$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: k4EFKJJfqLLJ/L/EnWIAcGBa1cM5MaI67OHRFIXm4xw= Subject key identifier: 1C:2F:8A:C8:6B:BE:F0:75:EF:F1:02:BB:CE:29:44:62:57:8D:B0:76 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0EA1 Signing time: Thu 24 Sep 2026 17:41:36 +0000 Manifest this update: Thu 24 Sep 2026 17:41:35 +0000 Manifest next update: Thu 01 Oct 2026 17:41:35 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: 9gWHnyzhetsGPP+zdRpSyGk7hHXLfeH1512JtSpj7DI=) 2: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) 3: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3779 (0xec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Sep 24 17:41:35 2026 GMT Not After : Oct 1 17:41:35 2026 GMT Subject: CN=6ab560cf-bcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:b3:87:87:64:ae:54:a4:36:b1:c2:c3:88: ee:f5:02:3d:f6:f5:99:5a:59:40:bd:fe:34:73:c5: d5:35:7b:85:d8:84:c8:f9:f0:09:03:26:73:f9:b3: ca:f9:ec:42:88:8c:75:c9:eb:a2:db:b4:d3:42:f3: 9e:39:02:f7:a0:04:ef:50:ed:86:1c:bc:a0:6d:36: 22:f4:53:3b:c6:c9:b4:70:39:58:9d:8d:b7:bc:2b: 5f:ec:d7:4e:6c:b5:38:f2:66:d2:0d:cc:43:c3:c6: 8d:de:5a:59:e9:57:15:1d:0d:7f:35:a7:63:94:0a: 9f:99:b0:3e:44:2c:94:a4:b0:e8:bf:8f:db:8e:8c: d0:6e:37:d1:d9:7e:8d:46:61:28:c2:30:7b:af:60: 3d:f0:fa:8a:2a:42:2f:58:75:c8:49:9d:e7:48:c4: 2e:03:b3:ce:30:83:af:99:c4:75:8b:0a:c8:b1:cc: 4b:47:11:20:41:34:ee:4e:75:5a:3d:15:5b:a6:81: 01:e5:53:8a:48:a5:e1:cd:f8:2e:22:ea:81:fc:b9: cb:95:da:c5:c3:6d:dd:6b:70:9d:43:c0:06:c3:82: cd:1d:4a:12:63:2a:f2:c6:32:a6:bf:3a:01:fd:05: 39:f4:2f:39:26:89:9b:1d:d5:df:d9:21:94:56:bd: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:8A:C8:6B:BE:F0:75:EF:F1:02:BB:CE:29:44:62:57:8D:B0:76 X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:13:b7:56:ad:3b:9b:67:8c:52:e1:7e:08:88:2c:85:a3:1d: c6:12:20:19:40:cf:4a:4d:76:40:ac:50:89:67:79:28:df:ff: a3:a7:d2:52:76:27:1d:c0:ee:c3:78:03:dd:08:e0:6d:d7:19: a4:8a:55:3c:1e:2c:4d:8d:ab:f3:16:3a:7a:c5:0f:7c:54:d9: e5:81:8b:10:04:b1:9f:c5:00:b1:35:86:61:0b:88:fc:50:0a: b6:e3:e5:b5:24:18:aa:7a:a3:2c:3e:94:ab:00:c2:a2:1b:76: ef:21:3c:50:69:53:ff:a7:11:fa:d3:c7:5d:61:83:3f:1f:64: 13:be:4c:7d:49:35:c1:53:4d:93:73:0f:9d:fe:18:5b:a5:85: a3:49:3f:8e:3c:25:26:b1:f4:25:8e:af:6e:1f:d9:71:19:11: b1:40:05:2e:2b:ba:25:a7:5e:94:e9:69:93:4c:09:d1:bb:05: d6:42:b2:75:1a:60:be:4c:08:c0:de:46:10:17:4f:c6:42:d6: 59:49:71:f3:ee:61:81:26:81:8d:30:d5:72:b7:13:dc:f8:bd: ae:1a:4f:83:33:50:fd:d9:c0:89:51:92:3e:e5:1c:86:31:f4: 7c:2b:e8:66:7c:c3:6c:43:81:7f:18:28:4d:de:c1:91:54:cc: 57:ee:a6:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYwOTI0MTc0MTM1WhcNMjYxMDAxMTc0MTM1WjAYMRYwFAYD VQQDEw02YWI1NjBjZi1iY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Juzh4dkrlSkNrHCw4ju9QI99vWZWllAvf40c8XVNXuF2ITI+fAJAyZz+bPK +exCiIx1yeui27TTQvOeOQL3oATvUO2GHLygbTYi9FM7xsm0cDlYnY23vCtf7NdO bLU48mbSDcxDw8aN3lpZ6VcVHQ1/NadjlAqfmbA+RCyUpLDov4/bjozQbjfR2X6N RmEowjB7r2A98PqKKkIvWHXISZ3nSMQuA7POMIOvmcR1iwrIscxLRxEgQTTuTnVa PRVbpoEB5VOKSKXhzfguIuqB/LnLldrFw23da3CdQ8AGw4LNHUoSYyryxjKmvzoB /QU59C85JombHdXf2SGUVr2XwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwvishr vvB17/ECu84pRGJXjbB2MB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbxO3Vq07m2eMUuF+CIgshaMdxhIgGUDPSk12QKxQiWd5KN//o6fSUnYnHcDu w3gD3QjgbdcZpIpVPB4sTY2r8xY6esUPfFTZ5YGLEASxn8UAsTWGYQuI/FAKtuPl tSQYqnqjLD6UqwDCoht27yE8UGlT/6cR+tPHXWGDPx9kE75MfUk1wVNNk3MPnf4Y W6WFo0k/jjwlJrH0JY6vbh/ZcRkRsUAFLiu6JadelOlpk0wJ0bsF1kKydRpgvkwI wN5GEBdPxkLWWUlx8+5hgSaBjTDVcrcT3Pi9rhpPgzNQ/dnAiVGSPuUchjH0fCvo ZnzDbEOBfxgoTd7BkVTMV+6mjA== -----END CERTIFICATE-----Generated at Fri Sep 25 09:37:43 2026 by rpki-client