$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json) Hash identifier: NXkRIT/qWMQMN6ZVZg5tyL3IZbHV8Anrij5hKt2Ik4o= Subject key identifier: 6E:75:C6:C7:02:09:45:46:0C:4A:DE:73:C7:C5:42:35:C5:65:14:66 Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft Manifest number: 0D91 Signing time: Tue 22 Sep 2026 17:49:23 +0000 Manifest this update: Tue 22 Sep 2026 17:49:22 +0000 Manifest next update: Tue 29 Sep 2026 17:49:22 +0000 Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: O8/cLUcS+kZN/0njl0IOaUkSlMxsRxAKQnUFgLyfmYg=) 2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=) 3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Sep 22 17:49:22 2026 GMT Not After : Sep 29 17:49:22 2026 GMT Subject: CN=6ab2bfa3-0420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:60:68:82:7a:6f:47:33:30:d1:23:91:8a: c6:33:b8:a6:a7:92:db:68:00:ed:54:be:72:fd:ee: 29:2e:7d:c8:47:b0:af:a0:f0:83:db:2f:47:14:e4: d3:17:15:57:c7:cb:78:96:fc:c0:8f:1f:7d:bc:8a: 7f:26:1a:30:08:30:ab:c1:f1:e2:86:33:c8:ae:eb: f8:d2:50:40:c3:7b:03:c7:fc:c4:4c:2e:2e:aa:e8: 10:d3:76:5c:a8:13:62:f4:77:aa:2f:e9:89:79:50: 38:d6:31:3e:eb:1c:25:aa:03:ca:8e:c9:76:14:20: 28:42:1b:5a:e5:78:d1:fd:b8:23:1e:49:4a:e2:5f: 35:fb:d8:a5:a1:64:9f:b1:ba:5d:c2:23:dd:57:dc: 09:c6:43:0c:57:bb:06:d9:50:de:11:07:ec:fe:ac: f1:d8:af:08:57:ba:7d:d0:0c:22:48:9f:ed:21:4d: ca:2a:8a:fb:d6:8b:01:21:bd:5f:77:ff:72:29:52: bf:81:4b:ba:b9:c0:58:5e:31:0d:f5:ed:a4:d2:cd: 4a:50:aa:0a:1f:07:fa:52:71:62:94:aa:20:a8:e9: 92:7e:1f:04:6a:3f:c7:28:b0:bd:da:c0:63:68:f7: a2:12:6b:8a:60:f5:7f:58:c0:69:40:0c:b7:56:50: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:75:C6:C7:02:09:45:46:0C:4A:DE:73:C7:C5:42:35:C5:65:14:66 X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:bb:c8:50:00:d7:60:27:63:a8:7e:f1:f9:69:a7:a3:fc: df:fc:a6:b2:55:ba:40:bf:5a:ae:29:61:20:8f:14:0b:c7:7b: 80:0d:ed:54:e2:b9:de:d9:d0:ac:37:2f:70:b0:c0:c1:27:c4: ca:20:a7:23:b9:95:d0:21:7f:a7:fb:62:a2:7a:64:48:ec:fe: e7:2e:16:06:5f:46:a9:f5:92:75:be:b9:72:c4:cd:05:1d:fc: 79:95:c3:c2:e9:02:3d:c0:ac:84:b4:2d:6a:05:15:41:2e:46: 56:b2:b7:5d:06:65:3a:9f:b8:c2:6b:89:f7:75:fa:07:b1:54: 67:9a:d2:5b:ff:f4:57:76:28:f4:3d:92:73:39:b0:83:9f:9b: 29:48:88:d1:de:1c:22:d1:d1:c7:9e:ee:51:8f:b3:ef:74:d4: 11:8b:7b:4b:d8:ef:e8:3e:63:6a:84:f6:59:b0:69:46:7a:80: f5:d2:c1:a4:2f:1f:f2:1c:ae:88:4e:62:32:41:98:80:a9:8f: fd:00:36:85:3a:02:c9:63:77:39:17:60:fd:b9:23:d4:a6:dd: 81:71:b1:e0:2b:7f:ca:df:4a:d9:83:8a:7d:df:44:96:f9:d6: c9:69:65:78:5e:67:96:5e:19:00:78:20:ca:f2:a0:be:d6:39: 69:b7:4c:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYwOTIyMTc0OTIyWhcNMjYwOTI5MTc0OTIyWjAYMRYwFAYD VQQDEw02YWIyYmZhMy0wNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhuxgaIJ6b0czMNEjkYrGM7imp5LbaADtVL5y/e4pLn3IR7CvoPCD2y9HFOTT FxVXx8t4lvzAjx99vIp/JhowCDCrwfHihjPIruv40lBAw3sDx/zETC4uqugQ03Zc qBNi9HeqL+mJeVA41jE+6xwlqgPKjsl2FCAoQhta5XjR/bgjHklK4l81+9iloWSf sbpdwiPdV9wJxkMMV7sG2VDeEQfs/qzx2K8IV7p90AwiSJ/tIU3KKor71osBIb1f d/9yKVK/gUu6ucBYXjEN9e2k0s1KUKoKHwf6UnFilKogqOmSfh8Eaj/HKLC92sBj aPeiEmuKYPV/WMBpQAy3VlAVZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG51xscC CUVGDErec8fFQjXFZRRmMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUIxQS81MUZGQzRFNEY0MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdr a2lvankxWmIyQ0czNGdwaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5i7yFAA12AnY6h+8flpp6P83/ymslW6QL9arilhII8UC8d7gA3tVOK53tnQ rDcvcLDAwSfEyiCnI7mV0CF/p/tionpkSOz+5y4WBl9GqfWSdb65csTNBR38eZXD wukCPcCshLQtagUVQS5GVrK3XQZlOp+4wmuJ93X6B7FUZ5rSW//0V3Yo9D2Sczmw g5+bKUiI0d4cItHRx57uUY+z73TUEYt7S9jv6D5jaoT2WbBpRnqA9dLBpC8f8hyu iE5iMkGYgKmP/QA2hToCyWN3ORdg/bkj1KbdgXGx4Ct/yt9K2YOKfd9ElvnWyWll eF5nll4ZAHggyvKgvtY5abdMgg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:58:12 2026 by rpki-client