$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: 30euZ4A6oFhycjfb6KvGYHAb6TC6qWxEllk9raheOzs= Subject key identifier: 9E:58:41:43:B7:B0:6A:B5:84:1B:0A:0F:A9:B0:9F:E2:76:6E:72:A0 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 02D4 Signing time: Wed 23 Sep 2026 00:58:08 +0000 Manifest this update: Wed 23 Sep 2026 00:58:08 +0000 Manifest next update: Wed 30 Sep 2026 00:58:08 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: s+PJW8BwmnRgLLFT6Xjh+W+mNAbM3iTDYfhDzKj3Oc0=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: K2gsbb3RIWZ1Guz5GtLGoXVH7gl18al99665lqSZyuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Sep 23 00:58:08 2026 GMT Not After : Sep 30 00:58:08 2026 GMT Subject: CN=6ab32420-092f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:f3:4b:ab:f7:4e:38:7b:00:bf:b3:a0:c1: 28:ff:85:43:7b:e9:bf:1c:9c:41:39:76:e7:f2:b1: 7c:8e:db:51:ea:99:6e:db:b6:10:64:2c:00:47:c0: 42:35:b3:fb:9a:a8:46:0a:a6:e5:aa:da:55:32:98: b3:08:65:36:78:87:7f:af:da:7b:05:f6:75:4e:f6: 26:6c:57:62:39:9f:c1:25:a9:b8:10:d1:67:8a:b1: 52:d3:0b:16:04:bf:b9:7d:70:7b:f1:bd:9b:06:6f: 40:ae:b7:99:49:46:b5:8b:87:38:5b:f3:fb:66:cd: bc:49:ce:85:1f:be:74:f5:59:68:04:1e:e0:85:e0: eb:94:0e:ca:92:8c:08:f1:5d:d3:0c:dd:18:b7:e9: 5e:60:3d:c8:05:57:7e:4f:3b:7d:c6:e5:1d:46:f5: 7d:ad:c8:65:55:24:81:c0:a5:37:3c:83:22:e8:15: a8:a4:d8:9e:08:79:2a:cb:06:b5:fd:36:88:03:93: cc:e6:a2:59:18:b2:fb:39:7b:11:80:e3:fb:8d:7e: 50:31:40:ad:79:4c:71:e9:27:5b:ee:56:ca:31:99: e5:34:2f:56:00:f0:fd:f0:e4:e1:dd:e1:39:65:e3: 54:9b:da:d4:8c:6f:22:60:ad:fa:b7:9b:6f:d4:63: f3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:58:41:43:B7:B0:6A:B5:84:1B:0A:0F:A9:B0:9F:E2:76:6E:72:A0 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e1:5f:bd:79:f0:53:ce:42:04:ca:45:3a:79:18:a9:33:9a: 31:a9:32:df:f0:f8:ff:4e:5f:df:8c:74:11:9d:f6:8e:6e:af: 5e:77:f5:5e:f8:e4:97:9d:54:9f:23:bd:bc:4a:3c:5d:27:15: bb:32:2d:66:89:76:e7:de:44:d9:ab:fc:7a:bd:a3:67:52:0b: f4:89:e7:f3:da:17:e9:f5:35:76:d8:ea:fc:71:43:ec:18:96: dc:ac:d6:c8:2a:3c:0e:95:69:64:3f:e3:a0:ae:e7:97:3b:5e: 67:e6:ff:f2:35:1c:a0:a3:52:c9:ba:b3:2a:54:22:c3:6a:2c: 61:09:29:f3:43:8a:c7:d3:88:d8:59:06:4d:b2:5f:9a:d7:eb: 4a:d6:3a:73:6d:db:25:b7:3e:e2:33:f3:18:43:03:98:15:7f: e9:53:6a:fb:80:fc:f4:17:54:e8:8a:e6:1f:b7:b7:4d:8b:3d: 44:81:35:32:41:a6:f2:80:f3:48:40:66:88:f2:d7:4c:1f:9c: 41:db:3b:c7:54:64:d5:46:eb:db:8c:14:37:64:96:38:7a:0a: ff:c2:9f:04:05:ae:96:a8:9f:1a:af:3f:93:c6:f9:5d:1b:54: 5b:54:29:af:b3:ec:97:35:93:15:08:44:03:1d:3d:c2:b0:4b: 65:b9:13:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjYwOTIzMDA1ODA4WhcNMjYwOTMwMDA1ODA4WjAYMRYwFAYD VQQDEw02YWIzMjQyMC0wOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlzzS6v3Tjh7AL+zoMEo/4VDe+m/HJxBOXbn8rF8jttR6plu27YQZCwAR8BC NbP7mqhGCqblqtpVMpizCGU2eId/r9p7BfZ1TvYmbFdiOZ/BJam4ENFnirFS0wsW BL+5fXB78b2bBm9ArreZSUa1i4c4W/P7Zs28Sc6FH7509VloBB7gheDrlA7KkowI 8V3TDN0Yt+leYD3IBVd+Tzt9xuUdRvV9rchlVSSBwKU3PIMi6BWopNieCHkqywa1 /TaIA5PM5qJZGLL7OXsRgOP7jX5QMUCteUxx6Sdb7lbKMZnlNC9WAPD98OTh3eE5 ZeNUm9rUjG8iYK36t5tv1GPzqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5YQUO3 sGq1hBsKD6mwn+J2bnKgMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOFfvXnwU85CBMpFOnkYqTOaMaky3/D4/05f34x0EZ32jm6vXnf1Xvjkl51U nyO9vEo8XScVuzItZol2595E2av8er2jZ1IL9Inn89oX6fU1dtjq/HFD7BiW3KzW yCo8DpVpZD/joK7nlzteZ+b/8jUcoKNSybqzKlQiw2osYQkp80OKx9OI2FkGTbJf mtfrStY6c23bJbc+4jPzGEMDmBV/6VNq+4D89BdU6IrmH7e3TYs9RIE1MkGm8oDz SEBmiPLXTB+cQds7x1Rk1Ubr24wUN2SWOHoK/8KfBAWulqifGq8/k8b5XRtUW1Qp r7PslzWTFQhEAx09wrBLZbkTbg== -----END CERTIFICATE-----Generated at Wed Sep 23 22:35:48 2026 by rpki-client