$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: bi9E6w9oS+D6tquSdk65QA/IO3rnMdkrqYRaS6CP5TY= Subject key identifier: 5C:4D:F5:96:84:CF:F5:79:28:7C:84:A9:A0:01:FB:7C:69:94:B2:B6 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 0152 Signing time: Mon 21 Sep 2026 05:16:33 +0000 Manifest this update: Mon 21 Sep 2026 05:16:32 +0000 Manifest next update: Mon 28 Sep 2026 05:16:32 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: xNiFCkc1+sUMb69hDamuZ5QXfJiQvZayOO0RDnVpnLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Sep 21 05:16:32 2026 GMT Not After : Sep 28 05:16:32 2026 GMT Subject: CN=6ab0bdb0-32ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:06:d2:43:ba:e6:2e:32:4b:b3:65:ba:4a: 69:fd:7b:c9:53:56:9e:39:70:99:db:20:44:c0:06: 19:62:35:bd:79:fc:6b:c2:a9:1b:f7:5c:2f:28:57: cc:93:44:d0:30:57:d1:4a:45:5b:79:8d:bb:eb:a3: a6:74:5b:e1:bf:fe:0b:1b:71:ce:e6:77:1a:44:ce: 85:95:cd:6f:4a:bd:f8:dc:e4:db:c2:1c:c8:80:a9: 0c:dc:c0:ac:2d:10:32:a9:7c:50:78:57:67:28:18: 35:ac:5f:e6:b1:16:72:f2:06:8a:ce:85:b7:35:26: 57:0b:73:3c:76:c6:6c:d0:15:fe:3e:18:48:d0:07: e7:b5:4c:fd:75:8a:bc:8d:9a:0d:db:29:49:3d:60: ea:9b:f5:d6:28:f7:df:c0:d5:a7:2e:f8:67:a3:8d: 9d:12:3e:64:98:c6:98:e1:37:7a:17:1b:03:b1:54: ee:a4:fa:85:06:e3:02:9c:88:67:39:bb:c0:ca:c4: df:02:dd:18:e0:9d:ad:76:e7:85:70:b9:26:2e:f4: 66:3d:17:f1:9d:9c:55:b3:03:8b:1c:50:11:f1:e5: 89:f3:33:86:16:10:0f:6a:30:af:84:0f:49:01:33: 9b:07:b4:3c:63:a2:8b:b7:4e:ae:e4:87:e0:02:26: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4D:F5:96:84:CF:F5:79:28:7C:84:A9:A0:01:FB:7C:69:94:B2:B6 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:63:40:b4:01:19:a8:57:0c:7a:36:91:73:9a:05:f4:b1:31: 95:d8:4d:96:1f:a4:05:0d:43:66:7a:34:b7:67:19:1c:92:c1: dd:e5:15:da:99:23:df:45:24:ae:08:6d:5f:62:74:02:a3:e2: 59:b6:83:ad:d9:09:ec:06:23:17:58:d2:4d:3f:be:80:01:db: ca:e2:fc:60:aa:45:ec:82:aa:9b:b7:b0:57:e2:d7:d0:69:51: 0e:d7:2d:c6:57:ab:ac:bf:64:b1:1b:53:85:ae:9d:99:64:9c: a1:7b:29:c9:0e:aa:16:c4:64:d7:5a:0a:fd:23:53:00:4f:1e: a4:cb:5e:b6:d0:87:bc:64:c6:c6:49:aa:ff:14:92:5f:d8:54: 45:c8:c9:9d:df:9f:5a:bd:56:53:1d:eb:95:a9:a9:6f:34:dd: 8e:7a:74:cc:81:e5:f6:1c:02:94:8e:7e:fa:38:77:0e:ad:76: 25:ee:44:05:4b:5e:96:33:d3:d3:9c:2b:12:81:81:20:2f:de: 3e:0e:78:24:b8:79:b9:4f:70:f6:0d:0c:7d:77:7d:f6:3c:39: bb:7c:d1:f1:88:5e:df:ab:0c:f9:5a:7a:af:0b:e5:d9:bb:b4: 09:28:b5:55:7b:1f:9e:2f:e7:9d:9a:f7:9b:45:d9:fc:54:06: 19:1f:a9:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw M0I2NzQ1MjIwHhcNMjYwOTIxMDUxNjMyWhcNMjYwOTI4MDUxNjMyWjAYMRYwFAYD VQQDEw02YWIwYmRiMC0zMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1poG0kO65i4yS7Nlukpp/XvJU1aeOXCZ2yBEwAYZYjW9efxrwqkb91wvKFfM k0TQMFfRSkVbeY2766OmdFvhv/4LG3HO5ncaRM6Flc1vSr343OTbwhzIgKkM3MCs LRAyqXxQeFdnKBg1rF/msRZy8gaKzoW3NSZXC3M8dsZs0BX+PhhI0AfntUz9dYq8 jZoN2ylJPWDqm/XWKPffwNWnLvhno42dEj5kmMaY4Td6FxsDsVTupPqFBuMCnIhn ObvAysTfAt0Y4J2tdueFcLkmLvRmPRfxnZxVswOLHFAR8eWJ8zOGFhAPajCvhA9J ATObB7Q8Y6KLt06u5IfgAibSywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxN9ZaE z/V5KHyEqaAB+3xplLK2MB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC M1IyMmM0TVRMY1FEdG5SU0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnmNAtAEZqFcMejaRc5oF9LExldhNlh+kBQ1DZno0t2cZHJLB3eUV2pkj30Uk rghtX2J0AqPiWbaDrdkJ7AYjF1jSTT++gAHbyuL8YKpF7IKqm7ewV+LX0GlRDtct xlerrL9ksRtTha6dmWScoXspyQ6qFsRk11oK/SNTAE8epMtettCHvGTGxkmq/xSS X9hURcjJnd+fWr1WUx3rlampbzTdjnp0zIHl9hwClI5++jh3Dq12Je5EBUteljPT 05wrEoGBIC/ePg54JLh5uU9w9g0MfXd99jw5u3zR8Yhe36sM+Vp6rwvl2bu0CSi1 VXsfni/nnZr3m0XZ/FQGGR+pzA== -----END CERTIFICATE-----Generated at Tue Sep 22 13:17:35 2026 by rpki-client