$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: 2hr9h1xVV8FfLJ2efQUyLQ2y+fqa/c5VsM58dqKoUf8= Subject key identifier: FD:59:7E:A6:A8:7D:FF:D9:16:6C:91:8E:80:C4:E9:CD:E8:EE:6E:12 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 0293 Signing time: Wed 23 Sep 2026 01:41:35 +0000 Manifest this update: Wed 23 Sep 2026 01:41:34 +0000 Manifest next update: Wed 30 Sep 2026 01:41:34 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: mukJ3R5q6qUzk7r9JIaRwiBfO7tGM7UNOtf3Kngni6w=) 2: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: txSvzTPr2599JY/devjyQjZpXUdF6ZNG1hcHHYqrLIA=) 3: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: z04Vftmrg2QbTvPdZ6E5RXhqc7guf0iEptckFIG+yc8=) 4: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: OGuYh+AxdFGbpXMOTasU8EIj52mT5htTsl1m4is8Y4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Sep 23 01:41:34 2026 GMT Not After : Sep 30 01:41:34 2026 GMT Subject: CN=6ab32e4f-1223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:cd:47:7a:ce:99:b5:ab:6c:89:3f:01:7b: 11:4d:c3:19:7d:82:e8:ca:af:d7:8d:a3:c8:63:5b: 0c:1c:1f:c3:09:d4:24:28:c8:d8:22:a3:76:42:54: 1e:ca:78:b7:ee:4c:88:bb:30:c9:75:45:eb:0d:a1: 63:b7:40:e9:14:64:87:82:6c:66:3d:b9:57:6f:2c: 38:73:3d:8d:0d:b3:39:ac:ce:49:71:2d:07:2b:10: d5:56:41:40:cb:3a:97:4b:62:9c:26:88:b7:e8:4c: 65:4e:d6:ec:e2:7c:78:19:f1:62:d7:c8:c1:22:ea: cf:68:1e:3b:83:80:ea:4e:9f:07:33:09:b7:5f:a8: 2d:78:f5:63:5c:19:11:b4:2e:72:9d:ce:95:49:a7: 61:a1:45:08:17:b1:59:5c:e5:66:f5:05:7c:86:26: 58:72:d9:62:d5:85:bd:08:2b:2f:e4:2b:8a:61:39: 8e:59:64:61:83:f5:47:73:82:26:8b:a3:b9:e6:5b: cd:6a:34:7a:4b:59:25:7f:d9:c7:b5:38:8b:30:42: 68:73:0a:84:5a:4e:80:4d:eb:0d:6d:22:ac:14:98: 22:82:c7:a9:18:8e:ac:f8:a5:e9:a4:25:ee:31:13: 0b:3a:c1:96:dd:85:3f:dd:34:88:aa:8e:b8:c4:4a: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:7E:A6:A8:7D:FF:D9:16:6C:91:8E:80:C4:E9:CD:E8:EE:6E:12 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:21:d3:06:f1:d2:ba:c0:8a:36:4e:80:72:57:00:a0:ac: de:f8:bc:93:fd:56:8d:8e:5c:b5:3b:ac:f0:b5:3d:8e:d2:0b: 93:39:4d:01:d6:48:b5:1d:64:97:1a:7f:7e:cb:6c:26:3e:5c: 2f:de:95:cc:42:9d:0a:a7:ae:c4:79:f0:64:c9:27:8a:91:d8: 93:70:d1:3b:d4:e6:1c:65:b9:dc:ed:cd:40:6f:5d:be:1e:7c: 04:fc:1e:ed:82:3f:b4:54:8a:64:51:fc:80:0c:83:b9:d3:0d: c8:46:c6:7f:9c:70:9c:d3:33:13:ac:12:d8:45:d3:9e:15:db: a9:7b:cb:f1:13:6e:02:16:69:1b:28:4f:b8:63:2c:e0:f9:5a: ee:a1:1f:71:72:43:ac:ec:07:c9:8f:7f:8b:56:de:35:0d:55: 2c:ee:40:91:6f:a2:1c:c7:df:b4:1a:81:de:6a:d0:fd:c2:d7: 17:cc:0c:8f:a1:a0:e5:0e:26:cf:ac:cc:90:9d:3f:7d:18:8b: 77:ba:42:e3:93:91:45:82:81:d3:86:67:e8:d3:20:ed:02:89: 21:f0:d9:b4:46:65:f4:e7:21:e0:71:84:ed:c2:c3:43:9f:cf: 3f:63:ea:b8:bb:de:9a:b5:38:13:20:d9:b3:c3:fb:63:e6:16: 23:8c:77:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwOTIzMDE0MTM0WhcNMjYwOTMwMDE0MTM0WjAYMRYwFAYD VQQDEw02YWIzMmU0Zi0xMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL7NR3rOmbWrbIk/AXsRTcMZfYLoyq/XjaPIY1sMHB/DCdQkKMjYIqN2QlQe yni37kyIuzDJdUXrDaFjt0DpFGSHgmxmPblXbyw4cz2NDbM5rM5JcS0HKxDVVkFA yzqXS2KcJoi36ExlTtbs4nx4GfFi18jBIurPaB47g4DqTp8HMwm3X6gtePVjXBkR tC5ync6VSadhoUUIF7FZXOVm9QV8hiZYctli1YW9CCsv5CuKYTmOWWRhg/VHc4Im i6O55lvNajR6S1klf9nHtTiLMEJocwqEWk6ATesNbSKsFJgigsepGI6s+KXppCXu MRMLOsGW3YU/3TSIqo64xEps9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1Zfqao ff/ZFmyRjoDE6c3o7m4SMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaEMh0wbx0rrAijZOgHJXAKCs3vi8k/1WjY5ctTus8LU9jtILkzlNAdZItR1k lxp/fstsJj5cL96VzEKdCqeuxHnwZMknipHYk3DRO9TmHGW53O3NQG9dvh58BPwe 7YI/tFSKZFH8gAyDudMNyEbGf5xwnNMzE6wS2EXTnhXbqXvL8RNuAhZpGyhPuGMs 4Pla7qEfcXJDrOwHyY9/i1beNQ1VLO5AkW+iHMfftBqB3mrQ/cLXF8wMj6Gg5Q4m z6zMkJ0/fRiLd7pC45ORRYKB04Zn6NMg7QKJIfDZtEZl9Och4HGE7cLDQ5/PP2Pq uLvemrU4EyDZs8P7Y+YWI4x3Zw== -----END CERTIFICATE-----Generated at Wed Sep 23 15:23:49 2026 by rpki-client