$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: Aqh+FfuvD2gEEWcIGnT8TxQ8uIZ7Hc3hn4sqt17CWPs= Subject key identifier: EB:22:19:26:99:19:46:35:A6:3A:2B:00:4E:7F:C3:DE:09:63:08:5E Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 2D Signing time: Sun 11 Oct 2026 01:55:42 +0000 Manifest this update: Sun 11 Oct 2026 01:55:42 +0000 Manifest next update: Sun 18 Oct 2026 01:55:42 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: xbtdH0QAAjAk2NJ8bsdJ8lXEop2etvA8BhDr8oLyhHA=) 2: DDDCEA1E8CD011F192D42A854011F970.roa (hash: g7heFy4fxock6S6CcqutuLaz4uE4rAZir+13UMjp2Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 01:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Oct 11 01:55:42 2026 GMT Not After : Oct 18 01:55:42 2026 GMT Subject: CN=6acaec9e-a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:a1:61:d4:60:4b:8d:58:c2:89:cb:5c:43: 6b:1f:76:e0:67:00:b7:37:f1:a2:cd:b8:4f:ac:46: e7:86:28:49:5e:69:15:75:bb:0a:9e:c8:45:20:c5: ba:98:75:5f:65:19:de:d1:46:f6:0d:32:c8:c3:de: d1:72:f7:69:ed:5a:85:b9:37:08:95:cf:85:d7:56: 60:34:5c:9a:56:3c:9c:cd:bb:c0:8c:88:c8:dc:0b: 98:f6:27:3d:24:75:a8:8d:c9:86:3b:9e:80:8b:df: 29:65:8a:94:7e:eb:17:c2:2a:b7:c0:a6:8c:81:34: 74:5d:9b:1e:1a:72:76:79:05:ee:49:45:40:09:ba: 6c:cf:a2:90:41:de:d1:b4:43:04:43:8c:c4:53:04: 3a:14:0b:65:bf:c5:4a:7d:7a:c8:1e:92:93:f1:cd: 27:61:82:b4:c3:e1:f6:ee:2a:e1:be:6e:fd:85:33: 1d:1e:b0:67:7c:d0:bc:58:8b:ee:54:d0:3f:aa:e5: ed:c5:ef:22:c6:e9:3e:35:24:45:f5:b1:cf:80:b8: 44:c7:03:22:f7:5f:a6:c6:ad:a7:9f:43:1d:3a:a7: 23:08:05:2c:55:f0:e6:bf:65:62:8b:75:c5:36:a8: 0b:af:2f:d2:9b:93:1d:f4:e9:16:ef:37:be:3c:b0: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:22:19:26:99:19:46:35:A6:3A:2B:00:4E:7F:C3:DE:09:63:08:5E X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fd:b1:54:67:41:38:42:fc:b4:04:46:5b:c5:e3:d3:74:79: 1e:5a:30:06:c3:8f:97:70:31:18:c8:61:8b:3e:3a:dc:55:cc: 16:49:ea:9d:da:05:03:47:8a:76:fb:75:f4:4a:3e:e4:6f:e5: 1b:93:61:0b:32:90:ce:9c:00:33:31:1b:e7:4a:de:a0:16:31: 40:2d:da:32:bc:08:70:86:e2:21:be:38:d0:5f:1b:27:df:d7: 74:71:b8:34:c0:04:bc:14:b7:32:bd:a7:4e:d1:d7:31:72:42: aa:f7:1e:a6:a3:aa:5e:fd:e6:a8:58:1b:2d:35:0f:d2:9f:48: 05:69:87:15:7f:ae:96:61:f4:67:b0:c5:ae:d4:ec:b9:ba:e5: 3b:8e:46:d4:c8:06:80:a1:70:6d:7d:7e:c1:ab:99:64:30:a2: 0a:52:b0:e7:b4:92:30:70:9e:14:7e:4e:62:52:93:d2:65:74: 7d:23:40:ca:21:6d:b5:16:75:b7:5b:30:a4:17:55:31:97:ed: e9:ba:74:88:d9:b3:24:70:22:f2:3a:58:e1:f9:dc:1c:0e:3d: d5:9e:d5:89:f5:4a:bc:5a:86:d2:5e:4b:d1:e0:a7:61:41:ca: 49:96:b4:d1:2b:d3:d2:2b:8f:aa:bc:83:de:78:ba:8c:ad:7b: 45:fa:96:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjEwMTEwMTU1NDJaFw0yNjEwMTgwMTU1NDJaMBgxFjAUBgNV BAMTDTZhY2FlYzllLWE1ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnTaFh1GBLjVjCictcQ2sfduBnALc38aLNuE+sRueGKEleaRV1uwqeyEUgxbqY dV9lGd7RRvYNMsjD3tFy92ntWoW5NwiVz4XXVmA0XJpWPJzNu8CMiMjcC5j2Jz0k daiNyYY7noCL3yllipR+6xfCKrfApoyBNHRdmx4acnZ5Be5JRUAJumzPopBB3tG0 QwRDjMRTBDoUC2W/xUp9esgekpPxzSdhgrTD4fbuKuG+bv2FMx0esGd80LxYi+5U 0D+q5e3F7yLG6T41JEX1sc+AuETHAyL3X6bGraefQx06pyMIBSxV8Oa/ZWKLdcU2 qAuvL9Kbkx306RbvN748sL4zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6yIZJpkZ RjWmOisATn/D3gljCF4wHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAI/bFUZ0E4Qvy0BEZbxePTdHkeWjAGw4+XcDEYyGGLPjrcVcwWSeqd2gUDR4p2 +3X0Sj7kb+Ubk2ELMpDOnAAzMRvnSt6gFjFALdoyvAhwhuIhvjjQXxsn39d0cbg0 wAS8FLcyvadO0dcxckKq9x6mo6pe/eaoWBstNQ/Sn0gFaYcVf66WYfRnsMWu1Oy5 uuU7jkbUyAaAoXBtfX7Bq5lkMKIKUrDntJIwcJ4Ufk5iUpPSZXR9I0DKIW21FnW3 WzCkF1Uxl+3punSI2bMkcCLyOljh+dwcDj3VntWJ9Uq8WobSXkvR4KdhQcpJlrTR K9PSK4+qvIPeeLqMrXtF+pZf -----END CERTIFICATE-----Generated at Mon Oct 12 15:14:16 2026 by rpki-client