$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: O5z45s7lYbRmWmUe11tlaAkE7Z+IfWrPWzu4bRS8QdU= Subject key identifier: 0D:A6:AE:E4:52:6C:36:75:E5:DD:51:DE:91:C8:57:FD:48:37:B5:FD Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: 0197 Signing time: Tue 13 Oct 2026 05:01:16 +0000 Manifest this update: Tue 13 Oct 2026 05:01:15 +0000 Manifest next update: Tue 20 Oct 2026 05:01:15 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: tcN8R9aDtEsi6VQheYX+yZbL6hWw7FGjonpgPzHdUkU=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Oct 13 05:01:15 2026 GMT Not After : Oct 20 05:01:15 2026 GMT Subject: CN=6acdbb1b-74ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:36:a7:27:9a:0c:46:13:1b:57:6c:c0:6c: 1b:37:91:1b:6b:c2:4c:a8:dc:06:6f:bd:2e:d9:c9: 0f:a7:99:91:7b:51:75:27:70:fc:55:a7:b4:ed:35: bb:5a:b2:9e:b5:02:6b:81:a9:ae:47:01:6d:eb:cc: 84:9d:91:29:1a:ae:86:1c:8e:df:4f:3d:8c:9a:d5: 86:da:a4:ba:77:24:ad:b3:fa:23:44:75:b7:61:dd: 66:d6:8d:0b:db:1a:d2:6a:f5:80:c0:a7:81:5b:28: e7:61:d2:f4:9a:ea:76:aa:f7:b4:63:19:d2:f7:1a: b6:45:63:f5:7d:be:83:de:e9:d9:ed:af:d5:fc:fc: bd:65:de:68:38:2a:0f:72:b3:6a:5d:e8:60:c2:cd: 9c:73:bf:92:e6:bd:e8:70:c1:56:d9:36:31:87:51: cd:d8:22:d3:36:fc:53:53:eb:e8:4a:75:6e:00:4e: d0:24:a0:21:b8:bb:2d:3e:6f:67:50:75:c0:2d:58: 3f:e2:d1:4a:c3:98:7a:c2:59:ed:01:a3:9a:83:84: 45:3c:5c:7d:ed:cb:27:b5:ac:44:2a:2b:17:93:cc: 85:b9:b7:40:f4:ac:80:f7:88:78:49:ce:b5:5b:4b: 63:22:25:08:33:e0:b6:68:83:d6:f9:8b:eb:11:e1: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:AE:E4:52:6C:36:75:E5:DD:51:DE:91:C8:57:FD:48:37:B5:FD X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8e:e3:6c:73:8b:9f:6d:28:b0:39:bf:29:ec:05:ee:65:bf: dc:97:27:b0:b4:71:d9:d2:fe:36:57:01:aa:14:22:e4:e7:23: 25:da:04:99:58:0f:ed:3a:f1:80:7e:d4:77:73:f6:c0:15:6c: d9:5a:3d:97:96:ca:a4:8e:b7:17:d2:d3:25:9c:2a:ba:fa:0e: 9e:09:12:d7:1d:b8:b0:59:8b:88:40:cc:2b:ed:e1:10:45:3e: d6:ea:c4:c7:f0:79:c7:87:95:06:4e:70:5b:5a:ec:83:66:72: a4:0a:15:9a:81:8f:3c:54:db:8e:7e:ea:db:c8:ca:6f:06:f4: ce:51:fa:85:a4:44:08:8b:e1:b1:57:ba:5e:bd:26:2a:2e:12: 9d:9a:dd:30:39:cc:9b:c6:ec:76:d5:19:bb:3b:b1:49:db:50: 5a:61:d0:56:4f:fc:75:6e:c9:5f:c8:65:fa:08:1d:f1:05:03: 39:d2:60:a0:af:20:50:fd:ea:91:03:65:ff:7b:6e:ec:c1:7d: d4:d6:5a:b8:62:ae:9c:cb:6c:71:51:78:39:30:55:6a:74:55: e2:99:ec:06:74:0d:4e:3f:d8:8e:8f:79:75:44:09:90:f2:19: 6d:fb:8d:fb:24:bb:31:74:c1:0f:1d:95:1c:da:eb:11:3f:66: ec:3c:f6:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjYxMDEzMDUwMTE1WhcNMjYxMDIwMDUwMTE1WjAYMRYwFAYD VQQDEw02YWNkYmIxYi03NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDY2pyeaDEYTG1dswGwbN5Eba8JMqNwGb70u2ckPp5mRe1F1J3D8Vae07TW7 WrKetQJrgamuRwFt68yEnZEpGq6GHI7fTz2MmtWG2qS6dySts/ojRHW3Yd1m1o0L 2xrSavWAwKeBWyjnYdL0mup2qve0YxnS9xq2RWP1fb6D3unZ7a/V/Py9Zd5oOCoP crNqXehgws2cc7+S5r3ocMFW2TYxh1HN2CLTNvxTU+voSnVuAE7QJKAhuLstPm9n UHXALVg/4tFKw5h6wlntAaOag4RFPFx97csntaxEKisXk8yFubdA9KyA94h4Sc61 W0tjIiUIM+C2aIPW+YvrEeF94QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2mruRS bDZ15d1R3pHIV/1IN7X9MB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYo7jbHOLn20osDm/KewF7mW/3JcnsLRx2dL+NlcBqhQi5OcjJdoEmVgP7Trx gH7Ud3P2wBVs2Vo9l5bKpI63F9LTJZwquvoOngkS1x24sFmLiEDMK+3hEEU+1urE x/B5x4eVBk5wW1rsg2ZypAoVmoGPPFTbjn7q28jKbwb0zlH6haRECIvhsVe6Xr0m Ki4SnZrdMDnMm8bsdtUZuzuxSdtQWmHQVk/8dW7JX8hl+ggd8QUDOdJgoK8gUP3q kQNl/3tu7MF91NZauGKunMtscVF4OTBVanRV4pnsBnQNTj/Yjo95dUQJkPIZbfuN +yS7MXTBDx2VHNrrET9m7Dz2sA== -----END CERTIFICATE-----Generated at Wed Oct 14 05:14:21 2026 by rpki-client