$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: 1/Mx/9SH8CzQ3Foq45BFE58OtqhYQXBsgex17Rcblmo= Subject key identifier: 4A:E7:62:D6:44:7A:1D:35:68:60:9A:BF:36:77:EA:07:69:2B:53:FE Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01E4 Signing time: Mon 21 Sep 2026 03:30:08 +0000 Manifest this update: Mon 21 Sep 2026 03:30:07 +0000 Manifest next update: Mon 28 Sep 2026 03:30:07 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: n1/4wmDKa05Mggoz6qjVGAnl2W1mKGfPYulJ5SHkXog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Sep 21 03:30:07 2026 GMT Not After : Sep 28 03:30:07 2026 GMT Subject: CN=6ab0a4bf-3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:bf:65:45:3b:fa:6f:44:cd:57:7f:ba:af: e0:f3:13:9b:ee:f3:c1:a0:75:12:85:35:4b:31:52: c5:0e:b6:44:66:39:bb:bf:1f:bf:8f:ee:1e:17:93: 97:67:84:27:75:ee:61:27:34:61:de:d6:89:c2:d0: 11:d2:3f:17:32:24:81:95:d1:db:57:1f:3f:86:37: b2:1d:25:fc:60:16:db:1e:0a:73:1a:69:54:68:91: 14:dc:02:83:da:22:c4:46:87:e5:6f:f7:96:be:0a: e9:86:a1:25:5b:9d:af:77:9c:78:d3:17:c5:7e:b1: 30:c6:82:68:f8:50:f4:b2:1b:d1:cf:9d:a7:91:24: fd:bb:83:1a:4a:5c:08:f0:64:75:c2:5d:88:f9:d5: 8d:42:9c:c6:de:00:96:38:25:fc:c2:0c:34:87:71: 08:b6:1c:96:56:ea:3d:23:e9:d5:1c:3b:0a:69:c6: 15:ed:86:65:15:2e:97:77:13:31:cc:55:b7:c0:3c: 74:6d:67:38:10:f8:e9:0d:bd:7b:1c:5c:a6:46:1f: 45:66:b2:79:97:4d:7a:39:fb:1b:35:a2:ad:95:f3: 92:c0:b0:f6:94:61:65:6e:2d:bc:f8:83:95:19:aa: f6:53:3a:a6:49:dc:df:5a:ee:fe:df:0f:ca:51:b9: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:62:D6:44:7A:1D:35:68:60:9A:BF:36:77:EA:07:69:2B:53:FE X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2d:03:eb:72:bd:85:cd:04:fc:df:34:b4:00:cd:4a:08:79: 4e:32:83:7c:7c:90:98:a8:7d:13:ad:c8:0b:ab:27:5f:89:88: c3:1c:71:0f:60:e0:55:96:bf:a0:0c:0a:1a:f0:ed:85:cb:af: 83:09:3b:d3:af:8b:9c:55:b9:9b:3b:3e:74:86:55:fd:90:8e: 66:c5:6e:d7:87:a7:80:98:6f:cc:21:f1:b0:49:b2:b2:26:03: d1:d8:89:13:fe:80:9f:1f:5c:03:2e:9a:1e:d3:a1:c8:85:fd: e8:8e:5b:89:b3:4f:19:ce:64:17:0b:2b:a8:08:da:31:4f:e2: 1d:1b:67:64:51:6b:b2:77:65:d3:ae:2d:a3:a0:a7:24:f3:cf: 7b:f1:79:a2:f6:e2:b0:2b:54:63:0f:71:03:b8:9a:b8:68:1e: 5e:25:6b:af:74:9d:8b:c7:a4:d4:67:45:a1:34:d2:03:d4:47: 39:ce:a4:0a:e0:e7:01:5b:04:f9:30:f8:e8:48:bf:bf:9e:9a: 05:e9:99:85:92:d6:14:fd:2f:e5:30:85:b5:ee:fb:b3:52:3e: e6:95:46:8e:cf:df:0d:59:7b:e6:b7:86:1b:fa:9c:e3:07:b7: 33:27:fe:88:30:f3:3c:f4:bd:6b:7a:4d:d2:14:c4:2e:1b:16: 18:d5:88:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwOTIxMDMzMDA3WhcNMjYwOTI4MDMzMDA3WjAYMRYwFAYD VQQDEw02YWIwYTRiZi0zNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83q/ZUU7+m9EzVd/uq/g8xOb7vPBoHUShTVLMVLFDrZEZjm7vx+/j+4eF5OX Z4Qnde5hJzRh3taJwtAR0j8XMiSBldHbVx8/hjeyHSX8YBbbHgpzGmlUaJEU3AKD 2iLERoflb/eWvgrphqElW52vd5x40xfFfrEwxoJo+FD0shvRz52nkST9u4MaSlwI 8GR1wl2I+dWNQpzG3gCWOCX8wgw0h3EIthyWVuo9I+nVHDsKacYV7YZlFS6XdxMx zFW3wDx0bWc4EPjpDb17HFymRh9FZrJ5l016OfsbNaKtlfOSwLD2lGFlbi28+IOV Gar2UzqmSdzfWu7+3w/KUbkauwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErnYtZE eh01aGCavzZ36gdpK1P+MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjC0D63K9hc0E/N80tADNSgh5TjKDfHyQmKh9E63IC6snX4mIwxxxD2DgVZa/ oAwKGvDthcuvgwk706+LnFW5mzs+dIZV/ZCOZsVu14engJhvzCHxsEmysiYD0diJ E/6Anx9cAy6aHtOhyIX96I5bibNPGc5kFwsrqAjaMU/iHRtnZFFrsndl064to6Cn JPPPe/F5ovbisCtUYw9xA7iauGgeXiVrr3Sdi8ek1GdFoTTSA9RHOc6kCuDnAVsE +TD46Ei/v56aBemZhZLWFP0v5TCFte77s1I+5pVGjs/fDVl75reGG/qc4we3Myf+ iDDzPPS9a3pN0hTELhsWGNWInw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:25:01 2026 by rpki-client