$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: intYVDOnJADVmQIs01832oRWRIg7zPG/dLHHktdGleM= Subject key identifier: D3:D6:23:F2:7E:8D:F2:4A:C5:AA:72:C5:37:59:50:3E:E0:CA:34:22 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01E8 Signing time: Tue 29 Sep 2026 03:53:16 +0000 Manifest this update: Tue 29 Sep 2026 03:53:15 +0000 Manifest next update: Tue 06 Oct 2026 03:53:15 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: 732XEpkObwNEARqSq8i9T7XVS+cSzrZWk25uM95d4Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 03:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Sep 29 03:53:15 2026 GMT Not After : Oct 6 03:53:15 2026 GMT Subject: CN=6abb362c-ac1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:c0:93:37:0d:37:05:f0:3f:0c:a4:be:d7: 21:14:d7:95:aa:e2:06:a3:84:58:da:54:c7:c4:49: d8:bc:8b:41:fc:e8:c9:c4:bc:df:b0:6c:4b:c3:74: 45:63:25:95:c6:00:da:9c:89:a7:38:83:b4:ad:4d: ba:dd:27:90:a6:8d:ba:ed:6f:97:95:84:15:3f:6a: d5:43:ae:d6:48:48:4c:0b:6b:c4:5f:8e:8a:58:77: fb:84:af:b3:33:a2:fc:17:2a:07:7e:76:75:86:6c: 49:30:fb:40:26:fd:59:3c:97:e5:e0:e7:33:16:ce: c2:80:3e:87:d8:c2:d0:a5:2d:43:e8:ac:ea:74:f7: 3d:bd:03:ce:16:c7:8c:bf:46:31:fe:77:1c:2c:bb: 4e:ee:a7:c5:c3:a0:7e:57:85:ac:5e:85:78:53:92: ae:c5:c9:bf:00:c0:90:f7:8b:22:83:14:5e:4f:29: ab:79:8e:ee:3c:38:88:bf:83:9a:68:06:e6:6d:90: 41:f6:2c:bf:96:c9:b6:bb:0e:1e:97:08:c1:4f:66: 06:fa:db:72:11:3b:a8:6e:f7:fe:9c:f5:e2:8e:1f: 55:3b:b4:e9:8e:ad:88:a9:d4:5f:ad:65:6a:12:46: 13:53:b4:a0:d7:5a:bb:65:76:69:2a:68:7f:61:0e: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D6:23:F2:7E:8D:F2:4A:C5:AA:72:C5:37:59:50:3E:E0:CA:34:22 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:12:a3:6d:ee:78:9d:1c:51:2f:46:f2:73:0b:88:54:8d:31: ab:11:80:5b:15:51:54:d6:90:61:af:ff:46:d5:61:87:fa:7c: dd:e6:e8:d2:77:e8:11:5c:da:c2:f3:ab:cc:81:33:d7:71:49: e5:a4:57:51:c7:37:e2:dd:26:b1:aa:47:39:ee:a4:4e:5e:d7: 37:fb:25:0a:6d:12:db:49:3f:73:51:c3:d0:96:cc:52:3d:79: d6:92:ac:aa:b6:19:26:f0:99:98:eb:b9:78:2c:ed:0e:51:40: 8f:de:24:9d:4e:f8:0e:64:c3:dd:69:ac:29:2a:e7:ba:0e:95: ea:91:1b:bf:1b:1f:88:3c:8e:31:59:0c:67:3a:58:81:3e:80: 48:38:e5:41:23:cf:58:09:4a:8f:36:23:68:df:f8:86:6c:a5: 26:78:ec:4a:f2:1f:5d:86:27:a7:92:00:12:6b:a7:0a:2e:39: 09:e8:42:ff:ec:66:b5:3c:cb:51:5f:c1:0e:1b:90:83:ba:8f: 12:e0:83:2b:ec:b3:46:11:80:a2:ff:c0:00:5e:54:d5:0b:00: 4c:23:d9:d2:69:16:74:6f:50:ed:1d:78:95:63:07:89:94:47: 67:bc:86:c0:af:71:f9:7e:61:1e:e2:f0:cd:54:53:7a:2e:42: 40:70:72:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwOTI5MDM1MzE1WhcNMjYxMDA2MDM1MzE1WjAYMRYwFAYD VQQDEw02YWJiMzYyYy1hYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKHAkzcNNwXwPwykvtchFNeVquIGo4RY2lTHxEnYvItB/OjJxLzfsGxLw3RF YyWVxgDanImnOIO0rU263SeQpo267W+XlYQVP2rVQ67WSEhMC2vEX46KWHf7hK+z M6L8FyoHfnZ1hmxJMPtAJv1ZPJfl4OczFs7CgD6H2MLQpS1D6KzqdPc9vQPOFseM v0Yx/nccLLtO7qfFw6B+V4WsXoV4U5Kuxcm/AMCQ94sigxReTymreY7uPDiIv4Oa aAbmbZBB9iy/lsm2uw4elwjBT2YG+ttyETuobvf+nPXijh9VO7Tpjq2IqdRfrWVq EkYTU7Sg11q7ZXZpKmh/YQ6MZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPWI/J+ jfJKxapyxTdZUD7gyjQiMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRKjbe54nRxRL0bycwuIVI0xqxGAWxVRVNaQYa//RtVhh/p83ebo0nfoEVza wvOrzIEz13FJ5aRXUcc34t0msapHOe6kTl7XN/slCm0S20k/c1HD0JbMUj151pKs qrYZJvCZmOu5eCztDlFAj94knU74DmTD3WmsKSrnug6V6pEbvxsfiDyOMVkMZzpY gT6ASDjlQSPPWAlKjzYjaN/4hmylJnjsSvIfXYYnp5IAEmunCi45CehC/+xmtTzL UV/BDhuQg7qPEuCDK+yzRhGAov/AAF5U1QsATCPZ0mkWdG9Q7R14lWMHiZRHZ7yG wK9x+X5hHuLwzVRTei5CQHBy5Q== -----END CERTIFICATE-----Generated at Tue Sep 29 11:27:27 2026 by rpki-client