$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft File: khdBhFmoypIuDWajy6pAZyDLSJA.mft (raw, json) Hash identifier: MblXawn1s3dvOrYYSR4lZElHaXJjgBa3dld0d2u8LGQ= Subject key identifier: 9A:8D:86:C5:56:47:35:6D:53:95:C5:0F:19:00:18:1D:92:9A:18:05 Authority key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 Certificate issuer: /CN=A9137B39/serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft Manifest number: 04A5 Signing time: Sat 31 Oct 2026 00:00:28 +0000 Manifest this update: Sat 31 Oct 2026 00:00:27 +0000 Manifest next update: Sat 07 Nov 2026 00:00:27 +0000 Files and hashes: 1: khdBhFmoypIuDWajy6pAZyDLSJA.crl (hash: LC6+s8Tz6Q25sHoaajLqYsbif1DqLpT+WPwjfWaJchI=) 2: EA8F3FAE6F8611F0BA25F244C4F9AE02.roa (hash: I3945a68aAj4Bezh1bF6xRl/WpfQZcBM/2Xudp6szlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137B39, serialNumber=9217418459A8CA922E0D66A3CBAA406720CB4890 Validity Not Before: Oct 31 00:00:27 2026 GMT Not After : Nov 7 00:00:27 2026 GMT Subject: CN=6ae52f9c-4857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:bb:ed:25:23:9a:e1:7f:d5:61:5c:9a:29: d2:77:6f:9b:ed:d7:08:22:c4:23:3d:cf:b9:82:9e: 37:25:e9:be:1d:c0:97:17:19:2e:72:22:02:83:c8: 6a:30:93:90:ab:92:c3:cb:0a:7a:f5:76:7e:13:e2: c9:e9:a1:6b:5a:36:3f:c8:07:d8:cc:fc:55:4d:6b: fa:68:52:6e:d1:e8:cf:79:b6:25:73:d2:d4:3a:51: f7:aa:74:73:9b:6f:d7:7f:3f:fa:aa:ae:d5:73:dc: fe:ae:e9:76:a0:a9:53:6f:23:f7:78:02:3e:1f:51: 15:f8:9a:e2:00:ff:59:80:e6:18:fd:4f:b9:35:48: b8:e4:7d:ab:61:db:a7:17:97:3d:45:4f:0a:ff:e7: eb:ba:c8:09:05:12:e3:db:68:44:ef:1e:15:1e:fe: 25:9a:15:06:0e:ba:45:e3:39:d8:d4:97:fe:39:19: 35:91:7f:65:e8:31:83:5b:8e:d9:41:43:f6:ff:17: dd:fe:cb:5f:8f:97:d4:c9:1b:9f:5a:4b:a1:6d:fe: b5:cb:25:3b:2d:29:19:79:38:03:07:5c:ab:43:39: 01:4b:b5:65:27:4d:38:a5:9a:62:95:1c:bf:e1:35: 94:99:3a:d8:ec:a6:1d:16:39:08:98:61:84:cd:66: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8D:86:C5:56:47:35:6D:53:95:C5:0F:19:00:18:1D:92:9A:18:05 X509v3 Authority Key Identifier: keyid:92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:30:43:63:6f:d2:15:85:3d:ed:dd:47:16:f5:19:2f:bf:4d: de:48:9d:96:46:06:fe:2f:9d:e2:20:0f:5f:77:50:17:d4:01: c9:04:43:d4:a3:48:3e:b3:ba:4a:6c:db:15:30:e9:f6:08:55: 4f:18:04:fb:00:3d:4b:49:de:4e:7e:b3:0a:4b:31:69:02:33: c9:08:93:ae:da:f4:43:9c:99:cd:71:c1:83:44:a2:ea:55:28: 1a:52:ca:bd:3b:1f:98:38:87:ad:7b:6a:b1:74:92:bc:23:f9: 2d:69:93:2b:6f:63:dc:03:e0:e7:9a:3f:fd:eb:1b:53:e6:dd: 60:52:11:6e:d2:cd:b4:cd:de:10:4a:f3:f0:99:2a:bd:79:6a: 6e:f4:a0:b3:36:15:a6:c3:fa:7d:01:64:94:78:f5:8c:9d:04: 0a:6c:8d:7c:a4:85:2f:01:8e:fe:60:93:04:3c:ff:af:fa:a1: b0:6d:50:4b:6b:82:65:ce:5a:1b:01:0e:e3:d3:b5:b4:bd:b2: 98:52:13:f6:29:d7:9e:d2:b4:0f:9a:e5:5c:a7:22:cd:b0:a0: 2b:42:8a:25:30:b2:77:c0:e3:db:01:8d:96:68:f5:e0:d6:fb: 51:56:6b:0b:a1:df:b4:7c:dd:bd:03:e2:7c:7c:42:9f:23:1b: 48:30:ff:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdCMzkxMTAvBgNVBAUTKDkyMTc0MTg0NTlBOENBOTIyRTBENjZBM0NCQUE0MDY3 MjBDQjQ4OTAwHhcNMjYxMDMxMDAwMDI3WhcNMjYxMTA3MDAwMDI3WjAYMRYwFAYD VQQDEw02YWU1MmY5Yy00ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9q77SUjmuF/1WFcminSd2+b7dcIIsQjPc+5gp43Jem+HcCXFxkuciICg8hq MJOQq5LDywp69XZ+E+LJ6aFrWjY/yAfYzPxVTWv6aFJu0ejPebYlc9LUOlH3qnRz m2/Xfz/6qq7Vc9z+rul2oKlTbyP3eAI+H1EV+JriAP9ZgOYY/U+5NUi45H2rYdun F5c9RU8K/+frusgJBRLj22hE7x4VHv4lmhUGDrpF4znY1Jf+ORk1kX9l6DGDW47Z QUP2/xfd/stfj5fUyRufWkuhbf61yyU7LSkZeTgDB1yrQzkBS7VlJ004pZpilRy/ 4TWUmTrY7KYdFjkImGGEzWb6EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqNhsVW RzVtU5XFDxkAGB2SmhgFMB8GA1UdIwQYMBaAFJIXQYRZqMqSLg1mo8uqQGcgy0iQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0IzOS9BNzU5OUQ3QUEw MzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lwSXVEV2FqeTZwQVp5RExT SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toZEJoRm1veXBJdURXYWp5NnBBWnlETFNKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0IzOS9BNzU5OUQ3QUEwMzUxMUVDODIyNTVEM0FDNEY5QUUwMi9raGRCaEZtb3lw SXVEV2FqeTZwQVp5RExTSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYTBDY2/SFYU97d1HFvUZL79N3kidlkYG/i+d4iAPX3dQF9QByQRD1KNIPrO6 SmzbFTDp9ghVTxgE+wA9S0neTn6zCksxaQIzyQiTrtr0Q5yZzXHBg0Si6lUoGlLK vTsfmDiHrXtqsXSSvCP5LWmTK29j3APg55o//esbU+bdYFIRbtLNtM3eEErz8Jkq vXlqbvSgszYVpsP6fQFklHj1jJ0ECmyNfKSFLwGO/mCTBDz/r/qhsG1QS2uCZc5a GwEO49O1tL2ymFIT9inXntK0D5rlXKcizbCgK0KKJTCyd8Dj2wGNlmj14Nb7UVZr C6HftHzdvQPifHxCnyMbSDD/4A== -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:30 2026 by rpki-client