$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: 1rWyFrEdIj75PLiyKeTZScmfr7NSw4LjH1cIOvwrBtE= Subject key identifier: 5F:1F:EC:36:69:A5:EA:71:D7:47:0E:56:83:6B:5E:B0:D6:5B:60:B7 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: FB Signing time: Fri 25 Sep 2026 06:28:32 +0000 Manifest this update: Fri 25 Sep 2026 06:28:32 +0000 Manifest next update: Fri 02 Oct 2026 06:28:32 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: pHrXqaW/kuyv0r46Q0kqH1RnGRZjgitzBOmSHtbWaqQ=) 2: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) 3: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Sep 25 06:28:32 2026 GMT Not After : Oct 2 06:28:32 2026 GMT Subject: CN=6ab61490-0e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:21:bb:de:a3:66:62:37:d8:50:32:4a:48: f6:6d:28:fe:76:81:b2:8a:fe:97:79:25:8c:e1:70: 55:31:9a:1c:79:a6:3d:7b:41:95:89:10:2d:e7:76: d6:07:6b:18:fc:ee:77:be:cd:74:6f:cb:73:ef:5b: d1:b4:54:f9:e2:45:f7:b9:6d:20:af:92:75:b9:d4: 14:13:1b:8b:bc:98:a2:14:1e:f7:34:a1:58:ee:e8: a7:36:b0:9c:90:8c:15:03:7c:ae:4b:4c:11:3c:f9: d4:c7:04:fa:30:fc:cb:2f:b4:25:f3:f9:c1:06:98: 84:b6:55:23:19:a4:f3:29:1a:ca:e1:1c:eb:94:c8: 09:6a:2d:74:a6:c8:22:64:7b:50:25:64:41:50:b9: 0d:65:ab:ee:86:22:58:d3:b1:68:8a:a6:fa:50:34: 8c:ac:3a:9e:2a:2a:68:d6:d6:f7:09:6d:6b:49:bf: d1:92:2d:54:f7:27:7e:4d:e2:7c:3f:ea:52:98:4b: 03:fa:e3:66:23:e8:14:c4:e5:05:ce:8f:8b:41:7a: 8d:74:43:81:8b:e4:9d:6f:fa:e4:84:16:31:ce:46: 4e:e2:21:08:52:5e:79:bb:d7:4d:b2:d2:6d:0a:7f: 98:a1:d9:d9:fd:ae:14:58:7c:55:af:8d:76:ae:1f: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:EC:36:69:A5:EA:71:D7:47:0E:56:83:6B:5E:B0:D6:5B:60:B7 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:cc:6b:ff:28:60:24:a3:a4:42:91:67:3e:be:ea:3b:5a:51: f0:a1:10:de:e8:eb:03:5a:dc:28:38:11:1f:08:70:b2:d2:bf: 83:25:8e:02:84:74:88:81:54:73:ca:d5:42:72:63:0a:ce:d6: 34:aa:02:97:41:44:43:03:53:cd:bc:e9:33:f4:84:82:0b:df: 1e:01:aa:5c:52:df:99:a8:c1:dd:84:04:d3:89:e5:59:9a:08: 7d:20:4f:f3:6d:80:7c:ce:96:eb:d9:94:ff:65:f1:b7:ac:6d: ba:e3:4d:06:ef:63:90:09:70:df:27:61:29:b2:d3:01:af:96: 76:4c:4d:a4:29:21:2c:55:78:6a:29:fe:05:93:ee:bf:7b:e1: 7a:5a:b8:e4:1f:18:ce:9a:b6:9c:56:a8:e0:56:b2:db:02:5d: f6:eb:b9:fe:31:d9:f3:48:5b:cb:41:dd:85:d6:3f:d3:38:c8: ec:26:0e:ad:77:a9:25:ee:1f:95:bf:67:42:6e:47:81:51:e6: 44:ec:ff:dc:73:cf:1d:14:35:14:4e:ff:fd:8b:dc:8c:b5:33: e0:0a:36:42:a1:d2:26:8b:63:1c:d1:60:e3:d2:7f:1a:2a:39: 6d:b0:95:cc:99:4a:47:25:7b:7b:92:16:dc:d6:bf:73:f5:03: 84:e7:82:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwOTI1MDYyODMyWhcNMjYxMDAyMDYyODMyWjAYMRYwFAYD VQQDEw02YWI2MTQ5MC0wZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkeQhu96jZmI32FAySkj2bSj+doGyiv6XeSWM4XBVMZoceaY9e0GViRAt53bW B2sY/O53vs10b8tz71vRtFT54kX3uW0gr5J1udQUExuLvJiiFB73NKFY7uinNrCc kIwVA3yuS0wRPPnUxwT6MPzLL7Ql8/nBBpiEtlUjGaTzKRrK4RzrlMgJai10psgi ZHtQJWRBULkNZavuhiJY07Foiqb6UDSMrDqeKipo1tb3CW1rSb/Rki1U9yd+TeJ8 P+pSmEsD+uNmI+gUxOUFzo+LQXqNdEOBi+Sdb/rkhBYxzkZO4iEIUl55u9dNstJt Cn+YodnZ/a4UWHxVr412rh/ZKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8f7DZp pepx10cOVoNrXrDWW2C3MB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMxr/yhgJKOkQpFnPr7qO1pR8KEQ3ujrA1rcKDgRHwhwstK/gyWOAoR0iIFU c8rVQnJjCs7WNKoCl0FEQwNTzbzpM/SEggvfHgGqXFLfmajB3YQE04nlWZoIfSBP 822AfM6W69mU/2Xxt6xtuuNNBu9jkAlw3ydhKbLTAa+WdkxNpCkhLFV4ain+BZPu v3vhelq45B8Yzpq2nFao4Fay2wJd9uu5/jHZ80hby0HdhdY/0zjI7CYOrXepJe4f lb9nQm5HgVHmROz/3HPPHRQ1FE7//YvcjLUz4Ao2QqHSJotjHNFg49J/Gio5bbCV zJlKRyV7e5IW3Na/c/UDhOeCuA== -----END CERTIFICATE-----Generated at Sun Sep 27 03:47:58 2026 by rpki-client