$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft File: KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft (raw, json) Hash identifier: A6mCdzOnxxj+7q8WAfQ5Mz1vownmjeYsZfhyxATFYLY= Subject key identifier: 37:BB:47:1A:FB:78:74:DF:F6:F5:CD:BB:5B:7B:99:E2:2A:46:E1:8D Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B Certificate issuer: /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft Manifest number: 011D Signing time: Wed 23 Sep 2026 05:40:20 +0000 Manifest this update: Wed 23 Sep 2026 05:40:19 +0000 Manifest next update: Wed 30 Sep 2026 05:40:19 +0000 Files and hashes: 1: KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl (hash: WK1+RoFC4Kl4qbw5SmfzQDUPzhTlIVSLlqvOoZ32AA4=) 2: 8CC07FC0047211F0A6541526C4F9AE02.roa (hash: xg+5Kz8DfP64v+0K6uLKgS3hlywm1P1UwcX/Q9P2caM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B Validity Not Before: Sep 23 05:40:19 2026 GMT Not After : Sep 30 05:40:19 2026 GMT Subject: CN=6ab36643-8eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:15:8b:84:5b:b8:a3:7e:29:83:d9:cc:b5: d8:d2:6b:04:41:57:99:d4:e6:4b:61:55:d9:7c:ae: fd:46:73:e9:3f:8d:13:0f:a6:17:fe:00:43:fc:ce: b7:82:1c:cd:83:bb:df:73:4d:51:79:30:ca:34:c9: 13:b6:63:e7:bf:6d:61:93:78:10:0e:9e:00:58:c8: f0:f1:32:cc:bd:73:59:62:06:d4:48:b1:85:53:ab: 89:17:62:3a:96:0a:c0:c5:2b:9c:30:f8:d8:d3:93: 06:46:cb:0e:fa:4c:02:63:e2:ec:53:db:99:e3:76: 55:ba:1e:cb:c9:0e:2a:38:0a:e8:05:9a:f6:da:47: 65:66:46:e6:2f:ff:97:85:f5:ed:db:5d:73:cf:46: 7e:cf:17:cd:56:a6:cc:8e:07:97:47:53:aa:99:fa: 36:da:9a:a0:cd:b3:cb:9a:d6:c6:3c:9d:ce:f0:bf: e9:f8:4c:bc:0f:68:b7:04:5c:c2:3e:2c:29:e7:23: d7:3f:9a:00:a0:4b:fe:d1:b8:71:cc:f3:ce:f1:ba: 0d:19:b3:38:b5:61:f7:6c:24:09:90:26:ea:8a:1e: 0b:c8:4b:97:ca:f8:05:c1:0d:4a:47:f6:89:4d:db: c6:fb:0d:04:98:81:6b:08:3d:95:6c:1c:78:45:c9: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BB:47:1A:FB:78:74:DF:F6:F5:CD:BB:5B:7B:99:E2:2A:46:E1:8D X509v3 Authority Key Identifier: keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c2:03:56:0f:c8:aa:80:81:09:5e:3b:58:dc:5c:67:ad:9c: 04:f8:4c:5f:93:09:3e:81:62:c1:37:cb:13:d4:93:86:3a:0c: 44:42:9f:e1:10:2d:32:84:e4:16:05:85:59:1d:ee:cb:bb:eb: 7b:ee:c8:06:93:11:97:d3:aa:25:c9:b2:e9:3c:2c:0c:fc:f2: ba:55:12:25:a3:9d:13:8c:5f:b4:47:92:f3:2b:f3:21:f0:d8: ab:a4:e5:1d:e7:47:26:29:2c:4c:ef:4a:02:e7:cf:4a:33:3c: 5f:ea:54:66:85:58:5f:fb:d1:de:dd:f8:97:61:dc:2b:5b:5c: 54:2e:e0:7c:6f:14:2d:b2:25:8b:ef:58:4e:ba:8b:ec:6e:ea: f8:df:ac:d5:2d:fb:65:03:6a:d9:6b:60:83:64:ca:3a:0d:aa: 8d:87:06:19:c7:5b:7d:26:35:25:70:0e:63:e4:f7:1a:f1:8d: 9d:13:e9:ff:ad:02:e8:79:36:d0:e1:90:65:5b:6f:05:ba:cf: 87:6c:a2:f2:e1:9a:45:a7:72:42:a7:1f:fd:8d:31:40:2d:14: 92:de:91:72:62:12:a5:7b:ef:32:ca:af:fc:77:77:aa:1a:37: fc:08:e3:95:8f:15:97:39:6c:69:86:17:ca:86:f4:1a:7a:bc: 77:df:a8:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyODcxMTAvBgNVBAUTKDJBNDVBNDFENjBFMkYxMDREM0REMzlDODZGMTRCQzU5 MDA4ODNGNEIwHhcNMjYwOTIzMDU0MDE5WhcNMjYwOTMwMDU0MDE5WjAYMRYwFAYD VQQDEw02YWIzNjY0My04ZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5wVi4RbuKN+KYPZzLXY0msEQVeZ1OZLYVXZfK79RnPpP40TD6YX/gBD/M63 ghzNg7vfc01ReTDKNMkTtmPnv21hk3gQDp4AWMjw8TLMvXNZYgbUSLGFU6uJF2I6 lgrAxSucMPjY05MGRssO+kwCY+LsU9uZ43ZVuh7LyQ4qOAroBZr22kdlZkbmL/+X hfXt211zz0Z+zxfNVqbMjgeXR1Oqmfo22pqgzbPLmtbGPJ3O8L/p+Ey8D2i3BFzC Piwp5yPXP5oAoEv+0bhxzPPO8boNGbM4tWH3bCQJkCbqih4LyEuXyvgFwQ1KR/aJ TdvG+w0EmIFrCD2VbBx4Rcl6/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDe7Rxr7 eHTf9vXNu1t7meIqRuGNMB8GA1UdIwQYMBaAFCpFpB1g4vEE0905yG8UvFkAiD9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI4Ny8zNzI3OEMxNjA0 NkQxMUYwQjc3RDAzNjFDNEY5QUUwMi9La1drSFdEaThRVFQzVG5JYnhTOFdRQ0lQ MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trV2tIV0RpOFFUVDNUbklieFM4V1FDSVAwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI4Ny8zNzI3OEMxNjA0NkQxMUYwQjc3RDAzNjFDNEY5QUUwMi9La1drSFdEaThR VFQzVG5JYnhTOFdRQ0lQMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANcIDVg/IqoCBCV47WNxcZ62cBPhMX5MJPoFiwTfLE9SThjoMREKf4RAtMoTk FgWFWR3uy7vre+7IBpMRl9OqJcmy6TwsDPzyulUSJaOdE4xftEeS8yvzIfDYq6Tl HedHJiksTO9KAufPSjM8X+pUZoVYX/vR3t34l2HcK1tcVC7gfG8ULbIli+9YTrqL 7G7q+N+s1S37ZQNq2Wtgg2TKOg2qjYcGGcdbfSY1JXAOY+T3GvGNnRPp/60C6Hk2 0OGQZVtvBbrPh2yi8uGaRadyQqcf/Y0xQC0Ukt6RcmISpXvvMsqv/Hd3qho3/Ajj lY8VlzlsaYYXyob0Gnq8d9+oRg== -----END CERTIFICATE-----Generated at Fri Sep 25 07:23:32 2026 by rpki-client