$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: G8mWu/gn8yR1N5FDNaxmVM0CkPMBp2N+pETW7BIvp84= Subject key identifier: F5:97:A6:53:45:DE:9E:E5:EF:A7:56:FC:27:DA:0C:8F:D7:19:DA:A9 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: 01C4 Signing time: Mon 21 Sep 2026 03:52:01 +0000 Manifest this update: Mon 21 Sep 2026 03:52:01 +0000 Manifest next update: Mon 28 Sep 2026 03:52:01 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: +cTZ68XiItCIdG4mMxg0srfu2fcWLfMrNvw3FMtmBYE=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Sep 21 03:52:01 2026 GMT Not After : Sep 28 03:52:01 2026 GMT Subject: CN=6ab0a9e1-e88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:07:33:cd:fe:a3:cd:01:57:ba:8c:f2:85: 95:e1:a3:ed:78:bf:9e:73:82:1b:51:e2:6f:49:4f: 16:4d:c9:c2:bc:71:c8:c7:40:d5:5e:cf:98:f2:b4: a9:80:5f:2b:74:23:ec:de:d8:ce:1a:cb:4d:da:de: bf:70:81:08:47:5f:d5:b4:bf:99:85:73:e1:9e:e8: b1:ec:74:9a:d7:26:35:7d:c7:13:86:84:15:b1:3d: d3:6d:e9:cc:53:b0:8e:1e:90:49:60:d6:1e:96:00: 5d:bb:70:f6:72:8b:dc:c8:a8:8a:43:e6:e0:5f:71: 8f:ee:70:95:05:02:26:40:fd:8b:09:81:d7:91:8d: d7:ef:c6:02:bb:38:c3:df:43:45:82:81:94:9a:7d: e2:79:68:86:e4:6d:13:36:9d:0e:90:65:bf:31:a3: 7f:bf:f6:ba:1a:89:b1:8b:e7:c3:82:b9:ea:7a:4c: 22:13:aa:69:cc:aa:6c:80:71:ac:78:b4:fb:47:95: c3:5c:52:a3:fe:16:c6:ee:70:89:36:0d:a0:98:24: e5:13:d3:17:af:28:d7:eb:bf:57:ce:2d:83:53:07: c1:d0:bc:85:38:d5:0d:8c:37:4d:23:4e:d5:4d:1c: ee:4e:8c:5d:b0:de:d0:0e:51:d9:83:96:ff:c9:90: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:97:A6:53:45:DE:9E:E5:EF:A7:56:FC:27:DA:0C:8F:D7:19:DA:A9 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:99:4c:9c:fc:6a:e4:6f:e9:1a:7d:39:9e:99:d8:be:4b:65: 65:cf:3c:4d:3c:49:13:72:33:a1:1e:61:7f:5f:be:e7:80:a3: 32:56:f4:aa:8e:b9:65:4f:2d:07:54:47:66:ee:16:94:c6:8f: 88:bd:68:f2:90:f7:28:35:8d:57:d4:c2:0b:2f:9a:31:dd:f6: be:cc:e9:d5:66:fb:a3:0f:c9:4c:b5:b3:9e:16:45:2e:7a:a6: e5:6b:ba:95:e3:92:32:24:0f:7b:9d:d8:84:ee:ba:38:af:55: e9:a1:d6:df:f1:14:61:2a:b2:99:35:8a:18:94:d1:b3:33:0a: 71:57:e2:18:06:60:12:d0:93:c1:a4:2a:9c:9d:4e:1f:d5:98: ee:58:d7:85:23:13:1b:53:36:c5:dc:5a:12:a4:53:25:e1:f8: a7:37:6f:ac:42:ff:53:c2:e0:f4:6b:fa:d7:f9:ae:fa:47:98: 75:e9:f3:e1:7f:04:d9:cb:b0:f8:75:88:7e:67:3c:95:bf:88: 06:a5:3b:1e:bd:da:b4:5d:5e:40:f4:48:15:46:73:63:ee:30: 77:5c:7b:86:7e:f9:54:77:f4:93:15:0e:f3:80:09:a0:b4:7e: 61:7c:a4:f0:6e:a0:da:f6:bd:a4:74:6b:76:bc:fa:7c:8b:18: 61:2b:fe:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjYwOTIxMDM1MjAxWhcNMjYwOTI4MDM1MjAxWjAYMRYwFAYD VQQDEw02YWIwYTllMS1lODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsacHM83+o80BV7qM8oWV4aPteL+ec4IbUeJvSU8WTcnCvHHIx0DVXs+Y8rSp gF8rdCPs3tjOGstN2t6/cIEIR1/VtL+ZhXPhnuix7HSa1yY1fccThoQVsT3TbenM U7COHpBJYNYelgBdu3D2covcyKiKQ+bgX3GP7nCVBQImQP2LCYHXkY3X78YCuzjD 30NFgoGUmn3ieWiG5G0TNp0OkGW/MaN/v/a6Gomxi+fDgrnqekwiE6ppzKpsgHGs eLT7R5XDXFKj/hbG7nCJNg2gmCTlE9MXryjX679Xzi2DUwfB0LyFONUNjDdNI07V TRzuToxdsN7QDlHZg5b/yZBasQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWXplNF 3p7l76dW/CfaDI/XGdqpMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJlMnPxq5G/pGn05npnYvktlZc88TTxJE3IzoR5hf1++54CjMlb0qo65ZU8t B1RHZu4WlMaPiL1o8pD3KDWNV9TCCy+aMd32vszp1Wb7ow/JTLWznhZFLnqm5Wu6 leOSMiQPe53YhO66OK9V6aHW3/EUYSqymTWKGJTRszMKcVfiGAZgEtCTwaQqnJ1O H9WY7ljXhSMTG1M2xdxaEqRTJeH4pzdvrEL/U8Lg9Gv61/mu+keYdenz4X8E2cuw +HWIfmc8lb+IBqU7Hr3atF1eQPRIFUZzY+4wd1x7hn75VHf0kxUO84AJoLR+YXyk 8G6g2va9pHRrdrz6fIsYYSv+qg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:38:59 2026 by rpki-client