$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json) Hash identifier: 1U6YMEvUmzXS8QtWkHQKbNhxLNoGQwUgj1RIcOiyvUo= Subject key identifier: 67:64:86:EE:00:E8:49:9B:DC:51:65:D1:8E:75:7B:5E:1E:B8:CF:DA Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft Manifest number: 04D3 Signing time: Fri 04 Sep 2026 23:31:44 +0000 Manifest this update: Fri 04 Sep 2026 23:31:43 +0000 Manifest next update: Fri 11 Sep 2026 23:31:43 +0000 Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: nloQUPoSGKCyXWgo5Gup3Mw9T+ABAdgJpXOv5uVh9BY=) 2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5 Validity Not Before: Sep 4 23:31:43 2026 GMT Not After : Sep 11 23:31:43 2026 GMT Subject: CN=6a9b54e0-681a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:39:89:10:ef:d3:dd:0f:5b:14:37:18:f4: 59:fc:32:c2:93:6d:07:d7:3e:c6:b1:35:2a:06:32: ba:b8:31:25:17:1c:4f:3b:b0:fc:71:5b:5f:90:c7: c4:5c:96:a3:dd:4a:f1:62:18:3a:0b:f7:50:f3:5c: 83:bc:ff:ee:ec:61:43:4b:7c:ae:d0:dc:f7:a4:a6: 15:d9:b2:ae:43:5a:70:58:8b:5a:93:42:e4:ec:06: bd:3c:08:a7:81:39:a9:73:9b:92:d0:80:7f:9d:df: c4:c0:42:36:78:28:37:b1:20:7d:52:1f:a0:eb:9d: d8:0a:d5:a7:a5:de:92:38:eb:30:27:df:1a:1d:d6: 54:51:7f:13:75:07:4b:8a:4e:b9:7c:1f:df:ce:af: 40:07:4c:01:21:9a:8d:36:8d:d7:10:6f:fb:9c:eb: 8e:06:79:cf:8a:15:8b:c5:76:5d:20:0e:12:06:a7: 30:e7:a0:ff:b3:7b:89:4c:0a:f8:51:25:85:b2:6c: 98:f9:f4:29:85:a3:93:58:67:07:68:65:85:54:b0: 3c:19:30:1f:a2:19:3c:2b:dc:a4:83:de:02:22:e2: cd:a1:56:07:a8:0f:80:5b:9c:ed:aa:68:85:8e:56: 1c:e0:cc:15:e6:35:16:65:2e:73:af:17:3c:7a:53: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:64:86:EE:00:E8:49:9B:DC:51:65:D1:8E:75:7B:5E:1E:B8:CF:DA X509v3 Authority Key Identifier: keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:a5:83:b3:59:83:1d:26:94:47:3c:e8:c3:07:b4:c3:3b: 9b:24:b9:17:c5:30:4f:7f:f5:ce:11:7a:1f:db:59:6d:37:8b: 2d:dc:4a:92:b9:52:cc:48:00:e6:cc:30:cd:14:57:67:79:7b: 48:08:88:ce:aa:ae:81:36:bc:94:a2:bc:a6:81:b4:12:7f:fa: 12:f6:27:e5:70:88:3a:89:56:18:a4:dc:40:c7:1d:a6:3e:af: 1a:3a:ea:d1:1e:6a:ae:5d:7c:70:62:e3:c1:81:55:34:45:87: 1c:1b:c0:3c:99:35:12:04:45:13:d0:d9:1e:18:05:bb:01:19: 75:b9:b4:3d:37:bc:6f:16:4c:56:5a:13:af:20:53:f6:18:6d: c8:59:20:86:31:77:15:04:6d:91:ae:b4:83:49:80:a6:98:cf: 86:1f:20:70:29:fd:d0:61:28:ac:10:c0:4e:57:ef:f1:09:37: f3:6a:b4:38:e0:db:72:cf:11:15:3e:b5:77:2b:a5:64:98:9d: 81:55:ad:40:d0:77:68:50:07:25:10:a6:12:46:37:22:ab:c0: ed:4a:3d:16:be:a1:07:db:b3:d1:54:b6:85:d6:52:cb:14:f2: f8:7f:ca:71:4e:3b:c0:2e:97:e4:b2:a4:00:87:93:1e:78:ba: f5:5a:c0:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEOTMxMTAvBgNVBAUTKDkwMUY5ODkxRkJGN0YyN0Q0MTZBMUVFMDZCMzFCMDE2 NUFBRTFEQzUwHhcNMjYwOTA0MjMzMTQzWhcNMjYwOTExMjMzMTQzWjAYMRYwFAYD VQQDEw02YTliNTRlMC02ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjcA5iRDv090PWxQ3GPRZ/DLCk20H1z7GsTUqBjK6uDElFxxPO7D8cVtfkMfE XJaj3UrxYhg6C/dQ81yDvP/u7GFDS3yu0Nz3pKYV2bKuQ1pwWItak0Lk7Aa9PAin gTmpc5uS0IB/nd/EwEI2eCg3sSB9Uh+g653YCtWnpd6SOOswJ98aHdZUUX8TdQdL ik65fB/fzq9AB0wBIZqNNo3XEG/7nOuOBnnPihWLxXZdIA4SBqcw56D/s3uJTAr4 USWFsmyY+fQphaOTWGcHaGWFVLA8GTAfohk8K9ykg94CIuLNoVYHqA+AW5ztqmiF jlYc4MwV5jUWZS5zrxc8elPq6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdkhu4A 6Emb3FFl0Y51e14euM/aMB8GA1UdIwQYMBaAFJAfmJH79/J9QWoe4GsxsBZarh3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkQ5My8wRjg3NEE3NDdG M0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2MzhuMUJhaDdnYXpHd0ZscXVI Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCLVlrZnYzOG4xQmFoN2dhekd3RmxxdUhjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkQ5My8wRjg3NEE3NDdGM0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2Mzhu MUJhaDdnYXpHd0ZscXVIY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1Klg7NZgx0mlEc86MMHtMM7myS5F8UwT3/1zhF6H9tZbTeLLdxKkrlSzEgA 5swwzRRXZ3l7SAiIzqqugTa8lKK8poG0En/6EvYn5XCIOolWGKTcQMcdpj6vGjrq 0R5qrl18cGLjwYFVNEWHHBvAPJk1EgRFE9DZHhgFuwEZdbm0PTe8bxZMVloTryBT 9hhtyFkghjF3FQRtka60g0mAppjPhh8gcCn90GEorBDATlfv8Qk382q0OODbcs8R FT61dyulZJidgVWtQNB3aFAHJRCmEkY3IqvA7Uo9Fr6hB9uz0VS2hdZSyxTy+H/K cU47wC6X5LKkAIeTHni69VrA1g== -----END CERTIFICATE-----Generated at Sat Sep 5 10:59:17 2026 by rpki-client