$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: 8QLEmhrbJdQVGtKvUY9x2dSsTxS/vP6IZrbmX5QSHU8= Subject key identifier: 86:F9:66:6F:5B:6A:68:1A:69:A4:6A:24:49:19:B0:5C:66:29:42:9B Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: D0 Signing time: Tue 27 Oct 2026 06:59:19 +0000 Manifest this update: Tue 27 Oct 2026 06:59:18 +0000 Manifest next update: Tue 03 Nov 2026 06:59:18 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: 4ZQMGMeXdVylWu5fDWVMg6KEtePzvu/4uo4umn0Td/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Oct 27 06:59:18 2026 GMT Not After : Nov 3 06:59:18 2026 GMT Subject: CN=6ae04bc7-a833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:49:36:b2:37:8b:af:ee:8c:49:92:d9:4d: 20:74:b1:bd:0d:51:d1:6e:0a:94:02:83:0a:f9:03: 95:75:bc:ec:5d:d4:4c:5d:20:a8:8a:c1:b9:06:bc: 29:2d:32:97:63:52:16:61:20:93:2a:b7:d8:2a:68: cc:83:83:a3:b2:3d:84:f7:98:1f:3a:b0:e6:32:d1: 57:2c:2e:05:51:f7:9a:94:6c:0b:35:55:5b:44:26: 6d:67:3a:87:4e:39:03:a4:69:75:80:65:60:79:8c: 3d:2b:c1:25:3a:0b:99:c2:19:fd:6f:0b:d4:23:91: 3c:09:c0:58:c9:1a:21:4c:ac:e0:04:ff:92:00:33: 13:ea:b7:a2:ec:62:8a:0c:00:85:91:e2:6b:f5:1c: 11:63:cf:ae:c9:fd:6f:5a:81:2e:b7:fd:54:45:ba: 60:67:87:43:69:fb:e7:c1:d4:3a:f6:6b:4b:a7:87: 61:03:1b:e8:df:a4:40:56:26:f3:13:57:fc:7b:c2: 4b:b9:cb:ce:cc:41:01:af:7b:38:9e:eb:80:6b:9e: cc:9d:b7:7c:8d:ef:bf:d3:a2:46:ad:31:41:2a:14: 3b:58:56:43:0d:19:f0:07:e4:d7:2a:bd:b1:ad:62: b9:49:2d:5c:6e:b3:e2:e4:a8:9f:e3:a9:d9:53:99: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:66:6F:5B:6A:68:1A:69:A4:6A:24:49:19:B0:5C:66:29:42:9B X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ef:b8:a1:5d:c6:b6:8e:fe:ba:6c:f6:a5:8d:13:ea:18:bf: eb:43:52:2b:d5:bf:9b:48:63:c5:27:45:28:ea:18:f6:df:4d: 1e:2b:8c:cf:d5:04:11:cb:0d:02:55:74:ac:33:6b:65:a0:e5: cc:45:69:bf:55:d4:ad:aa:a8:fa:0e:ab:5d:b8:3b:21:9d:7c: 09:03:dd:72:60:41:47:e0:0f:f5:68:80:ac:98:18:78:12:7e: db:fe:cc:72:6c:c6:e9:7a:34:a5:2e:5e:71:2f:3f:5f:bc:8e: 4c:28:9c:8f:ce:bc:58:b6:61:9d:40:f7:7c:df:b2:de:10:6c: 6d:53:c5:9f:d1:4a:ea:cf:77:3a:90:a6:30:29:e9:20:13:3b: e7:d6:cd:75:c3:82:69:3d:56:1b:ce:58:84:fe:98:fa:18:f8: 0f:e2:8b:6b:10:b5:bd:cc:9c:c9:ca:71:12:d2:e4:d6:f2:21: 9f:e5:bf:3a:6c:48:be:c4:fc:9d:5d:b5:3b:b2:f1:79:e3:d2: 8f:90:7a:dd:fa:fc:46:85:63:7f:ae:fb:29:17:7d:12:38:06: 52:90:d1:22:a6:fd:b9:2e:36:87:4b:ac:0f:9e:01:8b:bf:98: 99:e5:7c:da:2f:44:83:5d:62:74:84:1d:75:6b:b7:a4:ab:09: 03:18:03:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkzODYxMTAvBgNVBAUTKDkxNEUxODU0NENDQTREMzEwQTVFNUYwOTE5MDgyOUY2 OEQ1MTQwN0UwHhcNMjYxMDI3MDY1OTE4WhcNMjYxMTAzMDY1OTE4WjAYMRYwFAYD VQQDEw02YWUwNGJjNy1hODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV1JNrI3i6/ujEmS2U0gdLG9DVHRbgqUAoMK+QOVdbzsXdRMXSCoisG5Brwp LTKXY1IWYSCTKrfYKmjMg4Ojsj2E95gfOrDmMtFXLC4FUfealGwLNVVbRCZtZzqH TjkDpGl1gGVgeYw9K8ElOguZwhn9bwvUI5E8CcBYyRohTKzgBP+SADMT6rei7GKK DACFkeJr9RwRY8+uyf1vWoEut/1URbpgZ4dDafvnwdQ69mtLp4dhAxvo36RAVibz E1f8e8JLucvOzEEBr3s4nuuAa57Mnbd8je+/06JGrTFBKhQ7WFZDDRnwB+TXKr2x rWK5SS1cbrPi5Kif46nZU5kElQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIb5Zm9b amgaaaRqJEkZsFxmKUKbMB8GA1UdIwQYMBaAFJFOGFRMyk0xCl5fCRkIKfaNUUB+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTM4Ni8yRTY1N0JDRTk3 RTgxMUYwQTlBOTUwNjRDNEY5QUUwMi9rVTRZVkV6S1RURUtYbDhKR1FncDlvMVJR SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTM4Ni8yRTY1N0JDRTk3RTgxMUYwQTlBOTUwNjRDNEY5QUUwMi9rVTRZVkV6S1RU RUtYbDhKR1FncDlvMVJRSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIu+4oV3Gto7+umz2pY0T6hi/60NSK9W/m0hjxSdFKOoY9t9NHiuMz9UEEcsN AlV0rDNrZaDlzEVpv1XUraqo+g6rXbg7IZ18CQPdcmBBR+AP9WiArJgYeBJ+2/7M cmzG6Xo0pS5ecS8/X7yOTCicj868WLZhnUD3fN+y3hBsbVPFn9FK6s93OpCmMCnp IBM759bNdcOCaT1WG85YhP6Y+hj4D+KLaxC1vcycycpxEtLk1vIhn+W/OmxIvsT8 nV21O7LxeePSj5B63fr8RoVjf677KRd9EjgGUpDRIqb9uS42h0usD54Bi7+YmeV8 2i9Eg11idIQddWu3pKsJAxgDOQ== -----END CERTIFICATE-----Generated at Wed Oct 28 15:05:13 2026 by rpki-client