$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: +PaU2deKr1sOWRuda5jk3gUPdxmKFVk0UgS8/U++BHg= Subject key identifier: F0:13:2C:85:6F:10:7C:7C:EA:FC:D3:B5:B5:40:46:CD:96:B7:09:19 Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 59 Signing time: Fri 11 Sep 2026 08:18:18 +0000 Manifest this update: Fri 11 Sep 2026 08:18:18 +0000 Manifest next update: Fri 18 Sep 2026 08:18:18 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: AtfA/6PX/iHJeUbdXItiAbFSp4fNJesSLu5Rowr++vs=) 2: E667E45629D211F19DF1399897833773.roa (hash: mPS/mWrND0roJV66v/yQX26pIf4l1oif/4g5bRdLTPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Sep 11 08:18:18 2026 GMT Not After : Sep 18 08:18:18 2026 GMT Subject: CN=6aa3b94a-0c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:a5:65:c1:2f:da:50:ef:d3:16:ea:ba:c9: fc:b2:bb:76:0c:0b:1a:7e:9d:68:e7:4b:32:b9:31: 45:30:b4:00:4f:85:10:e0:63:3c:2c:8d:8b:1d:a6: 40:38:69:ce:84:85:9d:cc:1f:6a:57:d6:37:13:07: ff:01:b1:50:b0:97:11:5f:81:89:7a:43:4e:15:39: ca:05:d5:18:43:0b:32:93:39:43:26:10:44:34:49: e8:37:5f:b1:1e:b5:a5:f7:ad:18:5d:8a:27:a9:bd: 3f:46:3f:86:0c:fe:a8:63:92:a8:eb:aa:8a:50:df: 53:35:76:2d:e5:48:d5:94:ee:80:eb:80:8c:0e:79: f5:93:35:63:ae:0c:46:30:64:04:af:cd:ed:96:a4: 71:6f:62:c7:95:70:44:84:91:2c:c4:15:50:88:a5: 2e:13:23:0b:4a:29:ed:29:46:41:3d:97:5d:b3:ac: 6a:11:d4:ca:14:5d:01:b1:ea:a8:b9:84:50:72:fc: e5:bc:cb:d9:36:32:9b:65:14:bc:a9:16:37:90:a2: 83:da:29:23:9f:05:4c:c7:3e:75:32:a1:a3:7e:06: c5:31:4e:98:20:e1:7f:1b:1b:62:89:98:7d:ac:23: 30:cb:29:b8:c7:3d:5c:85:c2:41:5b:b8:c6:16:86: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:13:2C:85:6F:10:7C:7C:EA:FC:D3:B5:B5:40:46:CD:96:B7:09:19 X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a1:ae:ab:14:13:70:c3:4c:1b:80:42:15:17:4c:ff:61:7e: 77:a4:3f:f7:7a:70:7e:0f:0d:ee:60:a1:9e:ed:60:bb:63:a9: 30:68:1d:0a:68:0e:42:bb:f9:13:9f:d0:8c:59:eb:4d:c1:1d: 70:e5:b1:b9:9d:2e:16:cb:01:56:2b:42:b2:2a:3d:cb:71:94: 7a:a0:a8:64:78:86:6a:54:43:36:16:15:86:4e:1a:60:15:bd: 71:26:84:56:f7:7f:b1:53:85:22:07:71:b6:08:b6:07:e0:5d: 86:fd:28:81:6e:94:e0:38:1a:d9:03:30:25:39:11:bf:54:0b: 4a:72:53:3f:d7:02:60:11:ec:2f:1b:43:cf:59:a3:80:aa:4c: 82:95:5c:6b:27:3f:c9:e6:2e:17:ee:e9:ac:08:e9:bb:0a:af: 4f:6b:d6:a9:a4:22:80:9f:c9:26:3d:a8:49:f6:5b:1c:f4:2e: b3:89:4f:38:74:5e:e4:a5:a2:7d:15:f5:87:07:e2:c4:ad:e9: 3c:bc:62:5d:e2:08:84:53:df:f6:c3:80:d9:a0:a8:86:73:d0: b5:f5:bd:1f:54:92:75:ca:4f:f8:20:21:b7:91:d3:03:23:9c: 0d:ef:bd:ea:ce:ee:e3:16:80:89:59:c8:a3:eb:a3:95:de:c7: 30:c7:39:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA5MTEwODE4MThaFw0yNjA5MTgwODE4MThaMBgxFjAUBgNV BAMTDTZhYTNiOTRhLTBjOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeyKVlwS/aUO/TFuq6yfyyu3YMCxp+nWjnSzK5MUUwtABPhRDgYzwsjYsdpkA4 ac6EhZ3MH2pX1jcTB/8BsVCwlxFfgYl6Q04VOcoF1RhDCzKTOUMmEEQ0Seg3X7Ee taX3rRhdiiepvT9GP4YM/qhjkqjrqopQ31M1di3lSNWU7oDrgIwOefWTNWOuDEYw ZASvze2WpHFvYseVcESEkSzEFVCIpS4TIwtKKe0pRkE9l12zrGoR1MoUXQGx6qi5 hFBy/OW8y9k2MptlFLypFjeQooPaKSOfBUzHPnUyoaN+BsUxTpgg4X8bG2KJmH2s IzDLKbjHPVyFwkFbuMYWhqfnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8BMshW8Q fHzq/NO1tUBGzZa3CRkwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLoa6rFBNww0wbgEIVF0z/YX53pD/3enB+Dw3uYKGe7WC7Y6kwaB0KaA5Cu/kT n9CMWetNwR1w5bG5nS4WywFWK0KyKj3LcZR6oKhkeIZqVEM2FhWGThpgFb1xJoRW 93+xU4UiB3G2CLYH4F2G/SiBbpTgOBrZAzAlORG/VAtKclM/1wJgEewvG0PPWaOA qkyClVxrJz/J5i4X7umsCOm7Cq9Pa9appCKAn8kmPahJ9lsc9C6ziU84dF7kpaJ9 FfWHB+LErek8vGJd4giEU9/2w4DZoKiGc9C19b0fVJJ1yk/4ICG3kdMDI5wN773q zu7jFoCJWcij66OV3scwxzmY -----END CERTIFICATE-----Generated at Fri Sep 11 17:57:46 2026 by rpki-client