$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: IZ5D7qhPKW9IvMfSk4TuCnRvv63/IA+UDBq8VigsC00= Subject key identifier: BD:8F:10:9E:43:3F:FD:63:B4:79:35:C0:CA:C2:B6:71:D1:72:1F:C3 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 01FE Signing time: Mon 21 Sep 2026 02:56:37 +0000 Manifest this update: Mon 21 Sep 2026 02:56:37 +0000 Manifest next update: Mon 28 Sep 2026 02:56:37 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: Znqeo4kTkU4NeY91ieY+ttkoL55auN9gWJNZ66TS+KM=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Sep 21 02:56:37 2026 GMT Not After : Sep 28 02:56:37 2026 GMT Subject: CN=6ab09ce5-f069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:b3:21:75:98:43:80:e4:21:22:45:e8:9c: 9b:5e:e5:0a:af:79:d6:ba:60:d8:77:29:ef:ad:c9: 1d:fb:f8:3a:8f:74:64:55:87:09:95:32:56:1d:af: 93:63:a8:35:76:f1:d1:fa:73:d8:74:d4:0e:69:a7: 74:4f:d9:86:10:62:7f:29:ef:9c:f4:56:7e:b9:05: 69:46:c0:e7:41:06:47:ba:54:97:1f:cd:8e:01:25: 37:01:7d:26:c1:59:6f:29:9a:fc:56:c5:2b:23:b0: fc:04:30:87:f9:a9:12:1b:5b:99:9b:6f:bd:f1:35: a6:e1:3d:65:0a:8a:62:54:a0:4b:51:9a:c4:98:80: d8:6d:8d:68:f9:14:06:24:7a:d4:a2:82:79:c2:19: f6:b4:85:70:26:d8:07:c7:a1:2f:fa:75:c5:96:38: a7:d2:ad:78:c1:72:ac:9e:74:a8:ff:bc:19:4a:e6: 33:03:08:50:8d:3e:42:f6:18:41:0b:4b:3e:4f:a7: 07:f5:ed:a1:eb:2f:c4:f2:5e:b4:9e:ef:2a:97:e5: 1c:0b:f8:6c:5c:70:74:28:42:d3:46:8a:1e:c9:c8: ec:c4:34:92:b1:37:6b:4c:da:65:f9:1b:c6:52:5d: 23:d2:76:2b:4d:bf:c4:f8:f8:8e:e0:87:c3:1f:ed: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8F:10:9E:43:3F:FD:63:B4:79:35:C0:CA:C2:B6:71:D1:72:1F:C3 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:5d:c2:5e:bb:82:d7:f5:03:a8:b6:bc:5a:54:38:2a:70: 79:2a:18:8c:58:7f:51:cf:0e:10:bb:76:b4:20:ed:17:85:1c: d5:b8:5d:48:a2:19:fa:f3:42:f2:6e:92:e8:bb:2f:d8:98:d0: 39:bd:72:b9:6b:0b:ca:8d:fe:ad:63:bd:46:38:b1:ad:ef:4f: d8:1e:ae:92:5d:c3:18:8f:6c:2a:c3:29:a5:0b:eb:09:72:d0: e2:69:f0:1e:12:a3:1a:68:16:a0:d7:79:c4:06:9e:32:1b:8b: 09:8f:fb:7e:69:e0:1f:23:db:2d:6c:66:3c:20:c7:fa:36:d0: 48:91:3b:17:24:fe:6f:76:c8:26:15:1b:87:dd:fe:c6:42:49: 1f:e3:8f:b3:8b:cf:65:15:db:0a:22:91:01:29:b3:34:a9:a6: e0:46:d1:ff:08:22:0c:2a:ac:32:f2:1c:d8:a3:8a:d4:eb:61: e4:2a:fc:25:81:8c:af:19:33:b8:bb:f5:e9:f1:a7:ed:97:a3: d6:08:b6:d3:d2:32:fe:42:5a:93:03:63:55:dc:fb:48:d0:28: de:da:cb:60:60:ff:a2:09:fb:35:cc:1e:fb:7c:d1:42:aa:dc: fa:01:ed:bb:a7:8e:a1:af:80:e1:16:25:a9:f3:82:64:5f:29: c8:3a:68:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjYwOTIxMDI1NjM3WhcNMjYwOTI4MDI1NjM3WjAYMRYwFAYD VQQDEw02YWIwOWNlNS1mMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX+zIXWYQ4DkISJF6JybXuUKr3nWumDYdynvrckd+/g6j3RkVYcJlTJWHa+T Y6g1dvHR+nPYdNQOaad0T9mGEGJ/Ke+c9FZ+uQVpRsDnQQZHulSXH82OASU3AX0m wVlvKZr8VsUrI7D8BDCH+akSG1uZm2+98TWm4T1lCopiVKBLUZrEmIDYbY1o+RQG JHrUooJ5whn2tIVwJtgHx6Ev+nXFljin0q14wXKsnnSo/7wZSuYzAwhQjT5C9hhB C0s+T6cH9e2h6y/E8l60nu8ql+UcC/hsXHB0KELTRooeycjsxDSSsTdrTNpl+RvG Ul0j0nYrTb/E+PiO4IfDH+1vnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2PEJ5D P/1jtHk1wMrCtnHRch/DMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATz1dwl67gtf1A6i2vFpUOCpweSoYjFh/Uc8OELt2tCDtF4Uc1bhdSKIZ+vNC 8m6S6Lsv2JjQOb1yuWsLyo3+rWO9Rjixre9P2B6ukl3DGI9sKsMppQvrCXLQ4mnw HhKjGmgWoNd5xAaeMhuLCY/7fmngHyPbLWxmPCDH+jbQSJE7FyT+b3bIJhUbh93+ xkJJH+OPs4vPZRXbCiKRASmzNKmm4EbR/wgiDCqsMvIc2KOK1Oth5Cr8JYGMrxkz uLv16fGn7Zej1gi209Iy/kJakwNjVdz7SNAo3trLYGD/ogn7Ncwe+3zRQqrc+gHt u6eOoa+A4RYlqfOCZF8pyDpogw== -----END CERTIFICATE-----Generated at Mon Sep 21 23:24:50 2026 by rpki-client