$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft File: KrJDLDrVEo7XPpnEYNBhH69NIg4.mft (raw, json) Hash identifier: 0Uj3HAnhkAd2OjEIbPqVNjOaaDX+kfpetwM3bQx6ZZg= Subject key identifier: 5B:F4:3D:CF:05:55:79:D9:FD:DE:0C:80:4D:5E:BB:C4:97:32:D5:0F Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft Manifest number: 0131 Signing time: Sat 03 Oct 2026 06:29:13 +0000 Manifest this update: Sat 03 Oct 2026 06:29:13 +0000 Manifest next update: Sat 10 Oct 2026 06:29:13 +0000 Files and hashes: 1: KrJDLDrVEo7XPpnEYNBhH69NIg4.crl (hash: kMZgc6H2JahnLo/IOyvvas68efuqTbw9/qhVGNT2OeE=) 2: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (hash: MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=) 3: D6246110AA6F11F0AD515C63C4F9AE02.roa (hash: kgI9j69ZuRKnS83zYB2SCGnkfw+45wKRpdDjx0NhraU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 06:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Validity Not Before: Oct 3 06:29:13 2026 GMT Not After : Oct 10 06:29:13 2026 GMT Subject: CN=6ac0a0b9-23c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:f9:23:eb:f2:55:01:fb:af:7a:6e:31:91: d2:ea:7a:83:0c:0b:36:44:19:6b:ab:b8:14:98:ba: 68:4b:a4:98:5e:3c:d8:79:db:c3:c0:da:a3:bf:6f: 1c:4c:d6:e8:21:85:c5:be:0f:e9:08:fb:55:e2:4a: 2c:20:a7:eb:72:cc:36:82:8a:d3:9a:21:5b:91:6d: 4f:19:90:7f:5c:1e:b8:7c:b4:be:1c:34:4e:e5:48: 03:dc:8c:51:ab:95:d4:11:83:a5:97:e3:53:7c:34: e1:ec:2b:14:81:2e:38:8f:dd:52:cd:dd:fe:d3:1c: 84:8b:25:ac:55:15:04:ad:df:52:ad:97:73:98:72: 8c:86:23:7e:56:32:79:d5:38:ab:75:3c:14:5b:d9: 12:05:6a:13:99:65:db:d3:98:03:aa:2f:c5:f6:fd: 8e:33:5a:1f:d5:2b:bc:dc:2c:ef:8a:ba:08:47:52: 50:26:8f:e8:c2:8c:fa:a0:58:8e:9b:db:d3:70:c8: ea:12:b5:73:d2:30:45:8c:83:24:76:ab:2b:b5:24: 75:49:88:3b:f7:5e:81:10:c9:a3:92:8b:2b:62:88: b0:7c:0e:76:35:2e:f2:9a:37:60:89:8f:bc:9c:9a: 7a:ed:e9:ce:06:bd:89:5b:36:47:18:3e:6c:46:ac: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F4:3D:CF:05:55:79:D9:FD:DE:0C:80:4D:5E:BB:C4:97:32:D5:0F X509v3 Authority Key Identifier: keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:33:03:0a:c5:4d:bf:79:e5:22:d6:86:94:98:40:0d:82:6c: 92:1c:e4:a3:26:a3:7e:7a:8b:bd:2d:11:4b:ba:5d:66:89:c5: c4:db:12:ab:a7:71:bc:dc:aa:d7:fe:7e:78:9b:1d:c2:f9:18: ec:ac:3d:2c:56:28:df:8f:b6:f5:0d:14:86:2b:8a:73:46:d9: 4c:5a:59:ae:4e:1b:b3:7c:23:27:f6:2c:90:50:c9:84:ce:32: 68:0d:e0:09:1d:49:df:81:82:7b:57:9d:29:bd:87:5a:0b:8e: 4e:d7:9e:5b:f9:6d:ea:bb:11:dd:46:1b:b5:8a:fe:1a:3d:b3: 1f:66:04:d3:86:fd:97:9e:09:f8:12:ac:73:c3:7a:5e:ac:e6: d7:99:13:51:56:78:e7:5d:3f:47:fb:e5:d5:5d:2a:66:68:db: 2b:2d:3d:c5:f7:b4:81:b9:f3:96:f0:68:36:e4:b4:4c:1e:76: 80:64:00:ad:cb:96:1a:a1:78:54:b7:73:24:f4:69:50:6d:0b: e5:ba:69:cd:9c:23:12:cb:5b:37:a0:55:a1:d9:16:b6:48:7b: 8f:6d:fd:88:a8:e1:ff:42:81:89:bd:8e:8d:42:0f:59:33:81: 6e:dd:6c:33:56:6b:bd:39:4b:d0:f9:47:2f:8d:b4:e0:0c:22: 73:11:3c:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4NTAxMTAvBgNVBAUTKDJBQjI0MzJDM0FENTEyOEVENzNFOTlDNDYwRDA2MTFG QUY0RDIyMEUwHhcNMjYxMDAzMDYyOTEzWhcNMjYxMDEwMDYyOTEzWjAYMRYwFAYD VQQDEw02YWMwYTBiOS0yM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGz5I+vyVQH7r3puMZHS6nqDDAs2RBlrq7gUmLpoS6SYXjzYedvDwNqjv28c TNboIYXFvg/pCPtV4kosIKfrcsw2gorTmiFbkW1PGZB/XB64fLS+HDRO5UgD3IxR q5XUEYOll+NTfDTh7CsUgS44j91Szd3+0xyEiyWsVRUErd9SrZdzmHKMhiN+VjJ5 1TirdTwUW9kSBWoTmWXb05gDqi/F9v2OM1of1Su83CzviroIR1JQJo/owoz6oFiO m9vTcMjqErVz0jBFjIMkdqsrtSR1SYg7916BEMmjkosrYoiwfA52NS7ymjdgiY+8 nJp67enOBr2JWzZHGD5sRqwW1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv0Pc8F VXnZ/d4MgE1eu8SXMtUPMB8GA1UdIwQYMBaAFCqyQyw61RKO1z6ZxGDQYR+vTSIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzg1MC83QjNCMzdENDAx ODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVvN1hQcG5FWU5CaEg2OU5J ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5TklnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzg1MC83QjNCMzdENDAxODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVv N1hQcG5FWU5CaEg2OU5JZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDMDCsVNv3nlItaGlJhADYJskhzkoyajfnqLvS0RS7pdZonFxNsSq6dxvNyq 1/5+eJsdwvkY7Kw9LFYo34+29Q0UhiuKc0bZTFpZrk4bs3wjJ/YskFDJhM4yaA3g CR1J34GCe1edKb2HWguOTteeW/lt6rsR3UYbtYr+Gj2zH2YE04b9l54J+BKsc8N6 Xqzm15kTUVZ4510/R/vl1V0qZmjbKy09xfe0gbnzlvBoNuS0TB52gGQArcuWGqF4 VLdzJPRpUG0L5bppzZwjEstbN6BVodkWtkh7j239iKjh/0KBib2OjUIPWTOBbt1s M1ZrvTlL0PlHL4204AwicxE8CQ== -----END CERTIFICATE-----Generated at Sun Oct 4 13:38:19 2026 by rpki-client