$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: 1YAmywF1Yi0S/+z4N42/MMCDT8hJLW6yJhpAVnIKlww= Subject key identifier: 86:3D:05:A1:A9:24:92:7A:4B:64:86:A6:58:7E:72:18:34:17:2F:AA Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 41 Signing time: Thu 03 Sep 2026 08:48:10 +0000 Manifest this update: Thu 03 Sep 2026 08:48:10 +0000 Manifest next update: Thu 10 Sep 2026 08:48:10 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: NgRtkPke8yZEGzR0VHfUXMifJ1wbRQonnUGbwTGJ/Qg=) 2: 4AD1AFC68B4411F19D71DC304611F970.roa (hash: gf8lSy8wkZH8qCSrtJuZGlJ39naUzvYsMACZ0CI5CIk=) 3: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: y9+JPXyT0FWli2rFe02X9Rp+3IY1XBO0wI8O2EgZRdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Sep 3 08:48:10 2026 GMT Not After : Sep 10 08:48:10 2026 GMT Subject: CN=6a99344a-c7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:da:d5:d3:2e:8a:52:84:f5:4d:25:29:ff: 6e:37:73:ac:51:ba:ea:90:51:79:81:52:0a:96:36: ad:38:59:55:84:36:98:28:d7:20:44:48:7a:d7:fc: f9:3b:8e:a0:8d:d7:fd:ef:6b:9e:fb:0e:53:3a:3a: 57:6a:58:26:9b:54:03:87:70:42:1a:64:03:77:d7: ba:78:0c:4b:ac:94:90:b4:e8:1a:53:f1:df:62:10: b1:c8:9b:13:dd:88:79:70:2e:75:84:e9:3e:f3:ce: ba:ec:7b:94:f5:e5:d4:c3:52:fa:39:4b:1a:dc:07: cb:c3:d8:2f:92:18:55:50:e0:99:4f:89:d0:58:12: 6f:c6:a5:9b:ac:38:bb:96:be:48:f8:22:73:e7:31: 04:b1:7d:1f:59:d3:de:15:20:67:1f:d5:fb:60:dc: e9:e0:53:27:22:bc:24:c2:10:a9:c0:d6:6f:73:04: 95:a7:e5:d3:1c:e3:7b:e2:be:05:c9:f1:8b:b2:14: e6:9a:b1:a7:5f:c5:34:fd:f1:7d:14:e5:c9:c1:ea: 67:78:1b:ac:06:e3:c6:c7:2c:b9:58:64:dc:a4:1e: 03:48:00:9d:ae:b7:d9:40:ff:51:c2:7b:f7:1a:9f: ee:3e:95:16:58:02:82:18:ee:fe:f9:a7:e2:5a:f5: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3D:05:A1:A9:24:92:7A:4B:64:86:A6:58:7E:72:18:34:17:2F:AA X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:08:6d:ea:ba:78:c3:be:72:51:46:4c:c9:cf:21:e4:79:58: ab:7b:a8:49:f4:9b:21:f1:4b:7a:36:b1:31:17:34:e3:74:cc: 35:ea:a1:e1:f4:ed:a0:dc:ed:7b:81:2e:bf:f6:99:86:46:bf: c1:1a:56:1b:80:0a:3c:2b:74:fa:dc:4d:0a:3f:fc:6a:57:36: e4:89:64:78:55:45:72:ea:c8:67:43:e3:94:b8:84:0a:c2:f2: f8:c5:74:e9:60:bb:6f:d3:0b:6a:87:16:4f:3f:56:e6:b8:8c: 37:40:7a:bb:62:4f:92:39:d5:d7:f3:26:9c:f0:b8:ce:aa:20: 3d:5b:1a:4e:1d:53:88:37:71:12:dd:92:cf:41:94:a6:2b:ac: 12:6d:3d:21:ab:1d:0d:6f:99:d8:70:2b:1d:00:e7:b4:8c:ab: a5:39:0e:5d:ec:f1:c0:ff:9d:37:13:de:22:81:39:ff:cc:89: 8e:ec:da:13:5e:6c:10:d5:d1:6c:c8:5e:6d:b0:22:13:e7:8a: 64:5c:28:74:11:81:80:f1:81:36:78:b6:5a:ed:2e:2d:bf:99: b5:28:d6:18:e9:d4:a6:d6:a7:c2:22:3d:02:28:df:13:38:2d: db:40:4a:c5:43:ec:f7:d1:76:7a:1d:92:95:b8:29:8c:bf:44: 72:73:e5:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA5MDMwODQ4MTBaFw0yNjA5MTAwODQ4MTBaMBgxFjAUBgNV BAMTDTZhOTkzNDRhLWM3ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkQdrV0y6KUoT1TSUp/243c6xRuuqQUXmBUgqWNq04WVWENpgo1yBESHrX/Pk7 jqCN1/3va577DlM6OldqWCabVAOHcEIaZAN317p4DEuslJC06BpT8d9iELHImxPd iHlwLnWE6T7zzrrse5T15dTDUvo5SxrcB8vD2C+SGFVQ4JlPidBYEm/GpZusOLuW vkj4InPnMQSxfR9Z094VIGcf1ftg3OngUycivCTCEKnA1m9zBJWn5dMc43vivgXJ 8YuyFOaasadfxTT98X0U5cnB6md4G6wG48bHLLlYZNykHgNIAJ2ut9lA/1HCe/ca n+4+lRZYAoIY7v75p+Ja9ZttAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhj0Foakk knpLZIamWH5yGDQXL6owHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZCG3qunjDvnJRRkzJzyHkeVire6hJ9Jsh8Ut6NrExFzTjdMw16qHh9O2g3O17 gS6/9pmGRr/BGlYbgAo8K3T63E0KP/xqVzbkiWR4VUVy6shnQ+OUuIQKwvL4xXTp YLtv0wtqhxZPP1bmuIw3QHq7Yk+SOdXX8yac8LjOqiA9WxpOHVOIN3ES3ZLPQZSm K6wSbT0hqx0Nb5nYcCsdAOe0jKulOQ5d7PHA/503E94igTn/zImO7NoTXmwQ1dFs yF5tsCIT54pkXCh0EYGA8YE2eLZa7S4tv5m1KNYY6dSm1qfCIj0CKN8TOC3bQErF Q+z30XZ6HZKVuCmMv0Ryc+UL -----END CERTIFICATE-----Generated at Sat Sep 5 02:48:13 2026 by rpki-client