$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: uMCbgiI0WwmXZevaYJ4yLpvs2Njq3KSjAkAaGyojjZU= Subject key identifier: 5E:1D:34:A8:F3:72:03:33:F8:66:1D:6C:A0:B4:87:85:00:58:63:CB Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 09BB Signing time: Fri 02 Oct 2026 20:10:24 +0000 Manifest this update: Fri 02 Oct 2026 20:10:23 +0000 Manifest next update: Fri 09 Oct 2026 20:10:23 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: kcNU82Pm2qe23pLWbE3NQ9rDjI7l2E2vbV7Iv9ddlcw=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Oct 2 20:10:23 2026 GMT Not After : Oct 9 20:10:23 2026 GMT Subject: CN=6ac00fb0-78d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:51:79:b8:3f:b2:16:37:5a:0e:b8:7d:15: 05:62:ec:ba:75:2d:0b:7c:d0:cf:9f:73:76:64:dd: 39:9e:e4:cc:2c:3b:2e:4f:64:75:ed:e5:1b:9b:50: ac:d3:3b:9c:bd:3d:84:fb:02:3c:ff:24:e7:9d:b6: 4e:a7:29:65:d3:e6:c6:fa:07:01:8d:e2:94:73:d6: 22:19:88:64:25:a7:23:23:01:3c:96:12:16:91:1d: e9:32:74:ee:43:18:07:d2:68:12:c3:7c:7f:a9:28: c1:38:93:65:5c:25:79:e1:81:50:8f:56:a3:f7:7f: 6b:3f:1d:56:3f:0d:3c:6b:79:3d:eb:ad:3c:ce:f5: fb:83:eb:6e:4c:3a:8b:db:c1:94:df:a7:0d:8f:c9: 84:39:58:df:04:51:e3:f8:dd:62:7c:68:2d:fa:bd: 78:cc:34:1c:3a:ea:bc:a8:80:c2:1d:47:10:83:5a: fe:b0:51:ee:42:24:7f:57:02:9c:84:69:65:b1:ae: 59:21:8b:d3:a1:0d:97:89:1f:ca:1e:96:24:b9:b4: 84:e2:5f:fb:25:b4:8e:a3:66:85:5c:af:7b:25:e3: 17:88:84:91:15:97:be:d5:96:4b:db:b4:4b:f3:a0: 19:ba:d1:74:92:99:ae:d9:3c:a3:b4:ae:eb:60:2d: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1D:34:A8:F3:72:03:33:F8:66:1D:6C:A0:B4:87:85:00:58:63:CB X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6f:f2:b5:dc:07:37:9b:fa:16:7d:f4:da:eb:bf:b0:43:b3: a3:1e:24:03:38:f4:6c:df:68:21:a4:67:77:f0:51:ff:a1:9c: 3d:51:2a:8f:6b:96:ec:44:b5:d8:b6:ec:6c:71:c5:58:f5:38: 00:06:28:7c:4e:5d:ff:21:b4:76:53:52:9c:7c:09:7e:74:5a: 43:c0:0d:a5:8b:55:4b:78:17:b6:c8:bf:7f:cf:15:09:4d:a4: c7:d8:95:bd:59:37:91:af:55:06:81:e5:de:6d:67:24:e8:06: 4e:85:86:2b:5f:77:8b:d7:7f:8b:ee:d4:34:f6:c9:ac:b8:39: 0c:c2:aa:ea:7d:5c:a0:4e:2a:33:38:70:4f:4d:da:47:08:65: 91:0f:a3:41:7d:ae:a2:57:00:aa:03:37:0e:f3:a2:32:13:0d: 99:19:6e:c9:4d:b1:03:c7:47:44:2b:93:af:67:07:3a:b2:69: 83:07:f4:d9:85:ce:1a:23:05:34:e6:ac:0a:fc:a7:17:ab:fd: 4a:7b:14:a3:db:7a:dd:49:b7:a0:27:71:d9:f1:72:2e:49:7b: 0c:52:86:fc:79:bf:e6:5f:ea:4d:c2:d0:c7:a0:32:ac:89:09: 49:ce:58:92:37:d6:4f:be:d6:23:f1:bc:8f:5e:2a:ac:e6:ad: 17:83:12:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjYxMDAyMjAxMDIzWhcNMjYxMDA5MjAxMDIzWjAYMRYwFAYD VQQDEw02YWMwMGZiMC03OGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWRRebg/shY3Wg64fRUFYuy6dS0LfNDPn3N2ZN05nuTMLDsuT2R17eUbm1Cs 0zucvT2E+wI8/yTnnbZOpyll0+bG+gcBjeKUc9YiGYhkJacjIwE8lhIWkR3pMnTu QxgH0mgSw3x/qSjBOJNlXCV54YFQj1aj939rPx1WPw08a3k96608zvX7g+tuTDqL 28GU36cNj8mEOVjfBFHj+N1ifGgt+r14zDQcOuq8qIDCHUcQg1r+sFHuQiR/VwKc hGllsa5ZIYvToQ2XiR/KHpYkubSE4l/7JbSOo2aFXK97JeMXiISRFZe+1ZZL27RL 86AZutF0kpmu2TyjtK7rYC11TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4dNKjz cgMz+GYdbKC0h4UAWGPLMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl2/ytdwHN5v6Fn302uu/sEOzox4kAzj0bN9oIaRnd/BR/6GcPVEqj2uW7ES1 2LbsbHHFWPU4AAYofE5d/yG0dlNSnHwJfnRaQ8ANpYtVS3gXtsi/f88VCU2kx9iV vVk3ka9VBoHl3m1nJOgGToWGK193i9d/i+7UNPbJrLg5DMKq6n1coE4qMzhwT03a RwhlkQ+jQX2uolcAqgM3DvOiMhMNmRluyU2xA8dHRCuTr2cHOrJpgwf02YXOGiMF NOasCvynF6v9SnsUo9t63Um3oCdx2fFyLkl7DFKG/Hm/5l/qTcLQx6AyrIkJSc5Y kjfWT77WI/G8j14qrOatF4MShg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:17:20 2026 by rpki-client