$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: 4ONxU9S1XYEPJigoRMsSCZeC09Da0exYvw1LuVSPFmU= Subject key identifier: E2:C3:91:06:08:9C:DE:32:AD:D6:9B:28:1E:B6:88:E6:B1:73:23:66 Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: 01A0 Signing time: Tue 27 Oct 2026 04:53:20 +0000 Manifest this update: Tue 27 Oct 2026 04:53:19 +0000 Manifest next update: Tue 03 Nov 2026 04:53:19 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: UnZsFl6bBAZkwqqmZxaS0u/Mae1p9TgkwC6wv2+X228=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: 3BbSb2IhHmY4TC9+zwVnLHP/QzgOyZfeKreED1mPL28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Oct 27 04:53:19 2026 GMT Not After : Nov 3 04:53:19 2026 GMT Subject: CN=6ae02e40-0193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:b2:9d:a1:17:cf:78:b5:c4:e4:f1:ce:b5: cf:2f:73:42:fa:d1:8e:18:c3:72:d2:68:db:21:19: 83:05:38:a2:89:f4:82:df:fe:79:0e:79:26:5a:a9: bd:6f:69:98:e1:5c:d7:12:8f:b8:49:7c:c3:a8:bc: 59:29:e6:f5:14:f0:72:d3:96:e9:93:4b:01:60:42: d2:3a:c1:ac:bd:ff:e8:72:80:2c:9d:f8:59:10:c2: 99:bf:da:da:40:79:10:0b:f2:05:9f:a8:f9:ff:c6: 81:2e:60:c7:0b:6b:da:60:87:f4:6b:c4:e9:c1:b9: 69:bb:6e:0a:d1:71:12:a8:bd:2c:8b:0b:a9:90:22: 1a:df:94:30:a2:b4:f6:6a:0e:fd:29:9b:b7:e6:71: 5b:ce:33:74:13:0f:50:21:8b:3c:cc:de:91:9f:fe: 0d:dc:4b:30:31:85:25:15:36:8d:a4:cf:44:6a:77: f8:11:8b:6d:a8:da:87:33:59:61:7e:26:d1:bb:35: cb:2f:b5:fb:c3:30:4e:f6:4c:92:ae:cf:7d:95:f8: 0d:cc:f8:69:96:37:92:51:76:be:8c:94:6a:54:e9: 4a:27:4d:08:8a:e6:17:43:ba:c1:f8:d0:d0:0a:cc: a1:97:29:9c:e5:b7:ad:96:c7:33:d9:43:09:b1:49: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:91:06:08:9C:DE:32:AD:D6:9B:28:1E:B6:88:E6:B1:73:23:66 X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b3:90:15:e7:26:69:45:63:db:1b:f2:27:fe:fd:70:8d:2f: 2d:71:4d:b8:d8:fc:b1:64:1a:0d:be:3c:29:02:32:85:95:6e: 0b:8a:ff:f3:cc:41:dd:4f:17:f3:0d:d0:1b:a0:c2:84:73:a1: 44:b4:47:92:82:63:af:93:07:fa:8c:85:d9:75:bf:86:e6:e0: 14:16:de:55:38:d0:f5:87:1b:48:25:fb:02:8f:af:8c:12:c6: 40:cd:d3:46:a2:ca:69:8f:78:b5:3e:ef:b3:2e:33:bb:42:14: 55:34:03:85:81:72:d9:6e:84:ed:02:01:6d:d3:4d:86:e8:c7: c8:2d:19:92:e2:2b:c3:45:1e:fc:e9:a7:6a:03:03:bd:13:56: 3e:4c:88:62:3f:a5:f7:e2:93:c9:f2:54:f8:f0:ea:60:36:24: ae:ae:10:71:18:12:b4:08:b0:ef:19:d6:67:10:65:4f:34:20: 89:bf:e9:01:9c:d6:ea:cf:d9:c8:18:a1:c3:00:e2:fd:58:87: 1f:6d:a7:b8:af:93:1b:ac:9d:be:eb:95:aa:28:59:68:f9:e5: 37:f0:d9:02:d9:74:0e:05:4f:32:d7:9c:28:48:96:2f:d5:92: e2:78:aa:7b:cc:fb:7b:8d:55:ed:64:13:c1:bc:d1:57:46:e9: 1e:0f:aa:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjYxMDI3MDQ1MzE5WhcNMjYxMTAzMDQ1MzE5WjAYMRYwFAYD VQQDEw02YWUwMmU0MC0wMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9aynaEXz3i1xOTxzrXPL3NC+tGOGMNy0mjbIRmDBTiiifSC3/55DnkmWqm9 b2mY4VzXEo+4SXzDqLxZKeb1FPBy05bpk0sBYELSOsGsvf/ocoAsnfhZEMKZv9ra QHkQC/IFn6j5/8aBLmDHC2vaYIf0a8Tpwblpu24K0XESqL0siwupkCIa35QworT2 ag79KZu35nFbzjN0Ew9QIYs8zN6Rn/4N3EswMYUlFTaNpM9Eanf4EYttqNqHM1lh fibRuzXLL7X7wzBO9kySrs99lfgNzPhpljeSUXa+jJRqVOlKJ00IiuYXQ7rB+NDQ Csyhlymc5betlscz2UMJsUk4LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLDkQYI nN4yrdabKB62iOaxcyNmMB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGrOQFecmaUVj2xvyJ/79cI0vLXFNuNj8sWQaDb48KQIyhZVuC4r/88xB3U8X 8w3QG6DChHOhRLRHkoJjr5MH+oyF2XW/hubgFBbeVTjQ9YcbSCX7Ao+vjBLGQM3T RqLKaY94tT7vsy4zu0IUVTQDhYFy2W6E7QIBbdNNhujHyC0ZkuIrw0Ue/OmnagMD vRNWPkyIYj+l9+KTyfJU+PDqYDYkrq4QcRgStAiw7xnWZxBlTzQgib/pAZzW6s/Z yBihwwDi/ViHH22nuK+TG6ydvuuVqihZaPnlN/DZAtl0DgVPMtecKEiWL9WS4niq e8z7e41V7WQTwbzRV0bpHg+qTQ== -----END CERTIFICATE-----Generated at Wed Oct 28 15:06:12 2026 by rpki-client