$ rpki-client -vvvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: 2CjXYlWN3saaOFkLqki0MYXzVU7bbkAUXKdNZq4ROWE= Subject key identifier: E3:FD:8D:12:44:D8:B7:02:88:6D:44:89:D1:55:6A:FE:5B:DF:AD:E7 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 027E Signing time: Thu 01 Oct 2026 02:51:25 +0000 Manifest this update: Thu 01 Oct 2026 02:51:24 +0000 Manifest next update: Thu 08 Oct 2026 02:51:24 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: x59rudQs9A16axcKcsWl13EZ7tjZ3Cz1YXIWxOcD100=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 02:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Oct 1 02:51:24 2026 GMT Not After : Oct 8 02:51:24 2026 GMT Subject: CN=6abdcaac-617a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:53:e9:b8:5c:91:47:2d:c2:7e:a3:97:57: 43:1e:08:ce:37:3b:64:5a:55:b4:2d:cf:51:12:b6: 79:f4:96:a2:c7:03:f3:de:16:79:72:91:fe:35:60: c4:99:ec:6f:51:14:c9:72:ba:17:54:ca:37:8d:6d: 62:b1:fa:9a:e5:db:d2:91:e4:4f:f3:b0:ef:f4:96: f3:38:46:37:08:aa:de:1e:b4:90:a7:a3:eb:39:70: 49:c8:0e:a4:cc:85:b7:4d:76:db:cc:ac:64:3c:01: 9b:eb:ef:27:60:b9:44:1f:82:12:08:e0:e1:6e:28: 06:ec:61:4a:98:f2:d1:ef:6f:f3:08:5a:46:a5:55: 85:ad:86:ac:7e:70:49:d5:a5:b5:e1:32:21:51:88: 6e:db:d5:c2:4c:a0:2a:00:47:7f:07:c0:a5:2d:2d: 13:52:a0:65:98:5f:08:29:06:24:8c:29:64:a2:4b: e0:49:f6:11:b6:6d:7f:cb:fc:1b:a4:fe:c0:bb:76: f9:a8:e8:d6:88:57:4b:71:ba:b0:08:69:d5:51:41: 9b:85:03:19:e6:bb:b4:bf:9b:ec:0d:84:e9:49:29: 39:9d:65:0d:ef:24:05:b0:5a:02:6a:27:0c:9f:87: ec:16:f9:3c:e8:39:b8:a8:87:bf:58:14:49:4b:48: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FD:8D:12:44:D8:B7:02:88:6D:44:89:D1:55:6A:FE:5B:DF:AD:E7 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:4e:bd:67:22:a5:d7:6e:02:11:30:f7:53:3e:83:9c:20: 1a:ac:ed:75:75:4b:0d:09:a5:c0:9a:22:a1:db:8c:a8:6c:89: cf:88:f9:5e:0a:76:49:a9:76:4d:43:cc:1a:5f:92:8e:52:d3: 94:63:0e:38:40:65:94:d1:47:4d:13:9a:fb:a6:ee:88:39:32: 99:bc:46:a3:52:19:7b:1a:1c:7b:0f:86:40:72:6e:50:1d:56: 15:62:82:be:e1:9e:77:71:07:c7:f1:3a:71:21:3e:a7:d5:0c: b5:ca:c3:55:85:f1:9b:3f:11:a8:95:1c:82:72:fd:0b:3f:80: 11:00:33:e9:61:d9:d5:56:bb:ba:d7:86:a7:40:0a:18:7a:75: 8e:53:d8:ad:9e:0c:fb:9d:cd:f7:ab:85:78:a4:4f:e2:96:43: fb:b2:31:31:d9:9e:bc:37:fd:f5:24:49:fd:ea:78:13:80:c8: b5:a9:e8:de:1e:1e:65:41:93:21:0e:42:da:46:17:cf:b6:41: 62:f8:32:d9:23:36:30:14:48:28:63:72:ad:b9:85:b4:4b:2f: 14:ad:c5:81:12:6e:d6:76:0d:5f:a8:63:dc:da:ae:f3:d3:7b: f9:8b:a9:c5:2e:2a:bc:e8:28:21:d4:cd:8a:fb:1f:b7:54:0d: 92:b8:f6:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjYxMDAxMDI1MTI0WhcNMjYxMDA4MDI1MTI0WjAYMRYwFAYD VQQDEw02YWJkY2FhYy02MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplBT6bhckUctwn6jl1dDHgjONztkWlW0Lc9RErZ59JaixwPz3hZ5cpH+NWDE mexvURTJcroXVMo3jW1isfqa5dvSkeRP87Dv9JbzOEY3CKreHrSQp6PrOXBJyA6k zIW3TXbbzKxkPAGb6+8nYLlEH4ISCODhbigG7GFKmPLR72/zCFpGpVWFrYasfnBJ 1aW14TIhUYhu29XCTKAqAEd/B8ClLS0TUqBlmF8IKQYkjClkokvgSfYRtm1/y/wb pP7Au3b5qOjWiFdLcbqwCGnVUUGbhQMZ5ru0v5vsDYTpSSk5nWUN7yQFsFoCaicM n4fsFvk86Dm4qIe/WBRJS0hP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP9jRJE 2LcCiG1EidFVav5b363nMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUs5OvWcipdduAhEw91M+g5wgGqztdXVLDQmlwJoioduMqGyJz4j5Xgp2Sal2 TUPMGl+SjlLTlGMOOEBllNFHTROa+6buiDkymbxGo1IZexocew+GQHJuUB1WFWKC vuGed3EHx/E6cSE+p9UMtcrDVYXxmz8RqJUcgnL9Cz+AEQAz6WHZ1Va7uteGp0AK GHp1jlPYrZ4M+53N96uFeKRP4pZD+7IxMdmevDf99SRJ/ep4E4DItano3h4eZUGT IQ5C2kYXz7ZBYvgy2SM2MBRIKGNyrbmFtEsvFK3FgRJu1nYNX6hj3Nqu89N7+Yup xS4qvOgoIdTNivsft1QNkrj2ug== -----END CERTIFICATE-----Generated at Thu Oct 1 22:07:53 2026 by rpki-client