$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: tEjRfQbvsoGKv+PgZHHBlSwisGogiiMWmWwWW9LcOFE= Subject key identifier: C4:85:BC:DA:E4:83:E4:02:4E:15:2A:1E:F9:EC:00:BA:69:C1:FD:7E Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0559 Signing time: Thu 08 Oct 2026 23:34:07 +0000 Manifest this update: Thu 08 Oct 2026 23:34:06 +0000 Manifest next update: Thu 15 Oct 2026 23:34:06 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: pDAybwnH29qzoXnPgaa6UE9fsO1568ZW9Ya5hOiidZI=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 23:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Oct 8 23:34:06 2026 GMT Not After : Oct 15 23:34:06 2026 GMT Subject: CN=6ac8286e-68b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:19:42:06:64:12:93:0f:7c:8b:b8:0c:5e: 9a:cc:81:e1:bb:51:49:9d:44:c4:e1:81:2a:d8:80: e2:34:34:5c:69:0e:4d:fc:ba:9a:27:db:9a:0f:98: 8e:18:40:f4:a7:17:7b:f5:e0:dd:75:54:eb:fd:90: 66:d4:0e:db:57:64:ed:2a:2d:78:c4:f9:da:29:2f: 34:e0:14:f8:09:89:68:a4:9c:88:a2:b5:a9:1a:73: e0:f3:0b:56:89:e4:af:24:83:2e:2b:8c:8c:d3:62: 82:56:88:ae:26:02:a8:11:37:fb:1b:02:88:dd:f4: 87:8a:f3:fb:e8:50:5b:1f:2f:0e:c1:c3:f8:20:84: a1:ba:34:20:f9:a3:05:32:22:2b:72:2e:4b:f5:8c: c7:c6:9c:ba:e1:af:50:82:de:30:3f:8b:88:2e:17: 2b:9a:e4:58:9f:8f:a8:c5:c8:80:0f:2e:00:89:5b: 78:ca:bd:1d:a6:a5:ce:c2:76:0c:90:27:27:93:5f: 00:9b:ac:f2:57:03:cc:d4:4a:10:3f:e2:88:2a:3c: a2:22:ee:7b:c5:95:9b:f5:a0:b3:8a:6e:2d:0f:ca: 1f:9d:3b:b6:4d:eb:99:d3:eb:4e:61:79:5a:e0:bf: f9:77:7a:ec:97:02:36:66:61:c4:56:cb:f4:c6:e8: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:BC:DA:E4:83:E4:02:4E:15:2A:1E:F9:EC:00:BA:69:C1:FD:7E X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ad:06:53:8d:13:52:1f:b7:af:41:eb:95:6e:0d:db:46:93: e3:01:5f:77:82:6f:24:1e:8d:e3:1a:0e:39:59:3f:54:2a:93: ac:c2:e4:ad:bd:bf:45:88:26:6c:a1:9a:67:7f:c3:59:6f:a6: 76:47:ad:ec:f1:7e:66:65:4f:61:a6:9c:42:a1:1a:02:ab:7e: 0a:24:29:60:93:46:76:02:98:d7:ee:b3:f1:0b:5c:17:0c:13: 3c:e6:be:d1:c3:67:34:90:8b:3c:8f:5c:7b:7f:83:90:29:be: 08:6b:ea:96:d6:85:15:d5:d0:6c:92:9d:79:cd:3b:e0:d3:e3: 18:a5:7c:ca:23:22:68:3b:eb:39:7d:61:5a:17:f3:e9:a6:b9: e7:4e:8c:99:dc:2e:5a:02:21:06:1b:42:05:15:da:0b:37:7b: 15:4b:14:ff:c8:92:94:bb:52:ae:35:de:34:ad:97:0c:26:69: 35:2e:0a:4e:24:44:ae:9f:a7:5b:2d:e0:73:05:88:0e:99:8e: c5:79:42:cc:98:97:b3:9d:12:52:d1:5c:db:3a:e7:bb:fd:c2: 99:6d:97:bc:fc:04:97:6e:72:a5:85:47:f6:1d:e0:ec:77:63: ec:8b:21:9c:0c:9d:cb:bb:56:d1:c8:ce:2d:b4:3a:01:dd:63: 14:f8:8f:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjYxMDA4MjMzNDA2WhcNMjYxMDE1MjMzNDA2WjAYMRYwFAYD VQQDEw02YWM4Mjg2ZS02OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDYZQgZkEpMPfIu4DF6azIHhu1FJnUTE4YEq2IDiNDRcaQ5N/LqaJ9uaD5iO GED0pxd79eDddVTr/ZBm1A7bV2TtKi14xPnaKS804BT4CYlopJyIorWpGnPg8wtW ieSvJIMuK4yM02KCVoiuJgKoETf7GwKI3fSHivP76FBbHy8OwcP4IIShujQg+aMF MiIrci5L9YzHxpy64a9Qgt4wP4uILhcrmuRYn4+oxciADy4AiVt4yr0dpqXOwnYM kCcnk18Am6zyVwPM1EoQP+KIKjyiIu57xZWb9aCzim4tD8ofnTu2TeuZ0+tOYXla 4L/5d3rslwI2ZmHEVsv0xui6vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSFvNrk g+QCThUqHvnsALppwf1+MB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATq0GU40TUh+3r0HrlW4N20aT4wFfd4JvJB6N4xoOOVk/VCqTrMLkrb2/RYgm bKGaZ3/DWW+mdket7PF+ZmVPYaacQqEaAqt+CiQpYJNGdgKY1+6z8QtcFwwTPOa+ 0cNnNJCLPI9ce3+DkCm+CGvqltaFFdXQbJKdec074NPjGKV8yiMiaDvrOX1hWhfz 6aa5506MmdwuWgIhBhtCBRXaCzd7FUsU/8iSlLtSrjXeNK2XDCZpNS4KTiRErp+n Wy3gcwWIDpmOxXlCzJiXs50SUtFc2zrnu/3CmW2XvPwEl25ypYVH9h3g7Hdj7Ish nAydy7tW0cjOLbQ6Ad1jFPiPUg== -----END CERTIFICATE-----Generated at Fri Oct 9 04:51:43 2026 by rpki-client