$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: St+OxWu/CBUH7pjZPZ0exMFPASxhgXJUsGW9VevDcQw= Subject key identifier: 55:C6:5A:EF:F9:AE:08:C5:06:FF:61:E7:0B:E9:8F:FF:55:86:95:45 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 02D3 Signing time: Mon 21 Sep 2026 01:09:00 +0000 Manifest this update: Mon 21 Sep 2026 01:09:00 +0000 Manifest next update: Mon 28 Sep 2026 01:09:00 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: RubmsRtYsYwixiHvwrPMDaXI/pLgqoN6sk8sXy6c3H8=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: K2gsbb3RIWZ1Guz5GtLGoXVH7gl18al99665lqSZyuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Sep 21 01:09:00 2026 GMT Not After : Sep 28 01:09:00 2026 GMT Subject: CN=6ab083ac-f9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:fe:b6:c0:c8:30:21:2a:7f:d7:7d:cb:f0: f9:22:c5:85:33:be:74:78:42:6b:61:6f:b5:5e:bb: 71:5f:e7:3f:2b:d7:d3:69:b0:1a:fd:79:97:b6:fd: b7:1b:fa:a5:65:ca:4d:ff:32:76:6b:5a:03:48:00: 33:5f:37:d2:81:5e:73:b4:35:39:43:9f:99:5c:fc: ec:54:38:a7:bc:58:fa:9b:3a:b9:ad:0a:cc:5e:68: e0:32:fe:59:2d:0c:73:44:d6:f4:e1:90:9b:c4:11: 2c:1b:e5:6a:00:e5:50:2f:75:3f:91:9c:4a:14:18: 2e:d4:41:cd:1d:2b:4f:87:e4:8f:d8:69:a9:b7:ba: 8d:50:29:f1:fb:a4:9f:50:07:86:7a:05:0c:f3:50: d0:3a:a0:97:e9:32:2a:20:fb:e2:c6:dd:db:68:98: 43:cf:b0:a2:07:f7:b6:45:2c:ca:d7:73:77:63:9e: f7:1e:ad:fa:68:c9:97:af:72:24:8c:a8:91:52:be: c9:5f:4d:9b:2e:d0:4c:32:a0:3a:31:6e:f4:27:60: bb:0d:e8:61:8e:7e:5a:c7:72:8d:25:75:3e:1c:3d: 3a:f1:24:cc:69:d1:45:a1:d0:0f:ad:5d:16:fe:b0: 11:2a:e7:ee:a5:30:25:61:6b:c9:c0:42:80:6b:21: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C6:5A:EF:F9:AE:08:C5:06:FF:61:E7:0B:E9:8F:FF:55:86:95:45 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d4:d8:0a:3a:74:5d:e4:65:98:14:3b:72:72:1e:09:cf:b3: 1a:91:e4:01:3f:ed:00:3e:0b:14:74:e6:68:8a:54:22:1a:a2: 1c:7a:fd:10:0e:bb:13:f3:64:c0:ef:b3:48:3a:d9:fc:e1:25: 55:31:fc:dd:6a:ad:39:72:69:71:d0:ff:87:43:46:09:d4:2e: f0:33:0c:88:c5:a8:ba:f8:c4:c1:73:18:97:9a:20:ed:94:cd: f3:d9:e8:0d:81:d8:29:0a:97:c1:09:b3:a1:e4:46:65:a6:eb: 49:90:4c:a8:76:74:a9:4f:6f:c8:d3:59:7e:c3:a3:43:5d:68: 9b:1d:35:75:fc:8f:e0:1b:72:1d:81:e3:de:8a:49:61:59:f0: a5:d2:77:68:af:08:46:42:09:65:0a:0c:d2:ff:26:03:9f:e3: 09:93:c2:19:b6:eb:32:76:b0:39:79:0c:d3:be:af:81:f7:91: 98:c9:de:de:eb:ea:42:0b:82:6e:be:dd:3c:50:84:f8:05:8a: 32:2e:e2:b4:30:0e:a1:c1:9a:54:94:3d:b1:b5:d6:db:2e:e0: 20:c3:e9:2c:f7:08:d0:79:b9:20:a2:0c:52:66:1a:1d:1d:ee: 22:57:51:5d:77:bc:31:1c:8f:b7:9f:05:38:a9:f6:5c:ca:d3: 38:28:22:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjYwOTIxMDEwOTAwWhcNMjYwOTI4MDEwOTAwWjAYMRYwFAYD VQQDEw02YWIwODNhYy1mOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6X+tsDIMCEqf9d9y/D5IsWFM750eEJrYW+1XrtxX+c/K9fTabAa/XmXtv23 G/qlZcpN/zJ2a1oDSAAzXzfSgV5ztDU5Q5+ZXPzsVDinvFj6mzq5rQrMXmjgMv5Z LQxzRNb04ZCbxBEsG+VqAOVQL3U/kZxKFBgu1EHNHStPh+SP2Gmpt7qNUCnx+6Sf UAeGegUM81DQOqCX6TIqIPvixt3baJhDz7CiB/e2RSzK13N3Y573Hq36aMmXr3Ik jKiRUr7JX02bLtBMMqA6MW70J2C7Dehhjn5ax3KNJXU+HD068STMadFFodAPrV0W /rARKufupTAlYWvJwEKAayFWIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXGWu/5 rgjFBv9h5wvpj/9VhpVFMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnNTYCjp0XeRlmBQ7cnIeCc+zGpHkAT/tAD4LFHTmaIpUIhqiHHr9EA67E/Nk wO+zSDrZ/OElVTH83WqtOXJpcdD/h0NGCdQu8DMMiMWouvjEwXMYl5og7ZTN89no DYHYKQqXwQmzoeRGZabrSZBMqHZ0qU9vyNNZfsOjQ11omx01dfyP4BtyHYHj3opJ YVnwpdJ3aK8IRkIJZQoM0v8mA5/jCZPCGbbrMnawOXkM076vgfeRmMne3uvqQguC br7dPFCE+AWKMi7itDAOocGaVJQ9sbXW2y7gIMPpLPcI0Hm5IKIMUmYaHR3uIldR XXe8MRyPt58FOKn2XMrTOCgiSQ== -----END CERTIFICATE-----Generated at Mon Sep 21 09:20:49 2026 by rpki-client