$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: 7Jk9PbkTHI6upx/09zfibCnTRNDgGeOXA6z14q+Mwig= Subject key identifier: 8C:83:CF:99:BA:AA:D5:DC:12:5E:91:BD:EA:49:74:F6:D0:0B:14:CA Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01EC Signing time: Wed 07 Oct 2026 03:52:39 +0000 Manifest this update: Wed 07 Oct 2026 03:52:38 +0000 Manifest next update: Wed 14 Oct 2026 03:52:38 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: WHXI7ZZfWP+TLA3BVEhSd2dMdD6VaIMPvh9OUCnCIj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Oct 7 03:52:38 2026 GMT Not After : Oct 14 03:52:38 2026 GMT Subject: CN=6ac5c206-d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:ac:b4:5a:a1:d0:a7:27:bf:57:06:f6:10: 1d:cf:7e:cb:45:e5:4e:8d:7b:cb:63:86:1f:37:fb: 7d:a7:3c:a0:bf:58:d1:8d:43:20:b2:d0:1a:49:46: c8:28:aa:c0:cb:58:d4:e7:f9:01:f5:84:53:13:ce: fe:90:b9:e2:a0:e4:6d:df:1e:da:7a:21:7e:e5:c1: af:1a:b3:86:ee:ab:55:b3:b4:9a:2c:c8:7c:eb:1f: f0:53:5d:20:09:3b:10:35:ff:45:ad:38:96:47:24: a8:35:cc:2a:1e:a9:d0:a0:b8:d8:9e:61:1b:d6:c4: 70:a5:d1:31:a1:f1:79:8d:04:ee:6e:c7:ef:15:78: 38:02:67:10:13:1f:62:d7:cc:ee:6e:fc:d1:93:f8: 3b:2a:ec:06:7b:b7:29:3a:13:eb:6d:e7:cf:72:c2: 7b:84:f3:a0:d0:b6:e6:65:62:3e:2a:3c:72:62:8b: 6e:c5:57:1e:2c:5d:64:60:6b:ad:81:d5:15:33:75: f5:2c:e1:38:be:22:38:fd:0c:dc:ca:d4:ab:cd:45: 1f:74:e7:29:19:e5:be:57:90:83:59:ee:17:91:65: 15:3e:46:bd:7e:5d:d7:d9:fc:49:c2:79:dd:5b:d3: 62:72:17:b2:a9:44:19:5b:7a:23:07:5f:d2:85:16: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:CF:99:BA:AA:D5:DC:12:5E:91:BD:EA:49:74:F6:D0:0B:14:CA X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:67:fe:79:82:ab:15:b6:e8:b1:e0:39:c4:bf:12:4b:54: 98:cf:fe:c9:b0:e8:e2:31:31:76:3d:2b:0c:38:8d:ba:6f:eb: 4f:83:05:e9:17:11:e8:27:5b:bc:35:51:97:a8:7c:44:93:a7: 62:eb:88:64:99:6b:4a:9a:9b:ce:84:ad:24:22:41:a3:d7:a7: d2:77:c6:0b:32:99:47:f6:ab:5f:18:25:00:83:af:90:8e:ee: 11:17:e6:c2:b7:bb:2b:42:9d:e1:14:fd:3c:59:3f:de:c1:bc: 1d:74:32:ac:6f:88:5a:7e:7b:8a:32:1f:50:66:c8:89:1d:ff: ac:f1:a3:c9:2f:fa:7d:35:c2:79:e9:45:0a:2f:dc:69:71:38: 3e:40:c1:37:06:da:bb:86:23:0b:52:31:fb:25:c9:76:1a:dc: 91:f0:32:50:02:dd:e0:e3:ad:b6:42:5c:7d:4e:33:c3:bc:e5: 2d:f5:21:06:18:b9:c7:5b:93:72:87:9c:31:e9:9e:d5:65:53: 28:b0:82:27:64:f0:c4:80:0f:b7:46:b4:45:f5:e4:c3:ff:8b: 32:2f:5f:26:66:a5:3f:47:48:3c:ad:a7:b1:32:45:2b:38:54: 48:88:cb:59:58:3a:f3:74:af:bc:7b:85:7f:c1:51:8b:24:f3: d1:f3:3b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYxMDA3MDM1MjM4WhcNMjYxMDE0MDM1MjM4WjAYMRYwFAYD VQQDEw02YWM1YzIwNi1kNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNmstFqh0Kcnv1cG9hAdz37LReVOjXvLY4YfN/t9pzygv1jRjUMgstAaSUbI KKrAy1jU5/kB9YRTE87+kLnioORt3x7aeiF+5cGvGrOG7qtVs7SaLMh86x/wU10g CTsQNf9FrTiWRySoNcwqHqnQoLjYnmEb1sRwpdExofF5jQTubsfvFXg4AmcQEx9i 18zubvzRk/g7KuwGe7cpOhPrbefPcsJ7hPOg0LbmZWI+KjxyYotuxVceLF1kYGut gdUVM3X1LOE4viI4/QzcytSrzUUfdOcpGeW+V5CDWe4XkWUVPka9fl3X2fxJwnnd W9NicheyqUQZW3ojB1/ShRav+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyDz5m6 qtXcEl6RvepJdPbQCxTKMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixVn/nmCqxW26LHgOcS/EktUmM/+ybDo4jExdj0rDDiNum/rT4MF6RcR6Cdb vDVRl6h8RJOnYuuIZJlrSpqbzoStJCJBo9en0nfGCzKZR/arXxglAIOvkI7uERfm wre7K0Kd4RT9PFk/3sG8HXQyrG+IWn57ijIfUGbIiR3/rPGjyS/6fTXCeelFCi/c aXE4PkDBNwbau4YjC1Ix+yXJdhrckfAyUALd4OOttkJcfU4zw7zlLfUhBhi5x1uT coecMeme1WVTKLCCJ2TwxIAPt0a0RfXkw/+LMi9fJmalP0dIPK2nsTJFKzhUSIjL WVg683SvvHuFf8FRiyTz0fM7Cg== -----END CERTIFICATE-----Generated at Thu Oct 8 12:07:52 2026 by rpki-client