$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: cfRbtp4ZskVuP0YIRxPPm6GJYE+ZDO6xw8OIirqzN6Y= Subject key identifier: A3:9C:DC:13:2C:6D:8B:88:C0:85:47:16:C4:F5:02:B3:EF:D5:16:57 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 49 Signing time: Sat 19 Sep 2026 08:30:46 +0000 Manifest this update: Sat 19 Sep 2026 08:30:45 +0000 Manifest next update: Sat 26 Sep 2026 08:30:45 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: SReEADifbu1F5+TbqRS3gxA2oX/w6jiT03i8X86FWAk=) 2: 4AD1AFC68B4411F19D71DC304611F970.roa (hash: gf8lSy8wkZH8qCSrtJuZGlJ39naUzvYsMACZ0CI5CIk=) 3: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: y9+JPXyT0FWli2rFe02X9Rp+3IY1XBO0wI8O2EgZRdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Sep 19 08:30:45 2026 GMT Not After : Sep 26 08:30:45 2026 GMT Subject: CN=6aae4836-5e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:dd:e1:1e:10:ae:76:a0:d6:71:b3:42:af: 46:9d:36:68:5f:7e:d5:ec:9c:eb:48:ec:15:ec:4e: 8d:b1:df:99:bf:94:9d:86:d4:b7:cc:aa:c1:d9:76: ad:6a:5c:e6:50:c0:fc:9b:b6:74:d8:bb:d2:30:1d: 4d:7b:a5:b6:cd:2d:f3:bb:d2:f0:5f:fc:7b:43:71: 87:75:26:f3:98:8d:4a:88:ae:f8:1b:93:47:22:e5: 0d:ac:c1:d1:b3:08:d4:73:4a:9c:84:7c:c2:f0:b1: ed:bd:0b:2d:af:3d:6f:54:35:f1:0c:74:d6:e6:80: 35:81:a0:b0:e0:06:b8:f5:21:74:7c:7c:8b:81:26: 02:ac:70:00:47:37:e5:65:1b:46:f5:bb:0c:09:8e: 9b:45:b0:a9:51:60:3d:96:bb:3f:3d:48:cd:08:19: db:18:5d:7a:9f:31:2e:f2:4a:33:2b:cb:1d:60:0a: e3:08:25:f4:bf:52:2e:c6:54:cb:d1:09:ca:2e:cf: ea:2d:9e:71:b1:12:9c:7e:97:46:6c:73:98:20:f0: 9d:5c:57:b6:83:2b:11:5e:9f:df:ac:b5:42:08:05: 62:0f:03:ff:f0:01:e3:01:78:ba:79:f3:b8:8f:32: 2b:1b:ed:89:fc:2f:0c:b9:b9:b8:52:53:d4:57:98: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9C:DC:13:2C:6D:8B:88:C0:85:47:16:C4:F5:02:B3:EF:D5:16:57 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:69:99:90:70:7f:42:b3:5e:db:35:70:d7:fd:c5:17:30: 4d:be:12:75:56:a8:ca:e3:5d:ac:1d:c4:d8:69:41:4f:ad:31: cc:90:e2:37:d7:ec:76:21:b3:99:c0:96:f4:d2:cd:32:ee:13: d4:9c:7b:fc:d9:85:77:bf:70:f5:98:29:45:ef:45:eb:76:21: c9:de:c1:bf:79:1b:23:1c:c9:dd:52:49:82:e2:89:4c:8b:3a: f2:a5:a3:96:1e:4b:27:07:67:6b:2e:67:fb:f8:d4:74:98:59: 2d:3a:f7:52:2b:eb:53:24:bb:17:d4:8e:80:be:7d:d8:f8:1a: 18:10:fd:5d:0f:0d:35:5c:12:f8:32:52:37:ee:ff:1b:e5:43: 27:d4:ae:3f:79:41:41:19:c1:c4:59:7d:d5:a7:75:ca:58:8b: eb:fd:96:bd:32:6d:da:f9:bc:d0:10:51:a9:93:92:7f:f8:d8: ed:2d:4d:57:f0:e4:3d:44:c6:2d:4d:00:ef:36:f7:f3:89:ce: c5:d0:ae:e2:bd:b7:2e:ff:51:37:49:33:2f:70:f3:10:b9:e7: 7e:00:fd:2b:f1:4a:4b:20:1d:00:72:a7:04:99:7b:74:7f:7b: a3:04:7c:32:74:e5:8d:72:dc:5d:4e:2e:2a:f8:17:09:d1:15: 02:2c:08:6b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA5MTkwODMwNDVaFw0yNjA5MjYwODMwNDVaMBgxFjAUBgNV BAMTDTZhYWU0ODM2LTVlMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Gd3hHhCudqDWcbNCr0adNmhfftXsnOtI7BXsTo2x35m/lJ2G1LfMqsHZdq1q XOZQwPybtnTYu9IwHU17pbbNLfO70vBf/HtDcYd1JvOYjUqIrvgbk0ci5Q2swdGz CNRzSpyEfMLwse29Cy2vPW9UNfEMdNbmgDWBoLDgBrj1IXR8fIuBJgKscABHN+Vl G0b1uwwJjptFsKlRYD2Wuz89SM0IGdsYXXqfMS7ySjMryx1gCuMIJfS/Ui7GVMvR Ccouz+otnnGxEpx+l0Zsc5gg8J1cV7aDKxFen9+stUIIBWIPA//wAeMBeLp587iP Misb7Yn8Lwy5ubhSU9RXmMqdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo5zcEyxt i4jAhUcWxPUCs+/VFlcwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbGmmZkHB/QrNe2zVw1/3FFzBNvhJ1VqjK412sHcTYaUFPrTHMkOI31+x2IbOZ wJb00s0y7hPUnHv82YV3v3D1mClF70XrdiHJ3sG/eRsjHMndUkmC4olMizrypaOW HksnB2drLmf7+NR0mFktOvdSK+tTJLsX1I6Avn3Y+BoYEP1dDw01XBL4MlI37v8b 5UMn1K4/eUFBGcHEWX3Vp3XKWIvr/Za9Mm3a+bzQEFGpk5J/+NjtLU1X8OQ9RMYt TQDvNvfzic7F0K7ivbcu/1E3STMvcPMQued+AP0r8UpLIB0AcqcEmXt0f3ujBHwy dOWNctxdTi4q+BcJ0RUCLAhr -----END CERTIFICATE-----Generated at Sun Sep 20 13:10:00 2026 by rpki-client