$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: 9bIxxsvoelmjcAdfhyxAE/2FsOAU6LptHr0ZWGOyIqE= Subject key identifier: 88:9B:68:37:2D:E5:4F:E8:9B:1F:19:AE:CB:6A:5F:7E:43:D4:94:FE Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 062C Signing time: Sun 20 Sep 2026 22:39:57 +0000 Manifest this update: Sun 20 Sep 2026 22:39:56 +0000 Manifest next update: Sun 27 Sep 2026 22:39:56 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: Tq2a1XBEAcUB/eKvC09JYv4W68kxnw0sjpxvqonv+rI=) 2: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=) 3: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Sep 20 22:39:56 2026 GMT Not After : Sep 27 22:39:56 2026 GMT Subject: CN=6ab060bc-6024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:c7:3b:d6:2b:dc:ee:66:9b:25:1f:bf:d2: 66:36:55:51:70:29:6f:87:09:e6:d4:4f:2a:0e:24: 0b:0a:0e:a7:a2:43:8f:be:2a:93:83:23:1f:64:7a: 40:00:d3:a0:e9:c3:83:45:bb:a4:10:2c:00:c5:35: 53:8c:b4:5c:01:0b:8f:bf:05:4e:d6:a0:8c:87:2a: 85:1b:a0:13:f7:c0:8d:65:3d:8f:24:24:2c:4b:8e: 1a:51:c0:55:36:88:e2:7e:d2:4e:66:a4:21:e9:96: 85:42:1c:7e:c0:27:f5:d1:61:8c:67:40:19:a5:62: 2b:37:4f:4f:f5:f2:42:3a:a0:d1:54:22:c7:7f:bc: 4a:0b:c1:9b:c1:b2:50:67:bd:4a:4c:be:bb:6f:8a: 48:32:ee:be:80:25:6d:75:9d:27:0f:5c:b4:cc:b7: 91:4e:21:02:c4:9c:c2:86:84:08:f2:bd:c9:d1:0d: 53:36:af:6d:3d:26:59:17:7f:96:6c:4d:76:e7:8f: a0:63:2f:47:d6:fa:38:80:91:48:30:97:5e:09:bb: a1:af:6f:15:a5:7e:ed:e3:5b:ac:d8:f4:6b:ff:10: dd:bc:bb:91:0e:af:a4:25:33:c4:50:8b:79:f8:1f: 45:43:47:3a:38:85:63:92:77:c7:b6:f5:27:0f:a3: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9B:68:37:2D:E5:4F:E8:9B:1F:19:AE:CB:6A:5F:7E:43:D4:94:FE X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1e:b0:30:84:37:37:f8:a7:0f:84:96:20:3a:89:14:86:2b: 71:d4:37:f8:63:14:83:91:f5:b6:0b:5b:d2:7d:e8:f2:05:b0: f8:af:15:9f:a5:03:6e:f9:92:89:c9:64:54:2f:c0:95:fd:f1: 77:a0:92:4b:0f:23:a1:c4:24:28:8a:c8:ae:58:0f:24:56:76: 3a:0a:c2:ba:17:85:91:0a:23:34:bc:aa:57:6d:6c:b4:02:4a: 09:d9:92:f2:9f:23:14:78:49:37:e2:f9:ff:93:96:5f:0c:06: 31:d8:26:80:8c:4e:e7:1d:17:a5:f3:20:d2:64:dd:6e:47:de: 61:93:e8:6b:48:05:fe:67:84:09:d4:cd:8c:58:f0:35:4d:a7: c7:d2:19:0a:2e:d9:4f:25:97:a6:f3:2a:17:19:25:96:52:e6: 66:cb:ee:49:78:84:67:f7:8c:c5:1b:e9:fb:20:08:49:a7:2c: 2a:9c:fd:1b:4b:00:c5:6b:1f:d8:bd:b9:77:97:2b:2d:5b:05: cb:1b:07:dc:66:1e:97:a3:7c:f0:5a:a8:42:ae:3d:2a:52:67: 79:57:c1:dc:e1:79:67:54:db:98:4b:dd:13:a3:54:8e:9c:39: dd:af:76:bb:02:9a:87:30:12:a7:b2:9f:3f:76:d0:8e:70:b9: 27:31:1e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjYwOTIwMjIzOTU2WhcNMjYwOTI3MjIzOTU2WjAYMRYwFAYD VQQDEw02YWIwNjBiYy02MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjADHO9Yr3O5mmyUfv9JmNlVRcClvhwnm1E8qDiQLCg6nokOPviqTgyMfZHpA ANOg6cODRbukECwAxTVTjLRcAQuPvwVO1qCMhyqFG6AT98CNZT2PJCQsS44aUcBV NojiftJOZqQh6ZaFQhx+wCf10WGMZ0AZpWIrN09P9fJCOqDRVCLHf7xKC8GbwbJQ Z71KTL67b4pIMu6+gCVtdZ0nD1y0zLeRTiECxJzChoQI8r3J0Q1TNq9tPSZZF3+W bE1254+gYy9H1vo4gJFIMJdeCbuhr28VpX7t41us2PRr/xDdvLuRDq+kJTPEUIt5 +B9FQ0c6OIVjknfHtvUnD6MNUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIibaDct 5U/omx8ZrstqX35D1JT+MB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADB6wMIQ3N/inD4SWIDqJFIYrcdQ3+GMUg5H1tgtb0n3o8gWw+K8Vn6UDbvmS iclkVC/Alf3xd6CSSw8jocQkKIrIrlgPJFZ2OgrCuheFkQojNLyqV21stAJKCdmS 8p8jFHhJN+L5/5OWXwwGMdgmgIxO5x0XpfMg0mTdbkfeYZPoa0gF/meECdTNjFjw NU2nx9IZCi7ZTyWXpvMqFxklllLmZsvuSXiEZ/eMxRvp+yAISacsKpz9G0sAxWsf 2L25d5crLVsFyxsH3GYel6N88FqoQq49KlJneVfB3OF5Z1TbmEvdE6NUjpw53a92 uwKahzASp7KfP3bQjnC5JzEecA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:56:42 2026 by rpki-client