$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: FvcezdW79Og9vhaotYEAyCtwJd0wVK8y02ZY7by/Wk0= Subject key identifier: 25:7A:19:F4:3C:6D:EC:59:7D:FB:3E:F3:05:85:DA:8A:95:90:E6:1D Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 23 Signing time: Mon 21 Sep 2026 01:37:51 +0000 Manifest this update: Mon 21 Sep 2026 01:37:51 +0000 Manifest next update: Mon 28 Sep 2026 01:37:51 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: /Q76+qZSb5dQfbLe+pbckIjLk6aiks+N3QeW3IqJBRs=) 2: DDDCEA1E8CD011F192D42A854011F970.roa (hash: g7heFy4fxock6S6CcqutuLaz4uE4rAZir+13UMjp2Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Sep 21 01:37:51 2026 GMT Not After : Sep 28 01:37:51 2026 GMT Subject: CN=6ab08a6f-f37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:9c:f4:6f:9c:0a:c9:93:be:6f:c6:e0:22: 82:2c:5a:0a:53:50:27:f7:a4:b6:a6:20:26:b6:58: e8:d0:a4:c3:ab:f7:ca:ae:52:01:14:26:34:d7:ab: 48:f2:c4:f6:30:8a:77:a8:56:92:8d:f7:6f:12:84: 37:e5:86:ae:50:d3:ce:c8:6b:5f:a8:9e:e2:ad:35: 33:42:45:83:89:e3:45:70:b4:c3:75:0e:7d:c5:bd: f9:26:2c:1a:f6:2e:19:9e:2e:bb:5a:b5:79:7a:f0: 47:ba:7c:44:45:a3:df:cc:b9:15:06:7e:a3:7e:6c: 98:17:6b:83:f3:42:7e:fe:d0:3c:ec:6d:30:35:ad: 84:1f:34:aa:ea:8f:90:a3:98:47:7f:69:47:97:f4: a1:57:48:8c:d4:3d:c9:5a:84:39:d8:aa:55:76:50: 6a:68:27:2f:b4:49:25:d4:9e:0f:a4:66:86:5a:92: 9f:68:1d:57:fc:4e:87:91:9d:36:fa:b1:e4:57:94: 0c:5b:f5:b8:6b:8e:b7:67:15:39:eb:6f:61:01:b8: 8a:9a:4d:db:2c:43:e4:24:01:0c:a3:e2:dc:bc:89: 06:83:cd:c7:9b:fe:f5:30:d6:a1:4a:5d:4c:5f:90: 7f:c3:56:ca:32:1f:14:b6:33:d8:92:9c:54:f9:01: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:19:F4:3C:6D:EC:59:7D:FB:3E:F3:05:85:DA:8A:95:90:E6:1D X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1c:e0:f4:a6:f4:2d:b8:df:2f:89:ce:99:4c:f2:ff:df:5b: 3b:f4:2c:7e:d1:db:b6:92:4e:1a:e4:cb:7a:35:cc:c9:78:c4: 1e:14:6f:b5:34:31:60:45:01:15:5b:1d:85:d1:b6:05:ad:5a: c0:80:d4:ba:5b:50:9e:d0:28:dc:3d:8b:35:b3:5a:63:16:55: 4a:fd:3a:e9:01:e1:54:70:06:47:92:21:99:fe:a0:a6:ca:bb: da:95:d3:d2:b1:ef:82:5a:96:f4:e8:e3:a5:78:93:c5:66:df: 8a:59:a4:ee:68:90:21:02:28:58:89:16:2e:f4:4e:57:b7:2d: a4:4f:dc:f9:33:a4:8b:c6:e5:21:5d:20:87:a9:37:28:e0:c8: d6:bd:d0:72:e7:de:f3:1b:24:e9:e7:c4:f4:7e:0d:1f:dc:48: 30:6b:8d:1b:df:55:f9:c1:b9:22:9c:6c:66:2b:0c:3e:f5:cf: a5:23:3a:3d:79:eb:cb:20:3b:ec:25:37:d0:f0:f4:78:55:61: 17:e8:de:cb:56:21:24:a1:9e:7f:51:d0:a7:26:09:8e:5a:f9: 53:24:a4:3f:56:57:fa:bb:21:7d:83:d5:75:e8:37:34:5c:41: 09:1f:ed:b0:86:0f:62:24:e8:a0:d9:91:c5:d0:a7:b1:a2:78: cb:3d:9e:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjA5MjEwMTM3NTFaFw0yNjA5MjgwMTM3NTFaMBgxFjAUBgNV BAMTDTZhYjA4YTZmLWYzN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE95z0b5wKyZO+b8bgIoIsWgpTUCf3pLamICa2WOjQpMOr98quUgEUJjTXq0jy xPYwineoVpKN928ShDflhq5Q087Ia1+onuKtNTNCRYOJ40VwtMN1Dn3FvfkmLBr2 LhmeLrtatXl68Ee6fERFo9/MuRUGfqN+bJgXa4PzQn7+0DzsbTA1rYQfNKrqj5Cj mEd/aUeX9KFXSIzUPclahDnYqlV2UGpoJy+0SSXUng+kZoZakp9oHVf8ToeRnTb6 seRXlAxb9bhrjrdnFTnrb2EBuIqaTdssQ+QkAQyj4ty8iQaDzceb/vUw1qFKXUxf kH/DVsoyHxS2M9iSnFT5AS9XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJXoZ9Dxt 7Fl9+z7zBYXaipWQ5h0wHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDHOD0pvQtuN8vic6ZTPL/31s79Cx+0du2kk4a5Mt6NczJeMQeFG+1NDFgRQEV Wx2F0bYFrVrAgNS6W1Ce0CjcPYs1s1pjFlVK/TrpAeFUcAZHkiGZ/qCmyrvaldPS se+CWpb06OOleJPFZt+KWaTuaJAhAihYiRYu9E5Xty2kT9z5M6SLxuUhXSCHqTco 4MjWvdBy597zGyTp58T0fg0f3Egwa40b31X5wbkinGxmKww+9c+lIzo9eevLIDvs JTfQ8PR4VWEX6N7LViEkoZ5/UdCnJgmOWvlTJKQ/Vlf6uyF9g9V16Dc0XEEJH+2w hg9iJOig2ZHF0KexonjLPZ4Q -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:56 2026 by rpki-client