$ rpki-client -vvvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft File: _-KgNynzLTIiepnJJRWMgspUuVc.mft (raw, json) Hash identifier: 2kF8qJ4PTsXQJ//TjlOEzcxGzNpHZ6g1zOdQakRtBFU= Subject key identifier: 8D:D1:BC:6E:DD:64:72:DF:73:2E:1D:BD:43:82:4F:EE:72:3A:1C:A3 Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft Manifest number: 35A3 Signing time: Fri 02 Oct 2026 14:24:47 +0000 Manifest this update: Fri 02 Oct 2026 14:24:46 +0000 Manifest next update: Fri 09 Oct 2026 14:24:46 +0000 Files and hashes: 1: _-KgNynzLTIiepnJJRWMgspUuVc.crl (hash: Sswss1PN/DelJ0IJEsK1tIKEN0BwoCVVZ+wbB7w6LHw=) 2: A0121BD4871711EA924C6626C4F9AE02.roa (hash: oVwBBdf2MoqEQJnLpO/RZy7KNjQCvi9PCorLcBRov58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 14:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957 Validity Not Before: Oct 2 14:24:46 2026 GMT Not After : Oct 9 14:24:46 2026 GMT Subject: CN=6abfbeae-ae3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:23:2d:23:de:58:b1:1b:8d:30:12:5a:e7: 96:97:fd:36:07:d6:f7:c9:90:99:d5:9a:1c:6b:5b: 83:58:6d:6f:35:b9:5d:f8:9f:fd:37:0f:64:38:4b: a6:e9:70:65:64:49:dd:ae:cd:e0:1a:30:c5:a3:ce: c4:64:9d:f8:e4:dd:8f:22:3f:dd:d1:a5:73:61:fd: d1:7b:a8:45:ec:13:83:10:73:af:d7:74:9a:29:ad: 23:b8:50:2c:9b:5d:87:da:55:36:77:ca:99:a4:63: 7e:0f:76:ef:ae:c4:6f:58:ce:c1:a2:d5:db:32:75: a0:c4:67:e9:42:78:b2:2b:dc:0f:0b:13:df:f8:f2: 19:02:dc:ff:3f:72:7e:ab:f0:a7:79:e4:a0:6f:2b: 01:04:cb:69:97:11:db:8f:b6:aa:16:c3:fe:f2:77: c2:6c:07:c0:81:4c:88:5f:4a:0a:98:bd:b9:ee:da: af:2a:d1:96:9c:b6:0d:37:6b:4d:76:68:30:c7:74: 9e:e6:ea:31:a3:38:f5:bf:b3:e4:aa:f4:57:25:e1: c4:8e:cd:e4:2b:5d:7f:94:88:e4:0f:d0:22:b0:37: 0d:03:85:46:34:8e:5f:1e:22:5a:d3:75:a2:14:fc: d6:8c:d2:ec:06:a8:d1:b8:7f:99:37:33:df:2e:05: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D1:BC:6E:DD:64:72:DF:73:2E:1D:BD:43:82:4F:EE:72:3A:1C:A3 X509v3 Authority Key Identifier: keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:9a:87:1c:a2:f9:84:73:bd:cf:99:4d:e6:8b:57:53:c3: 35:1d:27:f7:6d:ac:a7:12:d4:8f:48:3e:2f:ee:e9:f7:e9:5a: 86:70:9d:6f:c0:51:58:9b:9c:e7:6f:ae:8d:61:35:d5:3c:5b: 6b:0f:5f:2a:68:aa:ef:10:4b:ee:ba:b3:d2:01:49:fc:af:ff: 26:17:5a:c8:47:5c:d6:13:30:d1:88:8d:b1:e3:33:01:08:cc: fa:9d:a4:b4:cf:f4:09:d1:a7:69:67:a9:e6:98:08:8f:67:ad: 1e:6c:bc:89:e6:8e:13:5d:2e:f9:e6:ec:c8:8e:a2:51:93:95: 8d:a3:10:88:71:5f:00:a6:2e:22:ca:34:ce:73:ab:c2:58:7e: eb:88:78:5d:43:9f:fd:bc:96:7c:ce:84:71:e1:18:21:ea:04: 0c:2a:03:b1:43:bf:e1:4b:ce:5f:50:00:1c:e6:16:e2:1c:d1: e8:11:db:2a:05:f9:8a:22:50:3a:8e:85:21:4f:94:94:a1:44: 64:0a:42:08:16:f2:21:c5:b0:5e:55:2e:f9:ed:ab:3f:f9:1c: 18:9f:4a:b3:51:2b:2f:77:a4:d1:ca:c1:d4:13:2a:f1:76:40: a0:73:bf:69:2f:e7:37:5e:79:6c:9a:06:87:cd:4d:d8:55:a3: 53:32:be:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIyNUQxMTAvBgNVBAUTKEZGRTJBMDM3MjlGMzJEMzIyMjdBOTlDOTI1MTU4Qzgy Q0E1NEI5NTcwHhcNMjYxMDAyMTQyNDQ2WhcNMjYxMDA5MTQyNDQ2WjAYMRYwFAYD VQQDEw02YWJmYmVhZS1hZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+QjLSPeWLEbjTASWueWl/02B9b3yZCZ1Zoca1uDWG1vNbld+J/9Nw9kOEum 6XBlZEndrs3gGjDFo87EZJ345N2PIj/d0aVzYf3Re6hF7BODEHOv13SaKa0juFAs m12H2lU2d8qZpGN+D3bvrsRvWM7BotXbMnWgxGfpQniyK9wPCxPf+PIZAtz/P3J+ q/CneeSgbysBBMtplxHbj7aqFsP+8nfCbAfAgUyIX0oKmL257tqvKtGWnLYNN2tN dmgwx3Se5uoxozj1v7PkqvRXJeHEjs3kK11/lIjkD9AisDcNA4VGNI5fHiJa03Wi FPzWjNLsBqjRuH+ZNzPfLgWEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3RvG7d ZHLfcy4dvUOCT+5yOhyjMB8GA1UdIwQYMBaAFP/ioDcp8y0yInqZySUVjILKVLlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjI1RC8xRjU1MDgzMDFE ODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxUSWllcG5KSlJXTWdzcFV1 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tS2dOeW56TFRJaWVwbkpKUldNZ3NwVXVWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjI1RC8xRjU1MDgzMDFEODQxMUUyOTE3QkQwRDkwOEIwMkNEMi9fLUtnTnluekxU SWllcG5KSlJXTWdzcFV1VmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdw6ahxyi+YRzvc+ZTeaLV1PDNR0n922spxLUj0g+L+7p9+lahnCdb8BRWJuc 52+ujWE11Txbaw9fKmiq7xBL7rqz0gFJ/K//JhdayEdc1hMw0YiNseMzAQjM+p2k tM/0CdGnaWep5pgIj2etHmy8ieaOE10u+ebsyI6iUZOVjaMQiHFfAKYuIso0znOr wlh+64h4XUOf/byWfM6EceEYIeoEDCoDsUO/4UvOX1AAHOYW4hzR6BHbKgX5iiJQ Oo6FIU+UlKFEZApCCBbyIcWwXlUu+e2rP/kcGJ9Ks1ErL3ek0crB1BMq8XZAoHO/ aS/nN155bJoGh81N2FWjUzK+mg== -----END CERTIFICATE-----Generated at Sun Oct 4 08:09:45 2026 by rpki-client