$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json) Hash identifier: LCtjBBuMqkZMfNGv/4+AITuY/UtzkureEyNPSjIq1j4= Subject key identifier: C4:3A:86:9D:7E:FA:57:47:CC:04:54:34:3C:72:65:FF:A5:8D:DE:BD Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0DAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft Manifest number: 0D9A Signing time: Tue 06 Oct 2026 18:01:18 +0000 Manifest this update: Tue 06 Oct 2026 18:01:17 +0000 Manifest next update: Tue 13 Oct 2026 18:01:17 +0000 Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: 1qJO7luoI0oXSxfM+KtndUAI1FhUxf1ZiYE9naTsS2E=) 2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: vAJQDBAbqSvKlyjILfpEs40GEZSujGVNMsS2YT9xHAs=) 3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: L784r7F3HVepKqZvDuigVxNtfDfHrQk48PR55aW7pY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3502 (0xdae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Oct 6 18:01:17 2026 GMT Not After : Oct 13 18:01:17 2026 GMT Subject: CN=6ac5376d-072d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:08:6e:d7:4f:a1:b1:2b:35:84:9f:5d:53: 96:98:43:6e:bd:4d:e0:04:fc:bd:62:6b:3d:dc:70: 93:8d:0b:6c:6b:c8:29:ed:87:a8:de:7e:1d:7f:f5: 0d:67:4c:03:f0:b7:8d:89:6f:90:98:a1:ed:7b:d2: 66:88:f3:ef:d9:d5:1e:a8:b9:e7:a2:44:f6:5b:21: f8:bb:30:64:23:73:c1:58:cb:7b:ad:62:05:b9:f2: d2:df:9a:04:33:b8:7b:20:4c:8c:7f:4a:21:db:48: 7f:31:67:b8:7b:14:83:a4:f0:3d:48:3d:6a:ee:ca: 26:87:93:85:f6:17:78:3a:36:97:7b:ce:00:fd:9a: eb:c2:61:24:1f:c9:d3:8f:10:f2:f0:ab:94:ca:fe: ac:83:4e:34:fb:b0:1c:5e:1d:d8:65:3e:68:fb:0b: 70:77:b9:26:a1:d3:98:12:6a:5c:19:c8:6e:c8:ad: e3:fb:a1:02:e6:26:ab:c1:fa:8d:91:b6:c2:5f:32: 3d:e1:f5:80:67:93:40:1e:04:16:69:c9:91:af:57: 53:49:57:92:55:c6:70:a4:5a:64:da:08:52:81:4b: 8a:2f:17:25:fc:19:ca:2a:6d:c8:8c:6e:35:4a:b2: 3f:1f:7d:f4:cc:05:ba:a3:0f:96:e6:1b:fd:53:38: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3A:86:9D:7E:FA:57:47:CC:04:54:34:3C:72:65:FF:A5:8D:DE:BD X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:2e:91:c2:23:0b:71:d9:ab:14:72:b6:69:ce:97:20:f0: 87:86:d8:e8:2b:00:68:f6:d3:2b:f6:0d:2f:5a:2b:8f:88:ca: 2d:09:7c:3e:9f:6a:63:b2:48:86:fd:04:22:3f:4d:a0:34:49: ef:0a:0b:80:87:14:49:18:48:f2:42:97:12:8c:72:1c:37:14: e1:b0:e8:a8:8c:ca:fa:ea:49:a3:04:01:31:5d:34:7b:65:00: 9e:90:a3:ff:c2:66:4f:09:13:ee:62:e6:56:a7:6c:fa:d3:b5: d2:63:07:6c:16:e7:6a:60:ec:eb:8b:2a:ab:d3:4c:fa:5a:1a: 42:13:b9:7b:29:4a:95:7f:63:ba:ab:26:6e:02:01:fe:fe:5b: 53:0c:16:ae:43:7b:67:00:76:78:26:07:dd:f6:51:5b:da:f4: 31:c4:9c:59:10:52:30:fe:b8:39:ee:d5:c0:08:ce:eb:50:08: e6:5f:8e:65:65:dc:e1:8a:67:17:53:df:f2:af:e5:e8:22:0e: 25:b2:39:41:d4:d6:8e:cc:76:51:1f:d4:7b:d1:39:d7:97:49: 6e:da:f0:b1:13:7e:0b:8d:08:a2:93:43:81:eb:f8:7e:39:90: 3c:29:70:67:8f:4a:2c:34:29:7a:ed:46:56:f7:14:c9:4d:11: 1b:3c:c9:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYxMDA2MTgwMTE3WhcNMjYxMDEzMTgwMTE3WjAYMRYwFAYD VQQDEw02YWM1Mzc2ZC0wNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztsIbtdPobErNYSfXVOWmENuvU3gBPy9Yms93HCTjQtsa8gp7Yeo3n4df/UN Z0wD8LeNiW+QmKHte9JmiPPv2dUeqLnnokT2WyH4uzBkI3PBWMt7rWIFufLS35oE M7h7IEyMf0oh20h/MWe4exSDpPA9SD1q7somh5OF9hd4OjaXe84A/ZrrwmEkH8nT jxDy8KuUyv6sg040+7AcXh3YZT5o+wtwd7kmodOYEmpcGchuyK3j+6EC5iarwfqN kbbCXzI94fWAZ5NAHgQWacmRr1dTSVeSVcZwpFpk2ghSgUuKLxcl/BnKKm3IjG41 SrI/H330zAW6ow+W5hv9UzgfDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQ6hp1+ +ldHzARUNDxyZf+ljd69MB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUIxQS81MUZGQzRFNEY0MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdr a2lvankxWmIyQ0czNGdwaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY6IukcIjC3HZqxRytmnOlyDwh4bY6CsAaPbTK/YNL1orj4jKLQl8Pp9qY7JI hv0EIj9NoDRJ7woLgIcUSRhI8kKXEoxyHDcU4bDoqIzK+upJowQBMV00e2UAnpCj /8JmTwkT7mLmVqds+tO10mMHbBbnamDs64sqq9NM+loaQhO5eylKlX9juqsmbgIB /v5bUwwWrkN7ZwB2eCYH3fZRW9r0McScWRBSMP64Oe7VwAjO61AI5l+OZWXc4Ypn F1Pf8q/l6CIOJbI5QdTWjsx2UR/Ue9E515dJbtrwsRN+C40IopNDgev4fjmQPClw Z49KLDQpeu1GVvcUyU0RGzzJgQ== -----END CERTIFICATE-----Generated at Thu Oct 8 01:15:57 2026 by rpki-client