$ rpki-client -vvvf rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft File: KXr2WH-YpJnreNLMrjYW70KfV1A.mft (raw, json) Hash identifier: JI/Ej2DGdL5cN4oFJNTfnBbhsp8B7Y+z4mt38eUOINg= Subject key identifier: E9:49:E5:E3:3C:0A:40:37:67:8B:3E:F0:A0:25:D6:2B:29:BE:44:A4 Authority key identifier: 29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 Certificate issuer: /CN=A91411BC/serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Certificate serial: 142A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft Manifest number: 141F Signing time: Thu 08 Oct 2026 16:57:43 +0000 Manifest this update: Thu 08 Oct 2026 16:57:42 +0000 Manifest next update: Thu 15 Oct 2026 16:57:42 +0000 Files and hashes: 1: KXr2WH-YpJnreNLMrjYW70KfV1A.crl (hash: GLwkT/iA+FuurKZ+xhOYU5qkTU0ZRqE1Ycmvi3o778g=) 2: B4996A22AC3411E88623474BC4F9AE02.roa (hash: RPjXeL3Zl8P6QkaRaUeCd76+wyQHC30Y9Dr1jaF8lPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5162 (0x142a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411BC, serialNumber=297AF6587F98A499EB78D2CCAE3616EF429F5750 Validity Not Before: Oct 8 16:57:42 2026 GMT Not After : Oct 15 16:57:42 2026 GMT Subject: CN=6ac7cb87-725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:39:4d:f0:8e:ce:8a:c3:0e:b8:ef:60:55: 14:71:c8:b0:38:82:6c:30:55:59:f8:58:2a:ff:06: 9f:e8:a7:46:86:c9:ad:e8:7f:94:8b:c8:85:8b:82: 46:6f:e5:30:4d:1a:f2:b7:64:dc:4e:18:ce:ae:d1: 08:71:fd:21:89:3f:5d:7c:4e:8f:ec:e1:88:ea:76: 69:81:ea:3a:6c:9c:4d:5b:11:3c:df:42:dc:50:9f: e0:b0:19:84:10:d0:50:90:d3:76:b5:0a:d2:e1:a6: 1a:1e:07:ff:f0:fe:cd:b2:c9:37:15:76:09:c9:27: 42:6c:5a:bb:b3:f1:16:a1:52:f8:33:74:cb:9e:66: de:89:a8:76:9a:67:e3:86:c7:df:75:2b:62:1f:eb: e3:17:8d:61:2a:81:14:87:1b:15:6c:b9:bf:00:46: 99:1d:3b:9a:27:b5:cf:3b:65:0b:b4:23:97:74:5a: e3:0b:86:ce:67:69:fd:c8:53:d1:49:23:8a:3d:ea: 65:79:59:70:55:be:b9:ea:3d:48:86:5c:bc:6a:7d: b9:82:41:99:9a:b1:f1:87:d5:f4:23:39:06:38:df: 92:4f:ce:36:61:d9:ee:e4:7d:48:c5:0a:b8:99:3c: 2b:a5:13:21:a2:af:28:5d:c7:a7:c3:ec:44:c7:d4: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:49:E5:E3:3C:0A:40:37:67:8B:3E:F0:A0:25:D6:2B:29:BE:44:A4 X509v3 Authority Key Identifier: keyid:29:7A:F6:58:7F:98:A4:99:EB:78:D2:CC:AE:36:16:EF:42:9F:57:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXr2WH-YpJnreNLMrjYW70KfV1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411BC/E3171B02AC3311E8B2069449C4F9AE02/KXr2WH-YpJnreNLMrjYW70KfV1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:dc:a6:bb:4a:6c:4b:fd:ad:e6:ab:cf:a5:21:d8:b5:40: b9:dd:8b:59:96:ef:9a:57:ca:4d:a3:e6:04:34:04:a9:40:5e: 67:60:79:17:b1:18:ea:2a:0d:8f:b0:6d:28:cf:7d:cd:8f:74: 07:c3:b8:36:0a:5e:31:8e:d8:5a:02:18:c9:5d:00:71:87:02: f5:4e:c3:b9:71:7e:ec:e6:7f:14:d5:07:6c:e1:c6:51:7b:a7: 71:4a:ee:1a:7a:3a:fb:7d:fe:26:a3:bc:7d:e3:d8:0d:a3:65: b2:2f:72:64:c6:d6:91:04:b9:c4:f2:b7:d5:f3:c2:37:af:bf: f5:e6:3d:9a:54:28:36:db:9f:53:b6:c8:4c:16:b9:ed:74:ad: 78:36:04:40:f7:c4:00:21:2c:4f:0b:25:31:db:98:dc:7e:cf: 50:5c:6a:32:4b:23:fb:2c:c1:50:f5:f0:e4:3b:a5:65:8d:db: d3:90:83:c9:70:07:dc:93:36:23:ed:0a:17:e7:23:0b:cf:76: b6:56:81:25:23:d5:2c:14:4b:12:56:24:16:9b:c3:26:fd:43: c9:9c:b5:f4:78:33:94:b9:45:a8:76:a9:4c:6d:4c:da:d1:61: 10:3e:81:26:a7:fe:42:1d:b8:14:e6:03:a1:26:10:35:0d:72: 4f:5b:d6:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQkMxMTAvBgNVBAUTKDI5N0FGNjU4N0Y5OEE0OTlFQjc4RDJDQ0FFMzYxNkVG NDI5RjU3NTAwHhcNMjYxMDA4MTY1NzQyWhcNMjYxMDE1MTY1NzQyWjAYMRYwFAYD VQQDEw02YWM3Y2I4Ny03MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqs5TfCOzorDDrjvYFUUcciwOIJsMFVZ+Fgq/waf6KdGhsmt6H+Ui8iFi4JG b+UwTRryt2TcThjOrtEIcf0hiT9dfE6P7OGI6nZpgeo6bJxNWxE830LcUJ/gsBmE ENBQkNN2tQrS4aYaHgf/8P7Nssk3FXYJySdCbFq7s/EWoVL4M3TLnmbeiah2mmfj hsffdStiH+vjF41hKoEUhxsVbLm/AEaZHTuaJ7XPO2ULtCOXdFrjC4bOZ2n9yFPR SSOKPepleVlwVb656j1Ihly8an25gkGZmrHxh9X0IzkGON+ST842Ydnu5H1IxQq4 mTwrpRMhoq8oXcenw+xEx9SZqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlJ5eM8 CkA3Z4s+8KAl1ispvkSkMB8GA1UdIwQYMBaAFCl69lh/mKSZ63jSzK42Fu9Cn1dQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCQy9FMzE3MUIwMkFD MzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBKbnJlTkxNcmpZVzcwS2ZW MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYcjJXSC1ZcEpucmVOTE1yallXNzBLZlYxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCQy9FMzE3MUIwMkFDMzMxMUU4QjIwNjk0NDlDNEY5QUUwMi9LWHIyV0gtWXBK bnJlTkxNcmpZVzcwS2ZWMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAanjcprtKbEv9rearz6Uh2LVAud2LWZbvmlfKTaPmBDQEqUBeZ2B5F7EY6ioN j7BtKM99zY90B8O4NgpeMY7YWgIYyV0AcYcC9U7DuXF+7OZ/FNUHbOHGUXuncUru Gno6+33+JqO8fePYDaNlsi9yZMbWkQS5xPK31fPCN6+/9eY9mlQoNtufU7bITBa5 7XSteDYEQPfEACEsTwslMduY3H7PUFxqMksj+yzBUPXw5DulZY3b05CDyXAH3JM2 I+0KF+cjC892tlaBJSPVLBRLElYkFpvDJv1DyZy19HgzlLlFqHapTG1M2tFhED6B Jqf+Qh24FOYDoSYQNQ1yT1vW1Q== -----END CERTIFICATE-----Generated at Fri Oct 9 20:33:14 2026 by rpki-client