$ rpki-client -vvvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: HghSaV0T/TTeVytVX20tBgwxdh0xeTDr5GQfuTng7LY= Subject key identifier: 13:14:18:4B:2F:2B:1C:2C:E6:64:F0:38:96:1E:34:DB:5A:1C:B9:3C Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 048D Signing time: Thu 29 Oct 2026 00:14:29 +0000 Manifest this update: Thu 29 Oct 2026 00:14:29 +0000 Manifest next update: Thu 05 Nov 2026 00:14:29 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: rY+iq9aNYwY/JMM4yOxFhIHVNxM3cxZr2oZH8J/RcQE=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: F/PceWhaRg2ZCivw+2tjUeII0KHSV3l33JEM7j1Q1Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Oct 29 00:14:29 2026 GMT Not After : Nov 5 00:14:29 2026 GMT Subject: CN=6ae28fe5-8067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:ce:14:21:7f:5f:1d:df:d6:70:81:37:a0: 1b:53:fb:a5:07:4a:2b:91:12:0e:92:ab:7f:a1:8d: 26:4a:ce:c1:4b:c2:1f:c2:4c:65:81:3c:34:14:d5: c1:7f:3f:8f:2b:c2:38:d4:fb:7b:94:26:d2:6a:4c: d5:3c:aa:4f:c6:95:ca:52:ec:02:9f:ad:68:25:94: be:6a:07:c1:d4:40:fa:26:bf:55:97:d6:fc:2a:48: 5f:e6:91:6d:78:6a:04:c5:9e:35:5e:19:b7:8b:df: d5:e6:b1:95:45:e6:b0:38:b1:39:7c:9b:b3:90:5b: c4:a1:a9:cd:da:78:61:af:f1:46:6a:26:ce:23:d9: 35:31:65:ee:89:8f:20:73:2a:3e:08:61:23:5b:02: 48:b3:cb:04:ca:07:ff:38:f3:08:83:ee:23:3b:5a: b2:a0:eb:f0:95:5f:a6:06:94:2f:c6:ff:19:68:48: d1:39:ce:0d:d4:62:09:89:f2:0e:ec:8e:0b:d3:b9: 0d:35:8a:43:f0:96:02:02:14:86:88:4d:2d:7b:77: 92:e6:50:20:3e:e3:96:70:a8:73:f0:92:16:b1:f9: f6:1d:90:f9:08:1d:68:5b:12:3b:d3:23:a1:71:a1: e4:31:d4:b2:32:96:a4:2a:57:35:9e:6d:d3:ac:00: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:18:4B:2F:2B:1C:2C:E6:64:F0:38:96:1E:34:DB:5A:1C:B9:3C X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:48:c3:40:f1:16:f6:12:71:b2:7f:ac:ed:ed:d4:37:71:1f: 17:35:9d:65:0f:6f:62:87:3b:d7:cb:1d:00:73:db:5a:64:07: a5:7d:2b:95:f8:b9:35:8c:66:bd:6e:39:24:f3:67:85:0d:06: a1:69:6d:ac:7b:d4:27:f9:9a:dd:26:00:a9:e8:97:1d:a2:1d: 90:02:dd:38:b4:a6:4f:30:3a:8b:45:6d:8d:4a:76:6b:72:db: 90:ae:3c:e5:e8:dc:77:ac:34:a8:5a:56:54:bb:7d:96:14:84: a6:df:92:37:8c:0c:fa:5e:09:7e:86:5b:fd:ba:93:ef:47:ca: c5:30:cf:80:d9:7d:c8:c7:89:32:66:43:d5:92:67:1b:bd:88: a1:f0:d6:d9:98:f3:6d:cd:e1:8e:47:05:df:c2:f4:2b:03:34: 8a:c2:25:63:c4:ae:73:16:de:c1:29:9b:e5:50:4b:52:e6:4f: fb:b3:fc:32:d8:a7:ee:9a:c0:f0:5f:19:43:e2:3c:e2:a4:5d: 78:ec:53:28:dc:36:da:df:fd:8c:24:c9:25:8f:c0:41:61:2f: 9c:69:b3:11:ab:3a:4f:f2:cb:14:70:6a:e8:b6:ef:19:21:ec: 16:45:e5:aa:58:e8:31:ce:70:e9:b2:cb:a1:b8:28:54:73:4c: b2:77:ab:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYxMDI5MDAxNDI5WhcNMjYxMTA1MDAxNDI5WjAYMRYwFAYD VQQDEw02YWUyOGZlNS04MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCrOFCF/Xx3f1nCBN6AbU/ulB0orkRIOkqt/oY0mSs7BS8IfwkxlgTw0FNXB fz+PK8I41Pt7lCbSakzVPKpPxpXKUuwCn61oJZS+agfB1ED6Jr9Vl9b8Kkhf5pFt eGoExZ41Xhm3i9/V5rGVReawOLE5fJuzkFvEoanN2nhhr/FGaibOI9k1MWXuiY8g cyo+CGEjWwJIs8sEygf/OPMIg+4jO1qyoOvwlV+mBpQvxv8ZaEjROc4N1GIJifIO 7I4L07kNNYpD8JYCAhSGiE0te3eS5lAgPuOWcKhz8JIWsfn2HZD5CB1oWxI70yOh caHkMdSyMpakKlc1nm3TrADUoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMUGEsv Kxws5mTwOJYeNNtaHLk8MB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2kjDQPEW9hJxsn+s7e3UN3EfFzWdZQ9vYoc718sdAHPbWmQHpX0rlfi5NYxm vW45JPNnhQ0GoWltrHvUJ/ma3SYAqeiXHaIdkALdOLSmTzA6i0VtjUp2a3LbkK48 5ejcd6w0qFpWVLt9lhSEpt+SN4wM+l4JfoZb/bqT70fKxTDPgNl9yMeJMmZD1ZJn G72IofDW2Zjzbc3hjkcF38L0KwM0isIlY8SucxbewSmb5VBLUuZP+7P8Mtin7prA 8F8ZQ+I84qRdeOxTKNw22t/9jCTJJY/AQWEvnGmzEas6T/LLFHBq6LbvGSHsFkXl qljoMc5w6bLLobgoVHNMsnerDw== -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:58 2026 by rpki-client