$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: aovxAkUBf90GYJpv1lTMsvOtsyUUO1Iy1FC6x8aR5ws= Subject key identifier: 89:9D:D0:9A:07:61:A3:DC:0C:97:BB:AC:83:38:24:34:EF:EE:94:43 Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 0335 Signing time: Mon 21 Sep 2026 00:52:01 +0000 Manifest this update: Mon 21 Sep 2026 00:52:00 +0000 Manifest next update: Mon 28 Sep 2026 00:52:00 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: oEfDq/Riu/Tm4WZ5U/weV7WpHg43rDeYzWTae/VyV04=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: SUdsRCcaBdD46RXii9r4LvZeBaE3CzxFlZInXxLziYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: Sep 21 00:52:00 2026 GMT Not After : Sep 28 00:52:00 2026 GMT Subject: CN=6ab07fb1-917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:23:de:ca:43:ef:cc:5a:bb:c3:63:52:15: 51:d8:70:89:65:88:a9:ec:d4:2d:26:db:cd:3c:ad: ec:6a:aa:f6:2d:68:de:5a:6e:fa:82:81:7b:d1:2e: 7e:b6:0e:d6:2d:54:82:d7:86:af:b2:e5:53:d5:15: 35:f8:66:7e:db:6e:c5:e0:f2:f8:a5:f5:74:95:a2: ee:1a:f1:58:fd:4a:e1:d8:c1:ef:ff:42:4c:e8:f3: b6:39:4d:03:35:af:16:e5:67:c6:be:54:08:06:87: 19:26:dd:60:97:91:f3:eb:c6:fd:c2:ce:e9:aa:4f: c9:ba:f8:8b:29:d1:3d:33:35:fe:03:9c:9e:c1:cd: ac:f1:b6:81:c3:a7:67:bb:27:a7:00:c7:9f:a9:6b: 03:88:93:fc:c6:e6:24:4e:d9:cf:21:4a:50:19:ac: 32:64:d7:a9:da:11:eb:20:91:b6:c7:03:47:63:c2: 13:b2:21:ef:0d:86:4d:fd:b3:38:7c:e1:48:87:dd: 6d:18:ac:f2:ab:37:e9:9a:db:cd:a9:ae:c9:c4:1d: 73:45:8f:5c:41:4f:2a:e8:46:5f:b1:6d:a0:82:ab: 4e:e6:e8:dc:bf:e0:61:b3:a8:59:d2:a9:0e:dc:d8: f6:08:f8:58:21:66:f1:a1:7b:c7:d7:e0:37:67:39: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:D0:9A:07:61:A3:DC:0C:97:BB:AC:83:38:24:34:EF:EE:94:43 X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:04:3a:5d:7f:24:46:fe:6b:c5:5d:64:a4:ac:9a:26:dc: 09:66:e3:86:d2:a3:cb:60:fd:62:cb:08:65:fc:bf:03:27:cb: df:91:3b:6a:90:b4:39:fa:68:2c:12:f6:ba:15:42:ac:d6:fd: 96:bd:87:c6:98:d9:26:f5:a0:2e:fe:3a:d6:9c:8b:b9:07:ae: d9:d8:fd:bc:b5:b6:d7:cb:62:28:e1:fa:92:d0:ec:54:c5:b0: 56:5d:4d:8f:09:35:99:56:f5:2d:71:fb:1d:b4:f2:e2:05:d9: 92:ee:9a:a9:32:2f:8e:4e:9a:cb:76:a7:89:07:38:cd:76:8c: 83:f1:b0:8e:80:ab:14:4a:9b:ce:b4:02:58:1b:2b:4d:53:cd: 09:08:f7:7c:a5:91:19:26:10:88:2f:92:7a:b9:97:8a:fd:d6: a2:4d:f9:b7:70:3c:52:67:29:d2:c1:d5:cc:84:2e:89:18:38: d4:fa:00:0b:16:27:48:12:9c:6c:53:c6:84:62:e7:a5:4b:c3: 9a:4d:19:e8:40:18:9d:4d:bb:71:1f:a6:6f:a2:24:8c:7a:0f: 53:d6:a4:67:e2:8e:ec:6f:e4:be:22:c3:06:01:83:32:2d:be: 58:5d:da:01:5d:d6:e3:0f:30:ba:77:20:2a:f9:5f:d5:80:6e: 71:f8:13:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjYwOTIxMDA1MjAwWhcNMjYwOTI4MDA1MjAwWjAYMRYwFAYD VQQDEw02YWIwN2ZiMS05MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjo4j3spD78xau8NjUhVR2HCJZYip7NQtJtvNPK3saqr2LWjeWm76goF70S5+ tg7WLVSC14avsuVT1RU1+GZ+227F4PL4pfV0laLuGvFY/Urh2MHv/0JM6PO2OU0D Na8W5WfGvlQIBocZJt1gl5Hz68b9ws7pqk/JuviLKdE9MzX+A5yewc2s8baBw6dn uyenAMefqWsDiJP8xuYkTtnPIUpQGawyZNep2hHrIJG2xwNHY8ITsiHvDYZN/bM4 fOFIh91tGKzyqzfpmtvNqa7JxB1zRY9cQU8q6EZfsW2ggqtO5ujcv+Bhs6hZ0qkO 3Nj2CPhYIWbxoXvH1+A3ZznaCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImd0JoH YaPcDJe7rIM4JDTv7pRDMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1cEOl1/JEb+a8VdZKSsmibcCWbjhtKjy2D9YssIZfy/AyfL35E7apC0Ofpo LBL2uhVCrNb9lr2HxpjZJvWgLv461pyLuQeu2dj9vLW218tiKOH6ktDsVMWwVl1N jwk1mVb1LXH7HbTy4gXZku6aqTIvjk6ay3aniQc4zXaMg/GwjoCrFEqbzrQCWBsr TVPNCQj3fKWRGSYQiC+SermXiv3Wok35t3A8Umcp0sHVzIQuiRg41PoACxYnSBKc bFPGhGLnpUvDmk0Z6EAYnU27cR+mb6IkjHoPU9akZ+KO7G/kviLDBgGDMi2+WF3a AV3W4w8wuncgKvlf1YBucfgTjg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:39:02 2026 by rpki-client