$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: ZeQ+ZLF7Kt7mB1fKlqFKfS5ai58HdeZP1vN5VEQKXXw= Subject key identifier: DE:A4:41:30:F9:2B:55:3B:81:B6:B6:EB:38:03:37:FD:AE:8C:C2:C9 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 52 Signing time: Wed 07 Oct 2026 08:57:57 +0000 Manifest this update: Wed 07 Oct 2026 08:57:57 +0000 Manifest next update: Wed 14 Oct 2026 08:57:57 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: Kuore/Z3MqN1Jc+Z+1mSbTDtedVkyI3dhVd8zivxD/Y=) 2: 4AD1AFC68B4411F19D71DC304611F970.roa (hash: gf8lSy8wkZH8qCSrtJuZGlJ39naUzvYsMACZ0CI5CIk=) 3: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: y9+JPXyT0FWli2rFe02X9Rp+3IY1XBO0wI8O2EgZRdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 08:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Oct 7 08:57:57 2026 GMT Not After : Oct 14 08:57:57 2026 GMT Subject: CN=6ac60995-f28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:9f:36:25:5c:eb:0d:e3:e3:44:eb:69:38: 65:a8:f9:d9:80:98:2c:da:9d:52:bd:bc:3b:12:ae: f2:59:55:a5:2e:53:6c:46:ea:b0:27:d3:7e:9e:66: 04:15:83:3d:54:ef:b7:e6:62:cb:ec:eb:8c:22:99: c6:f2:65:75:7a:eb:5e:11:fb:4b:ec:a5:a9:76:55: 7d:cc:dd:e0:95:d1:b7:19:7e:63:5b:f4:38:a8:2f: 5b:6b:fb:8b:ae:ea:bd:9d:40:9c:d4:98:f5:62:91: b0:15:bd:0d:22:b8:36:c6:22:03:a6:73:c8:53:fe: 87:e1:50:52:29:78:89:f9:fe:3f:5f:b7:21:78:af: 3b:6e:ee:cd:50:26:17:54:d4:82:47:15:48:f7:06: b3:04:db:0b:19:9f:43:3d:bd:7e:e2:c1:1b:bb:fb: 92:bd:d9:12:3a:0b:9d:a6:d3:5e:0f:5d:a2:3b:f8: 2b:86:6a:cf:16:4e:01:9d:19:49:2e:1f:65:ff:bf: 19:29:56:28:3c:40:4b:b0:70:80:a3:ff:69:b3:ed: 3b:23:92:ce:8c:55:59:08:cc:a3:de:ab:09:ba:cd: 8b:a9:0e:33:01:de:f8:34:37:cf:4c:55:a4:fe:f4: dd:b0:8f:7c:d3:65:b7:af:91:3d:c6:86:72:53:e9: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A4:41:30:F9:2B:55:3B:81:B6:B6:EB:38:03:37:FD:AE:8C:C2:C9 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:6d:3e:e2:e2:63:04:9b:58:1e:46:c2:13:ef:0e:53:2d:ea: d5:f9:e1:9f:96:1f:b4:83:ae:85:38:92:93:e7:90:c5:5c:f7: aa:04:ba:eb:67:4e:c7:e0:28:ca:1a:1e:63:0b:c3:91:c0:a1: 66:d5:c5:be:48:27:10:45:17:dd:44:7f:59:c1:27:51:e6:ab: 7f:a0:19:27:ef:e9:48:9d:25:c7:0e:a9:fd:b2:5a:45:d8:85: 26:66:e4:c4:cc:05:31:79:ce:d0:db:f9:e3:18:fc:ac:1e:7d: 1b:6b:95:ae:12:12:3f:e9:d6:20:bd:d3:60:07:a2:c3:4c:bd: 07:3e:03:b2:55:6b:93:35:cc:df:b3:b7:a9:4a:f2:90:08:d4: 7d:aa:2f:1e:e5:e1:a3:36:6b:f8:80:77:41:74:be:98:c2:58: 1a:04:47:39:99:5f:85:85:81:74:ef:2b:ad:7a:9f:f8:e0:87: 74:58:a5:7b:ce:df:ae:bf:36:95:ab:79:5e:57:d8:79:50:0b: 07:f9:c3:57:6f:c2:a0:ab:bf:93:75:fe:1b:18:47:7c:49:66: 83:51:e9:28:35:a5:79:63:c2:32:88:7e:87:cb:b7:e7:38:4d: 5d:66:85:f1:ab:c7:3a:30:8f:65:42:2b:71:0a:b7:99:18:56: f6:6f:4c:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjEwMDcwODU3NTdaFw0yNjEwMTQwODU3NTdaMBgxFjAUBgNV BAMTDTZhYzYwOTk1LWYyOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiQp82JVzrDePjROtpOGWo+dmAmCzanVK9vDsSrvJZVaUuU2xG6rAn036eZgQV gz1U77fmYsvs64wimcbyZXV6614R+0vspal2VX3M3eCV0bcZfmNb9DioL1tr+4uu 6r2dQJzUmPVikbAVvQ0iuDbGIgOmc8hT/ofhUFIpeIn5/j9ftyF4rztu7s1QJhdU 1IJHFUj3BrME2wsZn0M9vX7iwRu7+5K92RI6C52m014PXaI7+CuGas8WTgGdGUku H2X/vxkpVig8QEuwcICj/2mz7Tsjks6MVVkIzKPeqwm6zYupDjMB3vg0N89MVaT+ 9N2wj3zTZbevkT3GhnJT6duDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3qRBMPkr VTuBtrbrOAM3/a6MwskwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCibT7i4mMEm1geRsIT7w5TLerV+eGflh+0g66FOJKT55DFXPeqBLrrZ07H4CjK Gh5jC8ORwKFm1cW+SCcQRRfdRH9ZwSdR5qt/oBkn7+lInSXHDqn9slpF2IUmZuTE zAUxec7Q2/njGPysHn0ba5WuEhI/6dYgvdNgB6LDTL0HPgOyVWuTNczfs7epSvKQ CNR9qi8e5eGjNmv4gHdBdL6YwlgaBEc5mV+FhYF07yutep/44Id0WKV7zt+uvzaV q3leV9h5UAsH+cNXb8Kgq7+Tdf4bGEd8SWaDUekoNaV5Y8IyiH6Hy7fnOE1dZoXx q8c6MI9lQitxCreZGFb2b0w0 -----END CERTIFICATE-----Generated at Thu Oct 8 08:34:03 2026 by rpki-client