$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft File: KozvQUIwYkfgXyYUwTFpXx7uChM.mft (raw, json) Hash identifier: xqbJ4tf0gVEJTccUQFhkb/Iw4a2B9wwBlqXNM90fg4g= Subject key identifier: 96:31:DD:F3:23:D9:21:FC:99:D0:B5:AB:B4:21:E7:8F:DC:55:BA:4E Authority key identifier: 2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13 Certificate issuer: /CN=A9112762/serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft Manifest number: 58 Signing time: Fri 09 Oct 2026 08:54:48 +0000 Manifest this update: Fri 09 Oct 2026 08:54:48 +0000 Manifest next update: Fri 16 Oct 2026 08:54:48 +0000 Files and hashes: 1: KozvQUIwYkfgXyYUwTFpXx7uChM.crl (hash: IT0WQXFvqcif/02cO2ho0xHjD27BNfq5KOplWITrr6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112762, serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13 Validity Not Before: Oct 9 08:54:48 2026 GMT Not After : Oct 16 08:54:48 2026 GMT Subject: CN=6ac8abd8-d3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:10:6e:bd:82:df:4f:52:46:0a:55:3d:f8: 4f:cf:ba:14:7d:7e:21:3a:eb:8f:05:91:64:26:62: 03:8a:62:b2:86:22:17:79:a6:cd:76:2d:a6:d6:ba: 6b:86:12:4f:89:da:94:38:3a:b1:e5:9e:5b:47:d5: f9:ce:da:29:33:b0:e7:76:c3:a8:f2:ab:1f:10:e8: 02:e4:1a:3a:b9:3d:fc:91:b4:6f:d5:c5:8e:c4:70: b9:71:20:70:41:d5:29:d3:43:13:ef:84:ce:42:ac: 6b:eb:9c:bb:85:c9:b7:e7:47:f7:71:56:a5:bb:43: 7f:40:df:02:27:1d:5e:16:a3:8f:f3:38:e8:f7:6e: 77:09:0f:f2:d3:89:3f:70:47:4b:da:0f:b0:e3:8e: 24:e3:a5:f0:6e:02:43:42:7e:89:1f:e1:99:6c:b9: e6:f4:e2:ba:80:56:63:57:b7:41:5e:be:92:ca:9a: 69:00:7a:fe:b6:f0:7a:e8:2c:06:47:7f:d6:00:ef: 61:2e:f9:04:a0:d2:ec:65:60:bc:db:bb:0e:a8:8e: 5d:47:04:66:67:22:fc:0b:98:73:5f:9e:17:13:06: e2:fa:0b:93:9b:a4:bb:85:9d:eb:db:04:ee:11:f9: 18:1e:68:46:4e:cd:59:f4:60:1c:9a:f5:1a:5b:a2: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:DD:F3:23:D9:21:FC:99:D0:B5:AB:B4:21:E7:8F:DC:55:BA:4E X509v3 Authority Key Identifier: keyid:2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:65:11:64:c9:d5:f4:3d:ec:3d:f3:a9:e3:6c:16:0b:76:01: 83:1f:e2:80:af:32:4e:06:4b:18:a1:d1:a3:be:d4:2a:c6:a1: 66:eb:e8:59:9e:f1:df:f6:a7:90:b9:4a:30:93:d7:e3:85:36: ff:da:97:fa:2b:ff:57:be:34:1d:ea:e1:ea:8e:ff:8e:0e:82: c0:82:dd:3f:ba:17:d5:d3:55:13:2d:03:47:95:44:e1:20:9c: 3e:0c:4d:49:92:64:ef:84:74:31:6a:df:ff:24:de:7e:ce:e9: 1f:42:53:3f:94:11:6b:c9:63:6f:ef:e3:2c:a7:c3:83:4e:cd: 99:7a:18:e1:be:3d:9c:f4:96:30:c3:0e:11:24:e9:2e:0b:f2: 33:9a:2d:b7:11:f9:c7:95:da:9c:2c:16:15:89:70:a4:3f:49: 9c:07:21:89:e7:82:b4:61:1a:67:ee:aa:83:07:5a:a1:e7:98: 12:27:39:14:3c:f3:b5:79:22:7b:f0:db:a2:da:ff:5e:b2:cc: 3f:05:08:99:1f:50:1a:25:8b:fb:87:73:3b:11:e0:28:7d:cf: 6e:e5:47:68:c4:3e:44:5c:40:5e:b7:d0:1c:57:66:05:22:89: 1b:ad:15:65:67:c9:63:ca:66:c7:dd:db:0a:c4:5d:12:f2:14: 9f:08:d6:58 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Mjc2MjExMC8GA1UEBRMoMkE4Q0VGNDE0MjMwNjI0N0UwNUYyNjE0QzEzMTY5NUYx RUVFMEExMzAeFw0yNjEwMDkwODU0NDhaFw0yNjEwMTYwODU0NDhaMBgxFjAUBgNV BAMTDTZhYzhhYmQ4LWQzZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgixBuvYLfT1JGClU9+E/PuhR9fiE6648FkWQmYgOKYrKGIhd5ps12LabWumuG Ek+J2pQ4OrHlnltH1fnO2ikzsOd2w6jyqx8Q6ALkGjq5PfyRtG/VxY7EcLlxIHBB 1SnTQxPvhM5CrGvrnLuFybfnR/dxVqW7Q39A3wInHV4Wo4/zOOj3bncJD/LTiT9w R0vaD7DjjiTjpfBuAkNCfokf4Zlsueb04rqAVmNXt0FevpLKmmkAev628HroLAZH f9YA72Eu+QSg0uxlYLzbuw6ojl1HBGZnIvwLmHNfnhcTBuL6C5ObpLuFnevbBO4R +RgeaEZOzVn0YBya9RpbovYdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUljHd8yPZ IfyZ0LWrtCHnj9xVuk4wHwYDVR0jBBgwFoAUKozvQUIwYkfgXyYUwTFpXx7uChMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNzYyLzUxNTZDNTRDM0NB MzExRjFBMkY4MzU0NkFCODMzNzczL0tvenZRVUl3WWtmZ1h5WVV3VEZwWHg3dUNo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS296dlFVSXdZa2ZnWHlZVXdURnBYeDd1Q2hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy NzYyLzUxNTZDNTRDM0NBMzExRjFBMkY4MzU0NkFCODMzNzczL0tvenZRVUl3WWtm Z1h5WVV3VEZwWHg3dUNoTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcZRFkydX0Pew986njbBYLdgGDH+KArzJOBksYodGjvtQqxqFm6+hZnvHf9qeQ uUowk9fjhTb/2pf6K/9XvjQd6uHqjv+ODoLAgt0/uhfV01UTLQNHlUThIJw+DE1J kmTvhHQxat//JN5+zukfQlM/lBFryWNv7+Msp8ODTs2Zehjhvj2c9JYwww4RJOku C/Izmi23EfnHldqcLBYViXCkP0mcByGJ54K0YRpn7qqDB1qh55gSJzkUPPO1eSJ7 8Nui2v9essw/BQiZH1AaJYv7h3M7EeAofc9u5UdoxD5EXEBet9AcV2YFIokbrRVl Z8ljymbH3dsKxF0S8hSfCNZY -----END CERTIFICATE-----Generated at Fri Oct 9 15:46:15 2026 by rpki-client