$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: jeoX21Un8XB29+8dyCzMXWBLKrdPhzP/vgFccpheOj8= Subject key identifier: 38:B5:B7:08:70:CE:28:84:9F:94:B1:AA:C3:38:1E:75:8A:13:25:62 Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 24 Signing time: Wed 23 Sep 2026 01:27:44 +0000 Manifest this update: Wed 23 Sep 2026 01:27:44 +0000 Manifest next update: Wed 30 Sep 2026 01:27:44 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: duIcDWzzdoHJNK+QgXv8DkU9EtMkqUGcaFdohYG87OM=) 2: DDDCEA1E8CD011F192D42A854011F970.roa (hash: g7heFy4fxock6S6CcqutuLaz4uE4rAZir+13UMjp2Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Sep 23 01:27:44 2026 GMT Not After : Sep 30 01:27:44 2026 GMT Subject: CN=6ab32b10-5dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:93:e7:c2:6e:57:57:06:6e:bf:a3:05:e9: f0:5a:80:fc:65:ad:86:6c:7e:3f:c8:b6:2f:8a:eb: cf:2a:43:b8:64:58:5d:c4:e6:a9:fb:c5:46:88:49: ab:ea:72:c4:18:36:f6:e7:30:04:9c:38:39:3b:29: 3b:8d:9d:6c:50:7f:d3:94:b8:72:92:5c:7c:23:b6: 7a:62:70:49:a9:48:63:bb:53:76:4a:44:a0:b8:fd: e7:3b:b9:02:13:cd:5a:d8:8e:fa:38:69:c9:a4:9c: 52:79:11:4a:70:69:77:ab:35:a0:ca:7b:86:0f:90: 38:d5:80:4b:17:6a:0b:31:8d:ac:28:b0:3b:9f:fe: 6a:00:de:fd:d6:ab:c2:4e:19:2e:7a:49:c1:04:15: f7:f7:06:67:20:2c:20:cc:fa:85:02:b7:07:3f:59: 52:a7:b9:49:16:dc:81:dc:a0:a9:d0:73:b8:bd:d2: 41:83:f6:28:8b:95:47:20:47:9d:65:58:7a:5e:61: c7:9f:64:46:18:bf:73:5c:d6:48:5d:b4:1c:91:16: ea:6c:aa:a5:6c:84:00:47:3c:fb:7e:96:86:4a:6d: 06:13:d9:d3:57:24:33:c9:0a:8e:4a:4d:f1:e9:fe: dc:ce:93:94:64:99:56:38:e9:db:5f:4a:44:0b:12: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:B7:08:70:CE:28:84:9F:94:B1:AA:C3:38:1E:75:8A:13:25:62 X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:76:67:15:11:6f:81:a1:7f:cc:8b:05:e1:39:31:13:71:0b: 98:b1:81:18:eb:b7:8d:9e:e2:de:39:b5:2e:8e:18:ce:3e:f7: 7b:1f:75:2d:f4:ff:e5:ef:e7:34:7e:51:13:c8:d3:b7:7f:d1: 7a:42:c1:b8:8e:94:db:d1:87:48:cc:7e:c5:c2:fb:84:6c:1c: 19:26:ce:9f:c6:0c:95:a5:29:77:73:33:60:86:20:99:25:c4: 9a:03:c7:32:61:f7:d9:7a:33:84:71:9a:26:8f:ec:7e:96:d4: 74:92:9c:5e:f8:c7:35:72:af:ce:bd:96:8d:4b:68:64:2c:18: 8f:ae:cc:79:7a:6a:7e:74:92:3e:6a:52:5d:44:1a:ca:c6:c2: c9:e5:11:b0:1a:91:4e:67:73:96:40:a7:bb:84:7b:7d:e9:e7: 4f:7b:19:ce:f3:d9:5d:d9:c8:2d:be:26:66:29:08:3b:32:3f: 86:77:79:2a:37:fc:67:9a:9c:e3:2b:c7:0f:9a:14:1b:e2:7f: b1:4a:b8:98:d2:d5:a3:62:b2:66:33:c1:dd:8e:4d:ec:6d:c3: 13:a1:1e:17:2b:4d:ff:d5:ad:64:ac:93:20:58:53:cd:ae:27: 1a:57:f4:ba:50:69:0f:ee:bc:15:6e:aa:b1:10:63:de:b0:a5: bf:41:cf:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjA5MjMwMTI3NDRaFw0yNjA5MzAwMTI3NDRaMBgxFjAUBgNV BAMTDTZhYjMyYjEwLTVkYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuA5Pnwm5XVwZuv6MF6fBagPxlrYZsfj/Iti+K688qQ7hkWF3E5qn7xUaISavq csQYNvbnMAScODk7KTuNnWxQf9OUuHKSXHwjtnpicEmpSGO7U3ZKRKC4/ec7uQIT zVrYjvo4acmknFJ5EUpwaXerNaDKe4YPkDjVgEsXagsxjawosDuf/moA3v3Wq8JO GS56ScEEFff3BmcgLCDM+oUCtwc/WVKnuUkW3IHcoKnQc7i90kGD9iiLlUcgR51l WHpeYcefZEYYv3Nc1khdtByRFupsqqVshABHPPt+loZKbQYT2dNXJDPJCo5KTfHp /tzOk5RkmVY46dtfSkQLEhaPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOLW3CHDO KISflLGqwzgedYoTJWIwHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCddmcVEW+BoX/MiwXhOTETcQuYsYEY67eNnuLeObUujhjOPvd7H3Ut9P/l7+c0 flETyNO3f9F6QsG4jpTb0YdIzH7FwvuEbBwZJs6fxgyVpSl3czNghiCZJcSaA8cy YffZejOEcZomj+x+ltR0kpxe+Mc1cq/OvZaNS2hkLBiPrsx5emp+dJI+alJdRBrK xsLJ5RGwGpFOZ3OWQKe7hHt96edPexnO89ld2cgtviZmKQg7Mj+Gd3kqN/xnmpzj K8cPmhQb4n+xSriY0tWjYrJmM8Hdjk3sbcMToR4XK03/1a1krJMgWFPNricaV/S6 UGkP7rwVbqqxEGPesKW/Qc+n -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:34 2026 by rpki-client