$ rpki-client -vvvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: VeGupu6iAKxjC5vD6/EFzhAnupcCINUhMyHf0D6YE4o= Subject key identifier: 00:69:3D:C2:ED:68:37:EA:1A:49:9C:6E:E0:6E:D0:DF:AF:24:D4:6E Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0B64 Signing time: Thu 24 Sep 2026 19:09:34 +0000 Manifest this update: Thu 24 Sep 2026 19:09:34 +0000 Manifest next update: Thu 01 Oct 2026 19:09:34 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: cU4PJvPe/gJhlV9r7guFgNQobE/4ec4eOOViGq1gH9s=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=) 3: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Sep 24 19:09:34 2026 GMT Not After : Oct 1 19:09:34 2026 GMT Subject: CN=6ab5756e-6869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:e0:d1:c9:e9:70:d9:10:54:a4:6c:76:0c: 3f:c1:34:4e:d2:02:fc:c2:40:ed:79:5c:f6:4e:df: 78:e0:c6:4a:8d:ef:94:09:1d:6e:f4:53:fb:9a:88: e1:ec:2d:a2:69:f9:a6:0a:6d:9b:d6:3d:78:ff:da: e4:7c:eb:6d:c6:59:ac:d8:e2:94:e8:0b:9d:56:d2: 46:28:89:30:21:15:ed:2f:84:e3:3a:43:4b:c4:67: 84:3f:c2:ae:e2:7c:bc:95:59:31:86:bf:49:7c:00: a1:6c:ca:63:bf:66:5e:66:ac:d5:52:a5:6e:7b:0d: e2:2e:ab:81:c0:c1:13:22:e3:12:e7:b2:76:f8:10: b6:2e:bd:6b:ed:79:c7:5d:3a:63:c7:20:4c:95:8e: 09:58:b1:49:5c:d9:0f:c4:b9:b1:13:3e:f2:e0:82: 94:13:f8:6d:34:3f:47:f8:02:da:a6:7f:95:e0:a3: 96:85:5b:f0:a7:27:15:91:73:e7:51:7c:ae:40:69: bc:b1:8c:35:14:6b:30:47:57:9e:e5:86:63:51:bf: 61:40:dd:71:e1:ae:43:74:b9:db:2f:ed:53:5d:56: 3a:77:19:f5:5c:d3:e3:86:c0:2c:38:09:4b:8c:ac: cf:e3:3c:68:bd:76:f7:ec:6d:d7:6e:4d:d1:e4:43: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:69:3D:C2:ED:68:37:EA:1A:49:9C:6E:E0:6E:D0:DF:AF:24:D4:6E X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:ec:80:39:b2:55:06:68:57:42:96:b1:2d:00:a6:6d:4c: 47:8e:a0:95:1e:24:9f:28:b0:38:82:53:bf:f8:f6:c7:8f:3a: 46:52:57:5a:fb:3d:3a:b1:16:04:6b:46:12:d0:05:22:cb:62: 34:08:5e:da:f8:94:4d:a6:c4:e8:4d:f5:dd:47:5d:d4:d9:78: 9d:3e:74:d8:17:8d:41:d9:f8:fb:41:5a:ef:8e:d5:b3:1c:33: f0:35:3a:63:4b:84:ce:f1:c0:0c:df:9f:f4:08:35:a9:c7:57: d0:fc:01:c5:69:88:26:a1:d6:b8:8a:a5:c9:e9:09:47:ed:7c: 6a:5a:9a:bc:75:a4:4d:6e:fd:0d:15:64:7f:b1:b1:96:56:46: bd:4a:d5:90:22:a3:ef:dc:cd:f8:6d:38:47:b3:86:b1:ac:41: 60:e9:36:dc:72:94:bb:9b:15:5c:86:98:10:74:2e:c9:4c:2f: 86:44:3b:10:4d:fa:eb:fe:fd:63:1a:0e:f1:4c:9e:17:3a:db: 64:30:4c:cd:8f:d0:e5:21:18:02:54:e8:ae:f9:48:a1:84:9b: 84:a4:8f:63:c4:09:3e:44:76:61:5e:82:b3:6a:ec:13:ca:c4: 24:e4:c6:8d:10:fa:01:95:82:2f:80:0e:74:c0:1a:c9:1b:3d: bd:8e:40:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjYwOTI0MTkwOTM0WhcNMjYxMDAxMTkwOTM0WjAYMRYwFAYD VQQDEw02YWI1NzU2ZS02ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVPg0cnpcNkQVKRsdgw/wTRO0gL8wkDteVz2Tt944MZKje+UCR1u9FP7mojh 7C2iafmmCm2b1j14/9rkfOttxlms2OKU6AudVtJGKIkwIRXtL4TjOkNLxGeEP8Ku 4ny8lVkxhr9JfAChbMpjv2ZeZqzVUqVuew3iLquBwMETIuMS57J2+BC2Lr1r7XnH XTpjxyBMlY4JWLFJXNkPxLmxEz7y4IKUE/htND9H+ALapn+V4KOWhVvwpycVkXPn UXyuQGm8sYw1FGswR1ee5YZjUb9hQN1x4a5DdLnbL+1TXVY6dxn1XNPjhsAsOAlL jKzP4zxovXb37G3Xbk3R5ENSAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABpPcLt aDfqGkmcbuBu0N+vJNRuMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiE7sgDmyVQZoV0KWsS0Apm1MR46glR4knyiwOIJTv/j2x486RlJXWvs9OrEW BGtGEtAFIstiNAhe2viUTabE6E313Udd1Nl4nT502BeNQdn4+0Fa747Vsxwz8DU6 Y0uEzvHADN+f9Ag1qcdX0PwBxWmIJqHWuIqlyekJR+18alqavHWkTW79DRVkf7Gx llZGvUrVkCKj79zN+G04R7OGsaxBYOk23HKUu5sVXIaYEHQuyUwvhkQ7EE366/79 YxoO8UyeFzrbZDBMzY/Q5SEYAlTorvlIoYSbhKSPY8QJPkR2YV6Cs2rsE8rEJOTG jRD6AZWCL4AOdMAayRs9vY5AyA== -----END CERTIFICATE-----Generated at Fri Sep 25 09:25:27 2026 by rpki-client