$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: XWAXhQx8VecmJThEiketeacanekVXE5WvgL3dEDr2FY= Subject key identifier: 0E:96:B3:54:1A:2C:86:D8:55:6D:AF:93:01:6E:67:61:19:CC:D4:2C Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 02A5 Signing time: Thu 29 Oct 2026 02:15:03 +0000 Manifest this update: Thu 29 Oct 2026 02:15:03 +0000 Manifest next update: Thu 05 Nov 2026 02:15:03 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: guDOoEXGalVQklA4gyGjAUOXQt1el0ikJUUQETjgObc=) 2: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: z04Vftmrg2QbTvPdZ6E5RXhqc7guf0iEptckFIG+yc8=) 3: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: txSvzTPr2599JY/devjyQjZpXUdF6ZNG1hcHHYqrLIA=) 4: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: OGuYh+AxdFGbpXMOTasU8EIj52mT5htTsl1m4is8Y4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Oct 29 02:15:03 2026 GMT Not After : Nov 5 02:15:03 2026 GMT Subject: CN=6ae2ac27-3df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:23:be:2f:2a:fb:32:41:e1:b5:03:28:e5: 70:8b:91:48:11:ab:3d:bc:2d:c0:1f:a1:b4:98:8e: 62:cd:a4:82:95:4c:7e:3f:cf:c3:49:ad:7f:9e:b2: 1c:1e:f7:dc:2d:9a:91:3d:b5:ca:ea:cb:59:97:b4: c3:4e:6c:40:e6:14:a9:9e:04:90:72:39:cb:e3:30: 08:f1:10:66:d7:61:5a:ff:9c:26:60:97:e6:d5:61: 08:49:0d:1b:bc:02:d2:c4:f5:13:dd:a2:86:17:29: a1:fb:92:bf:2a:c1:73:a6:62:c1:21:23:78:02:1b: 8f:48:ee:0f:1d:e5:03:c2:29:2a:26:5c:d0:e5:ba: 57:7e:08:89:ca:7f:2b:0f:cf:dd:9a:89:0c:4d:e8: 4e:58:bd:c8:47:19:6f:37:0a:2d:00:68:63:9a:4a: 0e:b0:b4:d4:58:89:c8:59:b5:29:02:c2:bf:9e:34: 46:fb:15:4d:b1:a8:e7:90:04:17:e1:f3:47:aa:20: 13:f0:44:db:05:cc:36:eb:79:d6:e9:16:fa:ec:5a: 22:b6:33:da:1e:8b:d4:76:6f:0d:47:fb:56:e7:54: 16:a6:11:0d:37:1b:02:59:f2:48:d3:4f:c2:65:4c: f2:ff:af:1b:b1:6a:9a:a5:0d:28:cb:67:ae:7e:2d: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:96:B3:54:1A:2C:86:D8:55:6D:AF:93:01:6E:67:61:19:CC:D4:2C X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:69:2e:a2:25:7d:4c:62:e5:27:da:8a:45:98:91:4e:4a:87: d9:18:89:06:e5:da:1f:16:cf:fd:66:5b:6d:1d:e9:89:85:79: 89:24:4e:6b:df:73:f7:5f:90:28:09:88:00:35:06:a0:56:8f: 0d:6a:77:01:4b:52:a4:e0:9d:42:a4:5f:68:a1:09:da:0f:aa: 1e:4c:77:68:87:f7:1f:e6:cb:70:c1:98:0d:18:2b:0c:2c:22: 1a:15:a5:82:8b:07:6c:55:22:de:7a:ae:ef:76:13:93:c1:46: 8b:30:c8:4c:91:53:4d:65:c7:f6:b3:00:15:7e:d8:1b:4c:4f: 6c:ec:8b:4a:06:76:23:11:4e:7f:b4:10:7d:d3:d1:b9:6d:3b: a6:2f:d1:bd:75:6f:0a:ce:19:bf:28:10:da:5c:f2:0f:9d:e7: 06:3e:a3:55:45:71:30:5b:9d:b4:be:53:6e:d1:6b:72:a4:84: 23:e6:17:95:ca:00:ad:c0:70:98:8a:ea:cf:11:bb:76:88:01: e3:cc:b0:e4:be:21:18:db:40:b0:21:b1:23:5a:0c:95:bf:ad: 27:34:e4:f1:de:76:e0:33:77:b5:0b:ae:0b:76:54:d3:04:cd: 34:bf:9b:78:c9:2a:95:18:4f:b3:e0:ad:55:67:ab:f3:20:26: 3a:02:f6:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYxMDI5MDIxNTAzWhcNMjYxMTA1MDIxNTAzWjAYMRYwFAYD VQQDEw02YWUyYWMyNy0zZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybIjvi8q+zJB4bUDKOVwi5FIEas9vC3AH6G0mI5izaSClUx+P8/DSa1/nrIc HvfcLZqRPbXK6stZl7TDTmxA5hSpngSQcjnL4zAI8RBm12Fa/5wmYJfm1WEISQ0b vALSxPUT3aKGFymh+5K/KsFzpmLBISN4AhuPSO4PHeUDwikqJlzQ5bpXfgiJyn8r D8/dmokMTehOWL3IRxlvNwotAGhjmkoOsLTUWInIWbUpAsK/njRG+xVNsajnkAQX 4fNHqiAT8ETbBcw263nW6Rb67FoitjPaHovUdm8NR/tW51QWphENNxsCWfJI00/C ZUzy/68bsWqapQ0oy2eufi0KYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6Ws1Qa LIbYVW2vkwFuZ2EZzNQsMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdWkuoiV9TGLlJ9qKRZiRTkqH2RiJBuXaHxbP/WZbbR3piYV5iSROa99z91+Q KAmIADUGoFaPDWp3AUtSpOCdQqRfaKEJ2g+qHkx3aIf3H+bLcMGYDRgrDCwiGhWl gosHbFUi3nqu73YTk8FGizDITJFTTWXH9rMAFX7YG0xPbOyLSgZ2IxFOf7QQfdPR uW07pi/RvXVvCs4ZvygQ2lzyD53nBj6jVUVxMFudtL5TbtFrcqSEI+YXlcoArcBw mIrqzxG7dogB48yw5L4hGNtAsCGxI1oMlb+tJzTk8d524DN3tQuuC3ZU0wTNNL+b eMkqlRhPs+CtVWer8yAmOgL2sQ== -----END CERTIFICATE-----Generated at Fri Oct 30 02:46:35 2026 by rpki-client