$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: IvLGrDfqnGaBobS3hIRUBPY08fshsZv2+SsQUGA3dVg= Subject key identifier: A7:D2:17:C1:9D:FB:DA:55:D0:5D:B3:64:B9:AC:01:E8:CE:B3:79:E5 Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0520 Signing time: Mon 26 Oct 2026 23:28:36 +0000 Manifest this update: Mon 26 Oct 2026 23:28:35 +0000 Manifest next update: Mon 02 Nov 2026 23:28:35 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: 4GzjpEvkAKIMzD0Wy231MjSdCbZvnSYbPwHBkW3bYoE=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Oct 26 23:28:35 2026 GMT Not After : Nov 2 23:28:35 2026 GMT Subject: CN=6adfe223-8877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:2f:90:38:87:48:bf:90:d0:f4:e1:4e:1f: a7:c0:6b:3f:67:0b:de:0d:d7:5e:26:b4:ea:ed:af: 9b:28:f7:42:f4:df:8a:b8:a8:7e:e2:69:11:3d:f9: de:b6:ea:f6:6f:ee:87:4d:a5:55:24:a2:c5:1a:ad: 4c:ee:fe:71:81:30:dc:db:75:01:3a:5b:78:95:92: 13:16:82:de:d5:d1:82:1b:3e:62:77:62:e3:ea:d3: 89:58:1a:3e:4b:9e:45:8b:2f:28:77:e5:ad:cd:8e: 1d:83:e9:a0:0b:d7:4f:e7:6f:d8:d6:84:48:cd:fa: 77:e1:c5:ed:f2:ab:c9:8d:cb:d7:95:45:77:20:db: de:01:55:ec:9f:40:56:bc:21:8c:47:8d:8b:41:fa: de:4a:14:36:55:78:8d:ea:19:7f:89:15:9f:85:f9: 55:d2:04:87:76:31:19:cd:82:7d:c5:26:76:6d:0c: 5e:65:32:f4:77:57:ad:be:85:25:56:e3:b0:3b:30: 1a:e2:97:61:e8:ca:35:ad:88:7e:2b:ee:21:77:79: be:f3:c9:00:3d:0f:c2:7b:4c:16:dc:5f:96:a6:b2: f6:6e:44:57:42:6b:59:d6:02:aa:12:3f:f8:b4:c3: df:77:c8:f8:e0:bd:68:7f:06:be:10:9b:05:aa:da: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:17:C1:9D:FB:DA:55:D0:5D:B3:64:B9:AC:01:E8:CE:B3:79:E5 X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:5d:23:0f:05:6c:19:76:b2:d8:e5:1d:88:e1:87:38:a9:2c: 8d:00:18:6c:05:f2:84:2f:d7:64:fe:85:a8:55:89:af:5d:6f: d1:d1:9b:2b:87:fa:54:c6:58:be:f2:86:ff:52:3f:a2:6c:12: 8a:a6:bd:1d:df:ef:4c:b2:e2:cb:ed:11:31:53:d9:06:df:22: 19:65:94:39:1b:bf:00:f1:1b:f8:c8:ee:e3:11:30:b1:7b:7e: 97:21:4b:f8:c5:72:59:c6:d2:a7:00:44:56:4c:73:ad:84:3a: c6:76:3a:6e:9e:3b:27:1d:c0:62:06:ce:a3:84:60:3d:f9:36: 0b:c8:e6:1a:0a:8c:66:09:54:fd:16:1f:5c:2f:bf:f5:e7:7d: b1:ef:56:28:63:52:d4:35:82:77:e6:65:77:3d:1b:09:78:a1: 05:45:cc:7a:72:44:d8:14:8e:1e:44:df:19:90:bb:69:c0:14: 7e:f4:f8:0e:00:82:85:fe:c0:95:40:a3:a7:b7:36:f9:20:c7: f4:a0:e4:ec:89:34:84:5c:90:d9:9c:46:19:60:4b:dd:dc:5c: a1:a5:40:3f:ff:0f:73:a6:b9:32:53:6b:26:7c:c4:f7:a0:7f: 21:68:c7:37:07:eb:19:a8:97:4f:56:12:f7:f8:f2:0b:26:9e: 93:b6:03:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjYxMDI2MjMyODM1WhcNMjYxMTAyMjMyODM1WjAYMRYwFAYD VQQDEw02YWRmZTIyMy04ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiLMvkDiHSL+Q0PThTh+nwGs/ZwveDddeJrTq7a+bKPdC9N+KuKh+4mkRPfne tur2b+6HTaVVJKLFGq1M7v5xgTDc23UBOlt4lZITFoLe1dGCGz5id2Lj6tOJWBo+ S55Fiy8od+WtzY4dg+mgC9dP52/Y1oRIzfp34cXt8qvJjcvXlUV3INveAVXsn0BW vCGMR42LQfreShQ2VXiN6hl/iRWfhflV0gSHdjEZzYJ9xSZ2bQxeZTL0d1etvoUl VuOwOzAa4pdh6Mo1rYh+K+4hd3m+88kAPQ/Ce0wW3F+WprL2bkRXQmtZ1gKqEj/4 tMPfd8j44L1ofwa+EJsFqtqLZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfSF8Gd +9pV0F2zZLmsAejOs3nlMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhV0jDwVsGXay2OUdiOGHOKksjQAYbAXyhC/XZP6FqFWJr11v0dGbK4f6VMZY vvKG/1I/omwSiqa9Hd/vTLLiy+0RMVPZBt8iGWWUORu/APEb+Mju4xEwsXt+lyFL +MVyWcbSpwBEVkxzrYQ6xnY6bp47Jx3AYgbOo4RgPfk2C8jmGgqMZglU/RYfXC+/ 9ed9se9WKGNS1DWCd+Zldz0bCXihBUXMenJE2BSOHkTfGZC7acAUfvT4DgCChf7A lUCjp7c2+SDH9KDk7Ik0hFyQ2ZxGGWBL3dxcoaVAP/8Pc6a5MlNrJnzE96B/IWjH NwfrGaiXT1YS9/jyCyaek7YDQw== -----END CERTIFICATE-----Generated at Wed Oct 28 11:22:23 2026 by rpki-client