$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: ZdPtWONWoyyanoTnljDwjSGLvyuabGTp+08TD8n7tyc= Subject key identifier: AF:01:DC:F9:D5:B8:ED:2B:67:40:DA:25:56:31:54:C9:FD:8C:5F:E2 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0EA0 Signing time: Tue 22 Sep 2026 17:37:59 +0000 Manifest this update: Tue 22 Sep 2026 17:37:58 +0000 Manifest next update: Tue 29 Sep 2026 17:37:58 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: 8hvfcAYWoR7Ys61PZiXa/E9FKUyf8FBSrruEqT2ew9Y=) 2: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) 3: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Sep 22 17:37:58 2026 GMT Not After : Sep 29 17:37:58 2026 GMT Subject: CN=6ab2bcf6-7acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:28:10:34:b8:6f:e2:98:2c:87:d8:66:0a: 26:8d:ef:21:74:de:9a:be:c8:bd:42:35:af:b5:0b: 11:3a:42:b1:67:f8:6a:33:d4:21:16:08:4b:23:d9: 3f:9b:f3:3b:c9:34:3e:99:cb:06:27:99:92:cb:60: 2f:37:ae:25:75:17:b2:f4:f2:e5:10:f2:92:5d:a5: f7:1a:41:fa:ff:d4:84:51:b9:3b:c8:ae:19:89:8b: 5a:07:74:07:20:7a:6c:02:bd:08:e2:cc:d2:47:af: 54:23:ae:cf:0c:b8:63:5c:4b:17:51:a8:3b:cb:a7: 31:01:cf:77:39:3c:9a:84:ce:18:80:66:ba:48:c7: 15:30:3c:a9:36:68:03:92:95:49:cd:54:31:8c:24: 8c:88:f3:38:2e:83:a0:a6:f3:1e:28:98:46:b2:3d: 6a:c7:94:39:aa:a0:cd:bd:a7:8a:e1:bf:89:18:1e: 4e:2e:62:e1:03:6d:06:f5:7e:09:ef:e7:1e:67:fa: 06:73:a0:d0:1a:80:1f:49:41:3a:41:82:3d:59:6c: 3f:e0:1d:0c:a0:72:96:5f:95:4b:69:e7:5f:b5:e4: 9b:35:cb:c1:d3:06:f7:e5:3d:ad:2e:71:36:35:54: 9d:81:02:61:68:cc:f5:63:a2:42:34:5b:07:9f:a0: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:01:DC:F9:D5:B8:ED:2B:67:40:DA:25:56:31:54:C9:FD:8C:5F:E2 X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:79:5c:f4:91:c9:56:26:a5:3e:fe:68:4b:fa:62:d2:ca:0d: 3e:a9:0d:62:a7:cb:2d:81:49:38:b0:d3:14:23:f5:45:fd:ea: 2c:91:38:6c:9a:bf:d2:46:5b:fd:11:32:96:2c:31:4c:b1:74: 19:00:08:30:e4:9d:ca:fc:f6:a8:08:34:56:27:0f:58:a7:d2: 31:5a:17:b1:b4:e1:eb:d2:85:88:f7:1e:de:1f:45:64:ce:bf: 4a:11:75:64:3e:da:08:83:f3:6e:f4:26:fd:e0:b7:c4:c4:a0: 10:ab:7a:2c:69:da:08:69:fb:a4:fb:99:6a:0c:00:43:9c:ed: e8:18:83:75:a5:29:80:16:7a:61:80:ce:f2:73:42:95:27:28: 0d:d8:09:ef:de:17:d4:76:a8:66:2e:f0:19:53:e4:47:42:52: 32:13:4d:fd:96:38:2e:47:c9:99:e2:b7:dc:98:f8:4c:b8:2f: 7b:79:07:cb:82:83:c5:76:a5:54:6f:ea:04:82:88:10:1f:54: b7:4a:5b:ee:c2:da:6c:b2:35:0c:ee:99:51:4c:b2:8d:ea:56: 18:b0:d7:51:8f:84:8c:d1:74:44:a0:45:19:38:89:bc:32:01: f7:b0:d6:74:d6:05:5c:d4:1a:cd:4e:a4:b1:9f:51:ee:32:ab: b4:14:05:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwOTIyMTczNzU4WhcNMjYwOTI5MTczNzU4WjAYMRYwFAYD VQQDEw02YWIyYmNmNi03YWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy04oEDS4b+KYLIfYZgomje8hdN6avsi9QjWvtQsROkKxZ/hqM9QhFghLI9k/ m/M7yTQ+mcsGJ5mSy2AvN64ldRey9PLlEPKSXaX3GkH6/9SEUbk7yK4ZiYtaB3QH IHpsAr0I4szSR69UI67PDLhjXEsXUag7y6cxAc93OTyahM4YgGa6SMcVMDypNmgD kpVJzVQxjCSMiPM4LoOgpvMeKJhGsj1qx5Q5qqDNvaeK4b+JGB5OLmLhA20G9X4J 7+ceZ/oGc6DQGoAfSUE6QYI9WWw/4B0MoHKWX5VLaedfteSbNcvB0wb35T2tLnE2 NVSdgQJhaMz1Y6JCNFsHn6BOBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8B3PnV uO0rZ0DaJVYxVMn9jF/iMB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW3lc9JHJVialPv5oS/pi0soNPqkNYqfLLYFJOLDTFCP1Rf3qLJE4bJq/0kZb /REyliwxTLF0GQAIMOSdyvz2qAg0VicPWKfSMVoXsbTh69KFiPce3h9FZM6/ShF1 ZD7aCIPzbvQm/eC3xMSgEKt6LGnaCGn7pPuZagwAQ5zt6BiDdaUpgBZ6YYDO8nNC lScoDdgJ794X1HaoZi7wGVPkR0JSMhNN/ZY4LkfJmeK33Jj4TLgve3kHy4KDxXal VG/qBIKIEB9Ut0pb7sLabLI1DO6ZUUyyjepWGLDXUY+EjNF0RKBFGTiJvDIB97DW dNYFXNQazU6ksZ9R7jKrtBQFHg== -----END CERTIFICATE-----Generated at Thu Sep 24 20:12:20 2026 by rpki-client