$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: S5FlWFESh2prSBUe81gIkjSadNZoaZgpMClq+Yy3JyY= Subject key identifier: 56:9B:7E:FE:0C:17:09:34:DF:A3:6A:9A:53:8D:D5:AF:3A:EB:ED:D3 Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: 01A2 Signing time: Sat 31 Oct 2026 04:44:55 +0000 Manifest this update: Sat 31 Oct 2026 04:44:54 +0000 Manifest next update: Sat 07 Nov 2026 04:44:54 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: oh8eY4hqkloPC2Pz0aGUj5rly198Q1tVn5Wgo/5h7X0=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: 3BbSb2IhHmY4TC9+zwVnLHP/QzgOyZfeKreED1mPL28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Oct 31 04:44:54 2026 GMT Not After : Nov 7 04:44:54 2026 GMT Subject: CN=6ae57247-aa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:bd:41:51:71:77:02:79:43:25:07:cd:07: 0b:6e:5d:1f:f4:d6:55:c6:11:63:12:95:20:c7:ed: 2c:07:29:67:d8:be:fc:2f:7a:03:59:fa:a0:ec:a0: 59:ee:53:2e:65:82:47:60:25:98:88:f4:a4:85:2c: b1:49:39:85:3c:88:4f:35:59:0e:c6:59:7f:a8:58: db:5d:0e:79:62:ea:96:b0:2a:35:18:3d:43:4b:22: 58:c2:b1:7b:d7:10:23:1f:75:38:07:78:6b:79:7f: fa:5d:2e:b6:37:f6:b7:ba:5f:c0:29:39:1e:48:61: 8b:1f:d2:ba:8f:ba:44:57:85:43:57:ba:32:21:28: cc:1f:60:bd:34:35:b0:e1:b3:f4:59:4d:84:b1:1b: 2e:06:2b:95:db:54:b2:c6:52:eb:56:bf:05:c5:e6: c3:55:9d:7d:45:b6:9e:aa:9f:0f:8b:ae:ed:d5:9c: 89:85:c2:2e:c1:9d:8a:30:2d:1d:02:ab:1d:14:8e: cb:d8:8a:cf:e6:bc:5c:e7:6f:f6:ad:32:4f:10:e3: dd:a5:e9:42:62:39:74:9b:00:11:15:7c:e5:d2:c4: 51:58:5d:ea:47:3d:20:4b:dd:79:c4:c9:88:d6:de: 11:02:43:77:41:6e:75:30:b9:ef:da:5f:cd:2f:c5: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:7E:FE:0C:17:09:34:DF:A3:6A:9A:53:8D:D5:AF:3A:EB:ED:D3 X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:28:b4:cf:0e:88:0c:a2:b1:db:16:72:44:e8:6e:0c:6c:ab: 1a:63:b8:b4:d4:10:e6:55:ae:72:a8:ab:ba:69:21:fa:1e:3c: 75:b3:b9:a5:53:f8:08:bb:1c:2f:9d:4a:5a:97:c9:86:53:77: dc:62:11:e8:12:26:df:f7:22:38:80:68:72:ce:55:32:ab:3b: 4b:96:a8:53:39:06:13:76:44:9d:37:94:89:1e:bb:82:0e:66: f5:c8:c8:3f:28:dc:53:b9:32:06:9c:d3:01:86:60:b1:b4:8a: e8:1b:79:9b:39:f4:30:a8:f9:c1:ab:2d:9b:80:e6:5a:df:cd: a5:56:f7:3c:af:09:44:c3:90:87:53:d5:4e:73:43:04:ba:f9: 99:95:1b:6d:dc:7d:f6:d6:43:56:13:cf:22:ee:ad:04:c3:36: df:61:40:24:90:57:fa:85:f9:8e:55:ec:14:ce:24:cc:8a:4a: 39:e8:13:3d:14:48:28:80:28:ed:2f:6c:87:24:a0:5e:e2:95: 1c:8a:a1:2c:81:58:17:e2:54:82:e4:da:98:c7:89:32:27:a1: 26:4d:b4:cb:29:86:95:03:5f:fc:e9:c9:fb:7a:32:b1:f3:9f: d6:77:fa:ea:00:ec:4c:f3:82:1c:45:57:38:70:4b:f2:80:4e: 45:e2:d1:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjYxMDMxMDQ0NDU0WhcNMjYxMTA3MDQ0NDU0WjAYMRYwFAYD VQQDEw02YWU1NzI0Ny1hYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq29QVFxdwJ5QyUHzQcLbl0f9NZVxhFjEpUgx+0sByln2L78L3oDWfqg7KBZ 7lMuZYJHYCWYiPSkhSyxSTmFPIhPNVkOxll/qFjbXQ55YuqWsCo1GD1DSyJYwrF7 1xAjH3U4B3hreX/6XS62N/a3ul/AKTkeSGGLH9K6j7pEV4VDV7oyISjMH2C9NDWw 4bP0WU2EsRsuBiuV21SyxlLrVr8FxebDVZ19Rbaeqp8Pi67t1ZyJhcIuwZ2KMC0d AqsdFI7L2IrP5rxc52/2rTJPEOPdpelCYjl0mwARFXzl0sRRWF3qRz0gS915xMmI 1t4RAkN3QW51MLnv2l/NL8VndwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFabfv4M Fwk036NqmlON1a866+3TMB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbyi0zw6IDKKx2xZyROhuDGyrGmO4tNQQ5lWucqirumkh+h48dbO5pVP4CLsc L51KWpfJhlN33GIR6BIm3/ciOIBocs5VMqs7S5aoUzkGE3ZEnTeUiR67gg5m9cjI PyjcU7kyBpzTAYZgsbSK6Bt5mzn0MKj5wastm4DmWt/NpVb3PK8JRMOQh1PVTnND BLr5mZUbbdx99tZDVhPPIu6tBMM232FAJJBX+oX5jlXsFM4kzIpKOegTPRRIKIAo 7S9shySgXuKVHIqhLIFYF+JUguTamMeJMiehJk20yymGlQNf/OnJ+3oysfOf1nf6 6gDsTPOCHEVXOHBL8oBOReLR3g== -----END CERTIFICATE-----Generated at Sat Oct 31 14:26:56 2026 by rpki-client