$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft File: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft (raw, json) Hash identifier: afyA5rkiPa1obiPTUhlb2iMTr7oDX2DkhtHSd8ZRHUA= Subject key identifier: 08:8A:6E:D2:D9:88:3C:43:19:7C:60:A3:BB:2E:8D:38:A5:EA:12:C2 Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Certificate serial: 0EC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft Manifest number: 0EA7 Signing time: Tue 06 Oct 2026 17:48:56 +0000 Manifest this update: Tue 06 Oct 2026 17:48:55 +0000 Manifest next update: Tue 13 Oct 2026 17:48:55 +0000 Files and hashes: 1: KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl (hash: p8LSW2tXMuk6M09nmMJywwcBSB2yKdHF6Apu1nz193s=) 2: CD22D13C6DEC11F19E45C9465DA30FBC.roa (hash: ZShJ4AD7l89NGkQj9YglmhWVaniaXpNAe1m+z6iRJIw=) 3: F70C0B5E4A8C11F18179024696EE528E.roa (hash: BcPA+kBAWewJTEaX67GywprKBkDhJopRXac8MDudoCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3785 (0xec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948 Validity Not Before: Oct 6 17:48:55 2026 GMT Not After : Oct 13 17:48:55 2026 GMT Subject: CN=6ac53487-767d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:f8:be:ea:92:2a:da:50:0b:1a:90:df:85: 2c:96:f7:fc:9d:a2:ea:e9:9a:03:b3:41:00:58:5b: 14:14:5e:9e:96:c9:e2:e0:ec:cc:ea:dd:9a:fc:49: 14:62:ef:1c:cc:4e:81:d5:a7:80:2d:0f:47:a8:6e: f0:19:ee:6e:72:6c:75:51:b0:9b:32:6c:9c:38:7d: 6d:1e:56:f3:61:27:7e:ee:a0:e9:d2:50:80:5b:d9: 68:d9:ef:cd:63:00:7d:5c:bc:c1:e5:b9:19:23:c2: 57:60:3a:ad:f0:fe:ea:96:51:62:f6:60:3d:f2:3c: 17:4d:5e:32:dd:9c:88:b7:41:02:41:06:e4:36:50: fc:c1:fe:b3:04:09:a3:8a:d9:80:ee:04:07:11:8b: ec:a4:2a:79:ca:bb:f4:19:c6:e5:30:38:f7:f7:0d: 0d:bf:83:c4:58:ad:53:29:e4:87:81:92:ee:bf:d4: 60:e4:8c:c9:5c:d9:3b:f0:fd:09:4b:17:7f:0b:3a: 83:10:27:f6:a3:c0:31:f9:19:59:9b:e9:7b:c8:de: f0:75:e1:18:23:89:a8:e5:78:42:01:ae:50:df:30: 21:d6:50:40:8c:04:17:e6:bd:f6:14:13:e6:eb:ad: 9c:6b:f9:af:6d:4f:6c:bf:a2:d1:03:48:96:8c:84: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:6E:D2:D9:88:3C:43:19:7C:60:A3:BB:2E:8D:38:A5:EA:12:C2 X509v3 Authority Key Identifier: keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a3:ce:db:1e:3e:b6:9f:91:4b:07:4d:bf:9a:7a:dd:8c:6e: 37:b3:fc:a0:6c:7a:b4:e9:18:fb:01:2e:43:05:96:a4:a0:b1: 7f:29:ec:4a:53:b0:b4:a6:b6:a2:c9:ec:0a:a4:57:6f:c2:e1: df:3d:b0:27:be:1f:25:9c:d3:6a:d1:5e:e3:98:4e:56:a5:05: e9:84:3b:d5:9f:b3:be:49:b9:3d:67:ad:60:4f:99:ed:63:6e: 6b:f9:3a:0d:69:91:85:4d:c7:27:21:ef:1c:ed:c1:f7:56:93: 0f:2a:af:f1:32:d7:6f:83:0c:00:f7:00:96:1c:0f:e6:19:21: 73:1e:bc:1f:2d:ce:3f:8b:e3:78:7c:cd:36:a1:3a:77:2d:2f: 73:50:18:ce:38:04:7b:5a:61:37:bd:2d:5f:94:d2:58:ee:66: 2e:16:fe:a3:91:b1:85:56:6d:a0:e4:38:9c:46:c7:a3:65:ff: 52:3a:01:3d:99:c2:38:80:9f:c0:eb:7e:f2:a2:87:4c:75:18: 8f:6c:9b:da:84:63:86:52:7c:b4:e2:c9:17:1c:78:02:99:84: ae:92:49:e1:8d:a1:f2:b3:d1:46:2d:78:cf:e1:cc:c3:71:76: c3:7f:e4:f0:75:d9:c0:1b:9d:de:cd:b0:2b:41:f8:6f:0a:98: 4e:3c:4c:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1MjExMTAvBgNVBAUTKDI5NzY4NzY3NTNENjU1NjJBN0NBODVFM0U5RThERjc1 MDc5N0M5NDgwHhcNMjYxMDA2MTc0ODU1WhcNMjYxMDEzMTc0ODU1WjAYMRYwFAYD VQQDEw02YWM1MzQ4Ny03NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsD4vuqSKtpQCxqQ34Uslvf8naLq6ZoDs0EAWFsUFF6elsni4OzM6t2a/EkU Yu8czE6B1aeALQ9HqG7wGe5ucmx1UbCbMmycOH1tHlbzYSd+7qDp0lCAW9lo2e/N YwB9XLzB5bkZI8JXYDqt8P7qllFi9mA98jwXTV4y3ZyIt0ECQQbkNlD8wf6zBAmj itmA7gQHEYvspCp5yrv0GcblMDj39w0Nv4PEWK1TKeSHgZLuv9Rg5IzJXNk78P0J Sxd/CzqDECf2o8Ax+RlZm+l7yN7wdeEYI4mo5XhCAa5Q3zAh1lBAjAQX5r32FBPm 662ca/mvbU9sv6LRA0iWjITy2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiKbtLZ iDxDGXxgo7sujTil6hLCMB8GA1UdIwQYMBaAFCl2h2dT1lVip8qF4+no33UHl8lI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjUyMS8yMTY1ODgyMEM2 N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZXS255b1hqNmVqZmRRZVh5 VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tYYUhaMVBXVldLbnlvWGo2ZWpmZFFlWHlVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjUyMS8yMTY1ODgyMEM2N0UxMUU5QUYzQkE3NjVDNEY5QUUwMi9LWGFIWjFQV1ZX S255b1hqNmVqZmRRZVh5VWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMKPO2x4+tp+RSwdNv5p63YxuN7P8oGx6tOkY+wEuQwWWpKCxfynsSlOwtKa2 osnsCqRXb8Lh3z2wJ74fJZzTatFe45hOVqUF6YQ71Z+zvkm5PWetYE+Z7WNua/k6 DWmRhU3HJyHvHO3B91aTDyqv8TLXb4MMAPcAlhwP5hkhcx68Hy3OP4vjeHzNNqE6 dy0vc1AYzjgEe1phN70tX5TSWO5mLhb+o5GxhVZtoOQ4nEbHo2X/UjoBPZnCOICf wOt+8qKHTHUYj2yb2oRjhlJ8tOLJFxx4ApmErpJJ4Y2h8rPRRi14z+HMw3F2w3/k 8HXZwBud3s2wK0H4bwqYTjxMPg== -----END CERTIFICATE-----Generated at Thu Oct 8 05:26:44 2026 by rpki-client