$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: 1wcUtwscEY4T6XRvG3IAHP5oE8upQcTwvqQ5DxQ5EOw= Subject key identifier: 05:E2:7E:47:5B:5A:69:57:04:65:80:9D:85:84:24:19:07:2E:39:6A Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0864 Signing time: Thu 24 Sep 2026 20:52:40 +0000 Manifest this update: Thu 24 Sep 2026 20:52:40 +0000 Manifest next update: Thu 01 Oct 2026 20:52:40 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: NZrcy9iG9N1L1c65EtpGPrN9PelmPg5wJQp7gfQLo9w=) 2: EE2BD31C64D011F1BE18E4E96947A888.roa (hash: OhuM84ltUspKHkQbXefrgZ3TkNQ2XBw3NffUArldnvU=) 3: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: QMfdlVqqG7b7DNLEI3s6n/xVYtcpjR63MA+xJ2kfQVA=) 4: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=) 5: FF7010DCAE9811F081180758C4F9AE02.roa (hash: qpMk4y0602U3X2w4CmvfK35aoL6m9wVB631uaMX4Chc=) 6: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 7: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) 8: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Sep 24 20:52:40 2026 GMT Not After : Oct 1 20:52:40 2026 GMT Subject: CN=6ab58d98-5ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:cb:6c:75:83:bf:9f:6d:06:34:6d:f4:9d: f0:57:aa:15:97:9b:b6:77:40:3b:0b:96:2e:f4:6b: a6:c1:da:5a:5e:54:c7:7a:a3:6c:8d:7c:15:f7:85: 36:91:fa:3e:78:6a:53:7e:e5:74:04:19:48:79:ea: bd:bf:b5:ec:50:b4:d4:bb:39:e2:85:fc:35:b5:44: 8f:96:06:e3:48:2c:2f:24:4a:0c:99:ef:43:c0:38: 04:02:65:28:8f:98:93:f1:f9:9f:8d:0a:ed:67:f6: 11:b8:b8:b1:f1:8c:b0:27:8b:02:7b:1e:d1:be:70: 79:d7:21:5a:1a:40:00:a2:d8:fe:1d:d7:2c:3b:27: 33:63:60:c7:0b:21:7f:47:93:dd:bf:6b:b0:8f:70: be:e8:d4:c2:4f:af:df:ce:d1:ae:04:b9:4f:46:42: 39:50:78:18:e7:42:65:bd:bc:91:c1:dc:83:33:ac: 16:6f:f6:13:a5:01:de:7e:df:b3:17:cf:5b:c0:b7: a3:1b:59:92:b5:a8:6e:15:e7:fb:09:5a:72:d7:c4: e1:8f:ed:ff:a7:6e:e9:80:5a:35:fd:2a:2f:b7:c4: 69:9b:d8:0f:60:86:9f:6b:58:5e:1f:2f:5c:e9:64: d9:79:a2:0a:3a:d2:b0:5d:15:2b:71:07:3f:64:74: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:7E:47:5B:5A:69:57:04:65:80:9D:85:84:24:19:07:2E:39:6A X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:d6:8d:2e:83:7d:e5:83:fb:b3:c8:eb:2a:69:33:46:28: 95:d1:f0:78:b5:ae:f9:a5:e6:0a:a8:1e:d3:ef:3a:ab:e5:67: 1e:78:96:96:57:7b:b5:22:90:17:2c:2b:85:c1:61:c2:d9:f3: 55:f3:8e:68:91:b3:f3:cb:fd:df:05:22:80:3e:55:44:0a:b7: f2:c2:cb:1b:ea:3e:1e:23:d6:14:d0:1d:48:35:c6:a2:7e:a7: d1:dc:2d:de:f9:d6:91:79:d7:d4:0d:6c:b6:98:01:f8:ed:7c: f8:b9:b0:4b:a3:a1:1e:d4:0f:80:4a:0b:5f:11:31:0a:e7:40: 71:70:13:4b:ac:36:86:2f:45:eb:23:58:d9:da:46:80:29:f9: 16:c1:92:d5:77:ea:9e:97:b7:e5:50:62:ad:09:4f:2d:5b:e7: 2a:c9:60:73:b2:9a:93:2d:0c:31:5c:18:c6:69:fc:d4:ca:cd: c8:40:11:d5:28:f4:0f:a6:b1:f5:2d:14:db:d3:60:0c:1c:ac: 15:0d:f2:7b:5e:8c:7b:6f:b3:a0:ff:8c:dd:d2:e7:03:9f:9d: 14:38:ab:a5:71:73:c6:be:91:94:24:78:e1:67:45:da:bb:ab: 34:49:11:ff:29:b1:b3:4c:cb:08:08:a0:73:21:bf:56:65:58: f5:7e:99:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwOTI0MjA1MjQwWhcNMjYxMDAxMjA1MjQwWjAYMRYwFAYD VQQDEw02YWI1OGQ5OC01Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl23LbHWDv59tBjRt9J3wV6oVl5u2d0A7C5Yu9GumwdpaXlTHeqNsjXwV94U2 kfo+eGpTfuV0BBlIeeq9v7XsULTUuznihfw1tUSPlgbjSCwvJEoMme9DwDgEAmUo j5iT8fmfjQrtZ/YRuLix8YywJ4sCex7RvnB51yFaGkAAotj+HdcsOyczY2DHCyF/ R5Pdv2uwj3C+6NTCT6/fztGuBLlPRkI5UHgY50JlvbyRwdyDM6wWb/YTpQHeft+z F89bwLejG1mStahuFef7CVpy18Thj+3/p27pgFo1/Sovt8Rpm9gPYIafa1heHy9c 6WTZeaIKOtKwXRUrcQc/ZHSmnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXifkdb WmlXBGWAnYWEJBkHLjlqMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANY7WjS6DfeWD+7PI6yppM0YoldHweLWu+aXmCqge0+86q+VnHniWlld7tSKQ FywrhcFhwtnzVfOOaJGz88v93wUigD5VRAq38sLLG+o+HiPWFNAdSDXGon6n0dwt 3vnWkXnX1A1stpgB+O18+LmwS6OhHtQPgEoLXxExCudAcXATS6w2hi9F6yNY2dpG gCn5FsGS1Xfqnpe35VBirQlPLVvnKslgc7Kaky0MMVwYxmn81MrNyEAR1Sj0D6ax 9S0U29NgDBysFQ3ye16Me2+zoP+M3dLnA5+dFDirpXFzxr6RlCR44WdF2rurNEkR /ymxs0zLCAigcyG/VmVY9X6ZXw== -----END CERTIFICATE-----Generated at Sat Sep 26 04:29:49 2026 by rpki-client