$ rpki-client -vvvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft File: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft (raw, json) Hash identifier: +EZhLEzRTIA0jpXzIG0+0TrtBQU3o0tXGD4VO4KZFeg= Subject key identifier: 08:E9:58:C9:0C:CD:09:EE:D0:0E:47:7D:35:22:17:26:3C:CE:E3:15 Authority key identifier: 29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 Certificate issuer: /CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Certificate serial: 11C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft Manifest number: 25CA Signing time: Thu 24 Sep 2026 16:52:29 +0000 Manifest this update: Thu 24 Sep 2026 16:52:28 +0000 Manifest next update: Thu 01 Oct 2026 16:52:28 +0000 Files and hashes: 1: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl (hash: qOCC5Akx9Y5JCrPoHclgQGA5A3dFv1h3RO5A79EIbpQ=) 2: DE0A75A605EB11EA94CD7287C4F9AE02.roa (hash: FaFqBcKylUM1Ik2J0LQMDMkip4pQ4QSSImVSUK0dY18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4548 (0x11c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Validity Not Before: Sep 24 16:52:28 2026 GMT Not After : Oct 1 16:52:28 2026 GMT Subject: CN=6ab5554d-1c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:14:3c:60:c8:ec:d3:71:8b:60:46:06:44:cf: 25:22:97:b4:af:ac:a8:60:9e:f8:5a:34:1f:67:6a: 71:87:81:62:01:92:2d:c2:12:e5:4f:a7:db:12:ae: 42:54:47:91:9f:4d:d2:cb:da:9f:96:f9:c3:7f:a8: ee:dc:ad:81:3f:9c:25:cc:83:77:4c:9b:d6:9a:e8: d5:38:fd:7e:53:1d:40:20:01:2a:88:bd:18:73:d2: 07:3a:ba:d4:b8:0d:03:3b:8c:93:50:bb:28:91:a3: fb:52:0e:48:63:7b:8a:42:37:41:8e:39:46:17:f8: 12:89:8a:25:ac:8b:52:27:6c:28:22:3b:fc:89:b8: d2:33:97:07:0f:50:0b:cd:99:95:c2:59:d0:c7:f5: 33:d2:0b:d4:27:b9:57:10:ec:cc:36:70:0e:ba:d7: d5:8f:00:e8:da:f8:6d:a0:34:12:ef:07:4a:81:29: 21:9a:bc:f7:04:b3:05:35:ee:81:50:08:60:29:35: 1e:35:f4:71:ce:96:d5:1c:aa:72:c2:d8:df:32:6c: c8:8d:90:a4:a9:07:71:5f:99:49:ba:db:7c:54:b4: 64:80:06:be:49:c7:71:bf:64:a7:79:40:5c:09:ed: 0c:55:5f:42:2b:26:0c:e2:5b:6c:1e:c5:14:a5:7c: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:58:C9:0C:CD:09:EE:D0:0E:47:7D:35:22:17:26:3C:CE:E3:15 X509v3 Authority Key Identifier: keyid:29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f7:d9:b2:13:7e:1b:bb:8f:b8:fc:93:3c:06:4a:2a:ab:20: ee:86:a0:ae:52:1b:57:20:cb:81:9c:03:7b:da:e0:f0:01:a9: 47:9a:dc:41:39:6d:ac:71:d8:99:b9:db:aa:f8:55:0e:20:c0: 09:c1:ab:aa:e5:1b:3a:e6:4e:c4:a6:59:df:1e:84:33:b6:10: 29:60:cd:2f:7e:b2:d7:7a:99:9e:56:6f:a4:f7:5d:36:39:1e: fc:19:f6:99:ad:81:e3:56:48:2e:83:d8:8d:97:7a:f1:35:95: 91:3f:d2:47:c4:27:4d:ae:a4:c1:93:4c:0d:5d:5c:6b:5d:7f: 8c:df:01:58:9a:7e:f9:8b:fc:0b:53:e9:4d:ec:a6:4e:c0:05: 01:b5:1a:72:b3:ab:ca:e1:74:fa:48:a8:a0:97:b9:b8:7a:fc: c0:ed:ee:c0:aa:a4:f1:18:43:06:6c:27:cd:99:c6:5b:40:64: 3f:f9:9c:92:1c:c6:f5:41:49:f7:22:16:1b:4f:01:a3:5c:7a: 6c:32:93:f6:9a:cd:3a:82:a9:25:6d:73:34:40:b8:fa:2f:49: d1:71:a0:91:f9:c1:ec:68:aa:53:10:f8:bb:ef:07:c7:34:eb: ea:ca:49:56:d3:02:23:54:f5:89:1e:49:7f:5a:60:84:bb:fc: c9:bc:77:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDI5RDE2Qzk4REIzRDVCRjY0QjZCOTIwNEMwOTYwMDg2 MENEMjk0NTIwHhcNMjYwOTI0MTY1MjI4WhcNMjYxMDAxMTY1MjI4WjAYMRYwFAYD VQQDEw02YWI1NTU0ZC0xYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+BQ8YMjs03GLYEYGRM8lIpe0r6yoYJ74WjQfZ2pxh4FiAZItwhLlT6fbEq5C VEeRn03Sy9qflvnDf6ju3K2BP5wlzIN3TJvWmujVOP1+Ux1AIAEqiL0Yc9IHOrrU uA0DO4yTULsokaP7Ug5IY3uKQjdBjjlGF/gSiYolrItSJ2woIjv8ibjSM5cHD1AL zZmVwlnQx/Uz0gvUJ7lXEOzMNnAOutfVjwDo2vhtoDQS7wdKgSkhmrz3BLMFNe6B UAhgKTUeNfRxzpbVHKpywtjfMmzIjZCkqQdxX5lJutt8VLRkgAa+Scdxv2SneUBc Ce0MVV9CKyYM4ltsHsUUpXzyTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjpWMkM zQnu0A5HfTUiFyY8zuMVMB8GA1UdIwQYMBaAFCnRbJjbPVv2S2uSBMCWAIYM0pRS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdfWkxhNUlFd0pZQWhnelNs RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkRnNtTnM5V19aTGE1SUV3SllBaGd6U2xGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdf WkxhNUlFd0pZQWhnelNsRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIvfZshN+G7uPuPyTPAZKKqsg7oagrlIbVyDLgZwDe9rg8AGpR5rcQTltrHHY mbnbqvhVDiDACcGrquUbOuZOxKZZ3x6EM7YQKWDNL36y13qZnlZvpPddNjke/Bn2 ma2B41ZILoPYjZd68TWVkT/SR8QnTa6kwZNMDV1ca11/jN8BWJp++Yv8C1PpTeym TsAFAbUacrOryuF0+kiooJe5uHr8wO3uwKqk8RhDBmwnzZnGW0BkP/mckhzG9UFJ 9yIWG08Bo1x6bDKT9prNOoKpJW1zNEC4+i9J0XGgkfnB7GiqUxD4u+8HxzTr6spJ VtMCI1T1iR5Jf1pghLv8ybx3IA== -----END CERTIFICATE-----Generated at Fri Sep 25 14:07:54 2026 by rpki-client