$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: jmEP2IfYosWmGgqc9+3MkLkgWUSlYbb9zHAS5dCfdBc= Subject key identifier: 2A:92:A4:2D:5B:58:D6:51:11:F8:A3:5F:CA:19:51:BC:41:B8:F0:2D Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 035E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 034F Signing time: Mon 21 Sep 2026 00:47:03 +0000 Manifest this update: Mon 21 Sep 2026 00:47:02 +0000 Manifest next update: Mon 28 Sep 2026 00:47:02 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: xrgFYw9TTaSisHt7LpSN67CktI8O4Gj5OqzlK3QO5Jc=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 862 (0x35e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Sep 21 00:47:02 2026 GMT Not After : Sep 28 00:47:02 2026 GMT Subject: CN=6ab07e87-728c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:2b:03:05:0f:df:a0:92:bd:d4:78:27:2c: 75:66:20:c9:d0:21:2f:a8:66:7e:3c:ab:95:14:4f: ae:ef:7c:0d:b5:6a:32:f5:e6:5f:3b:5d:d3:59:96: 51:83:35:ac:17:16:95:40:56:81:77:d7:01:c4:65: 49:84:5a:dc:bd:3b:49:4b:af:43:8f:65:5e:5e:a9: 56:a8:30:82:cc:73:bb:3f:1d:cf:1d:fe:32:26:2a: 4c:75:2d:eb:7e:a2:4e:f5:0d:68:f2:95:3a:11:05: ae:68:c6:b1:61:f2:50:92:cd:50:d8:46:f8:88:1c: 21:a0:2b:0c:f8:99:44:ac:c8:32:94:ef:6d:26:f1: c3:97:c6:c8:4a:87:36:f6:48:36:ff:a3:5f:dd:57: 84:06:e1:d4:7f:4f:f9:c4:79:10:41:33:3d:23:9e: 60:1a:db:76:f6:ba:9b:08:f1:42:eb:c3:b0:6c:86: 03:c2:82:c1:10:b0:44:ed:dd:c5:1c:be:e2:c9:02: c1:c6:73:9d:99:7c:23:42:36:d7:b2:7b:66:a9:02: 86:93:1a:b6:52:4c:95:84:c4:3a:cd:99:52:1b:9f: cc:0c:9f:ca:ed:6e:a5:60:c0:8c:c4:ee:39:12:18: ca:6e:18:f0:e8:ad:09:d1:ca:ea:92:f2:cc:9c:9e: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:92:A4:2D:5B:58:D6:51:11:F8:A3:5F:CA:19:51:BC:41:B8:F0:2D X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:3d:86:02:e1:aa:f6:af:9e:90:0d:1b:05:54:27:e0:48: ac:ee:4f:4c:22:82:36:df:54:d3:20:2d:f6:66:25:ad:7b:a7: d3:c9:2e:58:11:fd:d1:a4:e3:76:f0:02:ab:e9:3d:a4:87:76: 6f:cb:58:d5:76:35:04:38:a9:7c:56:24:8b:08:1e:77:34:b1: 66:93:a7:91:1d:b7:e9:ca:41:2f:0a:32:8f:97:25:9e:47:ad: 18:e8:c7:7c:73:58:0e:37:5d:4f:0b:30:e6:14:18:91:76:26: 8c:5b:4e:c2:ca:c0:98:8e:00:fc:0a:06:f9:b6:3d:a0:a1:ab: df:2e:5a:0d:97:4f:4c:95:78:9c:79:b5:f4:84:1c:7e:26:22: 07:32:eb:2e:0a:20:e4:a2:de:bc:95:91:87:23:a6:d4:9e:f0: e0:8c:b7:e8:b7:4c:b8:db:74:d3:dd:6e:de:6d:fc:66:e1:56: ca:1f:7a:90:7e:22:30:b5:87:61:ef:de:db:fa:58:b8:db:39: 5d:a8:e3:59:05:97:5a:9d:ce:9c:45:22:19:d9:b2:90:9c:89: f7:1a:71:77:50:bb:17:5c:ff:87:3e:dd:b6:64:a3:44:18:ea: 28:2d:6b:71:7f:7d:33:8b:ac:11:c3:67:7f:e3:08:bf:8b:a0: ea:91:a2:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjYwOTIxMDA0NzAyWhcNMjYwOTI4MDA0NzAyWjAYMRYwFAYD VQQDEw02YWIwN2U4Ny03MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5crAwUP36CSvdR4Jyx1ZiDJ0CEvqGZ+PKuVFE+u73wNtWoy9eZfO13TWZZR gzWsFxaVQFaBd9cBxGVJhFrcvTtJS69Dj2VeXqlWqDCCzHO7Px3PHf4yJipMdS3r fqJO9Q1o8pU6EQWuaMaxYfJQks1Q2Eb4iBwhoCsM+JlErMgylO9tJvHDl8bISoc2 9kg2/6Nf3VeEBuHUf0/5xHkQQTM9I55gGtt29rqbCPFC68OwbIYDwoLBELBE7d3F HL7iyQLBxnOdmXwjQjbXsntmqQKGkxq2UkyVhMQ6zZlSG5/MDJ/K7W6lYMCMxO45 EhjKbhjw6K0J0crqkvLMnJ5VTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqSpC1b WNZREfijX8oZUbxBuPAtMB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5s9hgLhqvavnpANGwVUJ+BIrO5PTCKCNt9U0yAt9mYlrXun08kuWBH90aTj dvACq+k9pId2b8tY1XY1BDipfFYkiwgedzSxZpOnkR236cpBLwoyj5clnketGOjH fHNYDjddTwsw5hQYkXYmjFtOwsrAmI4A/AoG+bY9oKGr3y5aDZdPTJV4nHm19IQc fiYiBzLrLgog5KLevJWRhyOm1J7w4Iy36LdMuNt0091u3m38ZuFWyh96kH4iMLWH Ye/e2/pYuNs5XajjWQWXWp3OnEUiGdmykJyJ9xpxd1C7F1z/hz7dtmSjRBjqKC1r cX99M4usEcNnf+MIv4ug6pGiGw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:31:57 2026 by rpki-client