$ rpki-client -vvvf rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft File: KXr2WH-YpJnreNLMrjYW70KfV1A.mft (raw, json) Hash identifier: MXtTCRgbdDNMxld3dj9ZxGbMIMQ8CFcA3M9kcXwQGIk= Subject key identifier: B4:EE:04:44:BE:71:89:43:4F:3E:17:3F:91:45:06:0B:F6:79:AD:2D Authority key identifier: 29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 Certificate issuer: /CN=A91411BC/serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Certificate serial: 142C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft Manifest number: 1421 Signing time: Mon 12 Oct 2026 16:57:57 +0000 Manifest this update: Mon 12 Oct 2026 16:57:56 +0000 Manifest next update: Mon 19 Oct 2026 16:57:56 +0000 Files and hashes: 1: KXr2WH-YpJnreNLMrjYW70KfV1A.crl (hash: h8X8rJuMy/2IX+eduhkjX+4ST7C+FJ4FuPOdFgys2uM=) 2: B4996A22AC3411E88623474BC4F9AE02.roa (hash: RPjXeL3Zl8P6QkaRaUeCd76+wyQHC30Y9Dr1jaF8lPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5164 (0x142c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411BC, serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Validity Not Before: Oct 12 16:57:56 2026 GMT Not After : Oct 19 16:57:56 2026 GMT Subject: CN=6acd1195-9c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:05:0e:23:dc:32:35:6a:34:31:80:cd:f0: 22:1a:08:b5:74:55:50:71:c8:96:31:95:4e:18:47: 5e:01:66:8e:18:f5:99:b2:6d:3d:e6:90:2c:d3:c6: 7f:f6:89:50:55:4f:35:3c:c0:f7:94:fb:ac:7e:f5: fe:f9:b1:d1:a6:10:fe:d1:7b:0c:26:ec:3d:70:de: 1a:cf:f9:2c:25:09:a8:c4:9a:18:0c:16:a4:29:03: 27:cd:ef:ae:a8:17:9f:aa:1c:8e:bf:0a:e2:a5:2e: 6e:63:50:eb:16:c0:b9:82:94:f0:13:4e:e2:14:3e: cc:89:25:50:c1:64:0c:38:66:be:da:88:bc:73:e3: 1f:17:f9:e8:a2:96:b0:36:da:d1:a7:8e:87:20:cf: 6a:24:ab:ab:80:68:bd:b4:50:f7:19:ef:bc:55:4e: d9:e3:1a:03:db:10:59:6b:0c:c4:d0:3a:6f:a5:08: c5:df:74:75:fc:b6:45:00:ce:65:76:1c:64:4f:5e: e5:14:d3:46:7d:0e:eb:c6:8d:6a:54:38:18:2e:ab: bb:27:88:2a:e7:8b:ff:43:9b:02:a6:f2:f1:a2:4f: a1:62:22:02:94:bf:3c:93:cb:c9:f9:af:a6:ab:4b: 30:16:90:fe:b8:ff:b1:30:68:44:0a:d3:a3:04:80: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:04:44:BE:71:89:43:4F:3E:17:3F:91:45:06:0B:F6:79:AD:2D X509v3 Authority Key Identifier: keyid:29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:15:cb:a4:60:ae:bd:21:84:18:a2:22:5b:90:15:a7:76: f4:8c:8c:f0:c3:97:64:2b:5a:51:b5:fb:ab:67:fc:c4:14:5f: 83:62:03:d5:fb:ac:1d:46:8d:31:a7:bd:72:86:81:75:1e:58: ea:a4:22:ea:73:36:32:73:cf:0e:ea:8c:db:46:17:49:9a:5b: 6d:26:e8:47:e8:70:e7:bb:8e:88:c9:ef:40:f8:94:67:ac:fd: 78:18:27:09:e5:50:9c:64:5c:54:79:bb:c0:12:a5:b7:aa:f0: 6b:03:ef:93:34:94:e1:a2:88:8a:5d:c2:4a:ba:e1:6f:dd:52: 02:45:fb:f6:25:ec:f9:da:12:ef:84:e4:e9:58:6c:71:93:7b: c3:3e:b1:a5:7c:ab:3c:da:f9:23:c1:f0:a7:96:e7:45:34:72: 79:e0:2c:1d:17:61:24:c8:20:07:b9:b1:d7:48:de:05:4f:a9: 30:79:c7:25:d5:eb:fa:6e:31:c8:40:d0:fe:58:2d:28:c8:73: d6:67:32:95:5c:fa:58:d7:f4:d9:dd:63:c8:cb:50:a0:4f:dd: 55:de:64:e4:3e:38:d6:cc:0c:78:cf:51:53:50:95:49:c6:b0: 01:cf:47:aa:ae:72:7e:b7:e0:be:1c:36:60:d4:d8:64:9e:a4: 95:ca:66:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQkMxMTAvBgNVBAUTKDI5N0FGNjU4N0Y5OEE0OTlFQjc4RDJDQ0FFMzYxNkVG NDI5RjU3NTAwHhcNMjYxMDEyMTY1NzU2WhcNMjYxMDE5MTY1NzU2WjAYMRYwFAYD VQQDEw02YWNkMTE5NS05YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpIFDiPcMjVqNDGAzfAiGgi1dFVQcciWMZVOGEdeAWaOGPWZsm095pAs08Z/ 9olQVU81PMD3lPusfvX++bHRphD+0XsMJuw9cN4az/ksJQmoxJoYDBakKQMnze+u qBefqhyOvwripS5uY1DrFsC5gpTwE07iFD7MiSVQwWQMOGa+2oi8c+MfF/noopaw NtrRp46HIM9qJKurgGi9tFD3Ge+8VU7Z4xoD2xBZawzE0DpvpQjF33R1/LZFAM5l dhxkT17lFNNGfQ7rxo1qVDgYLqu7J4gq54v/Q5sCpvLxok+hYiIClL88k8vJ+a+m q0swFpD+uP+xMGhECtOjBIDPYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTuBES+ cYlDTz4XP5FFBgv2ea0tMB8GA1UdIwQYMBaAFCl69lh/mKSZ63jSzK42Fu9Cn1dQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCQy9FMzE3MUIwMkFD MzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBKbnJlTkxNcmpZVzcwS2ZW MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYcjJXSC1ZcEpucmVOTE1yallXNzBLZlYxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCQy9FMzE3MUIwMkFDMzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBK bnJlTkxNcmpZVzcwS2ZWMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeygVy6Rgrr0hhBiiIluQFad29IyM8MOXZCtaUbX7q2f8xBRfg2ID1fusHUaN Mae9coaBdR5Y6qQi6nM2MnPPDuqM20YXSZpbbSboR+hw57uOiMnvQPiUZ6z9eBgn CeVQnGRcVHm7wBKlt6rwawPvkzSU4aKIil3CSrrhb91SAkX79iXs+doS74Tk6Vhs cZN7wz6xpXyrPNr5I8Hwp5bnRTRyeeAsHRdhJMggB7mx10jeBU+pMHnHJdXr+m4x yEDQ/lgtKMhz1mcylVz6WNf02d1jyMtQoE/dVd5k5D441swMeM9RU1CVScawAc9H qq5yfrfgvhw2YNTYZJ6klcpmYA== -----END CERTIFICATE-----Generated at Tue Oct 13 08:53:17 2026 by rpki-client