$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft File: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft (raw, json) Hash identifier: /Am9ZeBzlqpIUfZIyCwIFRFTGrVHzU1QhAkNYJHE77s= Subject key identifier: DD:55:3F:7C:62:04:35:0A:EC:2B:19:86:40:DB:84:21:BE:4D:EF:E2 Authority key identifier: D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01 Certificate issuer: /CN=A9181292/serialNumber=D248E5B7859738417219C739320BDAFB83B50501 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft Manifest number: 22 Signing time: Sun 27 Sep 2026 09:28:07 +0000 Manifest this update: Sun 27 Sep 2026 09:28:07 +0000 Manifest next update: Sun 04 Oct 2026 09:28:07 +0000 Files and hashes: 1: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl (hash: +o4GU6nlLJkdxFU3tPhhUTvrUkXRMU6tQqPWt+ODmBU=) 2: C735270A8B4911F197B84AD94811F970.roa (hash: +LKnrorxjBkm1K+JOzimfHxI4AeC1+1bODCZ0IR/L8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181292, serialNumber=D248E5B7859738417219C739320BDAFB83B50501 Validity Not Before: Sep 27 09:28:07 2026 GMT Not After : Oct 4 09:28:07 2026 GMT Subject: CN=6ab8e1a7-c738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:6a:cb:85:fe:65:9c:5f:45:7d:25:95:bc: 8e:98:c1:b8:ca:b8:97:99:49:39:88:8f:c0:73:b5: 24:e3:51:9d:66:b9:0e:2e:3f:25:33:4e:db:5a:e8: e9:42:9b:1c:db:d2:67:e5:ce:91:f9:cd:f2:86:31: 36:67:9e:88:e3:bf:2a:38:8c:58:eb:6d:5c:81:26: 0a:90:32:8a:a5:c0:f0:49:f7:da:e8:9f:93:55:e4: 77:c2:08:ad:bb:20:37:03:83:a6:ca:64:7a:3e:32: c7:29:40:d4:b2:fb:08:ed:8c:e8:35:cb:d2:85:d1: 83:22:32:70:1d:3b:c7:11:6e:fb:68:11:c9:5a:b7: de:aa:63:51:1a:50:97:98:79:7d:29:e4:c8:3b:58: 57:ba:2f:7d:8c:83:69:30:30:21:34:09:2c:1a:3a: d1:8c:67:22:9c:9e:a8:4d:48:0e:b1:57:0c:ce:81: 3c:fa:14:34:ed:2a:7c:fe:49:2a:a8:8f:1c:f5:e2: de:cc:3c:dc:25:63:64:48:9b:e6:7a:3b:af:39:63: fd:a8:7c:63:4e:b3:0f:a1:e0:d6:24:26:b5:44:d9: 03:09:59:08:80:f5:cf:09:81:30:d1:e1:d0:0f:3e: 46:7b:e5:c0:bd:a9:9d:2c:e6:2d:5c:11:e1:c2:9b: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:3F:7C:62:04:35:0A:EC:2B:19:86:40:DB:84:21:BE:4D:EF:E2 X509v3 Authority Key Identifier: keyid:D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:68:a3:96:03:00:df:d7:55:c5:c0:b1:00:0f:0a:25:77:d6: 31:f2:99:2b:f7:ad:b4:0b:4b:82:83:ec:cf:9e:a7:b1:fa:ee: dc:8a:1a:89:e4:2c:27:11:46:32:41:f4:5f:ef:d2:b4:8d:c9: e4:1e:e8:e3:cc:4c:ba:e1:40:5a:19:ea:40:56:ea:98:80:78: 35:e0:14:af:02:74:6a:73:9d:8a:08:e4:1c:aa:0c:1f:45:2f: 5d:7a:3d:46:76:c1:19:92:56:68:44:37:ef:d6:ed:09:bd:62: af:18:6c:0c:f4:3f:d1:63:c5:8b:fd:67:83:77:e8:bb:7d:59: ac:d8:a9:68:b0:ba:cf:98:9d:2a:b7:d6:98:41:34:03:7c:48: de:66:06:65:64:a3:f8:c0:f0:f9:27:6b:06:24:a7:6b:be:b1: 6a:45:ac:d9:a1:8f:e2:1b:1e:6e:ee:fd:ff:72:c3:08:4a:40: 60:6a:cd:82:e1:84:94:de:95:33:eb:59:3a:19:2e:eb:cb:38: db:25:bb:74:9c:78:59:64:78:f5:d8:f7:33:84:9b:64:04:5d: 00:42:91:e9:3a:80:3a:09:31:86:d8:e0:4d:68:a9:bc:44:89: 31:02:d1:2e:a5:e8:22:1d:e9:b2:f1:e1:f7:78:28:ee:32:cb: 9f:22:7e:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTI5MjExMC8GA1UEBRMoRDI0OEU1Qjc4NTk3Mzg0MTcyMTlDNzM5MzIwQkRBRkI4 M0I1MDUwMTAeFw0yNjA5MjcwOTI4MDdaFw0yNjEwMDQwOTI4MDdaMBgxFjAUBgNV BAMTDTZhYjhlMWE3LWM3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAH2rLhf5lnF9FfSWVvI6YwbjKuJeZSTmIj8BztSTjUZ1muQ4uPyUzTtta6OlC mxzb0mflzpH5zfKGMTZnnojjvyo4jFjrbVyBJgqQMoqlwPBJ99ron5NV5HfCCK27 IDcDg6bKZHo+MscpQNSy+wjtjOg1y9KF0YMiMnAdO8cRbvtoEclat96qY1EaUJeY eX0p5Mg7WFe6L32Mg2kwMCE0CSwaOtGMZyKcnqhNSA6xVwzOgTz6FDTtKnz+SSqo jxz14t7MPNwlY2RIm+Z6O685Y/2ofGNOsw+h4NYkJrVE2QMJWQiA9c8JgTDR4dAP PkZ75cC9qZ0s5i1cEeHCm+KTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3VU/fGIE NQrsKxmGQNuEIb5N7+IwHwYDVR0jBBgwFoAU0kjlt4WXOEFyGcc5Mgva+4O1BQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjkyLzUxRTUwNTIyOEI0 NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VGeUdjYzVNZ3ZhLTRPMUJR RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtqbHQ0V1hPRUZ5R2NjNU1ndmEtNE8xQlFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MjkyLzUxRTUwNTIyOEI0NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VG eUdjYzVNZ3ZhLTRPMUJRRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6aKOWAwDf11XFwLEADwold9Yx8pkr9620C0uCg+zPnqex+u7cihqJ5CwnEUYy QfRf79K0jcnkHujjzEy64UBaGepAVuqYgHg14BSvAnRqc52KCOQcqgwfRS9dej1G dsEZklZoRDfv1u0JvWKvGGwM9D/RY8WL/WeDd+i7fVms2KlosLrPmJ0qt9aYQTQD fEjeZgZlZKP4wPD5J2sGJKdrvrFqRazZoY/iGx5u7v3/csMISkBgas2C4YSU3pUz 61k6GS7ryzjbJbt0nHhZZHj12PczhJtkBF0AQpHpOoA6CTGG2OBNaKm8RIkxAtEu pegiHemy8eH3eCjuMsufIn4H -----END CERTIFICATE-----Generated at Mon Sep 28 22:06:16 2026 by rpki-client