$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: dj7eOoe3XLk/J4ji3rtEKudVVcMa/kDJdkVPzw+ZyFc= Subject key identifier: 63:28:0C:AC:56:03:33:D7:80:32:3C:79:D7:A3:70:35:7E:8D:70:AF Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 5C Signing time: Tue 27 Oct 2026 08:32:30 +0000 Manifest this update: Tue 27 Oct 2026 08:32:30 +0000 Manifest next update: Tue 03 Nov 2026 08:32:30 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: c1WnAuECHcbCPZLadkgmZrJ7hf0ShMc92k+56eh3vt0=) 2: 4AD1AFC68B4411F19D71DC304611F970.roa (hash: gf8lSy8wkZH8qCSrtJuZGlJ39naUzvYsMACZ0CI5CIk=) 3: AF501A7C72F411F1ADAD5D6D7FA30FBC.roa (hash: y9+JPXyT0FWli2rFe02X9Rp+3IY1XBO0wI8O2EgZRdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Oct 27 08:32:30 2026 GMT Not After : Nov 3 08:32:30 2026 GMT Subject: CN=6ae0619e-45b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:08:40:f1:37:41:c9:c5:8d:a0:a7:1a:37: 33:f0:b4:36:d0:1a:a9:6a:90:87:8f:80:7f:6a:ee: e1:90:02:04:f4:3a:11:3e:72:18:af:50:ab:6a:a1: 38:32:cc:e4:5b:55:14:43:e2:75:84:69:56:6d:0e: 9c:fa:fc:20:65:75:3a:93:20:7e:9e:b9:7d:7b:36: 5b:3a:88:49:3f:7b:82:8a:b4:c2:d6:42:a0:b3:41: 86:3f:cb:de:6f:ba:15:71:11:91:32:ca:9e:31:d5: 48:57:b6:67:43:bc:b0:9b:a8:a9:e6:61:f5:bc:56: 06:92:37:ef:9f:9a:b5:b8:ae:17:52:14:f7:df:df: 00:7a:99:8b:d8:c3:5f:f6:ee:6a:9f:8b:63:b4:68: 4e:08:7c:fc:5d:cd:fb:ed:79:da:42:49:18:2f:60: 69:e5:24:de:15:bb:14:9d:4d:1f:3c:ce:e8:9a:13: 3d:5b:2d:2a:5c:bc:a0:38:52:3d:3a:de:12:e0:ca: 80:b0:d1:9c:15:9c:0b:f1:80:de:61:88:80:0a:72: 77:01:be:ee:dc:64:9a:59:5f:81:4c:73:ee:4d:71: fa:73:63:8d:ce:e6:d1:67:48:55:1b:39:e6:b3:23: ab:e9:cb:d4:17:a8:13:92:0a:c7:6f:ff:6d:b3:4d: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:0C:AC:56:03:33:D7:80:32:3C:79:D7:A3:70:35:7E:8D:70:AF X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1a:2d:c4:c5:30:fd:80:8f:bc:4b:f8:0c:2d:c8:50:ff:b7: 5a:c4:fa:d1:83:90:02:5c:63:70:16:a5:9f:53:6d:db:a5:17: 35:71:90:82:f8:8a:23:81:7d:2d:a6:81:54:48:6d:26:f3:36: 85:63:61:7f:e9:7a:f0:fe:83:2c:b5:c2:d5:ba:f6:a6:65:84: 78:9e:74:07:4a:01:51:3e:3c:f2:91:49:3b:2f:e5:a7:e8:51: 9e:39:48:e4:62:99:8c:b8:d2:13:01:df:c8:a5:af:ab:6d:6a: 6d:19:da:c2:31:b9:50:eb:7e:04:f0:33:3e:77:ca:b8:a9:10: c3:1b:cf:c4:ff:4b:cd:50:f2:0f:ed:24:23:7d:86:76:15:0c: 5b:f2:8f:74:9a:b1:e0:c4:3b:ee:65:71:32:06:e4:63:e6:a9: c7:d3:85:9f:cb:5c:9b:03:41:48:8f:d8:21:39:3d:fb:55:6a: 62:b2:50:88:2b:1d:e4:34:16:c8:f3:53:a5:01:b6:71:ed:e2: 32:e9:b8:07:5e:e7:81:57:32:a9:ab:4b:b6:ff:1a:62:9f:82: fa:6e:a4:d0:2f:c9:fe:49:3e:57:dd:5d:1b:d5:93:96:50:64: d7:4f:49:70:c0:17:e5:b0:2b:31:25:c8:f2:e5:43:b3:52:1a: f7:20:67:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjEwMjcwODMyMzBaFw0yNjExMDMwODMyMzBaMBgxFjAUBgNV BAMTDTZhZTA2MTllLTQ1YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLXwhA8TdBycWNoKcaNzPwtDbQGqlqkIePgH9q7uGQAgT0OhE+chivUKtqoTgy zORbVRRD4nWEaVZtDpz6/CBldTqTIH6euX17Nls6iEk/e4KKtMLWQqCzQYY/y95v uhVxEZEyyp4x1UhXtmdDvLCbqKnmYfW8VgaSN++fmrW4rhdSFPff3wB6mYvYw1/2 7mqfi2O0aE4IfPxdzfvtedpCSRgvYGnlJN4VuxSdTR88zuiaEz1bLSpcvKA4Uj06 3hLgyoCw0ZwVnAvxgN5hiIAKcncBvu7cZJpZX4FMc+5NcfpzY43O5tFnSFUbOeaz I6vpy9QXqBOSCsdv/22zTQtJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYygMrFYD M9eAMjx516NwNX6NcK8wHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9Gi3ExTD9gI+8S/gMLchQ/7daxPrRg5ACXGNwFqWfU23bpRc1cZCC+IojgX0t poFUSG0m8zaFY2F/6Xrw/oMstcLVuvamZYR4nnQHSgFRPjzykUk7L+Wn6FGeOUjk YpmMuNITAd/Ipa+rbWptGdrCMblQ634E8DM+d8q4qRDDG8/E/0vNUPIP7SQjfYZ2 FQxb8o90mrHgxDvuZXEyBuRj5qnH04Wfy1ybA0FIj9ghOT37VWpislCIKx3kNBbI 81OlAbZx7eIy6bgHXueBVzKpq0u2/xpin4L6bqTQL8n+ST5X3V0b1ZOWUGTXT0lw wBflsCsxJcjy5UOzUhr3IGdf -----END CERTIFICATE-----Generated at Tue Oct 27 16:54:34 2026 by rpki-client