$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json) Hash identifier: 0GM1zllP+gySaSr1rDZUABkmgoc72wMfacx/UkAqqFI= Subject key identifier: 31:0A:06:EF:1A:1F:53:63:37:A5:08:51:21:B2:CC:8C:DC:C4:AC:3A Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft Manifest number: 029B Signing time: Sat 05 Sep 2026 01:34:34 +0000 Manifest this update: Sat 05 Sep 2026 01:34:33 +0000 Manifest next update: Sat 12 Sep 2026 01:34:33 +0000 Files and hashes: 1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: ZAoUnTIFMNjpJU8PDPgob3+9BuS6s3y5JkZJOkRiBMg=) 2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: g6N8lL87Yao5mRB/IHXmKQRBTCgAMuqrQnNSGfaMRK8=) 3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: Cs3bVmbYBB0b2ZAeoSeXTm/ceUq6lP9LdgAJFfPHDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Validity Not Before: Sep 5 01:34:33 2026 GMT Not After : Sep 12 01:34:33 2026 GMT Subject: CN=6a9b71aa-1b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:62:55:f6:f6:c7:7d:ea:29:b4:e1:26:4c: 86:8e:cc:fa:b7:ff:3d:56:d4:22:ac:a6:84:e5:b6: 67:f1:ed:24:b8:30:58:1b:e4:43:80:33:af:3b:cb: 97:17:03:d4:79:74:f5:cb:48:08:ac:d2:65:06:d9: e4:ce:03:61:67:11:fd:72:dd:d2:33:63:1f:1b:9e: 96:36:e0:c8:a6:ab:c7:e8:47:f4:2e:8f:e3:ff:65: 99:af:fb:ee:89:46:96:a5:e8:18:9c:ea:4c:2d:76: df:51:e8:95:05:9a:c0:8b:ef:51:de:f7:42:5c:bb: 4a:13:2f:a0:b6:1a:ea:8e:af:48:d9:b7:78:bf:b1: 62:e7:83:59:7d:30:3e:e4:c8:fb:52:5a:b9:17:14: 54:fc:19:8d:85:00:7f:88:48:a7:5a:f4:b2:e8:56: ba:b9:71:e3:43:16:bf:8a:ad:a4:da:e3:62:e5:01: 13:53:2b:99:c3:3e:8a:45:2f:a0:46:cc:cd:24:7a: 90:d5:6a:48:58:0d:b5:20:8a:95:cf:07:1b:20:e6: b0:67:42:f7:d8:0f:0f:d1:35:d9:bd:e2:a9:04:1e: 03:5e:a2:24:b0:3d:d1:c2:68:06:cf:d0:23:02:41: 72:5c:5f:36:b0:2a:4c:df:66:9c:b8:fe:6c:31:90: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:06:EF:1A:1F:53:63:37:A5:08:51:21:B2:CC:8C:DC:C4:AC:3A X509v3 Authority Key Identifier: keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3a:f3:03:82:5b:f8:05:65:b4:f9:7d:78:31:dd:b2:7b:7b: 51:77:a3:60:c4:70:90:8e:69:03:c1:d7:20:06:ff:d4:bc:bd: 68:c5:08:95:fd:7b:05:a9:09:27:0b:15:0a:c0:7b:69:97:ab: 13:ec:4f:01:05:d5:92:a5:5e:c8:38:87:e1:d6:f7:6b:82:48: e0:55:d2:a0:83:99:3e:67:70:70:3f:5f:de:82:e7:42:bc:09: fb:74:02:42:56:4b:17:32:2f:e6:99:8e:53:5f:66:21:13:02: 6e:6e:90:da:69:93:c2:19:70:e2:61:93:d2:4a:6b:e9:52:e5: 9f:20:a0:ba:2c:d4:48:33:55:27:b1:62:82:37:b3:88:f6:89: c7:3f:a6:2d:11:94:23:c0:57:0f:f7:be:37:87:c9:c3:f2:cc: d3:b0:04:8c:a1:49:e5:e2:47:f6:66:38:f6:fd:1b:63:3f:08: 5c:77:08:fb:80:bf:71:c6:1e:5d:e3:b7:47:93:f2:a8:0a:83: 36:14:21:11:3c:46:6f:49:e8:3b:88:3c:3f:c2:c9:dc:8d:8f: 38:2a:02:ab:61:72:16:0f:37:c3:c2:b3:24:fa:8a:5c:54:1e: b7:ab:2a:5f:18:a7:3d:2d:9d:c0:57:62:0f:32:f6:22:ea:94: 51:b3:f2:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MjcxMTAvBgNVBAUTKDJBNjlENjk5RjEzQzA0MUJGREEzREFBNTdFMjFGRkFC M0M1M0VENUYwHhcNMjYwOTA1MDEzNDMzWhcNMjYwOTEyMDEzNDMzWjAYMRYwFAYD VQQDEw02YTliNzFhYS0xYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPNiVfb2x33qKbThJkyGjsz6t/89VtQirKaE5bZn8e0kuDBYG+RDgDOvO8uX FwPUeXT1y0gIrNJlBtnkzgNhZxH9ct3SM2MfG56WNuDIpqvH6Ef0Lo/j/2WZr/vu iUaWpegYnOpMLXbfUeiVBZrAi+9R3vdCXLtKEy+gthrqjq9I2bd4v7Fi54NZfTA+ 5Mj7Ulq5FxRU/BmNhQB/iEinWvSy6Fa6uXHjQxa/iq2k2uNi5QETUyuZwz6KRS+g RszNJHqQ1WpIWA21IIqVzwcbIOawZ0L32A8P0TXZveKpBB4DXqIksD3RwmgGz9Aj AkFyXF82sCpM32acuP5sMZB3vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEKBu8a H1NjN6UIUSGyzIzcxKw6MB8GA1UdIwQYMBaAFCpp1pnxPAQb/aPapX4h/6s8U+1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkyNy9GRDhCMjJCMEJD MkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJCdjlvOXFsZmlIX3F6eFQ3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttbldtZkU4QkJ2OW85cWxmaUhfcXp4VDdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkyNy9GRDhCMjJCMEJDMkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJC djlvOXFsZmlIX3F6eFQ3VjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFjrzA4Jb+AVltPl9eDHdsnt7UXejYMRwkI5pA8HXIAb/1Ly9aMUIlf17BakJ JwsVCsB7aZerE+xPAQXVkqVeyDiH4db3a4JI4FXSoIOZPmdwcD9f3oLnQrwJ+3QC QlZLFzIv5pmOU19mIRMCbm6Q2mmTwhlw4mGT0kpr6VLlnyCguizUSDNVJ7Figjez iPaJxz+mLRGUI8BXD/e+N4fJw/LM07AEjKFJ5eJH9mY49v0bYz8IXHcI+4C/ccYe XeO3R5PyqAqDNhQhETxGb0noO4g8P8LJ3I2POCoCq2FyFg83w8KzJPqKXFQet6sq XxinPS2dwFdiDzL2IuqUUbPyqQ== -----END CERTIFICATE-----Generated at Sat Sep 5 04:38:38 2026 by rpki-client