$ rpki-client -vvvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft File: KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json) Hash identifier: p7EeAjeXhhUe1smcdmJS3WTInof5qGjDXjZeA6V71m4= Subject key identifier: 00:01:8D:4B:23:B5:07:74:92:09:92:7A:07:1E:34:53:0E:B3:C1:C5 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft Manifest number: 0492 Signing time: Mon 21 Sep 2026 00:04:19 +0000 Manifest this update: Mon 21 Sep 2026 00:04:19 +0000 Manifest next update: Mon 28 Sep 2026 00:04:19 +0000 Files and hashes: 1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: C297qxuQq19dSuLyme/IMO4v24+o0MS4oLO+PTd+kNg=) 2: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=) 3: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=) 4: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=) 5: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=) 6: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=) 7: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=) 8: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=) 9: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=) 10: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=) 11: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=) 12: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=) 13: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=) 14: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=) 15: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=) 16: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=) 17: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Sep 21 00:04:19 2026 GMT Not After : Sep 28 00:04:19 2026 GMT Subject: CN=6ab07483-c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:5f:ce:14:7d:b0:8c:15:79:07:fd:6e:11: 38:24:1f:a3:b2:4d:b7:86:89:bf:db:d7:3a:bc:fa: 0f:20:6a:54:d4:44:1b:8f:9f:c6:06:61:b4:0f:45: f8:73:2a:ca:1e:1d:08:47:6e:9e:e4:02:c4:a2:81: da:ea:11:8d:47:c3:cb:49:78:1f:67:af:c3:c9:a5: f2:b4:04:1c:d6:02:8d:ec:f2:13:64:b1:c1:29:22: f4:0f:69:e1:c7:12:97:4c:da:5e:29:48:42:79:f6: 97:f8:7b:3d:57:7b:2a:45:e7:02:70:fa:f5:a1:3c: d9:16:00:9a:5d:49:1e:be:c8:b1:c1:e1:d8:3f:b4: 9d:ec:71:bb:85:a8:02:85:db:19:85:d3:49:6f:21: 58:9d:c1:d7:a1:35:ad:8a:9c:d7:3c:9d:ef:28:61: ab:c7:a9:f5:0b:5d:eb:4c:40:93:a1:55:64:e9:00: 67:97:ac:5f:d3:8a:64:e7:96:a2:65:92:f5:e5:84: fa:32:fc:b3:86:0f:47:95:51:64:e9:e6:3e:1f:44: c9:7c:5b:33:2d:8d:f2:0e:a7:b6:10:41:2d:2c:52: b6:0a:c1:95:e6:e7:46:24:e5:eb:64:d0:b1:6c:7f: 5e:db:44:5d:de:9c:8a:f3:5c:9a:e5:46:65:1f:ba: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:8D:4B:23:B5:07:74:92:09:92:7A:07:1E:34:53:0E:B3:C1:C5 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:a2:19:5e:e5:0b:d8:bb:42:e4:6c:60:f8:6e:b8:c6:6c: 5e:38:b3:9f:03:92:95:3d:b8:01:25:05:4e:2d:9f:e3:0b:c4: 98:da:71:f9:15:fa:63:4e:9c:26:8f:05:8f:a6:08:3e:33:b2: d7:37:1e:f3:0e:b6:46:e1:f6:03:a5:e8:62:a8:99:ed:0c:2a: 2f:d3:5a:13:b6:76:e7:f1:fd:b0:89:26:ec:37:31:96:71:da: 29:05:01:ab:ae:e7:e8:25:3c:73:be:63:ee:c2:48:a2:62:f5: c8:4d:ac:85:0a:f7:b6:56:d1:55:28:4d:06:7c:c3:00:7f:20: 95:fc:7d:10:2c:91:1d:07:d0:bc:b4:1b:29:1a:32:2f:d4:b6: b3:a2:bb:a5:f7:77:ea:c1:67:e9:ed:34:e5:aa:9c:0c:87:05: fd:84:cc:c7:c3:c0:60:a8:e2:80:e6:92:ae:84:ec:66:1e:e6: a0:31:cf:9d:56:40:c3:07:d4:99:ec:6d:af:a1:30:b3:5f:39: b1:92:c1:9f:e4:0d:d2:c5:ce:7d:17:2a:9b:da:51:af:69:96: 08:12:66:e6:8c:c8:19:fc:a8:de:ce:35:ec:36:8a:ba:70:d1: 65:dc:19:a1:d9:c6:d2:23:2c:a3:9e:b9:02:62:3d:ce:79:f1: 92:11:f2:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjYwOTIxMDAwNDE5WhcNMjYwOTI4MDAwNDE5WjAYMRYwFAYD VQQDEw02YWIwNzQ4My1jMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHlfzhR9sIwVeQf9bhE4JB+jsk23hom/29c6vPoPIGpU1EQbj5/GBmG0D0X4 cyrKHh0IR26e5ALEooHa6hGNR8PLSXgfZ6/DyaXytAQc1gKN7PITZLHBKSL0D2nh xxKXTNpeKUhCefaX+Hs9V3sqRecCcPr1oTzZFgCaXUkevsixweHYP7Sd7HG7hagC hdsZhdNJbyFYncHXoTWtipzXPJ3vKGGrx6n1C13rTECToVVk6QBnl6xf04pk55ai ZZL15YT6Mvyzhg9HlVFk6eY+H0TJfFszLY3yDqe2EEEtLFK2CsGV5udGJOXrZNCx bH9e20Rd3pyK81ya5UZlH7okCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAABjUsj tQd0kgmSegceNFMOs8HFMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda cUV3d2xURU9hYl9TWUtxWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALiyiGV7lC9i7QuRsYPhuuMZsXjiznwOSlT24ASUFTi2f4wvEmNpx+RX6Y06c Jo8Fj6YIPjOy1zce8w62RuH2A6XoYqiZ7QwqL9NaE7Z25/H9sIkm7DcxlnHaKQUB q67n6CU8c75j7sJIomL1yE2shQr3tlbRVShNBnzDAH8glfx9ECyRHQfQvLQbKRoy L9S2s6K7pfd36sFn6e005aqcDIcF/YTMx8PAYKjigOaSroTsZh7moDHPnVZAwwfU mextr6Ews185sZLBn+QN0sXOfRcqm9pRr2mWCBJm5ozIGfyo3s417DaKunDRZdwZ odnG0iMso565AmI9znnxkhHyHg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:23:22 2026 by rpki-client