$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json) Hash identifier: /ILnzAnkVD1dwObSLKd5z1spzlGLe8/2GTUGCVlH3ck= Subject key identifier: 0E:83:73:1E:54:79:D3:C7:14:5B:55:D3:98:44:79:46:5E:26:BD:03 Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft Manifest number: 5E Signing time: Sat 19 Sep 2026 05:03:08 +0000 Manifest this update: Sat 19 Sep 2026 05:03:08 +0000 Manifest next update: Sat 26 Sep 2026 05:03:08 +0000 Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: rz/HEWLxSkHalNVrBiww17HIsKKznWH9noZHVEi1gNU=) 2: 910D4E52AEBA11F1B27A531D4111F970.roa (hash: p5P4belsHB4XrOr94s3PLvQXg/kQLfm1jSynsp/hWVI=) 3: 792D74047BFE11F1AA9690E78EA30FBC.roa (hash: XTYptpNlRAo7alSvOyzI+cw6KIvbeNRndpdGXKdvGYQ=) 4: B8086D68733A11F1A07DD97E95A30FBC.roa (hash: bTVB+DDvlWg3BGswbEV0Wrf2VGFZJmesV6ILbWOzMg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: Sep 19 05:03:08 2026 GMT Not After : Sep 26 05:03:08 2026 GMT Subject: CN=6aae178c-da3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:42:d3:f4:ea:00:e2:68:8e:10:f1:6f:be: 70:18:60:54:b1:db:9a:59:84:ff:fc:69:9d:16:1d: 9b:bd:47:4b:9b:4d:17:0e:7d:53:9e:a9:d7:95:08: 86:58:f0:f6:15:ef:c4:7d:25:c8:b3:c2:c6:ab:cc: f7:58:b5:29:78:90:7e:16:3d:db:a8:23:11:1b:36: 82:37:e7:5a:fb:8c:c5:ff:e0:25:16:d6:56:90:7d: 74:41:34:56:fd:bb:4d:36:f8:91:2c:37:0f:05:02: 7a:29:b9:8f:5f:5f:fd:a4:14:a1:32:1c:a8:c8:d5: d1:47:29:4f:c4:86:3c:c0:2c:0d:a5:7e:8c:ca:32: 1a:a6:7d:0b:3b:a6:97:4b:93:c0:c0:3f:91:d3:37: 2e:e8:cb:70:5e:97:67:a2:91:12:05:ad:3c:18:4e: 5c:f4:b6:29:75:48:a1:d2:cc:85:9e:9d:a9:e3:e7: ff:5c:fe:ed:60:3b:72:62:c1:ac:b3:f4:5a:eb:8c: ad:a4:59:55:53:53:03:18:19:d0:75:af:0a:e1:57: 33:c2:8e:72:b4:24:63:a2:ad:23:fa:ef:37:5c:66: e4:09:9b:a4:01:fb:66:f0:4b:6e:08:bb:ec:55:4d: ef:ab:7d:c2:c2:b3:8c:e8:85:91:31:a7:19:b7:a8: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:83:73:1E:54:79:D3:C7:14:5B:55:D3:98:44:79:46:5E:26:BD:03 X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:01:b1:8f:82:d5:e5:fe:65:35:e9:18:da:d9:cd:63:22:36: 9f:4d:8c:82:3d:83:c9:90:18:89:83:88:e3:5d:2c:fc:23:cc: 2b:ed:65:dc:de:5e:c7:4a:d7:7a:17:00:a2:60:10:84:5a:39: 6e:31:37:c4:d7:81:82:44:41:a9:c8:21:1c:ce:46:d7:3d:f2: a3:a8:29:a0:0a:45:ad:42:b2:f0:1a:7f:fc:ab:4f:a2:40:b3: 35:82:a1:be:6b:88:f6:c6:e5:36:87:63:56:f8:60:a3:3d:55: 30:4a:71:a8:42:02:38:74:f5:74:e4:03:69:ec:dc:7c:9e:68: 91:7e:b6:33:37:43:86:75:74:c1:d5:7d:3d:3d:67:33:86:18: e9:58:01:ac:d7:88:86:4a:35:a5:ff:ba:ba:9e:b0:ca:02:95: 19:4b:fa:c2:5c:b3:7b:6b:72:95:02:1a:02:43:a0:66:e3:f0: 04:98:54:e0:d9:f1:c9:c0:a0:c4:4c:84:d5:d2:ae:9e:1d:ce: e8:70:55:16:2a:f8:6a:86:d3:a4:c6:63:95:2e:73:f8:3d:20: 73:70:b7:1d:a1:f8:cb:3c:2b:0c:3d:c7:ec:54:85:43:fd:ef: 75:73:98:44:fb:7b:76:ff:8b:0d:71:14:7c:ad:41:58:63:f3: f2:61:51:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjA5MTkwNTAzMDhaFw0yNjA5MjYwNTAzMDhaMBgxFjAUBgNV BAMTDTZhYWUxNzhjLWRhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXjULT9OoA4miOEPFvvnAYYFSx25pZhP/8aZ0WHZu9R0ubTRcOfVOeqdeVCIZY 8PYV78R9JcizwsarzPdYtSl4kH4WPduoIxEbNoI351r7jMX/4CUW1laQfXRBNFb9 u002+JEsNw8FAnopuY9fX/2kFKEyHKjI1dFHKU/EhjzALA2lfozKMhqmfQs7ppdL k8DAP5HTNy7oy3Bel2eikRIFrTwYTlz0til1SKHSzIWenanj5/9c/u1gO3Jiwayz 9FrrjK2kWVVTUwMYGdB1rwrhVzPCjnK0JGOirSP67zdcZuQJm6QB+2bwS24Iu+xV Te+rfcLCs4zohZExpxm3qKL3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDoNzHlR5 08cUW1XTmER5Rl4mvQMwHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0L0RDNzcwMTBBMzU2OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVf dml3S05NWS1PWlBVVFlDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDAbGPgtXl/mU16Rja2c1jIjafTYyCPYPJkBiJg4jjXSz8I8wr7WXc3l7HStd6 FwCiYBCEWjluMTfE14GCREGpyCEczkbXPfKjqCmgCkWtQrLwGn/8q0+iQLM1gqG+ a4j2xuU2h2NW+GCjPVUwSnGoQgI4dPV05ANp7Nx8nmiRfrYzN0OGdXTB1X09PWcz hhjpWAGs14iGSjWl/7q6nrDKApUZS/rCXLN7a3KVAhoCQ6Bm4/AEmFTg2fHJwKDE TITV0q6eHc7ocFUWKvhqhtOkxmOVLnP4PSBzcLcdofjLPCsMPcfsVIVD/e91c5hE +3t2/4sNcRR8rUFYY/PyYVEq -----END CERTIFICATE-----Generated at Sun Sep 20 16:04:09 2026 by rpki-client