$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft File: kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json) Hash identifier: 1uEZcERMqCUAVcDvstrYgJzPY1PI1DjES7vtob93ELA= Subject key identifier: 79:6D:06:6C:E5:11:FF:94:FD:3F:23:3E:AC:A8:70:E2:94:F2:40:7C Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD Certificate issuer: /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft Manifest number: 01C1 Signing time: Sun 25 Oct 2026 04:18:00 +0000 Manifest this update: Sun 25 Oct 2026 04:18:00 +0000 Manifest next update: Sun 01 Nov 2026 04:18:00 +0000 Files and hashes: 1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: TKja1Pl27B8kwGN8E/xkA4oM5lIqn6tb4PYrbIrufbA=) 2: CCAF2918109411F186362BB2353D8C67.roa (hash: gaaPUIqPnrKZcPoj++Gk3lTtF/eI1Q4+XK7Ewpz97Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD Validity Not Before: Oct 25 04:18:00 2026 GMT Not After : Nov 1 04:18:00 2026 GMT Subject: CN=6add82f8-0ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:39:8c:c7:84:44:a9:c1:31:5d:c1:04:c2: 90:92:f3:df:e8:59:db:90:b8:54:1a:20:19:12:f4: 72:d6:82:1f:67:35:90:e5:6a:a8:e9:85:ec:03:3c: 11:34:0d:cc:45:e4:0d:88:67:68:73:1c:71:13:8d: 98:05:80:d2:c6:c5:37:03:1d:14:dc:8d:84:d7:07: 39:78:f2:36:52:9e:ed:0c:5e:e0:cf:a3:e8:76:13: 9d:10:04:50:c2:bb:18:fe:1f:10:57:9a:7d:c9:17: 55:25:90:00:f3:a5:a5:d3:97:a6:5b:1a:31:96:32: e4:ac:eb:04:4f:e2:3f:b2:19:5d:f8:ba:21:13:08: 8b:3f:27:28:4d:61:d9:f1:2a:0b:08:d1:1b:e6:e6: 09:69:7e:fc:0e:e3:b6:0d:76:34:31:c5:36:db:7b: 5d:75:d0:a9:a5:8f:de:4b:0a:52:8c:74:92:65:00: a8:5f:2e:51:b8:8a:1f:95:2e:79:6f:72:e4:35:c3: 80:55:e4:0d:7d:24:1c:31:b5:6f:c2:12:11:73:6c: 13:b0:d7:a4:59:81:ea:65:d9:ae:e2:8a:35:14:b9: 08:ad:35:2e:0f:0b:52:6a:be:9b:56:93:5b:b0:95: 46:87:83:5f:bc:82:ba:b9:3d:a1:60:76:7d:1d:a4: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6D:06:6C:E5:11:FF:94:FD:3F:23:3E:AC:A8:70:E2:94:F2:40:7C X509v3 Authority Key Identifier: keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:09:e4:b9:bd:e9:da:7c:93:21:8b:9c:0a:19:a7:34:d0:46: 2d:f8:ab:d3:5f:15:82:83:9b:6e:90:b5:98:b0:b5:4f:72:03: 88:ae:02:be:ae:c9:41:21:cd:12:fa:0f:66:3b:ba:f4:9d:77: af:d0:6f:c9:52:83:be:a4:e1:d3:06:7d:ca:92:cc:d9:89:3c: 4a:1c:0b:f8:0e:0c:d1:00:95:5c:db:63:bb:9d:25:4a:bb:2b: 6d:50:d5:77:33:c3:87:ce:0c:f7:4b:88:fd:cf:b9:fb:ed:45: 38:e7:f0:f3:38:a2:6f:3d:c7:73:b9:8a:7b:a8:7b:9c:f0:45: 8e:d1:29:8b:ce:8e:c5:90:da:da:77:5c:0a:19:57:60:6e:cb: 86:f9:4d:55:ac:ac:8f:54:47:ed:0e:bb:e9:a2:2a:ca:11:1d: 8a:3e:e2:3f:a7:77:8c:37:5a:7b:2e:08:ad:99:04:ad:e5:7a: e8:08:5c:e6:ed:8c:9a:5c:49:68:69:5a:70:37:f0:7e:23:7a: 5b:5e:0d:60:69:bd:99:f9:8a:22:57:50:d7:53:65:06:d2:ad: 32:56:61:89:79:10:6b:e6:c2:9c:30:96:3d:ee:f5:78:7e:87: e1:50:89:30:bd:83:c7:15:1c:36:05:4f:81:2a:50:ae:e1:8c: 9b:ce:f1:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKDkwOERCM0Y5Qjc0NkY1MjBCQkI5QTg0Qzg1M0Y2OTI2 QzE1RUI5QkQwHhcNMjYxMDI1MDQxODAwWhcNMjYxMTAxMDQxODAwWjAYMRYwFAYD VQQDEw02YWRkODJmOC0wZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCc5jMeERKnBMV3BBMKQkvPf6FnbkLhUGiAZEvRy1oIfZzWQ5Wqo6YXsAzwR NA3MReQNiGdocxxxE42YBYDSxsU3Ax0U3I2E1wc5ePI2Up7tDF7gz6PodhOdEARQ wrsY/h8QV5p9yRdVJZAA86Wl05emWxoxljLkrOsET+I/shld+LohEwiLPycoTWHZ 8SoLCNEb5uYJaX78DuO2DXY0McU223tdddCppY/eSwpSjHSSZQCoXy5RuIoflS55 b3LkNcOAVeQNfSQcMbVvwhIRc2wTsNekWYHqZdmu4oo1FLkIrTUuDwtSar6bVpNb sJVGh4NfvIK6uT2hYHZ9HaRqYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHltBmzl Ef+U/T8jPqyocOKU8kB8MB8GA1UdIwQYMBaAFJCNs/m3RvUgu7moTIU/aSbBXrm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8yMDlFRERDRTJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlTQzd1YWhNaFQ5cEpzRmV1 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJMnotYmRHOVNDN3VhaE1oVDlwSnNGZXViMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8yMDlFRERDRTJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlT Qzd1YWhNaFQ5cEpzRmV1YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQnkub3p2nyTIYucChmnNNBGLfir018VgoObbpC1mLC1T3IDiK4Cvq7JQSHN EvoPZju69J13r9BvyVKDvqTh0wZ9ypLM2Yk8ShwL+A4M0QCVXNtju50lSrsrbVDV dzPDh84M90uI/c+5++1FOOfw8ziibz3Hc7mKe6h7nPBFjtEpi86OxZDa2ndcChlX YG7LhvlNVaysj1RH7Q676aIqyhEdij7iP6d3jDdaey4IrZkEreV66Ahc5u2MmlxJ aGlacDfwfiN6W14NYGm9mfmKIldQ11NlBtKtMlZhiXkQa+bCnDCWPe71eH6H4VCJ ML2DxxUcNgVPgSpQruGMm87xZQ== -----END CERTIFICATE-----Generated at Mon Oct 26 20:57:54 2026 by rpki-client