$ rpki-client -vvvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json) Hash identifier: UZlT0Sz3KKwuBLIDijNIibzlYeQjn0IJTPJxof3S47s= Subject key identifier: 72:B8:31:FD:37:39:61:F4:2D:F0:5D:F9:8B:68:4A:4C:FE:C1:77:04 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft Manifest number: 0494 Signing time: Fri 25 Sep 2026 00:05:11 +0000 Manifest this update: Fri 25 Sep 2026 00:05:11 +0000 Manifest next update: Fri 02 Oct 2026 00:05:11 +0000 Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: GeMxTuO/4qWEX6vB8Wgo3OpEaMOaSzJ3XZ7Fv+2MgUo=) 2: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=) 3: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=) 4: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=) 5: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=) 6: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=) 7: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=) 8: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=) 9: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=) 10: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=) 11: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=) 12: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=) 13: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=) 14: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=) 15: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=) 16: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=) 17: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Sep 25 00:05:11 2026 GMT Not After : Oct 2 00:05:11 2026 GMT Subject: CN=6ab5bab7-72aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:6b:83:49:82:11:9d:3d:67:3d:a4:59:59: 65:30:d3:00:ff:a8:10:57:91:91:00:1f:72:ad:27: f2:bf:cb:80:cc:82:e6:39:6d:1b:6e:94:06:e9:02: 3e:a3:33:32:cb:3b:45:fa:3e:10:63:3f:76:59:3f: c4:ca:76:33:c4:dc:c1:ee:86:87:47:bb:0d:e5:ad: d6:50:4c:d0:37:27:1e:4e:04:7b:6a:11:10:a9:8f: e1:b2:19:0e:46:c3:59:d4:dc:ec:28:3d:36:d2:66: e9:c9:30:74:0a:fa:e0:5e:ac:7a:30:d4:91:a7:2c: e8:f8:15:dd:16:26:7c:59:69:14:9e:1f:87:f0:92: b3:cb:db:5e:64:86:f7:05:f0:ea:3f:af:f7:ed:b2: 8a:a1:40:ac:62:9a:9b:de:24:8f:fa:21:11:a8:c2: bd:2c:c8:0b:40:ca:ed:b1:f6:02:ee:50:af:18:aa: ab:92:8f:50:57:ad:85:df:f3:07:d6:7f:ed:90:c0: 09:5e:0e:c0:6a:e2:b5:c3:ff:a4:54:ca:23:47:ef: 3b:be:11:00:15:9e:db:9f:48:00:47:a9:4c:24:06: a9:d0:e7:6e:8d:f6:36:6a:76:52:ff:e5:6d:ae:65: bb:ca:09:6c:a9:0a:2e:bc:d3:e5:42:62:d1:5f:96: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B8:31:FD:37:39:61:F4:2D:F0:5D:F9:8B:68:4A:4C:FE:C1:77:04 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:fe:e4:65:fc:97:29:17:c7:98:42:ea:32:ca:11:69:ae:6c: e6:5e:7c:25:45:97:10:6c:6c:84:2a:92:2f:4b:5a:1c:01:b9: bd:6c:3a:0d:3e:a9:c1:f3:bd:23:d9:20:cb:35:e7:8e:7c:f8: 69:f4:c8:92:98:ad:39:8c:4c:43:cc:36:c3:92:19:7c:d6:c3: aa:76:b1:e5:ed:fb:dd:7c:21:40:08:ea:17:ff:4b:cc:0c:42: c6:e0:18:8d:af:68:9c:5e:68:6d:dd:55:0c:2e:59:65:54:b1: cd:5e:22:33:7e:c5:0e:0c:92:93:8b:42:86:ad:ed:60:ce:b7: dd:31:fc:38:0d:c4:e6:cc:f1:f1:c7:5f:7f:3a:5b:fb:ea:07: e7:05:f4:cc:43:42:6f:5c:6c:b3:ba:b2:10:10:0f:7b:e1:70: 24:69:3a:dc:98:19:8f:de:7f:5a:35:d7:77:4b:a9:dd:3c:15: 2a:db:3c:6e:93:0c:03:21:2b:2f:a5:f3:f2:81:22:e4:55:be: 7a:fa:37:a0:68:7c:64:19:26:69:33:67:d9:8d:6a:93:cc:38: fe:17:26:e4:9d:90:b0:66:80:cc:63:44:5e:87:0c:24:b0:47: e2:0a:dc:c9:2e:78:3e:54:8c:a4:8c:12:1f:62:77:33:07:75: 12:90:24:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjYwOTI1MDAwNTExWhcNMjYxMDAyMDAwNTExWjAYMRYwFAYD VQQDEw02YWI1YmFiNy03MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDVrg0mCEZ09Zz2kWVllMNMA/6gQV5GRAB9yrSfyv8uAzILmOW0bbpQG6QI+ ozMyyztF+j4QYz92WT/EynYzxNzB7oaHR7sN5a3WUEzQNyceTgR7ahEQqY/hshkO RsNZ1NzsKD020mbpyTB0CvrgXqx6MNSRpyzo+BXdFiZ8WWkUnh+H8JKzy9teZIb3 BfDqP6/37bKKoUCsYpqb3iSP+iERqMK9LMgLQMrtsfYC7lCvGKqrko9QV62F3/MH 1n/tkMAJXg7AauK1w/+kVMojR+87vhEAFZ7bn0gAR6lMJAap0OdujfY2anZS/+Vt rmW7yglsqQouvNPlQmLRX5YOOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK4Mf03 OWH0LfBd+YtoSkz+wXcEMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda cUV3d2xURU9hYl9TWUtxWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuP7kZfyXKRfHmELqMsoRaa5s5l58JUWXEGxshCqSL0taHAG5vWw6DT6pwfO9 I9kgyzXnjnz4afTIkpitOYxMQ8w2w5IZfNbDqnax5e373XwhQAjqF/9LzAxCxuAY ja9onF5obd1VDC5ZZVSxzV4iM37FDgySk4tChq3tYM633TH8OA3E5szx8cdffzpb ++oH5wX0zENCb1xss7qyEBAPe+FwJGk63JgZj95/WjXXd0up3TwVKts8bpMMAyEr L6Xz8oEi5FW+evo3oGh8ZBkmaTNn2Y1qk8w4/hcm5J2QsGaAzGNEXocMJLBH4grc yS54PlSMpIwSH2J3Mwd1EpAkqw== -----END CERTIFICATE-----Generated at Sat Sep 26 18:50:53 2026 by rpki-client