$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: 0fRiwxH2UXubD5HzJJCuwuo0euYb9YK73d34h4q4Ntw= Subject key identifier: 39:DB:86:7C:64:27:5E:34:DF:E0:E2:5A:48:5E:76:77:76:DA:B7:3F Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0552 Signing time: Thu 24 Sep 2026 23:16:42 +0000 Manifest this update: Thu 24 Sep 2026 23:16:41 +0000 Manifest next update: Thu 01 Oct 2026 23:16:41 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: bbqiXI26UTQI+fHVBtHTg2yZ7q58yYZVqhzVhu+nzUY=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Sep 24 23:16:41 2026 GMT Not After : Oct 1 23:16:41 2026 GMT Subject: CN=6ab5af59-a3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:a3:0e:52:db:28:5e:6b:32:4c:5e:83:d4: b6:32:bd:7a:49:2f:48:c2:88:2e:29:70:37:d2:0c: e0:7a:6e:8e:7b:3c:2f:b5:3b:74:a9:56:d0:71:a6: 77:54:e2:1b:e4:8f:8d:15:90:5f:80:0e:2b:33:8e: 50:a2:93:26:d3:2e:ce:1e:0c:fc:e1:ca:cc:1e:11: 80:a3:81:91:3f:cf:d7:52:eb:eb:63:4e:11:14:1c: 49:bf:f6:6b:41:0a:6e:20:84:da:9e:10:a5:ff:ad: 96:f7:7f:4c:d9:26:b6:c7:7d:a4:42:0f:54:76:30: 6d:78:24:da:61:62:44:1e:e6:b0:a8:32:13:d3:33: c5:d1:ee:cc:24:7d:07:ac:6d:d1:05:0a:18:99:c1: d3:f9:66:92:22:5e:fd:b0:e1:c7:1f:ac:e2:d9:7f: 15:65:df:2d:c4:f5:c3:6b:26:7a:ff:3a:56:15:f3: 84:2e:54:b6:c2:f4:db:e8:9e:a1:d3:cf:4c:b5:94: ee:a1:b2:b3:32:93:1c:b6:90:1b:c4:ef:79:a6:eb: 4e:c1:3a:dc:7c:2c:68:35:1a:10:19:21:87:e5:a2: 38:f6:58:db:c1:e6:2b:b3:6b:80:88:8d:92:c0:ef: f7:99:03:b9:6c:e8:ec:2c:14:82:7d:1a:35:0c:05: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:86:7C:64:27:5E:34:DF:E0:E2:5A:48:5E:76:77:76:DA:B7:3F X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0b:43:e7:f4:fd:f4:2a:65:5d:a9:bf:0b:e3:01:9b:7b:6e: cc:d7:84:25:d9:3c:26:a0:ee:1c:e1:6d:fc:2e:66:9d:10:1f: 16:38:b7:84:45:e0:3a:a9:c8:57:3f:0f:dd:ba:b9:93:d8:05: 1f:ea:fc:77:ea:7f:3c:b4:46:7e:ad:01:9f:72:63:70:16:cb: 35:7c:0c:3e:58:c7:88:6a:51:df:c7:68:52:ec:c4:d2:78:dc: e1:55:80:c4:e9:51:63:28:4a:b3:d7:a5:ea:e8:b4:fd:df:2f: 1a:01:2f:c8:2e:16:02:33:e8:ea:69:2b:0d:ea:df:70:e7:de: e0:dc:7d:ef:e9:68:61:bc:3b:6c:18:93:9e:3a:a7:98:9a:03: bb:21:1e:93:cd:19:f4:88:79:33:46:63:38:bf:e4:11:2e:92: c0:3f:0d:22:0c:ec:1c:97:62:3f:f7:04:4f:38:8f:6a:01:54: 38:08:0d:da:31:89:36:5d:8d:d4:e0:d5:22:98:f5:6a:b5:62: 1f:a1:42:1f:fd:55:99:92:b6:26:b1:08:77:1a:d0:61:4c:67: 7e:a1:5c:bb:ca:93:8f:8a:2e:5e:d7:e6:85:c4:63:1b:f1:3a: 65:63:84:9c:f5:f0:22:c9:4a:53:d3:ae:b1:02:f5:c7:9d:d6: 8a:1f:34:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjYwOTI0MjMxNjQxWhcNMjYxMDAxMjMxNjQxWjAYMRYwFAYD VQQDEw02YWI1YWY1OS1hM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUSjDlLbKF5rMkxeg9S2Mr16SS9IwoguKXA30gzgem6OezwvtTt0qVbQcaZ3 VOIb5I+NFZBfgA4rM45QopMm0y7OHgz84crMHhGAo4GRP8/XUuvrY04RFBxJv/Zr QQpuIITanhCl/62W939M2Sa2x32kQg9UdjBteCTaYWJEHuawqDIT0zPF0e7MJH0H rG3RBQoYmcHT+WaSIl79sOHHH6zi2X8VZd8txPXDayZ6/zpWFfOELlS2wvTb6J6h 089MtZTuobKzMpMctpAbxO95putOwTrcfCxoNRoQGSGH5aI49ljbweYrs2uAiI2S wO/3mQO5bOjsLBSCfRo1DAV87QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnbhnxk J1403+DiWkhednd22rc/MB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAawtD5/T99CplXam/C+MBm3tuzNeEJdk8JqDuHOFt/C5mnRAfFji3hEXgOqnI Vz8P3bq5k9gFH+r8d+p/PLRGfq0Bn3JjcBbLNXwMPljHiGpR38doUuzE0njc4VWA xOlRYyhKs9el6ui0/d8vGgEvyC4WAjPo6mkrDerfcOfe4Nx97+loYbw7bBiTnjqn mJoDuyEek80Z9Ih5M0ZjOL/kES6SwD8NIgzsHJdiP/cETziPagFUOAgN2jGJNl2N 1ODVIpj1arViH6FCH/1VmZK2JrEIdxrQYUxnfqFcu8qTj4ouXtfmhcRjG/E6ZWOE nPXwIslKU9OusQL1x53Wih80BA== -----END CERTIFICATE-----Generated at Fri Sep 25 13:53:46 2026 by rpki-client