$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: JbXbscmtjwkBmCEhQDmBDvB2VRb8wCGZqZGCq9HAs4k= Subject key identifier: FF:32:05:AB:50:01:AB:EF:92:5A:00:A5:72:EF:22:B0:9B:C1:A3:9A Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: 0186 Signing time: Wed 09 Sep 2026 04:56:40 +0000 Manifest this update: Wed 09 Sep 2026 04:56:40 +0000 Manifest next update: Wed 16 Sep 2026 04:56:40 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: NScJl6jzG3mkNrZmFDTtqtlPbbsiXUePC/zGZfiSmaQ=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 04:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Sep 9 04:56:40 2026 GMT Not After : Sep 16 04:56:40 2026 GMT Subject: CN=6aa0e708-9840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:27:e6:f5:b1:55:0e:5c:b3:b3:9b:a1:fd: 54:a9:42:98:66:37:39:a7:d7:ad:5f:1b:c2:8e:f0: ee:a9:9e:dc:1d:0a:3f:fe:6c:3a:9d:d2:83:79:1c: 99:7d:50:47:83:76:0a:56:5c:c4:9f:2b:05:25:6a: 21:52:4c:f9:38:d2:b4:80:aa:0e:1e:02:b0:9a:d1: c2:c9:d2:6d:e1:05:cc:e0:09:2d:68:f0:b7:08:33: 07:a2:10:45:35:bd:7f:2e:67:3c:e6:38:a6:e9:f2: dc:bf:31:15:f9:9a:fa:a3:6b:0e:c0:47:e8:c9:8f: 1a:43:94:64:c0:cc:9d:09:26:0b:d0:e4:86:f8:70: da:a8:0a:c1:ce:d8:5e:85:1f:11:77:b5:61:ed:e6: 11:3e:b8:ce:54:11:20:ae:c4:be:db:ae:0f:45:a5: b7:41:72:9a:4c:46:43:47:48:da:5b:73:74:66:5c: ff:eb:90:06:e6:14:13:ea:08:88:9a:95:1f:1e:1c: 1f:70:9f:5d:03:c9:9b:6b:fb:c5:74:06:0e:0a:cf: 42:fb:18:27:b9:eb:86:81:8d:11:d7:4a:58:ec:bb: 9c:5d:f5:1f:e4:ad:9d:42:e4:b8:74:f1:c7:68:8a: 33:55:04:d1:47:8e:c4:cf:ad:5c:4a:c0:87:82:d6: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:32:05:AB:50:01:AB:EF:92:5A:00:A5:72:EF:22:B0:9B:C1:A3:9A X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e8:ec:a4:11:cb:7c:08:3a:4e:bb:2b:73:ec:11:cd:5c:3a: 41:4c:49:5c:15:6a:f6:34:eb:7d:c8:fa:c7:69:bc:e2:38:0a: 36:6b:98:fc:c8:2a:0a:c2:b6:ee:7f:50:89:95:61:08:b0:e8: d1:31:98:a4:ac:e1:7b:b2:eb:56:d1:d0:09:83:a3:8d:91:ee: d6:9e:38:18:53:79:b5:43:29:25:83:ff:72:ec:3a:53:69:13: 7e:b2:9d:d1:02:4e:0f:cc:78:0e:e1:f6:02:0c:58:76:b7:82: 4f:7d:2a:9a:23:a0:90:6a:97:e4:3d:ef:ff:2c:71:45:61:1a: 1e:74:06:4a:cc:53:8e:b8:0a:c6:89:b3:82:d2:18:4c:89:cc: f7:92:90:54:7f:82:c5:b5:37:3d:88:89:26:b0:30:ac:7d:95: 83:4a:76:e7:d6:6a:99:a5:fa:e1:8f:be:53:a9:c2:3e:52:44: 12:ec:44:fa:70:a0:a0:cb:b1:7f:e6:93:96:6f:b4:df:9b:fe: f1:c6:46:4d:dd:05:07:bd:1d:96:c0:3a:bd:88:b7:a0:33:29: 45:42:0d:ee:d1:1a:74:7e:6f:3e:4f:b4:30:34:cb:5c:0d:fc: d5:7a:6a:bd:06:ad:f0:11:ec:a7:cc:99:be:0d:8a:d5:e4:54: 0e:96:40:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjYwOTA5MDQ1NjQwWhcNMjYwOTE2MDQ1NjQwWjAYMRYwFAYD VQQDEw02YWEwZTcwOC05ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXgn5vWxVQ5cs7Obof1UqUKYZjc5p9etXxvCjvDuqZ7cHQo//mw6ndKDeRyZ fVBHg3YKVlzEnysFJWohUkz5ONK0gKoOHgKwmtHCydJt4QXM4AktaPC3CDMHohBF Nb1/Lmc85jim6fLcvzEV+Zr6o2sOwEfoyY8aQ5RkwMydCSYL0OSG+HDaqArBzthe hR8Rd7Vh7eYRPrjOVBEgrsS+264PRaW3QXKaTEZDR0jaW3N0Zlz/65AG5hQT6giI mpUfHhwfcJ9dA8mba/vFdAYOCs9C+xgnueuGgY0R10pY7LucXfUf5K2dQuS4dPHH aIozVQTRR47Ez61cSsCHgtZmJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8yBatQ AavvkloApXLvIrCbwaOaMB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+jspBHLfAg6Trsrc+wRzVw6QUxJXBVq9jTrfcj6x2m84jgKNmuY/MgqCsK2 7n9QiZVhCLDo0TGYpKzhe7LrVtHQCYOjjZHu1p44GFN5tUMpJYP/cuw6U2kTfrKd 0QJOD8x4DuH2AgxYdreCT30qmiOgkGqX5D3v/yxxRWEaHnQGSsxTjrgKxomzgtIY TInM95KQVH+CxbU3PYiJJrAwrH2Vg0p259ZqmaX64Y++U6nCPlJEEuxE+nCgoMux f+aTlm+035v+8cZGTd0FB70dlsA6vYi3oDMpRUIN7tEadH5vPk+0MDTLXA381Xpq vQat8BHsp8yZvg2K1eRUDpZAKg== -----END CERTIFICATE-----Generated at Fri Sep 11 04:18:04 2026 by rpki-client