$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json) Hash identifier: lpcn6u0QvE2BWDKFyxIz8wswHVN3vyxpD0G1XNS463Q= Subject key identifier: B1:CB:B2:69:07:47:E6:B3:15:B7:00:80:38:70:22:4B:67:75:7F:BC Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft Manifest number: 0130 Signing time: Tue 27 Oct 2026 06:00:31 +0000 Manifest this update: Tue 27 Oct 2026 06:00:30 +0000 Manifest next update: Tue 03 Nov 2026 06:00:30 +0000 Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: 8dx1i3f9V3rpfafmMmbuO5DdW+sdkfAVDnOaRtUVkeY=) 2: 546E5FDCC93A11F18A8AAAF84611F970.roa (hash: sPFa46t5S3x6Q3DbJXNo6KSuEl+O3lBAkoFSSZIGGcA=) 3: 42E7EDE6C93A11F18802D7E24611F970.roa (hash: /LaJdtQYnupzFd3z1jx3kfKstG7+CxRlSayeqWuptYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680 Validity Not Before: Oct 27 06:00:30 2026 GMT Not After : Nov 3 06:00:30 2026 GMT Subject: CN=6ae03dff-433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:fe:48:94:e7:ef:e2:54:b1:d0:2e:ee:c4: 80:6f:d7:5f:a4:88:f0:20:4d:46:f9:cd:99:a6:73: 15:09:9d:24:6d:70:78:11:44:c2:28:a4:c4:63:58: 15:09:4c:48:cb:81:c7:bd:ec:6e:77:b1:0b:47:c2: 16:f1:02:be:59:cb:d9:31:d0:6a:14:41:e2:a1:90: 83:f7:18:c4:c9:c4:81:9d:7d:04:a5:ce:a9:6e:92: 3d:0f:09:66:e5:fa:5d:83:e4:86:8e:94:c8:90:18: 17:c8:9d:d2:9e:f5:68:aa:27:68:02:34:5f:09:d3: 9c:4f:8a:0e:37:dd:64:7d:d9:98:14:5e:4f:2f:0b: 82:83:d8:24:4b:fc:8f:fc:fc:36:e7:f3:ad:64:9d: 89:cc:84:5e:27:19:68:75:7a:40:36:16:21:42:ef: 14:7a:ec:29:a0:09:9f:72:5c:27:7e:6e:ea:6c:50: 65:a7:cb:bc:ef:8b:e1:9b:61:24:86:03:10:45:66: 21:79:9e:83:d1:87:50:6d:c8:0e:25:a4:8c:ce:ea: 37:24:8b:cc:7a:33:15:1f:10:b7:fd:98:df:57:54: 5e:36:96:de:cd:1c:4c:91:5d:e9:1a:37:0c:0e:7a: 05:3d:43:a3:18:f9:5d:90:ff:43:bd:7d:6c:97:79: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:B2:69:07:47:E6:B3:15:B7:00:80:38:70:22:4B:67:75:7F:BC X509v3 Authority Key Identifier: keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b5:69:8c:05:2b:51:3c:24:b1:a3:77:8a:e4:f4:17:5d:c4: 45:94:74:c4:c2:c4:d0:d6:3e:9a:9a:e0:1c:ac:fa:00:46:f4: 8e:c3:ca:2b:9f:92:a4:ee:43:22:85:c9:38:02:b0:e4:5b:61: 3f:8f:b2:8f:12:96:54:13:a7:08:6b:94:cb:3e:fc:e3:4a:cc: cf:a2:67:91:24:0e:b6:be:60:93:89:e5:0d:f5:3f:94:00:b8: 63:7d:20:f9:23:12:8f:6c:8c:d1:9b:62:33:44:6e:ca:9b:c4: e9:72:0b:0e:8a:b9:19:dd:1e:5d:a2:ee:bc:15:73:06:8d:99: 1b:d9:a0:e2:88:e1:0e:0b:b6:8a:e2:2e:f9:3f:e0:d1:e6:87: e3:c3:2c:85:f2:a0:7a:cc:30:8d:de:ce:c9:8e:5d:35:29:c6: 67:c3:ef:8b:0c:21:51:05:54:0d:1b:75:7d:40:49:d4:b3:34: bd:4c:2b:b0:7a:cb:62:a3:10:0b:1b:a8:c0:5d:e6:c4:e2:16: fe:4d:09:eb:af:22:62:95:dd:3b:b7:5c:cb:a1:ab:3c:c3:a9: cd:93:a5:74:27:38:1c:62:6a:50:d5:8e:14:66:9d:cb:3a:05: b0:02:46:ff:99:f2:be:93:10:41:39:b1:17:58:40:d6:30:0a: 1b:ef:2a:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDkyMEU3RDA5MUYxNTU2OUYyRDgzNDBDNjU4MkI5NTk1 RUMwNjU2ODAwHhcNMjYxMDI3MDYwMDMwWhcNMjYxMTAzMDYwMDMwWjAYMRYwFAYD VQQDEw02YWUwM2RmZi00MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBL+SJTn7+JUsdAu7sSAb9dfpIjwIE1G+c2ZpnMVCZ0kbXB4EUTCKKTEY1gV CUxIy4HHvexud7ELR8IW8QK+WcvZMdBqFEHioZCD9xjEycSBnX0Epc6pbpI9Dwlm 5fpdg+SGjpTIkBgXyJ3SnvVoqidoAjRfCdOcT4oON91kfdmYFF5PLwuCg9gkS/yP /Pw25/OtZJ2JzIReJxlodXpANhYhQu8UeuwpoAmfclwnfm7qbFBlp8u874vhm2Ek hgMQRWYheZ6D0YdQbcgOJaSMzuo3JIvMejMVHxC3/ZjfV1ReNpbezRxMkV3pGjcM DnoFPUOjGPldkP9DvX1sl3mEEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHLsmkH R+azFbcAgDhwIktndX+8MB8GA1UdIwQYMBaAFJIOfQkfFVafLYNAxlgrlZXsBlaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9GMUM3NDQ3RTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZwOHRnMERHV0N1Vmxld0dW b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tnNTlDUjhWVnA4dGcwREdXQ3VWbGV3R1ZvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFMS9GMUM3NDQ3RTA5RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9rZzU5Q1I4VlZw OHRnMERHV0N1Vmxld0dWb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH7VpjAUrUTwksaN3iuT0F13ERZR0xMLE0NY+mprgHKz6AEb0jsPKK5+SpO5D IoXJOAKw5FthP4+yjxKWVBOnCGuUyz7840rMz6JnkSQOtr5gk4nlDfU/lAC4Y30g +SMSj2yM0ZtiM0RuypvE6XILDoq5Gd0eXaLuvBVzBo2ZG9mg4ojhDgu2iuIu+T/g 0eaH48MshfKgeswwjd7OyY5dNSnGZ8PviwwhUQVUDRt1fUBJ1LM0vUwrsHrLYqMQ CxuowF3mxOIW/k0J668iYpXdO7dcy6GrPMOpzZOldCc4HGJqUNWOFGadyzoFsAJG /5nyvpMQQTmxF1hA1jAKG+8qVA== -----END CERTIFICATE-----Generated at Thu Oct 29 00:04:55 2026 by rpki-client