$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: Tvg3ghMbvzWP0eBFqXCeDM3y3HteM3F9GQOXoX179ik= Subject key identifier: 6D:1C:45:2F:12:03:55:BA:54:FB:96:AD:0A:7B:CF:B5:12:60:42:48 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 0294 Signing time: Fri 25 Sep 2026 01:52:16 +0000 Manifest this update: Fri 25 Sep 2026 01:52:15 +0000 Manifest next update: Fri 02 Oct 2026 01:52:15 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: 122EH/53kps4XFB5lI5sZeXV6X4jWZ/z1aKVJBNP70g=) 2: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: txSvzTPr2599JY/devjyQjZpXUdF6ZNG1hcHHYqrLIA=) 3: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: z04Vftmrg2QbTvPdZ6E5RXhqc7guf0iEptckFIG+yc8=) 4: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: OGuYh+AxdFGbpXMOTasU8EIj52mT5htTsl1m4is8Y4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Sep 25 01:52:15 2026 GMT Not After : Oct 2 01:52:15 2026 GMT Subject: CN=6ab5d3cf-dc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:fb:24:ba:eb:96:bb:9d:6f:5c:71:5e:5a: a6:e9:3b:69:dd:63:7f:90:71:73:e8:83:dd:f1:8a: 00:7e:9f:5a:69:19:8a:c1:4f:6e:f8:bf:b0:97:cf: a7:de:ce:a6:99:f1:22:e5:fe:b5:8f:e0:20:32:28: e7:4b:03:c7:38:46:a3:1b:07:83:68:1c:29:5f:5f: 67:8c:44:20:e6:97:0d:f7:b9:a6:36:a9:b7:76:74: e0:0b:36:ee:42:87:87:17:1e:b6:16:df:6e:3b:fb: ef:11:d0:dc:84:01:4a:94:52:cf:4a:7b:82:93:43: 08:a7:e6:93:ab:e7:8b:6b:70:ec:9a:f7:94:c2:3f: ca:ea:d7:33:37:55:2e:36:31:43:2e:c7:6f:e0:69: 6d:f9:d8:9c:53:61:b9:24:6c:54:25:09:21:ab:c3: cb:60:57:cd:e4:b2:b3:39:8e:c2:7f:54:29:e1:64: b2:3d:2f:11:c8:c9:d2:00:e9:8f:30:d3:58:eb:36: 40:05:3b:4b:c1:d5:40:c0:7d:ed:71:75:2f:70:02: 93:ed:57:d9:57:3d:21:3d:3a:bf:5b:f1:3d:58:b3: 0f:e5:c2:59:65:64:42:a0:9c:c8:28:c8:ff:61:37: 93:b2:c2:5f:2e:cb:6c:91:b4:10:99:6c:d8:f8:d6: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:45:2F:12:03:55:BA:54:FB:96:AD:0A:7B:CF:B5:12:60:42:48 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:88:04:05:f2:55:4c:6f:7c:4d:b2:d6:0b:6d:ed:8c:60: 06:83:25:1c:e3:01:98:16:b9:49:d8:1a:64:5f:65:b7:14:75: 23:c5:9d:3b:cc:db:3f:49:b6:b2:4c:06:22:67:42:05:b9:a0: 97:1d:10:c9:ad:a8:fa:cb:08:ca:ef:d2:28:a6:75:27:47:b8: f9:99:8b:10:54:2b:f7:7c:83:40:87:97:6a:a4:eb:98:09:4e: 59:b3:88:df:9b:82:3c:c3:39:4c:45:38:69:a4:0b:a3:17:be: a9:f9:a1:10:56:ca:cf:fb:05:64:f2:ec:b1:ea:a4:8f:f3:a8: 1f:9b:ae:ac:da:72:ea:7e:fb:48:d1:b0:df:49:94:99:e7:96: 55:62:c1:86:84:d0:27:7e:5b:ea:98:f2:c6:c6:13:3d:0e:d7: 90:30:bc:c9:22:be:11:27:c3:f9:b4:a8:c5:98:d0:b7:27:22: a5:9f:7f:d9:83:67:71:85:72:1a:09:50:82:82:c3:4e:a5:17: f9:64:07:b4:93:33:30:3f:a5:9c:56:52:2b:e1:d5:29:3d:ad: 71:6a:3d:94:bd:7b:64:91:ae:d1:36:63:ed:0d:03:66:f2:44: d9:0a:6c:77:40:99:b8:4d:74:b3:97:b9:0b:6b:5f:6a:2d:98: 84:f9:a0:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwOTI1MDE1MjE1WhcNMjYxMDAyMDE1MjE1WjAYMRYwFAYD VQQDEw02YWI1ZDNjZi1kYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBb7JLrrlrudb1xxXlqm6Ttp3WN/kHFz6IPd8YoAfp9aaRmKwU9u+L+wl8+n 3s6mmfEi5f61j+AgMijnSwPHOEajGweDaBwpX19njEQg5pcN97mmNqm3dnTgCzbu QoeHFx62Ft9uO/vvEdDchAFKlFLPSnuCk0MIp+aTq+eLa3DsmveUwj/K6tczN1Uu NjFDLsdv4Glt+dicU2G5JGxUJQkhq8PLYFfN5LKzOY7Cf1Qp4WSyPS8RyMnSAOmP MNNY6zZABTtLwdVAwH3tcXUvcAKT7VfZVz0hPTq/W/E9WLMP5cJZZWRCoJzIKMj/ YTeTssJfLstskbQQmWzY+NZSwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0cRS8S A1W6VPuWrQp7z7USYEJIMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRmIBAXyVUxvfE2y1gtt7YxgBoMlHOMBmBa5SdgaZF9ltxR1I8WdO8zbP0m2 skwGImdCBbmglx0Qya2o+ssIyu/SKKZ1J0e4+ZmLEFQr93yDQIeXaqTrmAlOWbOI 35uCPMM5TEU4aaQLoxe+qfmhEFbKz/sFZPLsseqkj/OoH5uurNpy6n77SNGw30mU meeWVWLBhoTQJ35b6pjyxsYTPQ7XkDC8ySK+ESfD+bSoxZjQtycipZ9/2YNncYVy GglQgoLDTqUX+WQHtJMzMD+lnFZSK+HVKT2tcWo9lL17ZJGu0TZj7Q0DZvJE2Qps d0CZuE10s5e5C2tfai2YhPmgeg== -----END CERTIFICATE-----Generated at Fri Sep 25 05:01:33 2026 by rpki-client