$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft File: kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json) Hash identifier: JPygeCKvgGm3aoMC7tClGkEdM3NnytbF1MPuRVLFmio= Subject key identifier: E7:77:F1:64:A4:5D:1B:8B:CC:82:D1:A7:46:F5:A0:8A:D3:B6:3C:EA Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A Certificate issuer: /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft Manifest number: 0CF6 Signing time: Thu 24 Sep 2026 18:23:36 +0000 Manifest this update: Thu 24 Sep 2026 18:23:35 +0000 Manifest next update: Thu 01 Oct 2026 18:23:35 +0000 Files and hashes: 1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: ZMpFIGvVrOIylXCsPee2ubEC+P0Z6U+rDt0iYvCtMX8=) 2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: 8Kzq8ge3wSUVu+VYpnFOyTT3NcPx0P4ByioHfNwqHSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A Validity Not Before: Sep 24 18:23:35 2026 GMT Not After : Oct 1 18:23:35 2026 GMT Subject: CN=6ab56aa8-4cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:35:cc:83:0c:d8:d8:59:dd:d6:eb:37:de: d4:91:c4:0e:d6:b0:7f:6d:91:bc:5c:9e:1c:e8:40: c9:ea:5f:d3:3e:88:38:74:ca:00:a0:a2:fb:43:90: 61:56:1f:f4:ff:a3:68:2e:56:de:db:75:96:85:ab: 47:a4:04:a9:10:44:95:4c:e7:55:62:e8:49:17:b6: e9:37:f9:d3:66:07:6d:d4:df:3c:63:a0:a9:5a:fb: 32:bc:9d:81:23:f3:0f:ae:04:15:c9:b9:0d:82:0e: 3a:67:7c:4f:95:e4:fc:9f:43:ec:8c:d0:fa:0b:7e: a9:13:4a:92:eb:f1:ca:f7:58:c7:4b:d8:87:a9:1f: 56:66:82:f8:81:00:a5:f7:3b:3f:74:d9:f1:e2:d7: c5:a3:b5:9f:0a:5f:7f:14:79:88:ee:67:e5:34:c8: a6:8d:27:ab:08:fc:95:51:69:52:50:e4:4f:56:b5: 6a:77:24:e7:c5:de:bb:15:bd:4d:3d:0d:e3:a1:84: 26:07:f8:3d:37:b3:ba:5d:6b:86:4e:a1:1a:31:3c: ae:23:79:7b:d6:9f:2d:32:b5:b0:f8:20:b6:dc:fe: af:24:ee:bd:cb:84:3f:c4:43:4b:cf:c5:5e:d2:df: ac:e5:c3:ce:c4:80:20:6f:f7:fe:d1:15:1f:0f:6a: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:F1:64:A4:5D:1B:8B:CC:82:D1:A7:46:F5:A0:8A:D3:B6:3C:EA X509v3 Authority Key Identifier: keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a2:93:10:47:dd:f4:02:d4:f7:fd:11:ad:f7:a1:2f:7b:ae: 70:c0:b3:2d:c5:13:3e:e2:46:7c:22:32:06:3d:ef:08:d6:19: 4d:0a:69:9f:38:db:b8:f8:ac:ec:55:ca:85:20:16:03:61:57: 87:c3:ff:f7:ff:3a:6c:c8:10:bc:11:5b:dc:99:fa:88:76:eb: 7d:55:70:82:71:0e:0f:89:da:8f:08:61:ed:79:34:b9:4b:1d: a6:85:d9:c9:b1:45:47:70:24:f6:93:8a:aa:aa:25:8e:f9:8c: 47:17:2f:84:0d:90:a3:74:f6:66:21:c6:b3:8f:9f:08:6e:7c: 0a:63:8f:74:f1:32:a3:45:5d:17:91:bc:6a:7e:44:f4:93:31: 9b:70:7e:ac:55:7d:31:9c:d8:62:67:7e:57:2b:9c:a2:5c:30: 66:e4:69:1f:a6:21:ad:ce:a4:41:a2:13:c8:45:fb:4e:ce:a1: 9e:3b:64:af:52:8a:46:7d:f3:10:93:29:83:f6:02:0a:71:c1: e8:c0:29:bd:8c:3b:22:d5:97:4f:41:08:9c:3b:1f:35:d3:1e: a6:c2:4e:28:88:1c:80:3c:db:1a:97:b4:84:40:84:f1:34:80: 14:46:bc:ed:3e:38:83:d3:6b:7e:ed:a2:0e:b0:c3:4d:26:62: 5c:b2:3d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwREUxMTAvBgNVBAUTKDkzM0M0Q0Q2RDg0MzVDMEY4QkUyRjUyMzQ3MjZENjYx MEY3RURBM0EwHhcNMjYwOTI0MTgyMzM1WhcNMjYxMDAxMTgyMzM1WjAYMRYwFAYD VQQDEw02YWI1NmFhOC00Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nc1zIMM2NhZ3dbrN97UkcQO1rB/bZG8XJ4c6EDJ6l/TPog4dMoAoKL7Q5Bh Vh/0/6NoLlbe23WWhatHpASpEESVTOdVYuhJF7bpN/nTZgdt1N88Y6CpWvsyvJ2B I/MPrgQVybkNgg46Z3xPleT8n0PsjND6C36pE0qS6/HK91jHS9iHqR9WZoL4gQCl 9zs/dNnx4tfFo7WfCl9/FHmI7mflNMimjSerCPyVUWlSUORPVrVqdyTnxd67Fb1N PQ3joYQmB/g9N7O6XWuGTqEaMTyuI3l71p8tMrWw+CC23P6vJO69y4Q/xENLz8Ve 0t+s5cPOxIAgb/f+0RUfD2om/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOd38WSk XRuLzILRp0b1oIrTtjzqMB8GA1UdIwQYMBaAFJM8TNbYQ1wPi+L1I0cm1mEPfto6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBERS9EQTQ1RDQzMDE1 MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhBLUw0dlVqUnliV1lROS0y am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6eE0xdGhEWEEtTDR2VWpSeWJXWVE5LTJqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBERS9EQTQ1RDQzMDE1MjUxMUVBODBEQkYwMDlDNEY5QUUwMi9renhNMXRoRFhB LUw0dlVqUnliV1lROS0yam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqKTEEfd9ALU9/0RrfehL3uucMCzLcUTPuJGfCIyBj3vCNYZTQppnzjbuPis 7FXKhSAWA2FXh8P/9/86bMgQvBFb3Jn6iHbrfVVwgnEOD4najwhh7Xk0uUsdpoXZ ybFFR3Ak9pOKqqoljvmMRxcvhA2Qo3T2ZiHGs4+fCG58CmOPdPEyo0VdF5G8an5E 9JMxm3B+rFV9MZzYYmd+VyucolwwZuRpH6Yhrc6kQaITyEX7Ts6hnjtkr1KKRn3z EJMpg/YCCnHB6MApvYw7ItWXT0EInDsfNdMepsJOKIgcgDzbGpe0hECE8TSAFEa8 7T44g9Nrfu2iDrDDTSZiXLI9aw== -----END CERTIFICATE-----Generated at Fri Sep 25 02:58:43 2026 by rpki-client