$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json) Hash identifier: Sh2cNc7f7AZFXptgx67E3kRQatn7w236NhXDl+RDa/0= Subject key identifier: D2:2E:69:92:08:A0:6E:D9:CB:CD:C6:2A:7E:51:E7:C2:4A:26:DF:BD Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft Manifest number: 6F Signing time: Fri 23 Oct 2026 05:19:00 +0000 Manifest this update: Fri 23 Oct 2026 05:19:00 +0000 Manifest next update: Fri 30 Oct 2026 05:19:00 +0000 Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: f0FB0IhyaxZCGvBAj8/Kbc6G5KVyl9BmTSuAGJXaIjA=) 2: B8086D68733A11F1A07DD97E95A30FBC.roa (hash: bTVB+DDvlWg3BGswbEV0Wrf2VGFZJmesV6ILbWOzMg0=) 3: 792D74047BFE11F1AA9690E78EA30FBC.roa (hash: XTYptpNlRAo7alSvOyzI+cw6KIvbeNRndpdGXKdvGYQ=) 4: 910D4E52AEBA11F1B27A531D4111F970.roa (hash: p5P4belsHB4XrOr94s3PLvQXg/kQLfm1jSynsp/hWVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 05:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: Oct 23 05:19:00 2026 GMT Not After : Oct 30 05:19:00 2026 GMT Subject: CN=6adaee44-5542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:6e:d4:75:87:56:ef:f9:bb:9a:b4:79:8a: 78:54:b6:8b:d8:16:7c:ac:e2:d3:be:a0:08:23:ed: 2a:59:89:b1:ac:06:0c:09:04:e8:69:c4:d4:5d:3a: f8:01:2b:2c:af:61:89:76:e1:bc:1c:b8:45:32:40: 46:06:55:8d:da:a0:28:e6:ce:45:10:64:66:86:98: c9:0c:3f:10:fd:84:59:52:3a:89:22:42:ed:b5:0b: 65:3a:b6:9b:7b:e8:24:85:a6:70:21:41:d4:1e:c0: a5:46:1c:95:96:88:51:11:c3:c7:09:1e:00:9c:32: c1:c8:ad:5f:ff:ad:10:cf:95:ae:38:c0:05:34:c3: 59:39:23:66:eb:a7:ec:33:64:fe:08:b2:21:55:d0: 1b:cb:d4:56:12:3e:2a:ac:fb:47:b4:55:7e:b3:bf: 06:60:ea:75:58:11:3c:87:f5:f4:dc:38:89:80:04: 53:e7:74:62:0c:80:fd:b2:4e:e1:99:a1:a4:58:6d: e9:6c:4f:8c:71:8e:0a:0b:32:fa:5d:d0:90:00:e0: be:55:2c:d4:64:5c:0a:a3:64:9a:38:a5:58:0a:d4: b7:01:a9:ed:d2:e3:cf:3b:c8:5a:22:7d:7c:67:d2: 5b:a8:a1:47:1e:02:c3:bf:99:ed:53:0b:a9:bd:0d: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:69:92:08:A0:6E:D9:CB:CD:C6:2A:7E:51:E7:C2:4A:26:DF:BD X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:34:9c:f5:12:d3:e3:f2:59:8a:6d:a1:40:85:1e:2c:fa:9d: 4b:01:2f:7c:11:a7:c2:a0:cf:19:78:1b:dc:e6:a8:2c:cb:54: 3a:ff:99:26:14:55:e7:0f:e2:e0:22:7c:71:00:f2:61:d3:f8: 13:24:2d:25:39:ab:8d:b8:f9:2b:14:84:dd:11:cd:bf:1e:f3: 40:c8:f2:7a:21:af:13:11:16:49:f6:dd:79:9d:98:f6:af:d4: 70:df:f7:87:50:29:41:23:6a:5a:4f:03:80:ce:c6:0c:1e:94: 3a:4a:c8:63:72:69:e2:00:4f:09:e2:8f:e0:09:63:68:42:55: 43:2e:56:f5:ea:a6:6e:48:22:08:38:23:29:58:95:af:00:24: 73:71:74:ee:2e:5e:ca:c9:a4:87:46:0e:5f:b5:7c:b8:c2:26: 8e:34:f4:a7:7c:43:4b:30:87:5a:ba:c3:f0:45:97:15:fb:13: b8:52:de:82:d8:55:c4:23:57:7c:39:ca:c3:21:8b:d6:f1:4f: aa:62:9a:d1:1b:dc:69:22:b4:57:6c:af:3a:35:d4:f2:75:20: 80:51:0e:b1:2b:ff:ad:41:ac:e2:89:48:4e:5b:dd:58:8c:81: 2d:bc:a1:0c:64:30:02:96:a1:7d:78:48:00:2b:76:93:4e:11: d6:96:1c:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjEwMjMwNTE5MDBaFw0yNjEwMzAwNTE5MDBaMBgxFjAUBgNV BAMTDTZhZGFlZTQ0LTU1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhdm7UdYdW7/m7mrR5inhUtovYFnys4tO+oAgj7SpZibGsBgwJBOhpxNRdOvgB KyyvYYl24bwcuEUyQEYGVY3aoCjmzkUQZGaGmMkMPxD9hFlSOokiQu21C2U6tpt7 6CSFpnAhQdQewKVGHJWWiFERw8cJHgCcMsHIrV//rRDPla44wAU0w1k5I2brp+wz ZP4IsiFV0BvL1FYSPiqs+0e0VX6zvwZg6nVYETyH9fTcOImABFPndGIMgP2yTuGZ oaRYbelsT4xxjgoLMvpd0JAA4L5VLNRkXAqjZJo4pVgK1LcBqe3S4887yFoifXxn 0luooUceAsO/me1TC6m9DaYXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0i5pkgig btnLzcYqflHnwkom370wHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0L0RDNzcwMTBBMzU2OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVf dml3S05NWS1PWlBVVFlDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBANJz1EtPj8lmKbaFAhR4s+p1LAS98EafCoM8ZeBvc5qgsy1Q6/5kmFFXnD+Lg InxxAPJh0/gTJC0lOauNuPkrFITdEc2/HvNAyPJ6Ia8TERZJ9t15nZj2r9Rw3/eH UClBI2paTwOAzsYMHpQ6SshjcmniAE8J4o/gCWNoQlVDLlb16qZuSCIIOCMpWJWv ACRzcXTuLl7KyaSHRg5ftXy4wiaONPSnfENLMIdausPwRZcV+xO4Ut6C2FXEI1d8 OcrDIYvW8U+qYprRG9xpIrRXbK86NdTydSCAUQ6xK/+tQaziiUhOW91YjIEtvKEM ZDAClqF9eEgAK3aTThHWlhzq -----END CERTIFICATE-----Generated at Sat Oct 24 11:49:40 2026 by rpki-client