$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft File: KSH492oDWMf3wbB67SGiE-gEFnI.mft (raw, json) Hash identifier: JGFPcVL/9NeXR32FvL8nr7Fhzh0mYxhE/uCaDB36Azw= Subject key identifier: FC:28:F6:D6:6B:63:9F:37:2B:B7:07:C8:CB:31:C3:9B:4F:AD:9E:FA Authority key identifier: 29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 Certificate issuer: /CN=A91567D5/serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft Manifest number: 2E Signing time: Tue 13 Oct 2026 01:58:55 +0000 Manifest this update: Tue 13 Oct 2026 01:58:54 +0000 Manifest next update: Tue 20 Oct 2026 01:58:54 +0000 Files and hashes: 1: KSH492oDWMf3wbB67SGiE-gEFnI.crl (hash: +C1dvA4/2XwsJNcxNVEJnfUeJbRag/ljK9DhaRU10EY=) 2: DDDCEA1E8CD011F192D42A854011F970.roa (hash: g7heFy4fxock6S6CcqutuLaz4uE4rAZir+13UMjp2Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 01:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=2921F8F76A0358C7F7C1B07AED21A213E8041672 Validity Not Before: Oct 13 01:58:54 2026 GMT Not After : Oct 20 01:58:54 2026 GMT Subject: CN=6acd905f-537d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:f7:ef:a7:00:e7:3d:2e:c8:e2:94:05:1c: f2:ef:72:66:53:84:a2:b4:83:90:36:95:fe:03:94: b2:c3:3e:ce:3e:31:29:3a:66:9d:bd:e4:3f:5b:45: 95:60:0b:df:54:62:47:63:3c:b7:f7:46:c7:35:a6: 98:9d:3a:77:4a:09:dd:01:d7:67:62:cd:c6:c3:f0: 6c:7b:f2:6c:85:18:9c:2e:eb:52:4c:6e:dd:fd:d4: 3d:0d:26:af:69:0d:33:dc:64:e5:83:22:79:66:3f: 3b:a8:77:7b:2e:af:c4:6a:df:48:6d:ca:81:eb:ce: ac:4a:19:df:9d:60:d8:58:bd:4a:0a:30:ca:6a:63: 1e:bc:2d:6d:c5:c6:02:90:5a:51:24:a1:c6:46:a9: 81:ba:9e:77:43:f7:25:8e:f8:84:60:b2:70:4b:59: 36:d7:a0:4d:18:fb:89:d8:a2:92:00:61:0a:4e:06: 37:44:0b:de:4a:c5:a6:dd:e2:3a:f6:70:29:c7:7b: cb:7f:96:5e:2c:bd:fc:be:48:1d:6c:20:d7:0c:61: 47:16:90:59:db:f4:2b:15:82:ac:f6:48:20:77:a9: a7:a0:da:de:77:ef:95:f5:0b:28:12:ca:c2:f5:19: df:30:3c:26:a3:e3:1a:01:d5:7a:b9:c1:76:6f:cf: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:F6:D6:6B:63:9F:37:2B:B7:07:C8:CB:31:C3:9B:4F:AD:9E:FA X509v3 Authority Key Identifier: keyid:29:21:F8:F7:6A:03:58:C7:F7:C1:B0:7A:ED:21:A2:13:E8:04:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KSH492oDWMf3wbB67SGiE-gEFnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/3A0C2C36862911F19E7C72F883A30FBC/KSH492oDWMf3wbB67SGiE-gEFnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:f0:27:7c:08:ca:25:75:06:de:b0:bb:62:4e:7e:76:a8: 50:9f:21:d5:aa:e8:d9:5e:7b:a3:8e:72:96:d5:34:5c:17:d0: 8d:64:94:fd:20:0a:a1:d2:7b:0c:98:f9:43:58:24:02:c6:e6: d2:cd:14:d9:14:6d:41:b0:ac:1b:9c:d2:a9:74:62:b4:38:e2: 04:90:0f:c3:f1:cc:8f:29:22:3f:d8:d8:69:32:24:06:0f:43: 40:89:1b:ff:63:df:b6:c1:08:e9:0e:7e:44:10:f2:12:8a:ed: a9:78:37:eb:61:9c:35:6e:1d:d6:b0:85:13:00:dd:05:d0:80: b5:17:43:b5:81:30:9b:67:4b:2e:75:1a:b3:8f:0f:45:f1:c8: 91:56:a0:80:3a:86:68:36:f3:33:7a:5c:7c:74:15:7b:31:32: a1:9e:aa:99:83:4a:a6:3d:30:16:10:2d:cc:be:e3:17:23:9e: c2:61:80:10:c1:4b:fa:13:7f:03:37:da:d7:55:c5:95:b1:85: 5e:83:b1:9c:c3:06:af:06:4c:bb:55:28:95:50:2e:5c:2d:f8: 38:11:ce:ff:71:f7:a6:de:65:14:73:a6:c7:de:38:e1:8f:e4: 8e:8d:79:cc:ff:93:4a:4f:d0:1d:23:31:84:0b:15:f8:5b:27: 03:17:f3:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMjkyMUY4Rjc2QTAzNThDN0Y3QzFCMDdBRUQyMUEyMTNF ODA0MTY3MjAeFw0yNjEwMTMwMTU4NTRaFw0yNjEwMjAwMTU4NTRaMBgxFjAUBgNV BAMTDTZhY2Q5MDVmLTUzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH9ffvpwDnPS7I4pQFHPLvcmZThKK0g5A2lf4DlLLDPs4+MSk6Zp295D9bRZVg C99UYkdjPLf3Rsc1ppidOndKCd0B12dizcbD8Gx78myFGJwu61JMbt391D0NJq9p DTPcZOWDInlmPzuod3sur8Rq30htyoHrzqxKGd+dYNhYvUoKMMpqYx68LW3FxgKQ WlEkocZGqYG6nndD9yWO+IRgsnBLWTbXoE0Y+4nYopIAYQpOBjdEC95Kxabd4jr2 cCnHe8t/ll4svfy+SB1sINcMYUcWkFnb9CsVgqz2SCB3qaeg2t5375X1CygSysL1 Gd8wPCaj4xoB1Xq5wXZvzwABAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/Cj21mtj nzcrtwfIyzHDm0+tnvowHwYDVR0jBBgwFoAUKSH492oDWMf3wbB67SGiE+gEFnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1LzNBMEMyQzM2ODYy OTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01mM3diQjY3U0dpRS1nRUZu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1NINDkyb0RXTWYzd2JCNjdTR2lFLWdFRm5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1LzNBMEMyQzM2ODYyOTExRjE5RTdDNzJGODgzQTMwRkJDL0tTSDQ5Mm9EV01m M3diQjY3U0dpRS1nRUZuSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNYfAnfAjKJXUG3rC7Yk5+dqhQnyHVqujZXnujjnKW1TRcF9CNZJT9IAqh0nsM mPlDWCQCxubSzRTZFG1BsKwbnNKpdGK0OOIEkA/D8cyPKSI/2NhpMiQGD0NAiRv/ Y9+2wQjpDn5EEPISiu2peDfrYZw1bh3WsIUTAN0F0IC1F0O1gTCbZ0sudRqzjw9F 8ciRVqCAOoZoNvMzelx8dBV7MTKhnqqZg0qmPTAWEC3MvuMXI57CYYAQwUv6E38D N9rXVcWVsYVeg7GcwwavBky7VSiVUC5cLfg4Ec7/cfem3mUUc6bH3jjhj+SOjXnM /5NKT9AdIzGECxX4WycDF/Oo -----END CERTIFICATE-----Generated at Tue Oct 13 06:17:21 2026 by rpki-client