$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: 5n6E+SP7pJ3UhrIqscoC+8O00ZO59S2ZVL+VzWHfldI= Subject key identifier: 0A:B9:40:9F:DB:7A:F1:92:79:00:2B:F8:42:A1:A1:7B:E8:3B:47:D0 Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 10F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 10D4 Signing time: Tue 22 Sep 2026 17:14:28 +0000 Manifest this update: Tue 22 Sep 2026 17:14:27 +0000 Manifest next update: Tue 29 Sep 2026 17:14:27 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: A4jrPfp/0savLJ/q7kr+aDla9z6L9wWlznO5Dc58aC8=) 2: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=) 3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=) 4: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4345 (0x10f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Sep 22 17:14:27 2026 GMT Not After : Sep 29 17:14:27 2026 GMT Subject: CN=6ab2b774-a7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:6e:8e:16:ac:73:74:86:36:fe:dd:92:05: 87:8d:c3:7f:99:fc:2d:58:fb:96:a6:bd:f3:23:49: c5:91:74:29:84:32:d4:07:e0:ff:84:24:99:2a:42: 6b:5c:78:b5:69:df:d3:1b:a6:00:fe:b8:ba:40:7b: 5f:86:b3:b5:fa:e0:0b:be:6e:30:e4:be:1b:0b:f0: cf:42:cd:6f:d7:2a:ed:96:fa:f3:64:00:41:ad:18: c6:6c:30:2c:7d:d1:ae:84:13:f1:08:a7:30:89:ff: d7:83:91:ae:57:63:be:2a:3a:54:a1:d8:21:1e:25: 74:0f:1c:ad:09:32:b6:f9:c4:0f:aa:46:7b:0d:9d: 93:c9:80:69:bf:06:18:14:84:84:0e:1f:ca:50:cf: 5b:2d:08:ac:f0:08:06:c4:2d:09:7c:bc:27:ff:94: 8b:c5:a5:f9:85:0c:68:de:b3:40:fa:7e:45:64:41: e2:44:66:c6:e3:ef:fb:4f:b2:53:e1:9a:91:5f:f4: 14:8b:12:b1:17:e2:4c:f4:41:6e:56:c3:1a:ee:4b: fe:b7:91:a7:cb:06:d8:64:12:08:f2:ea:bf:9c:d6: 96:bf:70:42:08:b2:07:f5:18:f0:d3:d2:11:98:37: e3:52:e4:3d:1c:6b:ef:db:fe:56:39:17:9a:08:2c: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:40:9F:DB:7A:F1:92:79:00:2B:F8:42:A1:A1:7B:E8:3B:47:D0 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5d:65:6f:5b:c7:43:2d:d9:f4:20:9a:ad:fb:85:48:44:e2: 50:af:31:b4:f3:2f:2f:39:6e:4d:90:66:21:37:3b:40:25:1f: 4e:80:c6:0b:5b:3e:f4:35:7e:06:e1:b9:82:aa:97:18:d2:f2: 61:c9:3a:c4:c4:be:1d:6f:39:94:be:ce:d0:c9:c7:cb:41:66: 4d:45:df:6e:d7:b0:f8:54:49:29:84:88:ed:f7:1e:8a:e3:b5: 7f:2a:88:a8:e4:2d:31:42:eb:9f:32:7c:12:ba:3c:18:bb:b1: 37:08:61:9c:b3:d7:68:4f:b7:20:7e:d6:8c:d3:b8:47:74:ea: 45:7b:70:c4:5e:94:42:33:24:c3:2c:b4:3e:94:60:4f:7c:77: da:01:52:3d:d6:92:77:9f:b6:91:4a:e8:df:36:19:47:72:05: 9d:4f:c3:e2:a4:26:fa:bb:7b:40:e5:01:3e:b2:37:57:cf:c1: 22:3c:40:9c:d9:00:92:31:55:a0:bf:b2:79:2b:69:f1:d3:9c: 3c:50:6e:a5:27:d4:a3:04:1f:3d:4c:b1:9d:66:32:da:45:13: 3d:ed:ee:e0:10:ea:70:b7:79:9e:3d:95:08:e1:07:ef:96:6f: a7:70:5f:09:0a:55:fe:a9:42:63:fd:f0:48:e3:55:1b:90:b0: d7:94:a1:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjYwOTIyMTcxNDI3WhcNMjYwOTI5MTcxNDI3WjAYMRYwFAYD VQQDEw02YWIyYjc3NC1hN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4tujhasc3SGNv7dkgWHjcN/mfwtWPuWpr3zI0nFkXQphDLUB+D/hCSZKkJr XHi1ad/TG6YA/ri6QHtfhrO1+uALvm4w5L4bC/DPQs1v1yrtlvrzZABBrRjGbDAs fdGuhBPxCKcwif/Xg5GuV2O+KjpUodghHiV0DxytCTK2+cQPqkZ7DZ2TyYBpvwYY FISEDh/KUM9bLQis8AgGxC0JfLwn/5SLxaX5hQxo3rNA+n5FZEHiRGbG4+/7T7JT 4ZqRX/QUixKxF+JM9EFuVsMa7kv+t5GnywbYZBII8uq/nNaWv3BCCLIH9Rjw09IR mDfjUuQ9HGvv2/5WOReaCCxHDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq5QJ/b evGSeQAr+EKhoXvoO0fQMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZF1lb1vHQy3Z9CCarfuFSETiUK8xtPMvLzluTZBmITc7QCUfToDGC1s+9DV+ BuG5gqqXGNLyYck6xMS+HW85lL7O0MnHy0FmTUXfbtew+FRJKYSI7fceiuO1fyqI qOQtMULrnzJ8Ero8GLuxNwhhnLPXaE+3IH7WjNO4R3TqRXtwxF6UQjMkwyy0PpRg T3x32gFSPdaSd5+2kUro3zYZR3IFnU/D4qQm+rt7QOUBPrI3V8/BIjxAnNkAkjFV oL+yeStp8dOcPFBupSfUowQfPUyxnWYy2kUTPe3u4BDqcLd5nj2VCOEH75Zvp3Bf CQpV/qlCY/3wSONVG5Cw15ShRQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:30:14 2026 by rpki-client