$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json) Hash identifier: rTcsszP1fNmtpGg2KftgUSFchyKkQvnKVFJzpLQyMdk= Subject key identifier: 9B:9A:29:65:88:8F:C6:5A:49:6C:5B:BF:3C:9D:E1:B4:91:BF:F2:5E Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1AB7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft Manifest number: 1A83 Signing time: Tue 22 Sep 2026 16:15:38 +0000 Manifest this update: Tue 22 Sep 2026 16:15:38 +0000 Manifest next update: Tue 29 Sep 2026 16:15:38 +0000 Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: nFC88/kFZVVb2uTQ+ZKFFLMsZd2ZvtlXIbT4YR3/D/k=) 2: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (hash: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM=) 3: E7729178378211EF822BAA6EC4F9AE02.roa (hash: kWi4j9Wig93ekWVxphoEylI+bhEAyZFHwi2cC9HjPZU=) 4: CB355B666EA911F1979A4FB45FA30FBC.roa (hash: EFHnA2af/j04RagH4w+3B1hjPaj4axNV+Q60XLb7eWc=) 5: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: 4taf7ltYE6M7p58XiP5zUTTzb89QrcQbwrr0YABbhPc=) 6: 932C5CF28B2C11F1938379423E11F970.roa (hash: 6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6839 (0x1ab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Sep 22 16:15:38 2026 GMT Not After : Sep 29 16:15:38 2026 GMT Subject: CN=6ab2a9aa-cf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:c6:f2:ff:f3:c0:10:e9:94:10:73:e1:d3: 1c:55:e6:69:83:7d:5e:32:20:dd:81:1e:0b:61:2a: 36:a4:bf:3c:f5:3a:09:39:66:fa:c6:3e:d0:1e:46: ea:5c:f9:a2:69:81:72:0c:d0:5b:fc:78:a4:fb:a7: 88:af:53:4b:9a:a4:68:1e:b2:37:66:6e:72:f1:df: 07:2e:96:a2:9d:ee:45:5d:19:0c:13:34:57:1e:aa: 36:06:b1:c2:2e:1f:69:ae:a2:9c:81:bd:f5:7c:3d: 7f:50:05:d2:44:e2:69:89:4f:07:00:6c:24:02:fe: 58:52:5f:7b:35:ae:f4:95:b2:66:11:1b:c1:d2:b1: 3c:d4:63:9e:63:4a:30:cc:47:34:a0:e0:e4:6c:52: 7b:6b:ab:9f:bf:d5:2c:36:7c:df:af:bf:19:40:17: 68:30:e3:a0:84:29:f7:03:83:46:2b:27:9e:20:95: ba:57:28:4b:9a:5c:89:f2:b4:17:16:de:d4:fd:ca: e1:47:b5:4f:4b:a7:28:e3:90:37:3c:3f:43:8f:d4: 00:7e:73:ea:08:cc:d6:68:37:06:9d:6b:c6:5a:1c: 7b:8d:d3:1c:50:66:78:cc:46:c8:be:4f:16:dc:ca: e7:7d:1e:df:8b:51:ca:ab:ea:5a:13:6d:65:8f:1d: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9A:29:65:88:8F:C6:5A:49:6C:5B:BF:3C:9D:E1:B4:91:BF:F2:5E X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:30:20:f4:24:06:f2:10:77:9e:4d:bf:d6:56:e5:8b:1f:c8: 68:d1:87:73:d1:ed:fb:40:41:c8:18:3e:50:32:ea:10:e6:e9: 7c:f2:11:06:78:63:49:55:c1:f0:40:90:22:e7:30:a6:00:e5: de:64:a3:7b:4b:58:41:32:7f:80:62:ee:31:62:a4:9f:74:7e: 94:a2:dd:f6:70:74:0f:b9:23:ec:5c:76:9b:58:bd:a6:80:7a: 26:b6:f0:e8:7b:99:91:02:64:c1:99:ea:0a:ff:69:ca:0d:55: 34:f1:9a:cf:e3:a8:ab:b6:19:b5:f4:ea:1b:77:cd:e5:ea:be: 61:73:49:71:1a:06:be:c1:63:f9:1a:34:d7:ae:2d:f0:24:6d: b0:6a:31:90:a4:4b:07:e4:b7:f4:f2:32:d6:8c:42:a6:5b:3e: 40:fc:e6:fe:20:c1:97:d5:c1:a8:7e:fc:a4:45:d0:86:7f:52: ce:79:c8:b6:9a:1e:b6:e3:11:a0:28:b3:fa:7b:25:62:82:9b: a3:e1:59:0c:b2:e3:2e:7e:47:2a:92:92:dd:fc:da:d3:17:02: 98:e9:83:12:1f:a4:ae:93:e2:cb:ff:37:07:78:d6:68:97:b4: 6b:fc:06:b2:27:3f:20:7b:6d:73:52:f5:a0:a5:6b:03:95:34: fb:d2:ff:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwOTIyMTYxNTM4WhcNMjYwOTI5MTYxNTM4WjAYMRYwFAYD VQQDEw02YWIyYTlhYS1jZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmITG8v/zwBDplBBz4dMcVeZpg31eMiDdgR4LYSo2pL889ToJOWb6xj7QHkbq XPmiaYFyDNBb/Hik+6eIr1NLmqRoHrI3Zm5y8d8HLpaine5FXRkMEzRXHqo2BrHC Lh9prqKcgb31fD1/UAXSROJpiU8HAGwkAv5YUl97Na70lbJmERvB0rE81GOeY0ow zEc0oODkbFJ7a6ufv9UsNnzfr78ZQBdoMOOghCn3A4NGKyeeIJW6VyhLmlyJ8rQX Ft7U/crhR7VPS6co45A3PD9Dj9QAfnPqCMzWaDcGnWvGWhx7jdMcUGZ4zEbIvk8W 3MrnfR7fi1HKq+paE21ljx1HowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuaKWWI j8ZaSWxbvzyd4bSRv/JeMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85M0JCNTAyRTZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFr U29jUVpMWkFldDVKUG1PbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwTAg9CQG8hB3nk2/1lblix/IaNGHc9Ht+0BByBg+UDLqEObpfPIRBnhjSVXB 8ECQIucwpgDl3mSje0tYQTJ/gGLuMWKkn3R+lKLd9nB0D7kj7Fx2m1i9poB6Jrbw 6HuZkQJkwZnqCv9pyg1VNPGaz+Ooq7YZtfTqG3fN5eq+YXNJcRoGvsFj+Ro0164t 8CRtsGoxkKRLB+S39PIy1oxCpls+QPzm/iDBl9XBqH78pEXQhn9SznnItpoetuMR oCiz+nslYoKbo+FZDLLjLn5HKpKS3fza0xcCmOmDEh+krpPiy/83B3jWaJe0a/wG sic/IHttc1L1oKVrA5U0+9L/lQ== -----END CERTIFICATE-----Generated at Wed Sep 23 14:49:17 2026 by rpki-client