$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft File: kTiXequn9N40xorjSDBpO8ZtD8w.mft (raw, json) Hash identifier: r/6cxk9ZGINru6wN+TD2ckKJJ0/eS6VWJ34c+/+WJZo= Subject key identifier: 3F:D8:E1:BF:A8:92:A7:E8:FB:6D:71:62:9D:31:E5:8B:A8:B5:07:13 Authority key identifier: 91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC Certificate issuer: /CN=A91AEB42/serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft Manifest number: 0D Signing time: Wed 23 Sep 2026 01:01:16 +0000 Manifest this update: Wed 23 Sep 2026 01:01:15 +0000 Manifest next update: Wed 30 Sep 2026 01:01:15 +0000 Files and hashes: 1: kTiXequn9N40xorjSDBpO8ZtD8w.crl (hash: qYXBDp5qzVdjI+5hSvSW5RHDstmFjCxomIbfCeswZOs=) 2: 72CB80A6B56F11F1B8468D906211F970.roa (hash: Pc6QXuT7CKKlNzYYO7vzrLK902HOqrCdlzGI/a0qOt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB42, serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC Validity Not Before: Sep 23 01:01:15 2026 GMT Not After : Sep 30 01:01:15 2026 GMT Subject: CN=6ab324db-08e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dd:25:24:b9:3e:24:dc:f3:a1:d4:1c:4b:47: d2:f0:3a:6a:e5:df:46:fd:ab:91:12:b7:af:af:bc: 9d:34:f0:4c:0a:d8:e0:7a:8a:81:8e:9f:f4:be:b6: 7f:c7:8d:89:a5:1a:36:42:a6:e7:3b:3e:48:1e:a8: 04:a1:9a:1c:df:e9:7e:0f:ae:1b:fc:3a:f9:ea:3d: c5:33:99:1d:88:d0:35:a7:d2:4b:b3:16:79:28:75: 3b:52:d8:ca:c7:22:a8:12:e2:47:3e:ce:75:da:f6: 59:6c:31:d1:c5:93:33:1c:95:16:ce:6c:f5:90:72: bc:6d:1a:8f:a7:1d:2f:86:69:9e:d0:a5:91:c4:10: fe:1a:bd:ee:0b:30:fc:e1:70:3e:41:ec:5a:08:df: 56:94:46:58:14:eb:66:4a:70:c0:67:83:3b:68:0d: b2:02:30:73:67:9b:e4:9b:af:c2:42:eb:0b:8f:f4: 4f:28:f8:89:ef:9d:6c:d2:87:1f:44:4f:ad:71:1d: aa:f7:d7:9f:f2:35:13:ca:67:c1:7a:5c:e0:ac:e2: 91:3d:51:8f:f9:cf:e4:aa:07:c7:b2:f6:a5:d1:37: 3c:e0:b0:e2:98:10:71:b4:72:a3:ae:f2:e8:f8:8c: 3b:1f:3e:da:12:a3:ea:bb:41:b9:0f:24:cc:d9:7f: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D8:E1:BF:A8:92:A7:E8:FB:6D:71:62:9D:31:E5:8B:A8:B5:07:13 X509v3 Authority Key Identifier: keyid:91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:de:79:9b:75:98:de:df:a6:3e:66:c1:f8:9c:66:0e:80:92: b4:2e:83:94:86:62:a4:00:fb:38:ca:72:2e:4b:0a:25:1c:7b: 95:45:eb:7a:64:e6:70:cb:86:c6:29:d3:31:aa:8f:a3:b3:08: 52:7f:89:39:47:fe:63:d6:92:96:3f:22:18:b6:39:d3:92:d4: 6a:86:d5:2b:54:3f:1b:d6:61:7e:2a:77:84:2d:7f:9a:a6:08: 1c:d5:a6:88:a8:b4:29:3f:bc:41:09:d5:4f:81:78:3a:ef:5e: 61:08:04:4e:c5:a8:45:ba:80:58:ab:85:f1:0f:8a:b1:32:19: c7:54:9b:40:1b:3d:2b:7d:da:c4:0c:e9:a3:71:7a:c6:50:11: d0:28:f1:15:d1:b8:df:7f:9b:03:73:17:07:ba:c5:82:31:fd: 1e:9a:01:5d:40:f5:4c:77:5d:5b:cd:38:93:62:30:56:b0:5c: eb:08:8b:c4:10:19:3a:bc:4d:67:1c:e2:6d:88:e7:47:a8:12: 36:09:21:ce:cd:d1:b7:b5:18:5a:7b:dc:25:5f:43:c0:71:b2: 77:ce:c9:31:72:17:f1:f9:b4:e3:08:a3:a9:ba:34:c6:61:5a: 54:24:e0:21:52:bb:e7:dd:3d:b7:9b:17:2a:6b:66:8e:e7:10: 0a:d4:aa:05 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RUI0MjExMC8GA1UEBRMoOTEzODk3N0FBQkE3RjRERTM0QzY4QUUzNDgzMDY5M0JD NjZEMEZDQzAeFw0yNjA5MjMwMTAxMTVaFw0yNjA5MzAwMTAxMTVaMBgxFjAUBgNV BAMTDTZhYjMyNGRiLTA4ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDs3SUkuT4k3POh1BxLR9LwOmrl30b9q5ESt6+vvJ008EwK2OB6ioGOn/S+tn/H jYmlGjZCpuc7PkgeqAShmhzf6X4Prhv8OvnqPcUzmR2I0DWn0kuzFnkodTtS2MrH IqgS4kc+znXa9llsMdHFkzMclRbObPWQcrxtGo+nHS+GaZ7QpZHEEP4ave4LMPzh cD5B7FoI31aURlgU62ZKcMBngztoDbICMHNnm+Sbr8JC6wuP9E8o+InvnWzShx9E T61xHar315/yNRPKZ8F6XOCs4pE9UY/5z+SqB8ey9qXRNzzgsOKYEHG0cqOu8uj4 jDsfPtoSo+q7QbkPJMzZf1iHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP9jhv6iS p+j7bXFinTHli6i1BxMwHwYDVR0jBBgwFoAUkTiXequn9N40xorjSDBpO8ZtD8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFQjQyLzE2QzdERkQ2QTdF OTExRjFCMEIzOEM0REE2RUU1MjhFL2tUaVhlcXVuOU40MHhvcmpTREJwTzhadEQ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1RpWGVxdW45TjQweG9yalNEQnBPOFp0RDh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF QjQyLzE2QzdERkQ2QTdFOTExRjFCMEIzOEM0REE2RUU1MjhFL2tUaVhlcXVuOU40 MHhvcmpTREJwTzhadEQ4dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAm3nmbdZje36Y+ZsH4nGYOgJK0LoOUhmKkAPs4ynIuSwolHHuVRet6ZOZwy4bG KdMxqo+jswhSf4k5R/5j1pKWPyIYtjnTktRqhtUrVD8b1mF+KneELX+apggc1aaI qLQpP7xBCdVPgXg6715hCAROxahFuoBYq4XxD4qxMhnHVJtAGz0rfdrEDOmjcXrG UBHQKPEV0bjff5sDcxcHusWCMf0emgFdQPVMd11bzTiTYjBWsFzrCIvEEBk6vE1n HOJtiOdHqBI2CSHOzdG3tRhae9wlX0PAcbJ3zskxchfx+bTjCKOpujTGYVpUJOAh Urvn3T23mxcqa2aO5xAK1KoF -----END CERTIFICATE-----Generated at Thu Sep 24 10:20:08 2026 by rpki-client