$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: mnD81lxibhNhbKlq9HfaA6WlWz8uHXldEKszfQ31IJA= Subject key identifier: 1C:96:10:49:3F:DE:08:91:C8:08:D9:5D:E3:D3:C6:2F:B6:BD:E8:CE Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0237 Signing time: Wed 07 Oct 2026 03:24:16 +0000 Manifest this update: Wed 07 Oct 2026 03:24:16 +0000 Manifest next update: Wed 14 Oct 2026 03:24:16 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: iN9IFNzZ2zpBKT6UIHHTT3vCClFEc2JmLZhc+ublZHE=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) 3: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 4: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Oct 7 03:24:16 2026 GMT Not After : Oct 14 03:24:16 2026 GMT Subject: CN=6ac5bb60-b1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:f0:40:de:a3:ee:c6:79:d7:12:19:9b:97: dd:db:53:a7:fc:4b:ad:2b:0c:e5:6d:66:dc:43:45: fe:67:2d:b0:7a:e5:51:04:0a:3a:50:76:95:d9:90: 18:14:0e:30:95:86:a8:5e:81:db:5c:0c:b1:c4:35: 2b:0a:56:a7:cc:bd:a7:ba:86:15:41:1c:9e:90:7a: a9:3d:3a:20:aa:09:c7:f8:cf:11:99:63:24:dd:db: 7a:da:29:2b:b6:74:a3:da:cb:62:ed:96:f5:6b:c9: 3f:a9:ba:d4:76:bf:68:34:4b:94:ab:f2:c9:e2:f0: ec:5f:75:50:f6:45:44:cd:6c:db:e7:5f:00:ba:8a: f9:1e:3f:f0:85:e7:6c:e7:7f:58:12:11:70:cb:ba: dd:00:b6:5c:3e:d9:c1:ab:73:c7:b9:8a:aa:da:93: ea:d4:2a:5d:23:a6:6d:81:6c:ba:de:53:46:5f:23: 44:88:05:66:8e:89:9a:44:93:26:66:69:83:37:86: 46:96:4a:84:5e:ed:3b:1b:6b:dc:84:c1:ce:af:57: 6c:29:a4:bc:a2:e4:82:4b:c9:59:9b:22:9e:ca:a3: 3b:8f:19:26:3f:54:5b:83:eb:70:08:77:c3:fd:3d: 3a:af:b5:08:75:9a:fe:cf:8b:5a:be:d0:1d:8c:d9: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:10:49:3F:DE:08:91:C8:08:D9:5D:E3:D3:C6:2F:B6:BD:E8:CE X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b1:0b:ad:c5:2d:1d:c7:a5:6d:c8:3a:b2:6c:d5:aa:72:31: cc:cf:f7:20:69:5a:89:85:1d:0a:64:f1:d9:c7:60:55:d9:bc: ed:9f:c4:1d:7e:1a:49:63:85:0d:b4:d9:d8:73:46:e0:8f:65: fc:6f:35:c7:30:74:77:c3:58:2a:7b:99:57:6c:0f:66:fd:93: 90:f9:ba:62:11:d2:46:e4:77:fd:36:e1:8f:26:87:f4:4e:02: c6:27:22:90:55:90:7e:b6:b5:40:0c:7b:aa:5c:ba:fd:46:76: 5a:92:67:52:71:44:85:9c:c6:04:33:60:0d:d3:d5:6b:59:f3: 56:44:ad:c1:bd:ca:ae:b3:43:99:64:a8:ff:5f:ad:ce:e0:c8: 7b:d6:6e:b3:fe:42:f4:0a:ed:a3:4a:2f:ef:5f:a4:da:b6:db: c3:de:a8:dc:a4:a2:30:a2:6e:74:87:09:f8:48:ce:be:d3:93: c5:aa:f6:63:33:71:31:d2:53:35:55:e9:23:ee:bf:8f:1c:5c: b5:c7:6a:e1:51:54:3a:3b:81:f2:7e:93:c1:24:eb:b4:46:53: 77:56:82:0e:7d:c9:c5:00:02:3f:cf:73:68:d1:01:3b:75:99: bd:20:40:c2:ad:0c:71:04:b2:ea:a4:da:c8:00:c0:d1:a5:73: d2:80:37:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYxMDA3MDMyNDE2WhcNMjYxMDE0MDMyNDE2WjAYMRYwFAYD VQQDEw02YWM1YmI2MC1iMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRPwQN6j7sZ51xIZm5fd21On/EutKwzlbWbcQ0X+Zy2weuVRBAo6UHaV2ZAY FA4wlYaoXoHbXAyxxDUrClanzL2nuoYVQRyekHqpPTogqgnH+M8RmWMk3dt62ikr tnSj2sti7Zb1a8k/qbrUdr9oNEuUq/LJ4vDsX3VQ9kVEzWzb518Auor5Hj/wheds 539YEhFwy7rdALZcPtnBq3PHuYqq2pPq1CpdI6ZtgWy63lNGXyNEiAVmjomaRJMm ZmmDN4ZGlkqEXu07G2vchMHOr1dsKaS8ouSCS8lZmyKeyqM7jxkmP1Rbg+twCHfD /T06r7UIdZr+z4tavtAdjNmTeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByWEEk/ 3giRyAjZXePTxi+2vejOMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlbELrcUtHcelbcg6smzVqnIxzM/3IGlaiYUdCmTx2cdgVdm87Z/EHX4aSWOF DbTZ2HNG4I9l/G81xzB0d8NYKnuZV2wPZv2TkPm6YhHSRuR3/TbhjyaH9E4Cxici kFWQfra1QAx7qly6/UZ2WpJnUnFEhZzGBDNgDdPVa1nzVkStwb3KrrNDmWSo/1+t zuDIe9Zus/5C9Arto0ov71+k2rbbw96o3KSiMKJudIcJ+EjOvtOTxar2YzNxMdJT NVXpI+6/jxxctcdq4VFUOjuB8n6TwSTrtEZTd1aCDn3JxQACP89zaNEBO3WZvSBA wq0McQSy6qTayADA0aVz0oA3wA== -----END CERTIFICATE-----Generated at Thu Oct 8 00:48:41 2026 by rpki-client