$ rpki-client -vvvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft File: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft (raw, json) Hash identifier: NsRTl4/CNRWae0LBT0C6C9mDyiTGrS4AS8Ib4yH6Sfc= Subject key identifier: 62:81:41:44:81:08:49:4B:96:12:55:E9:32:74:71:68:97:6D:69:5B Authority key identifier: 29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 Certificate issuer: /CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Certificate serial: 11CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft Manifest number: 25D8 Signing time: Thu 08 Oct 2026 16:57:36 +0000 Manifest this update: Thu 08 Oct 2026 16:57:35 +0000 Manifest next update: Thu 15 Oct 2026 16:57:35 +0000 Files and hashes: 1: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl (hash: M/ed/OAoNlazx/0OthhpANMCx/oNesf25yAtDClMpms=) 2: DE0A75A605EB11EA94CD7287C4F9AE02.roa (hash: FaFqBcKylUM1Ik2J0LQMDMkip4pQ4QSSImVSUK0dY18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4555 (0x11cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Validity Not Before: Oct 8 16:57:35 2026 GMT Not After : Oct 15 16:57:35 2026 GMT Subject: CN=6ac7cb80-ca0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:02:0e:d5:55:2d:c9:08:52:3e:cf:0a:f1: f3:a5:03:84:30:47:b9:b4:3b:6d:8b:fe:db:3c:6d: 5f:7f:b9:79:39:20:a4:ad:7d:c2:72:1d:24:81:42: 51:5c:30:fb:56:27:a0:fb:80:df:e7:a5:90:2d:42: 62:1d:f2:11:bc:ac:35:02:96:05:0c:4c:a8:7c:64: 57:7c:47:14:55:14:06:75:a6:10:45:47:c0:03:2d: 17:cc:fe:29:48:6b:7f:70:20:f9:4b:fb:2c:b4:3c: 39:cf:fc:5a:7d:0c:b2:70:ea:6f:1f:f4:4d:f8:7a: d6:8a:1a:26:e4:f1:0f:50:8c:a2:0f:95:ee:d5:98: 98:9f:f4:e7:f6:e9:7e:d4:1d:32:f4:ed:2a:0c:4f: a1:0d:ad:dc:13:44:06:43:c1:a5:92:d1:57:5f:cc: 40:fb:16:75:27:e6:b4:d8:cd:8c:88:c1:02:1c:21: 8a:06:92:fb:37:1e:9f:a6:41:c2:1a:b5:a1:98:d8: b0:b4:db:69:b9:f0:99:f7:b5:68:61:9c:40:a9:79: 23:84:f7:48:00:69:4b:57:61:c9:03:4e:36:3c:74: b5:ed:2c:ae:1f:fe:7e:10:29:e0:64:34:69:0b:ea: 81:3c:21:86:47:39:b2:0f:c3:2d:07:3e:10:80:62: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:81:41:44:81:08:49:4B:96:12:55:E9:32:74:71:68:97:6D:69:5B X509v3 Authority Key Identifier: keyid:29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4c:c2:24:52:8d:dd:82:9f:8c:d1:67:53:d2:df:f0:77:c5: 05:b1:55:58:19:9a:69:7a:4b:62:bd:5d:f7:04:f1:b6:3e:9c: f5:49:3a:6b:2c:6e:46:a1:6e:fb:22:76:98:e4:60:6d:c7:54: e5:af:61:05:8b:7a:ea:66:a2:55:ac:2b:0b:cd:9e:31:2b:9e: 04:41:bf:35:63:c2:cd:62:c0:83:77:91:6a:85:20:9e:b8:75: ad:c9:c7:ae:4f:5b:98:ae:0c:bd:fc:84:f9:06:90:0e:ca:ca: 74:aa:64:e9:c1:9d:28:6d:51:74:f4:4f:28:5e:33:09:11:69: b3:34:b7:03:3f:b6:42:c1:e0:41:3a:8b:39:86:f9:14:28:81: 19:fb:bb:c0:21:17:b1:12:7c:dd:4e:08:d1:d5:03:e8:e4:62: 24:be:28:e2:fb:6f:09:ee:cd:78:15:be:09:f5:cf:45:14:a9: d0:16:c5:f5:6d:26:9c:cc:35:bf:dd:66:20:2e:d3:4b:10:51: f3:78:6f:1b:5f:89:74:dd:89:5f:8b:4c:f7:bd:52:13:77:c2: e9:79:1c:09:2f:73:25:e2:d9:41:7b:9c:e9:c9:2b:74:a7:bc: 82:b4:9c:1d:38:c6:e1:22:94:cb:ed:bc:4f:36:2b:f0:66:8b: f4:3e:5c:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDI5RDE2Qzk4REIzRDVCRjY0QjZCOTIwNEMwOTYwMDg2 MENEMjk0NTIwHhcNMjYxMDA4MTY1NzM1WhcNMjYxMDE1MTY1NzM1WjAYMRYwFAYD VQQDEw02YWM3Y2I4MC1jYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2gCDtVVLckIUj7PCvHzpQOEMEe5tDtti/7bPG1ff7l5OSCkrX3Cch0kgUJR XDD7Vieg+4Df56WQLUJiHfIRvKw1ApYFDEyofGRXfEcUVRQGdaYQRUfAAy0XzP4p SGt/cCD5S/sstDw5z/xafQyycOpvH/RN+HrWihom5PEPUIyiD5Xu1ZiYn/Tn9ul+ 1B0y9O0qDE+hDa3cE0QGQ8GlktFXX8xA+xZ1J+a02M2MiMECHCGKBpL7Nx6fpkHC GrWhmNiwtNtpufCZ97VoYZxAqXkjhPdIAGlLV2HJA042PHS17SyuH/5+ECngZDRp C+qBPCGGRzmyD8MtBz4QgGLyvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKBQUSB CElLlhJV6TJ0cWiXbWlbMB8GA1UdIwQYMBaAFCnRbJjbPVv2S2uSBMCWAIYM0pRS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdfWkxhNUlFd0pZQWhnelNs RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkRnNtTnM5V19aTGE1SUV3SllBaGd6U2xGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdf WkxhNUlFd0pZQWhnelNsRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0zCJFKN3YKfjNFnU9Lf8HfFBbFVWBmaaXpLYr1d9wTxtj6c9Uk6ayxuRqFu +yJ2mORgbcdU5a9hBYt66maiVawrC82eMSueBEG/NWPCzWLAg3eRaoUgnrh1rcnH rk9bmK4MvfyE+QaQDsrKdKpk6cGdKG1RdPRPKF4zCRFpszS3Az+2QsHgQTqLOYb5 FCiBGfu7wCEXsRJ83U4I0dUD6ORiJL4o4vtvCe7NeBW+CfXPRRSp0BbF9W0mnMw1 v91mIC7TSxBR83hvG1+JdN2JX4tM971SE3fC6XkcCS9zJeLZQXuc6ckrdKe8grSc HTjG4SKUy+28TzYr8GaL9D5cNA== -----END CERTIFICATE-----Generated at Thu Oct 8 21:25:16 2026 by rpki-client