$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: xPf+s4Sb+Yj163UOaXvH+Dl5BgQqc/396/1syYg2WDk= Subject key identifier: FD:21:30:32:D8:FF:D4:5C:4D:44:0E:6E:69:4E:C2:EF:62:16:8A:5F Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0533 Signing time: Sun 04 Oct 2026 23:34:15 +0000 Manifest this update: Sun 04 Oct 2026 23:34:15 +0000 Manifest next update: Sun 11 Oct 2026 23:34:15 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: nQ+j8CFRRDwzNVgHvnfpx1sdiPQePdlEGZgbqnm3dGU=) 2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 23:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Oct 4 23:34:15 2026 GMT Not After : Oct 11 23:34:15 2026 GMT Subject: CN=6ac2e277-810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:b5:b3:b2:62:35:41:8c:c8:99:11:20:04: f2:eb:58:ab:3e:ff:ec:0b:b5:8b:a6:58:32:24:2d: e1:eb:8f:29:ec:b2:39:57:52:56:72:27:5f:cb:2d: 9a:cb:c4:1b:f1:3f:2f:8d:0b:42:02:99:20:dc:de: 4b:25:ce:0c:57:7b:55:00:8f:51:e1:2a:58:40:66: 72:fc:0d:15:dd:63:5d:b9:c3:fb:90:5d:29:8e:28: 0a:69:b1:ca:93:4c:f4:59:42:50:df:0a:f6:98:c0: 15:19:08:8f:22:78:48:f0:c8:0d:4c:1b:2a:0e:76: 3b:d1:2d:25:7a:f8:d9:10:f0:c8:32:87:ea:f6:15: 59:31:e2:9b:cc:8f:3b:c9:02:7f:80:41:73:ad:27: 1b:cc:cc:a4:0e:82:fa:2e:37:7d:f4:80:76:bb:27: 40:ad:8d:19:27:bb:18:0f:22:60:cc:6d:27:e1:70: 04:4c:96:ea:81:98:26:bf:3f:65:af:de:30:3f:31: 55:fa:3f:d0:d2:b4:97:1e:ce:c3:34:7d:e5:df:39: a4:e1:2d:6d:ae:d1:02:43:83:5a:af:dd:20:b6:e9: 4a:0c:7a:58:65:d4:cb:56:83:cc:9e:f2:18:74:49: 15:db:99:04:9e:b1:6d:0a:b5:6a:2e:6a:4f:c9:ff: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:21:30:32:D8:FF:D4:5C:4D:44:0E:6E:69:4E:C2:EF:62:16:8A:5F X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:3f:4b:b9:bd:bb:16:40:73:73:ef:03:df:e1:10:f9:7b: 1e:84:77:72:00:d7:1a:07:b0:ca:10:56:ea:0b:22:e3:3a:6c: 78:a9:3f:64:bf:bc:7a:d5:b2:bb:2a:fe:f2:18:71:c7:6b:fe: 70:9d:29:78:ca:9d:bb:cc:a8:35:ab:c1:fe:de:61:8d:b1:30: ca:e6:3c:19:13:ff:ba:ec:7f:77:55:44:b2:9e:5d:d4:eb:d0: 41:ef:13:35:b8:d3:82:2d:ad:14:f9:59:37:fa:c9:81:ad:58: 03:bd:f4:25:58:01:95:3b:9d:7b:c8:d5:a8:69:29:d7:cf:80: 35:e9:17:c7:79:f3:cb:c4:57:3d:8d:2b:38:a7:88:cd:cb:d6: db:09:51:71:95:0f:a0:47:8e:d1:5c:94:5b:d4:5a:36:f0:41: c3:c3:2f:69:29:10:d2:1b:6e:08:be:54:f3:09:4e:66:dd:60: aa:0b:d1:5f:01:f2:c2:d9:09:d0:80:c8:1a:01:fb:cd:11:15: fc:4a:66:3e:e1:da:9c:08:be:2d:32:da:5c:a2:60:79:85:ae: f1:c2:d3:5d:df:93:92:41:bb:52:35:61:da:38:33:d4:9b:98: 4c:61:1f:69:6b:15:21:28:1d:a9:3c:5f:ab:05:23:e2:91:b3: 41:61:7d:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjYxMDA0MjMzNDE1WhcNMjYxMDExMjMzNDE1WjAYMRYwFAYD VQQDEw02YWMyZTI3Ny04MTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq21s7JiNUGMyJkRIATy61irPv/sC7WLplgyJC3h648p7LI5V1JWcidfyy2a y8Qb8T8vjQtCApkg3N5LJc4MV3tVAI9R4SpYQGZy/A0V3WNducP7kF0pjigKabHK k0z0WUJQ3wr2mMAVGQiPInhI8MgNTBsqDnY70S0levjZEPDIMofq9hVZMeKbzI87 yQJ/gEFzrScbzMykDoL6Ljd99IB2uydArY0ZJ7sYDyJgzG0n4XAETJbqgZgmvz9l r94wPzFV+j/Q0rSXHs7DNH3l3zmk4S1trtECQ4Nar90gtulKDHpYZdTLVoPMnvIY dEkV25kEnrFtCrVqLmpPyf+FDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0hMDLY /9RcTUQObmlOwu9iFopfMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWm4/S7m9uxZAc3PvA9/hEPl7HoR3cgDXGgewyhBW6gsi4zpseKk/ZL+8etWy uyr+8hhxx2v+cJ0peMqdu8yoNavB/t5hjbEwyuY8GRP/uux/d1VEsp5d1OvQQe8T NbjTgi2tFPlZN/rJga1YA730JVgBlTude8jVqGkp18+ANekXx3nzy8RXPY0rOKeI zcvW2wlRcZUPoEeO0VyUW9RaNvBBw8MvaSkQ0htuCL5U8wlOZt1gqgvRXwHywtkJ 0IDIGgH7zREV/EpmPuHanAi+LTLaXKJgeYWu8cLTXd+TkkG7UjVh2jgz1JuYTGEf aWsVISgdqTxfqwUj4pGzQWF9tQ== -----END CERTIFICATE-----Generated at Mon Oct 5 14:40:29 2026 by rpki-client