$ rpki-client -vvvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json) Hash identifier: 7Huy7ToCY51lPvRzNsLa+DWdr3sTf+on8b88VTJGdZg= Subject key identifier: 45:E9:68:1B:08:2B:5C:0B:B6:96:D3:27:F9:EC:52:D4:2B:39:BE:23 Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Certificate serial: 35BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft Manifest number: 35A9 Signing time: Wed 14 Oct 2026 14:24:32 +0000 Manifest this update: Wed 14 Oct 2026 14:24:31 +0000 Manifest next update: Wed 21 Oct 2026 14:24:31 +0000 Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: Ji0cV37wydTJOw/WsyC890H3CmjpIQi3cirlU6sVP0g=) 2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: oVwBBdf2MoqEQJnLpO/RZy7KNjQCvi9PCorLcBRov58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 14:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13759 (0x35bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Validity Not Before: Oct 14 14:24:31 2026 GMT Not After : Oct 21 14:24:31 2026 GMT Subject: CN=6acf90a0-ec84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:33:27:00:01:21:92:05:b6:00:84:b9:d2: 3b:1d:fd:11:a1:d2:2c:e7:0e:d8:57:82:a8:e4:84: 60:15:69:29:fa:e1:83:fd:71:f9:a1:b6:f6:cb:16: 01:e8:34:99:77:6d:6b:6f:4b:96:4d:29:ac:3d:b7: 58:9e:94:66:5b:ab:a9:77:8f:0f:44:d5:c3:f0:d6: 5c:34:f7:01:7c:f0:b9:69:e5:bc:7f:60:11:f5:e6: c2:9c:33:75:af:0a:62:13:32:60:4c:7f:59:e4:1a: 34:d4:86:2f:7c:3a:c6:a7:d4:60:11:0c:47:ae:2b: e5:f7:92:13:5a:38:1d:ab:63:b8:37:d1:1b:a5:c5: 78:3a:ca:82:15:35:0a:c5:fc:16:33:b3:d5:5f:19: c8:29:e8:66:50:8b:43:4d:85:24:16:8a:55:d1:38: a6:2e:96:27:aa:13:51:62:dc:18:4b:4f:0c:48:93: a5:ff:36:12:d5:9e:1f:6f:81:ef:48:ab:4d:c7:76: e8:96:67:d9:2d:b0:f1:65:29:66:55:4f:6f:b9:1a: 54:53:04:75:d8:ba:e8:cc:8d:9e:26:59:0b:ef:3f: 63:47:ea:71:1d:76:11:6f:37:84:fb:95:ec:36:83: ce:47:44:a8:ad:17:64:36:ab:71:95:d7:69:de:5c: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E9:68:1B:08:2B:5C:0B:B6:96:D3:27:F9:EC:52:D4:2B:39:BE:23 X509v3 Authority Key Identifier: keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f3:57:29:69:e8:0a:60:e8:3f:f8:96:de:5c:19:3d:14:80: bd:d5:06:44:d9:76:5a:d0:34:c3:b4:be:fd:ea:7f:78:e7:65: b4:85:6b:fb:22:7c:92:38:76:5b:b6:f4:ad:22:31:e5:c3:1a: 3a:4c:5b:bb:93:51:7f:92:a5:fe:15:bf:9c:fe:27:07:6c:12: 24:97:6f:f6:da:6c:a7:2d:32:30:1e:dc:c3:6d:9f:12:bd:76: 03:87:20:24:3e:37:af:9b:83:09:50:ad:83:9b:44:b6:6a:83: 0b:5b:e8:05:9b:a1:1d:8e:13:f4:0f:3c:dd:c1:98:7f:7d:09: 71:f7:eb:6d:f6:04:d6:00:75:bd:a6:c1:58:4b:99:dc:8f:f0: 3f:ca:b9:50:a8:a7:a7:92:ba:63:c0:f8:20:39:87:70:a9:31: 94:fb:3f:ad:ad:fa:01:28:3b:97:35:a1:94:32:d3:28:d7:2a: e5:04:70:b2:70:d5:79:65:bb:64:67:6c:9b:fb:e1:8e:3d:ae: dc:a1:51:c2:8e:03:12:f0:b4:0f:57:4b:52:2b:81:00:52:e3: 25:d9:c2:96:68:33:2a:33:be:ef:40:6c:31:26:7a:c6:67:fe: c2:e1:8e:ac:b8:a9:3b:96:31:0d:c0:e9:aa:3f:b1:46:8d:8e: 87:28:e6:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyNUQxMTAvBgNVBAUTKEZGRTJBMDM3MjlGMzJEMzIyMjdBOTlDOTI1MTU4Qzgy Q0E1NEI5NTcwHhcNMjYxMDE0MTQyNDMxWhcNMjYxMDIxMTQyNDMxWjAYMRYwFAYD VQQDEw02YWNmOTBhMC1lYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpgzJwABIZIFtgCEudI7Hf0RodIs5w7YV4Ko5IRgFWkp+uGD/XH5obb2yxYB 6DSZd21rb0uWTSmsPbdYnpRmW6upd48PRNXD8NZcNPcBfPC5aeW8f2AR9ebCnDN1 rwpiEzJgTH9Z5Bo01IYvfDrGp9RgEQxHrivl95ITWjgdq2O4N9EbpcV4OsqCFTUK xfwWM7PVXxnIKehmUItDTYUkFopV0TimLpYnqhNRYtwYS08MSJOl/zYS1Z4fb4Hv SKtNx3bolmfZLbDxZSlmVU9vuRpUUwR12LrozI2eJlkL7z9jR+pxHXYRbzeE+5Xs NoPOR0SorRdkNqtxlddp3lzaNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXpaBsI K1wLtpbTJ/nsUtQrOb4jMB8GA1UdIwQYMBaAFP/ioDcp8y0yInqZySUVjILKVLlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjI1RC8xRjU1MDgzMDFE ODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxUSWllcG5KSlJXTWdzcFV1 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tS2dOeW56TFRJaWVwbkpKUldNZ3NwVXVWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjI1RC8xRjU1MDgzMDFEODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxU SWllcG5KSlJXTWdzcFV1VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnfNXKWnoCmDoP/iW3lwZPRSAvdUGRNl2WtA0w7S+/ep/eOdltIVr+yJ8kjh2 W7b0rSIx5cMaOkxbu5NRf5Kl/hW/nP4nB2wSJJdv9tpspy0yMB7cw22fEr12A4cg JD43r5uDCVCtg5tEtmqDC1voBZuhHY4T9A883cGYf30JcffrbfYE1gB1vabBWEuZ 3I/wP8q5UKinp5K6Y8D4IDmHcKkxlPs/ra36ASg7lzWhlDLTKNcq5QRwsnDVeWW7 ZGdsm/vhjj2u3KFRwo4DEvC0D1dLUiuBAFLjJdnClmgzKjO+70BsMSZ6xmf+wuGO rLipO5YxDcDpqj+xRo2OhyjmZQ== -----END CERTIFICATE-----Generated at Thu Oct 15 18:34:20 2026 by rpki-client