$ rpki-client -vvvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: e1askD8xSa8Ry+eq7VKyFy9tJp2kitddDwlxj4cYCrw= Subject key identifier: AA:F5:81:DE:AD:C7:EC:DD:31:05:E4:F6:1F:87:9B:7C:32:B6:48:3E Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 0475 Signing time: Thu 10 Sep 2026 23:57:45 +0000 Manifest this update: Thu 10 Sep 2026 23:57:44 +0000 Manifest next update: Thu 17 Sep 2026 23:57:44 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: RKbcorn8k2PIus1serpfzBLSZG8Cxj6FcQ1RjHg2AOs=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: F/PceWhaRg2ZCivw+2tjUeII0KHSV3l33JEM7j1Q1Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Sep 10 23:57:44 2026 GMT Not After : Sep 17 23:57:44 2026 GMT Subject: CN=6aa343f8-179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:22:1b:b5:4b:28:88:b3:63:7d:5b:96:7a: a3:e7:60:44:84:70:81:98:53:30:07:df:f7:f9:7d: 74:a1:7e:56:95:1e:c2:91:87:b5:99:d7:b6:55:66: 47:11:84:72:d1:9e:d9:9d:1f:03:1b:18:27:22:c6: d6:bd:72:64:29:6d:5a:31:71:e5:0a:91:02:5c:cd: 8b:ec:12:e0:93:bc:98:0a:eb:b4:e2:43:c9:f8:33: b2:e2:16:91:53:e4:f2:19:a5:e2:d5:d3:24:5e:a4: f0:2a:fa:d6:bd:56:97:65:bb:7e:88:f3:82:d1:b8: 59:66:13:2a:52:c9:a1:08:5d:0c:7c:bd:ff:fa:4a: ea:d5:d4:c8:36:35:4a:38:d9:d8:29:af:ca:7a:df: 93:0a:fe:be:9e:12:33:83:b7:bf:79:40:57:1b:67: 05:26:29:4b:e2:bb:d0:d0:79:37:9d:20:3a:d3:97: 20:91:fc:2b:3b:5a:a0:ad:29:01:e4:cc:2a:34:c2: da:3a:dd:1f:73:7d:e5:68:7f:0f:42:4e:14:7d:18: bd:5d:c8:a0:c0:38:8d:19:93:d7:2a:a4:01:61:62: eb:c3:3c:39:70:35:89:9e:03:00:8d:86:6f:72:81: 83:df:85:33:fb:6e:93:d8:a6:9e:ce:5f:4b:c2:62: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:81:DE:AD:C7:EC:DD:31:05:E4:F6:1F:87:9B:7C:32:B6:48:3E X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f5:ae:8c:8f:ba:5d:e0:2e:2f:bd:b4:5a:9a:27:1d:82:51: 81:d6:7c:7b:52:56:f2:db:5a:ec:96:7b:6f:ed:00:c3:be:4b: 49:4b:d2:30:d9:3e:39:a0:c1:89:0d:4e:21:db:1d:65:80:df: da:a9:cf:ef:00:8d:0d:39:de:63:ec:33:6b:70:72:8a:5e:7e: bf:ff:34:9c:79:a8:4e:58:d3:31:2b:a2:56:9f:86:42:08:b7: 50:2b:59:f0:60:51:b4:12:47:09:dc:15:8d:69:5b:4f:61:1b: fe:e8:1f:2e:35:34:f2:ee:ae:d0:31:6b:52:24:4e:14:3f:68: b5:eb:15:59:71:ac:0d:0c:d7:b6:08:22:4c:95:18:b3:ce:86: 7c:f6:41:cd:21:70:1b:76:bc:52:48:ff:d4:6b:ad:c0:7c:61: 3a:b0:d3:e8:6c:15:1d:57:63:43:80:5e:55:2d:e4:a5:43:88: e3:ea:01:dc:d1:69:49:f7:a6:ce:d6:bb:6e:79:3e:39:e7:16: d8:33:01:1a:77:46:64:76:9c:eb:a5:c2:57:ce:07:43:74:e4: 95:ba:66:ef:f7:ac:94:75:6a:60:b1:62:6a:0a:7c:c1:4d:f4: eb:72:fa:4e:81:e5:83:33:49:77:31:18:86:f0:af:a2:f5:81: 29:51:2d:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYwOTEwMjM1NzQ0WhcNMjYwOTE3MjM1NzQ0WjAYMRYwFAYD VQQDEw02YWEzNDNmOC0xNzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipUiG7VLKIizY31blnqj52BEhHCBmFMwB9/3+X10oX5WlR7CkYe1mde2VWZH EYRy0Z7ZnR8DGxgnIsbWvXJkKW1aMXHlCpECXM2L7BLgk7yYCuu04kPJ+DOy4haR U+TyGaXi1dMkXqTwKvrWvVaXZbt+iPOC0bhZZhMqUsmhCF0MfL3/+krq1dTINjVK ONnYKa/Ket+TCv6+nhIzg7e/eUBXG2cFJilL4rvQ0Hk3nSA605cgkfwrO1qgrSkB 5MwqNMLaOt0fc33laH8PQk4UfRi9XcigwDiNGZPXKqQBYWLrwzw5cDWJngMAjYZv coGD34Uz+26T2Kaezl9LwmJJGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKr1gd6t x+zdMQXk9h+Hm3wytkg+MB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfWujI+6XeAuL720WponHYJRgdZ8e1JW8tta7JZ7b+0Aw75LSUvSMNk+OaDB iQ1OIdsdZYDf2qnP7wCNDTneY+wza3Byil5+v/80nHmoTljTMSuiVp+GQgi3UCtZ 8GBRtBJHCdwVjWlbT2Eb/ugfLjU08u6u0DFrUiROFD9otesVWXGsDQzXtggiTJUY s86GfPZBzSFwG3a8Ukj/1GutwHxhOrDT6GwVHVdjQ4BeVS3kpUOI4+oB3NFpSfem zta7bnk+OecW2DMBGndGZHac66XCV84HQ3Tklbpm7/eslHVqYLFiagp8wU3063L6 ToHlgzNJdzEYhvCvovWBKVEtnw== -----END CERTIFICATE-----Generated at Fri Sep 11 14:59:13 2026 by rpki-client