$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: L6flcd/2Pj2alC8XGepwZOHe5C/HnqZ5yAdw9VHa27s= Subject key identifier: 23:10:C4:75:DD:0D:7F:9A:77:FA:03:3E:29:56:C1:08:FB:63:A1:40 Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 72 Signing time: Tue 27 Oct 2026 08:14:49 +0000 Manifest this update: Tue 27 Oct 2026 08:14:48 +0000 Manifest next update: Tue 03 Nov 2026 08:14:48 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: 1NvMzBno0UUdu5nv5B5Wcm7SB6uGrpzlkMwfTe+mQGo=) 2: E667E45629D211F19DF1399897833773.roa (hash: SD1U0oEAY17iDXAUSZr2OKlv5Jwiojbt4ibmLhQz9DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Oct 27 08:14:48 2026 GMT Not After : Nov 3 08:14:48 2026 GMT Subject: CN=6ae05d79-3efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:41:fc:dd:64:98:a4:99:cc:be:44:ca:b9: 36:de:1a:7e:d4:11:0d:06:1d:db:ee:f9:1c:15:8e: 99:0c:51:7a:55:38:a8:e1:9e:84:32:06:dd:9b:32: 78:0c:ba:ce:46:36:16:34:9c:b5:1f:2a:dd:35:e1: f6:f6:b3:45:35:34:91:f5:c8:08:8c:30:08:c3:fb: c5:15:fa:0f:b6:10:c2:18:9c:cc:32:8e:a2:c4:40: 36:9e:c5:96:db:c8:81:c9:1a:4d:f6:16:f6:a4:2a: 2b:39:92:a9:50:44:69:92:87:f8:a9:6c:85:b3:21: 41:96:8f:3f:05:78:0c:e9:91:e4:d0:5b:bd:7c:47: 74:ce:06:0a:8a:fa:c9:96:88:68:9b:f6:9e:2a:c0: 49:5a:73:d1:78:57:c7:55:b1:0b:aa:c5:9d:52:55: 6d:04:7c:a2:50:f3:40:7a:19:9d:fc:f7:ad:9c:8d: 3e:08:b6:59:2a:74:3e:aa:65:1a:a1:cf:9f:92:8b: 2a:8b:6c:ff:56:93:28:84:1f:01:95:75:f7:a4:23: 2c:f5:51:ab:b2:a5:47:d4:09:1d:e9:61:48:33:f7: 73:5b:a1:a5:d1:8a:d6:a8:4d:8e:e6:77:82:86:ad: 25:1b:de:ba:9f:65:f5:7e:51:b1:86:c9:d2:f5:1c: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:10:C4:75:DD:0D:7F:9A:77:FA:03:3E:29:56:C1:08:FB:63:A1:40 X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e2:02:dd:22:23:23:a0:6c:3c:f4:a8:5b:e6:98:4c:58:98: 77:f2:c7:1e:37:0a:b4:b1:8a:53:8e:45:f4:5b:0c:22:15:f6: 88:57:07:6e:83:e2:3d:30:55:9c:3a:87:cb:ca:88:c3:58:71: a0:3b:24:7e:02:96:85:d0:98:6e:73:f6:57:32:0c:f5:aa:e3: 69:d7:d2:59:48:10:08:f3:23:7e:90:56:2d:c2:9b:7b:bf:c0: 33:ad:9b:7f:01:a6:96:8d:c2:db:08:1a:95:6e:73:74:52:30: a4:a1:f8:a6:2a:5d:b7:b7:af:22:22:08:f1:21:1d:01:66:2f: 23:fd:5e:79:c1:2f:51:95:86:e8:7b:c6:b0:2f:ff:c1:c4:40: 4e:c6:6a:f1:8f:3f:37:e9:dd:0c:db:59:d7:b7:20:1a:dc:26: 13:13:3c:0b:51:8e:9b:b0:64:37:01:ca:9b:f2:81:e5:9d:b5: df:c4:fa:36:cf:5e:d1:6c:48:f7:9c:48:ba:1d:e3:11:04:06: 54:e4:74:c2:a0:01:b7:27:fe:71:7a:73:b9:2d:55:8a:69:af: 97:e5:09:73:dd:a5:e8:f2:41:e1:b5:04:aa:05:36:b2:4e:22: 75:a9:28:ca:9a:4b:03:b2:ae:ae:43:8f:8d:30:94:2d:07:bb: ae:60:6c:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjEwMjcwODE0NDhaFw0yNjExMDMwODE0NDhaMBgxFjAUBgNV BAMTDTZhZTA1ZDc5LTNlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjckH83WSYpJnMvkTKuTbeGn7UEQ0GHdvu+RwVjpkMUXpVOKjhnoQyBt2bMngM us5GNhY0nLUfKt014fb2s0U1NJH1yAiMMAjD+8UV+g+2EMIYnMwyjqLEQDaexZbb yIHJGk32FvakKis5kqlQRGmSh/ipbIWzIUGWjz8FeAzpkeTQW718R3TOBgqK+smW iGib9p4qwElac9F4V8dVsQuqxZ1SVW0EfKJQ80B6GZ38962cjT4ItlkqdD6qZRqh z5+SiyqLbP9WkyiEHwGVdfekIyz1UauypUfUCR3pYUgz93NboaXRitaoTY7md4KG rSUb3rqfZfV+UbGGydL1HGKTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIxDEdd0N f5p3+gM+KVbBCPtjoUAwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCU4gLdIiMjoGw89Khb5phMWJh38sceNwq0sYpTjkX0WwwiFfaIVwdug+I9MFWc OofLyojDWHGgOyR+ApaF0Jhuc/ZXMgz1quNp19JZSBAI8yN+kFYtwpt7v8AzrZt/ AaaWjcLbCBqVbnN0UjCkofimKl23t68iIgjxIR0BZi8j/V55wS9RlYboe8awL//B xEBOxmrxjz836d0M21nXtyAa3CYTEzwLUY6bsGQ3Acqb8oHlnbXfxPo2z17RbEj3 nEi6HeMRBAZU5HTCoAG3J/5xenO5LVWKaa+X5Qlz3aXo8kHhtQSqBTayTiJ1qSjK mksDsq6uQ4+NMJQtB7uuYGyV -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:36 2026 by rpki-client