$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: 0CmiQGGwNmI8F+JI8wOgij9Dt9Z1EoXmYbC35f5H0BY= Subject key identifier: 4B:03:EB:FC:A7:A8:FA:5B:CF:25:5A:A2:FA:5C:30:55:84:1B:63:72 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 0624 Signing time: Fri 04 Sep 2026 22:36:45 +0000 Manifest this update: Fri 04 Sep 2026 22:36:44 +0000 Manifest next update: Fri 11 Sep 2026 22:36:44 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: wzK8S0U47/WDiUqlgeTXdWI42i0b8Ab78mkff6JZBcQ=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Sep 4 22:36:44 2026 GMT Not After : Sep 11 22:36:44 2026 GMT Subject: CN=6a9b47fd-718c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:37:ca:27:98:e9:99:3a:a0:3b:20:96:75: 47:41:ce:44:03:f6:96:05:f0:05:0b:e0:98:50:35: 02:3e:2f:52:26:aa:fb:57:37:ba:71:bb:4a:f0:8d: 09:a9:2e:8a:42:f5:ca:42:cf:33:03:cd:55:24:96: 25:c9:03:c3:a2:ce:21:d9:73:e8:09:2b:94:29:41: 2f:32:39:fc:26:f8:05:d6:b0:ef:6b:30:2f:2b:a1: 3e:55:85:0a:47:7e:a5:0f:55:8c:75:ee:07:d0:b2: 1a:6d:66:f5:b4:09:a7:2b:12:3b:e3:61:aa:45:f3: d2:c6:5e:f0:22:79:4a:57:02:a3:d0:ba:ae:0b:79: 7d:c8:5f:46:99:be:41:f7:9e:b5:3f:77:46:08:81: 7d:44:c9:6a:d6:35:65:1c:73:b6:b4:65:8f:ef:5a: 07:89:d0:1a:9d:74:4f:83:72:f9:8e:23:7b:ff:1b: 39:54:d5:d4:70:eb:42:b7:db:42:33:35:9d:73:c0: ff:b3:f4:4b:9d:c4:07:a7:91:79:ff:b8:3b:c1:b2: 6a:47:2d:83:83:e8:00:ed:be:21:5e:68:6c:d2:ea: 6d:cc:df:69:cf:1c:c2:ac:e7:34:76:a8:36:0b:25: f5:96:de:ff:50:63:3e:5e:db:e2:77:9c:92:06:51: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:03:EB:FC:A7:A8:FA:5B:CF:25:5A:A2:FA:5C:30:55:84:1B:63:72 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:83:83:b3:e4:6c:6a:80:7f:6d:14:d0:ab:57:22:9b:d0:37: 98:56:d9:6b:79:dc:69:55:73:83:9a:81:e8:ab:8a:98:16:fd: 62:02:20:c6:9f:b6:5b:8b:b7:f8:39:ad:93:fe:e2:29:48:9d: 8d:ee:7a:b8:41:73:5f:56:ab:40:ba:81:09:05:1f:01:d1:cb: 7a:67:eb:17:da:b9:cc:b3:55:da:d9:ca:79:5f:0a:57:5f:5c: d2:33:23:73:df:70:2c:de:a9:da:9f:ea:48:94:f2:05:d1:0d: 63:65:8e:ff:f6:55:e6:e0:43:db:75:c9:f0:67:23:87:86:c8: dc:2a:5c:8d:b5:35:ec:26:83:83:a8:73:0a:55:8c:99:46:a2: ed:88:1f:8a:73:e3:8e:86:94:88:57:2e:7c:69:a1:78:f6:9b: 76:b2:6f:87:21:a4:a3:88:45:6f:46:5b:52:73:a1:e7:d7:64: e3:1c:48:4d:58:24:e0:1c:87:81:ab:50:99:e4:42:43:61:30: 8a:d4:fa:a1:6f:4d:ad:21:20:a4:7c:b2:d7:d6:03:08:fd:2f: 20:a5:a3:0f:2a:07:ff:d9:18:66:2f:a9:a4:66:a9:72:5d:67: 63:85:16:e0:8e:d4:6a:c8:b7:bf:54:44:32:1a:13:b6:4a:37: 1a:57:0c:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjYwOTA0MjIzNjQ0WhcNMjYwOTExMjIzNjQ0WjAYMRYwFAYD VQQDEw02YTliNDdmZC03MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosg3yieY6Zk6oDsglnVHQc5EA/aWBfAFC+CYUDUCPi9SJqr7Vze6cbtK8I0J qS6KQvXKQs8zA81VJJYlyQPDos4h2XPoCSuUKUEvMjn8JvgF1rDvazAvK6E+VYUK R36lD1WMde4H0LIabWb1tAmnKxI742GqRfPSxl7wInlKVwKj0LquC3l9yF9Gmb5B 9561P3dGCIF9RMlq1jVlHHO2tGWP71oHidAanXRPg3L5jiN7/xs5VNXUcOtCt9tC MzWdc8D/s/RLncQHp5F5/7g7wbJqRy2Dg+gA7b4hXmhs0uptzN9pzxzCrOc0dqg2 CyX1lt7/UGM+Xtvid5ySBlE5FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsD6/yn qPpbzyVaovpcMFWEG2NyMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtIODs+RsaoB/bRTQq1cim9A3mFbZa3ncaVVzg5qB6KuKmBb9YgIgxp+2W4u3 +Dmtk/7iKUidje56uEFzX1arQLqBCQUfAdHLemfrF9q5zLNV2tnKeV8KV19c0jMj c99wLN6p2p/qSJTyBdENY2WO//ZV5uBD23XJ8Gcjh4bI3CpcjbU17CaDg6hzClWM mUai7YgfinPjjoaUiFcufGmhePabdrJvhyGko4hFb0ZbUnOh59dk4xxITVgk4ByH gatQmeRCQ2EwitT6oW9NrSEgpHyy19YDCP0vIKWjDyoH/9kYZi+ppGapcl1nY4UW 4I7Uasi3v1REMhoTtko3GlcMRA== -----END CERTIFICATE-----Generated at Sat Sep 5 05:17:59 2026 by rpki-client