$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: 77Hg3LS4bRKJM3iBixFjK1PbOt2tPqUU26FuczWEBpE= Subject key identifier: 0A:9C:05:48:8B:7E:D7:BF:F0:C4:BD:F0:81:77:A4:86:4A:F2:63:8F Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1B3D Signing time: Tue 22 Sep 2026 16:14:15 +0000 Manifest this update: Tue 22 Sep 2026 16:14:14 +0000 Manifest next update: Tue 29 Sep 2026 16:14:14 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: wU1ODN9UqUX5oxhOcLSDbQrL3sYALkfcAqATciKLOTE=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7011 (0x1b63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Sep 22 16:14:14 2026 GMT Not After : Sep 29 16:14:14 2026 GMT Subject: CN=6ab2a957-ff78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:09:ad:97:40:5d:1c:96:f7:b0:11:31:29:3d: 45:e9:2b:19:d8:e1:38:07:b0:af:91:15:84:9f:39: c4:b1:71:24:c9:d6:09:3e:f0:f7:b9:99:a4:bf:57: ef:48:2a:af:cc:e1:53:be:27:fb:91:d6:71:cb:12: 9a:c0:55:f6:ea:b8:97:0b:bd:81:d6:2c:c2:ef:8b: 2c:a4:b8:39:ad:a4:9e:0f:ad:0e:73:27:33:2f:b7: 68:51:64:1b:cc:f7:45:47:1a:42:d2:7c:29:ae:ff: 47:01:0b:63:fa:14:6f:e3:a4:24:9a:89:b1:41:0f: 32:4b:57:70:6e:01:91:25:d5:ea:d6:31:02:14:08: 64:26:f5:44:e7:4d:3d:12:af:16:95:90:9e:c2:dc: ac:db:c6:d7:63:4b:33:1f:c8:62:ac:cb:dd:f6:02: 48:b9:e9:7b:1f:b7:ff:97:8f:ef:35:30:43:79:23: 89:da:18:1f:56:39:6f:4f:af:e5:c8:62:4f:44:45: 7a:b1:0b:08:81:c9:23:6f:33:75:8e:86:b5:61:de: 4e:19:38:b1:98:21:58:ea:95:44:6e:22:e4:ef:e2: 4e:94:e8:46:10:cc:8e:6e:55:a2:17:99:d7:8c:9a: f9:75:07:65:07:59:0b:8f:3a:da:b3:ea:d5:d1:c7: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:05:48:8B:7E:D7:BF:F0:C4:BD:F0:81:77:A4:86:4A:F2:63:8F X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b1:2a:e1:de:3b:56:f6:f6:c3:fd:f5:8d:3b:32:1a:34:d8: 58:eb:3d:ea:d4:db:b1:48:3c:c6:45:3d:d3:a6:cf:84:b9:fc: 70:be:07:41:27:22:0b:9c:a9:2e:83:16:10:3c:6b:7a:d7:14: 65:89:ef:5d:48:e4:23:b2:9e:15:b6:d5:d8:86:c5:34:d5:5b: 98:b2:7e:53:17:74:f9:a0:81:b7:96:f0:b1:9b:27:da:2d:73: 76:7b:2f:6e:71:60:53:de:1a:cd:d2:0b:4c:ff:60:4e:0f:35: 19:94:44:e7:2d:50:ce:30:15:14:f8:20:17:8d:e8:74:05:a7: 51:12:65:c2:06:90:4b:97:ff:30:da:c8:a5:71:d3:1b:f7:a2: b6:51:9f:04:61:e8:e1:88:c7:c4:bf:3f:a9:20:76:16:01:b3: ed:f2:8d:12:40:76:52:ab:54:be:1f:c9:dc:5b:bf:19:6e:67: 5c:ac:ae:47:bc:e9:f1:42:9c:b6:b8:bf:8f:f3:a8:9d:33:cb: 76:6b:49:5e:b9:7c:36:69:6c:10:c9:a7:bc:33:21:f3:2f:b3: c8:5b:9a:32:8a:08:f7:0d:bd:94:fe:46:89:f4:e9:c7:d7:fc: a7:e9:5e:45:19:a6:8d:3f:bf:22:93:95:82:d1:57:cf:6d:d7: 2c:0a:1a:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwOTIyMTYxNDE0WhcNMjYwOTI5MTYxNDE0WjAYMRYwFAYD VQQDEw02YWIyYTk1Ny1mZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wmtl0BdHJb3sBExKT1F6SsZ2OE4B7CvkRWEnznEsXEkydYJPvD3uZmkv1fv SCqvzOFTvif7kdZxyxKawFX26riXC72B1izC74sspLg5raSeD60OcyczL7doUWQb zPdFRxpC0nwprv9HAQtj+hRv46QkmomxQQ8yS1dwbgGRJdXq1jECFAhkJvVE5009 Eq8WlZCewtys28bXY0szH8hirMvd9gJIuel7H7f/l4/vNTBDeSOJ2hgfVjlvT6/l yGJPREV6sQsIgckjbzN1joa1Yd5OGTixmCFY6pVEbiLk7+JOlOhGEMyOblWiF5nX jJr5dQdlB1kLjzras+rV0ceawQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqcBUiL fte/8MS98IF3pIZK8mOPMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuLEq4d47Vvb2w/31jTsyGjTYWOs96tTbsUg8xkU906bPhLn8cL4HQSciC5yp LoMWEDxretcUZYnvXUjkI7KeFbbV2IbFNNVbmLJ+Uxd0+aCBt5bwsZsn2i1zdnsv bnFgU94azdILTP9gTg81GZRE5y1QzjAVFPggF43odAWnURJlwgaQS5f/MNrIpXHT G/eitlGfBGHo4YjHxL8/qSB2FgGz7fKNEkB2UqtUvh/J3Fu/GW5nXKyuR7zp8UKc tri/j/OonTPLdmtJXrl8NmlsEMmnvDMh8y+zyFuaMooI9w29lP5GifTpx9f8p+le RRmmjT+/IpOVgtFXz23XLAoa9w== -----END CERTIFICATE-----Generated at Wed Sep 23 08:05:25 2026 by rpki-client