$ rpki-client -vvvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: fMY3Bodely/BIKhL9uEfruOWGMiBMn+u22WHh1nMhZc= Subject key identifier: 10:BF:79:10:82:8A:AA:83:0B:61:C0:DF:A6:C3:9E:A2:CC:D0:83:E8 Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: 01B1 Signing time: Fri 25 Sep 2026 04:04:35 +0000 Manifest this update: Fri 25 Sep 2026 04:04:34 +0000 Manifest next update: Fri 02 Oct 2026 04:04:34 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: 5J2liNNytDXJbniD9r7DBuH3WtTKjwQYJGHYzK98Pm0=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: La95cfkXO4lYTQsVMyLpeifDr1h7KLdweCa/JBZ8Wlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Sep 25 04:04:34 2026 GMT Not After : Oct 2 04:04:34 2026 GMT Subject: CN=6ab5f2d3-68e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:af:19:0e:e0:99:fe:86:b6:d8:0f:51:2d:d6: 34:32:fd:24:e1:94:ce:35:d2:3a:69:ed:79:c0:29: 70:eb:26:b8:6c:3a:b8:f9:c3:a0:88:b6:e4:55:0a: 1a:62:7b:2c:a6:15:fb:66:25:b2:1e:9c:bd:b5:10: 16:b7:db:94:23:c9:1a:fa:76:d5:34:ac:61:55:5d: fc:0c:f3:67:40:ff:b3:46:36:ab:19:2f:37:82:82: ed:6d:77:d2:92:64:77:bd:38:70:e5:57:4e:e6:44: 5f:63:5e:7d:e7:d6:ca:4d:8c:dd:f6:d2:b5:95:cb: cd:61:11:76:d8:5b:7e:8a:cd:bb:d2:3f:46:7e:d2: ee:60:24:09:5d:df:71:ac:52:8d:a2:ed:76:7f:5e: 7e:d7:29:27:6c:2d:06:ee:19:92:5c:5f:83:b2:6b: db:89:55:5a:d7:fc:73:47:9a:24:43:59:61:f8:ed: bb:27:28:15:f8:51:ef:c0:5e:8f:d8:20:b1:e2:5e: f7:e6:53:14:6a:db:e7:d9:2d:c3:7f:9f:df:e1:e5: 54:11:b7:f1:93:13:62:4d:f0:4c:5a:b9:4d:7a:0f: 14:32:23:5f:35:b4:93:b3:d6:3e:85:a0:6a:b1:0d: e1:8d:75:78:80:3e:8a:df:2c:ff:40:73:72:e8:8b: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BF:79:10:82:8A:AA:83:0B:61:C0:DF:A6:C3:9E:A2:CC:D0:83:E8 X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:89:b7:34:07:15:74:90:f4:be:15:0a:c7:00:ea:1d:2c:3f: 62:68:d4:7d:4b:4f:a1:68:e7:74:4b:5e:1e:73:7e:46:8c:3d: a6:4a:a7:c8:4e:09:ea:c6:32:1e:1c:a2:d7:97:b6:ec:4c:cb: 87:45:20:19:71:03:ab:cf:e0:11:04:cf:76:78:ee:88:74:0c: 7d:0c:be:f0:bf:4e:4c:7d:7b:53:bb:2a:f6:8e:d9:a9:b4:8f: 75:ec:c6:a7:d6:46:b1:40:2b:f3:84:07:d1:0c:8e:7c:80:b9: f2:bd:0a:2c:27:b6:41:52:ce:ca:88:a1:23:6f:37:20:fe:05: ae:98:e4:ef:15:d0:ae:2d:c6:3f:d3:02:94:ab:d6:ea:2b:16: ac:a7:75:74:e1:9f:3a:cd:e7:90:a6:e4:fa:6f:b4:57:96:f6: 0e:a3:cb:62:ba:2e:74:0b:6e:9c:65:5b:9a:57:19:e0:0d:93: 81:ce:59:2a:f1:85:bb:09:7e:9e:d7:7f:de:90:84:c4:05:60: b7:a0:9d:1a:bf:2c:f8:e9:81:7e:84:a6:be:6b:43:de:ec:94: a6:30:0b:66:9f:c7:93:9b:63:a5:2f:8f:46:52:f5:c4:62:85: 6c:51:60:92:19:04:28:14:97:23:60:56:a3:bb:16:0d:d5:39: 8a:61:b3:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjYwOTI1MDQwNDM0WhcNMjYxMDAyMDQwNDM0WjAYMRYwFAYD VQQDEw02YWI1ZjJkMy02OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7K8ZDuCZ/oa22A9RLdY0Mv0k4ZTONdI6ae15wClw6ya4bDq4+cOgiLbkVQoa YnssphX7ZiWyHpy9tRAWt9uUI8ka+nbVNKxhVV38DPNnQP+zRjarGS83goLtbXfS kmR3vThw5VdO5kRfY15959bKTYzd9tK1lcvNYRF22Ft+is270j9GftLuYCQJXd9x rFKNou12f15+1yknbC0G7hmSXF+DsmvbiVVa1/xzR5okQ1lh+O27JygV+FHvwF6P 2CCx4l735lMUatvn2S3Df5/f4eVUEbfxkxNiTfBMWrlNeg8UMiNfNbSTs9Y+haBq sQ3hjXV4gD6K3yz/QHNy6IsffwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC/eRCC iqqDC2HA36bDnqLM0IPoMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApom3NAcVdJD0vhUKxwDqHSw/YmjUfUtPoWjndEteHnN+Row9pkqnyE4J6sYy Hhyi15e27EzLh0UgGXEDq8/gEQTPdnjuiHQMfQy+8L9OTH17U7sq9o7ZqbSPdezG p9ZGsUAr84QH0QyOfIC58r0KLCe2QVLOyoihI283IP4Frpjk7xXQri3GP9MClKvW 6isWrKd1dOGfOs3nkKbk+m+0V5b2DqPLYroudAtunGVbmlcZ4A2Tgc5ZKvGFuwl+ ntd/3pCExAVgt6CdGr8s+OmBfoSmvmtD3uyUpjALZp/Hk5tjpS+PRlL1xGKFbFFg khkEKBSXI2BWo7sWDdU5imGz1g== -----END CERTIFICATE-----Generated at Fri Sep 25 19:17:22 2026 by rpki-client