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:13:99:59:65:c0:b7:f8:aa:df:cb:23:aa:fd:f2:b6:8a:fa: d3:e1:e1:d5:8f:18:14:81:f0:3b:5b:87:18:70:6e:ab:bb:8c: dc:49:cb:81:b5:98:eb:47:be:f7:38:42:a7:e2:b6:21:fd:93: 63:0e:60:7c:f5:6d:4b:5d:9d:58:f0:0c:46:c0:46:8d:14:e0: 63:c8:69:30:5f:29:83:46:b3:da:6e:0f:39:b0:dc:a6:54:e0: a0:5a:ba:4a:9f:87:0e:b4:82:d4:10:36:40:36:67:4b:95:f8: 6a:dc:d0:d5:c2:32:fd:4d:0d:82:63:da:b4:6c:a7:a8:39:0f: 5c:cc:16:95:25:8b:fb:da:d2:03:72:48:2b:bc:8f:a7:07:2b: 41:32:0d:15:b7:84:06:a2:71:2c:cd:fd:63:46:90:43:8e:98: ba:81:d0:de:82:a4:74:dd:11:80:78:26:c0:04:85:3a:4f:32: 9b:cc:70:10:57:e5:8a:a4:e9:94:80:5d:55:b0:28:a7:ad:eb: 9e:80:ef:49:73:f5:0f:e9:1c:ce:71:fa:c3:62:ef:b0:a8:47: 98:d3:b3:e1:6f:15:f3:d1:79:94:02:75:81:b4:b7:2e:e2:14: f8:80:fd:35:d1:ab:64:8e:08:42:7a:8e:53:40:19:9c:8d:6a: 04:33:2b:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwOTI0MTYxNjE2WhcNMjYxMDAxMTYxNjE2WjAYMRYwFAYD VQQDEw02YWI1NGNkMC0zNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxqtJix/3mQbyYHKh6z5zpTdroYQXxyKdo9/Q39p4CkRWcZzCC961Rivf7S5 t4ew0IOTadYuyB75kxKdNUh9BQGsne2LWDAiFy3o/PlryP8jQBCDDV0kOykKns/o 8w36CK+MJ9qHb3+Do01ehlyI0uYuKr4ZesZGKZWn61g3xz4NdhHVCatd6jlP7NMS edpKK3AoM6Q5snkj3JDesmRPh6y703m79G/WT9+0nm6xseUvP/Ejs10MM9hsuMlB bmzdzXGz8SpZ2Qw3kZB+4oJ+Ahzu6er3y7ujeoGIyKDOTNxUtS8yF+ox27KUu7xx 6cjIWV8gRKDxqWqZEc/f2MfhsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQzuc/j dO8x1aMk8Xt5Xz4+GfKQMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzhOZWWXAt/iq38sjqv3ytor60+Hh1Y8YFIHwO1uHGHBuq7uM3EnLgbWY60e+ 9zhCp+K2If2TYw5gfPVtS12dWPAMRsBGjRTgY8hpMF8pg0az2m4PObDcplTgoFq6 Sp+HDrSC1BA2QDZnS5X4atzQ1cIy/U0NgmPatGynqDkPXMwWlSWL+9rSA3JIK7yP pwcrQTINFbeEBqJxLM39Y0aQQ46YuoHQ3oKkdN0RgHgmwASFOk8ym8xwEFfliqTp lIBdVbAop63rnoDvSXP1D+kcznH6w2LvsKhHmNOz4W8V89F5lAJ1gbS3LuIU+ID9 NdGrZI4IQnqOU0AZnI1qBDMrPA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:58:21 2026 by rpki-client