$ rpki-client -vvvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: M8nWGwXggrp8AThrxtlr9ZcOpKMxIyTYmCjaCMH6HXo= Subject key identifier: A1:75:8E:9F:C6:8A:D2:53:B3:20:93:71:38:65:D0:C9:0E:AF:81:5D Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 0492 Signing time: Tue 22 Sep 2026 23:39:58 +0000 Manifest this update: Tue 22 Sep 2026 23:39:58 +0000 Manifest next update: Tue 29 Sep 2026 23:39:58 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: X6VKUtOyIQs7Tnkq2UbPvugx/VRCx0niJaNLYj1+tr4=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Sep 22 23:39:58 2026 GMT Not After : Sep 29 23:39:58 2026 GMT Subject: CN=6ab311ce-7669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:35:77:24:6a:b5:0d:68:4a:73:82:50:6c: cc:ac:49:1b:f9:08:32:1c:71:7d:1d:53:56:0b:96: f7:ec:43:b6:58:dd:f1:fd:16:c3:d9:20:8d:57:e7: 39:90:e9:e2:d7:83:ef:1a:83:80:ae:bd:eb:f9:97: 59:82:5d:02:b0:07:9d:07:4f:eb:f3:91:4c:ca:13: 84:5f:9e:fb:ff:71:29:cd:68:6b:2c:50:7d:db:d9: 4f:4a:bb:83:83:55:cf:44:f5:2d:a9:06:ba:71:9b: a9:4e:ca:9e:d7:3c:b9:f2:fc:f6:33:bd:2e:9e:3f: 1f:30:1f:ac:0e:9a:a1:12:61:6f:a8:28:49:1f:8f: da:09:b7:7d:5f:fc:77:fa:c8:07:e9:e4:18:e8:41: 8b:34:91:8c:3b:90:f9:04:f4:a3:6c:2a:c7:2f:3d: b4:c2:e3:9a:e2:89:8e:03:e5:19:d4:6a:1e:71:48: ff:fc:9c:f9:9b:20:0e:3b:ca:88:33:3e:d4:c5:3e: c8:ad:b9:0e:aa:42:b4:8f:db:8e:b0:ae:b4:c0:4b: 9f:72:ba:1f:5e:d8:b6:85:ad:92:aa:8f:68:b5:69: 62:4b:fe:7c:3c:fc:64:09:a9:2a:7a:ff:62:33:50: e9:fa:6f:f9:27:a4:d9:9f:f0:ae:2b:23:00:bd:a0: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:75:8E:9F:C6:8A:D2:53:B3:20:93:71:38:65:D0:C9:0E:AF:81:5D X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:20:39:6c:dc:d4:63:59:b6:f1:b8:f3:60:32:3a:9b:1a: d0:9c:29:42:8a:40:c6:2a:ea:6d:f7:17:2f:6b:23:38:c3:6a: e6:77:a3:76:67:61:8c:23:a1:67:18:35:d7:e7:b7:2b:64:e4: 64:c6:66:f2:30:ea:2d:4c:82:1a:9b:4f:ab:7c:76:ea:9b:3e: 43:b0:c2:1b:65:7f:68:42:fd:34:5b:43:70:70:18:5e:2b:96: 09:d3:ce:d0:9c:48:f4:92:70:cc:b7:f5:6c:93:4f:16:2a:74: 4a:10:f7:5d:d0:e1:17:63:c7:68:be:a4:be:d7:9c:67:c3:65: 5b:cc:85:e1:54:f2:8f:3a:2f:60:f4:d3:ce:8f:0c:77:fe:20: 2d:9b:f4:5f:9f:15:64:c0:14:71:41:ef:6f:30:6c:43:88:20: b7:0b:ac:3e:e3:50:06:58:fc:00:11:45:fd:31:d0:1d:90:aa: 03:3d:ff:ee:fb:e5:39:95:53:5e:2b:0e:0c:68:98:67:09:0b: 34:4d:60:d3:cd:f8:0e:5c:d3:26:9b:c1:cc:ac:4c:91:18:1f: a4:d0:f4:1e:bb:de:8f:53:45:38:96:d4:32:c7:c2:40:32:15: b9:cf:0a:77:93:37:06:39:28:95:89:ba:a2:ce:44:a4:ab:5a: cb:bd:07:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjYwOTIyMjMzOTU4WhcNMjYwOTI5MjMzOTU4WjAYMRYwFAYD VQQDEw02YWIzMTFjZS03NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhxA1dyRqtQ1oSnOCUGzMrEkb+QgyHHF9HVNWC5b37EO2WN3x/RbD2SCNV+c5 kOni14PvGoOArr3r+ZdZgl0CsAedB0/r85FMyhOEX577/3EpzWhrLFB929lPSruD g1XPRPUtqQa6cZupTsqe1zy58vz2M70unj8fMB+sDpqhEmFvqChJH4/aCbd9X/x3 +sgH6eQY6EGLNJGMO5D5BPSjbCrHLz20wuOa4omOA+UZ1GoecUj//Jz5myAOO8qI Mz7UxT7IrbkOqkK0j9uOsK60wEufcrofXti2ha2Sqo9otWliS/58PPxkCakqev9i M1Dp+m/5J6TZn/CuKyMAvaBlyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKF1jp/G itJTsyCTcThl0MkOr4FdMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnw8gOWzc1GNZtvG482AyOpsa0JwpQopAxirqbfcXL2sjOMNq5nejdmdhjCOh Zxg11+e3K2TkZMZm8jDqLUyCGptPq3x26ps+Q7DCG2V/aEL9NFtDcHAYXiuWCdPO 0JxI9JJwzLf1bJNPFip0ShD3XdDhF2PHaL6kvtecZ8NlW8yF4VTyjzovYPTTzo8M d/4gLZv0X58VZMAUcUHvbzBsQ4ggtwusPuNQBlj8ABFF/THQHZCqAz3/7vvlOZVT XisODGiYZwkLNE1g0834DlzTJpvBzKxMkRgfpND0Hrvej1NFOJbUMsfCQDIVuc8K d5M3BjkolYm6os5EpKtay70HkQ== -----END CERTIFICATE-----Generated at Wed Sep 23 10:41:06 2026 by rpki-client