$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: jjfBgXZyOy9v/USYVYYZsFLTlwojMc3cFp9/Lr9Cym0= Subject key identifier: 36:FD:64:59:78:F1:07:35:72:53:D9:79:B7:A2:1D:65:CA:69:20:68 Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 01FB Signing time: Wed 23 Sep 2026 03:02:14 +0000 Manifest this update: Wed 23 Sep 2026 03:02:14 +0000 Manifest next update: Wed 30 Sep 2026 03:02:14 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: 0oDzx4fYTsX6e1mIYEKDrlFR6kF0D8xGsjBtCiBSMjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Sep 23 03:02:14 2026 GMT Not After : Sep 30 03:02:14 2026 GMT Subject: CN=6ab34136-03a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:6c:cb:5a:ab:a1:0f:23:c9:36:69:8d:2e: 30:58:a6:ef:1c:82:d7:db:82:be:22:8b:52:03:52: ee:cc:18:6e:35:e4:c9:cb:6f:56:30:7f:e3:23:17: 15:42:3e:4b:7b:4b:16:69:9e:c0:e3:77:df:54:f7: 34:26:14:23:9a:d0:75:69:14:85:c2:ff:cc:bc:8c: 5b:2f:6a:6b:c3:fc:17:5b:a6:e5:22:5c:d9:19:31: 58:81:6c:cf:ec:be:11:73:dc:cd:65:04:a0:dc:98: 24:d5:61:0a:3a:18:35:4c:71:d3:98:47:c3:62:bb: 7f:94:e7:29:44:ae:d1:a3:bc:b9:b2:b4:54:63:f4: 94:09:17:14:13:91:00:0d:3c:80:e0:8d:54:d6:74: 9c:d2:ef:74:ef:3a:d5:41:e8:7a:82:7f:53:af:98: 1a:78:d1:7c:7d:77:9c:aa:d0:2d:49:f6:13:0c:82: 01:55:dc:90:c6:17:97:7a:19:d1:94:28:d4:ca:17: 3f:01:10:2d:36:19:74:e7:ff:86:c1:cf:18:f8:92: cb:07:c0:a7:6c:47:20:6b:0b:35:60:d6:d7:45:7d: e3:1a:18:59:43:37:e1:70:62:9c:a6:83:a0:c6:ac: f4:a5:d0:ce:a3:b3:f5:6f:2d:bd:14:07:ca:fb:bd: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:64:59:78:F1:07:35:72:53:D9:79:B7:A2:1D:65:CA:69:20:68 X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:85:64:7a:9c:41:7d:ac:72:c8:d8:05:f5:6f:2e:cf:f4:1a: 27:c5:78:fe:20:98:6b:af:d6:39:d3:83:a2:15:f2:3e:27:8d: 4c:25:bb:b1:55:b8:e4:05:b3:a4:a0:71:5c:37:38:89:a8:78: 5c:69:8c:ec:6f:65:fc:8a:0b:56:60:52:6e:fb:14:58:a1:80: 6f:cb:c7:69:ba:21:5e:a0:5f:b3:35:7a:83:b1:97:f7:96:59: 9a:b9:c5:2e:54:f6:cf:92:0c:d5:02:f9:62:26:c6:8a:14:22: 87:3e:ea:08:f8:08:e4:36:96:b0:49:2f:bd:a7:40:60:42:6f: ae:23:b2:7d:92:85:54:ea:8f:14:0e:01:5f:4e:09:1e:1a:5c: 8a:66:5f:65:20:4e:1b:40:c3:f0:31:6d:0f:ea:f8:b4:98:71: eb:8d:c0:28:06:a0:e1:21:b0:eb:88:aa:57:c4:40:7d:cb:24: 37:d0:28:6c:d3:b3:34:d4:62:a8:e3:c2:3f:92:20:6d:54:de: 07:a2:5d:fa:69:16:b8:54:98:97:3f:22:f1:23:66:ce:49:3c: 03:c2:49:9d:3d:76:1f:a2:b9:27:77:00:d4:60:a5:2c:d1:4a: 95:1d:12:b5:e5:35:c9:40:aa:c0:83:fc:19:79:2f:cd:90:d5: a6:ea:2e:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjYwOTIzMDMwMjE0WhcNMjYwOTMwMDMwMjE0WjAYMRYwFAYD VQQDEw02YWIzNDEzNi0wM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O1sy1qroQ8jyTZpjS4wWKbvHILX24K+IotSA1LuzBhuNeTJy29WMH/jIxcV Qj5Le0sWaZ7A43ffVPc0JhQjmtB1aRSFwv/MvIxbL2prw/wXW6blIlzZGTFYgWzP 7L4Rc9zNZQSg3Jgk1WEKOhg1THHTmEfDYrt/lOcpRK7Ro7y5srRUY/SUCRcUE5EA DTyA4I1U1nSc0u907zrVQeh6gn9Tr5gaeNF8fXecqtAtSfYTDIIBVdyQxheXehnR lCjUyhc/ARAtNhl05/+Gwc8Y+JLLB8CnbEcgaws1YNbXRX3jGhhZQzfhcGKcpoOg xqz0pdDOo7P1by29FAfK+71L/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDb9ZFl4 8Qc1clPZebeiHWXKaSBoMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ4VkepxBfaxyyNgF9W8uz/QaJ8V4/iCYa6/WOdODohXyPieNTCW7sVW45AWz pKBxXDc4iah4XGmM7G9l/IoLVmBSbvsUWKGAb8vHabohXqBfszV6g7GX95ZZmrnF LlT2z5IM1QL5YibGihQihz7qCPgI5DaWsEkvvadAYEJvriOyfZKFVOqPFA4BX04J HhpcimZfZSBOG0DD8DFtD+r4tJhx643AKAag4SGw64iqV8RAfcskN9AobNOzNNRi qOPCP5IgbVTeB6Jd+mkWuFSYlz8i8SNmzkk8A8JJnT12H6K5J3cA1GClLNFKlR0S teU1yUCqwIP8GXkvzZDVpuouKg== -----END CERTIFICATE-----Generated at Wed Sep 23 08:22:36 2026 by rpki-client