$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: KqDt1PRcuMHB/tUIvSAY4TwNOVNzYHg8WioM5FbShp4= Subject key identifier: EB:08:52:82:6C:24:40:E9:6C:E2:F6:5C:EB:EC:99:C6:D3:15:40:62 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 01DC Signing time: Fri 25 Sep 2026 03:53:14 +0000 Manifest this update: Fri 25 Sep 2026 03:53:13 +0000 Manifest next update: Fri 02 Oct 2026 03:53:13 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: iIsjls5YJPzw45IMerLZrBzfYtr0KXICrPO0jBBshnM=) 2: 89AB14CE9FB911F1AB1F7E9A5011F970.roa (hash: sZ8s23QzF9xaiemYlf1qe9fDFC4WJz5pdDudIXBJNNI=) 3: 890F7E749FB911F1AB1F7E9A5011F970.roa (hash: eYQw0SPhDmrk7SgtMJpBz4p1kI4NPWbyGxMaPtZFiZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Sep 25 03:53:13 2026 GMT Not After : Oct 2 03:53:13 2026 GMT Subject: CN=6ab5f02a-524a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:f2:0c:34:d3:91:3b:ca:1f:a3:16:79:1f: 3f:41:bf:03:6a:ec:e0:b0:fd:4b:27:0e:c6:ae:66: 9d:df:8c:4e:c0:1c:6c:34:f6:ec:6e:83:8a:a3:b9: dc:72:73:e7:d7:1e:27:6f:1d:00:5f:33:f0:d3:f0: 0c:d8:ef:c2:89:8e:64:d0:c6:75:9c:7b:a3:43:bd: 78:26:14:9f:f1:14:f5:06:8c:d7:b9:99:c2:c7:d3: 18:72:0b:39:80:21:18:11:62:2f:bc:60:2f:50:a8: c2:3b:95:16:aa:6a:e7:6b:66:1d:a3:1b:33:25:ea: 7e:10:06:dc:54:95:e9:68:41:19:8a:27:6e:f7:85: f1:b6:be:5c:6a:95:9d:85:f4:fc:54:e7:d1:c4:68: 8d:ac:13:ce:8b:b2:34:1e:8e:27:34:ad:94:a1:3a: c9:5b:5b:a7:0c:6b:3c:67:4c:d0:61:81:67:e8:e4: b3:57:b7:99:ea:f0:68:ba:d5:2a:6d:94:d3:91:46: d0:44:7d:0d:38:ec:9a:b6:57:51:6d:16:4e:4b:4a: 39:cc:03:c4:93:71:a1:a4:38:dc:56:45:23:39:65: b3:bc:0e:67:65:e2:5a:22:88:0a:9d:d6:16:f5:2e: 6c:4c:ba:34:68:83:72:d3:13:c6:18:cf:a2:dc:97: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:52:82:6C:24:40:E9:6C:E2:F6:5C:EB:EC:99:C6:D3:15:40:62 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:11:5b:62:de:25:23:ee:a4:be:31:34:a1:40:c9:84:ba:15: 33:3a:6c:6d:79:29:40:ae:f1:02:79:eb:4f:b4:91:65:73:fc: 81:91:9e:87:45:8a:7b:77:e9:9e:ad:6e:4b:68:13:38:f0:42: f0:7c:d7:67:35:bd:13:3e:27:d7:91:ab:1a:68:d8:cf:74:4d: 57:5e:58:bd:9c:11:88:b6:d7:fb:90:40:69:50:e1:fd:8c:d7: ad:55:29:35:9b:34:1a:9d:aa:6d:96:48:ff:14:46:54:ba:f3: 3c:54:e1:a6:aa:7d:8c:4d:fe:bc:95:e8:03:0a:85:34:71:56: 9d:44:1d:37:a7:0f:b3:29:c1:22:50:aa:d1:ce:0d:b0:68:59: 04:65:4c:41:de:1c:59:2a:26:dd:f8:52:b1:a6:ff:4f:de:80: 69:4c:df:42:3a:65:14:1c:af:5e:c2:6b:69:fb:2a:0f:46:87: 9b:e1:48:47:d8:52:cb:d0:e2:3c:83:20:ae:9c:fc:91:1a:4d: 15:72:3e:cc:2f:7b:d3:13:aa:c7:ab:ff:54:d7:ae:a1:5b:3b: be:d8:c0:88:7b:c3:ff:f9:46:f9:24:0d:d0:8f:aa:cf:6c:c3: 74:94:69:75:87:42:48:ae:ba:ca:dd:3e:7b:cd:d8:80:0b:2f: 7f:64:bb:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwOTI1MDM1MzEzWhcNMjYxMDAyMDM1MzEzWjAYMRYwFAYD VQQDEw02YWI1ZjAyYS01MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AvyDDTTkTvKH6MWeR8/Qb8DauzgsP1LJw7Grmad34xOwBxsNPbsboOKo7nc cnPn1x4nbx0AXzPw0/AM2O/CiY5k0MZ1nHujQ714JhSf8RT1BozXuZnCx9MYcgs5 gCEYEWIvvGAvUKjCO5UWqmrna2YdoxszJep+EAbcVJXpaEEZiidu94Xxtr5capWd hfT8VOfRxGiNrBPOi7I0Ho4nNK2UoTrJW1unDGs8Z0zQYYFn6OSzV7eZ6vBoutUq bZTTkUbQRH0NOOyatldRbRZOS0o5zAPEk3GhpDjcVkUjOWWzvA5nZeJaIogKndYW 9S5sTLo0aINy0xPGGM+i3JcTSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsIUoJs JEDpbOL2XOvsmcbTFUBiMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATBFbYt4lI+6kvjE0oUDJhLoVMzpsbXkpQK7xAnnrT7SRZXP8gZGeh0WKe3fp nq1uS2gTOPBC8HzXZzW9Ez4n15GrGmjYz3RNV15YvZwRiLbX+5BAaVDh/YzXrVUp NZs0Gp2qbZZI/xRGVLrzPFThpqp9jE3+vJXoAwqFNHFWnUQdN6cPsynBIlCq0c4N sGhZBGVMQd4cWSom3fhSsab/T96AaUzfQjplFByvXsJrafsqD0aHm+FIR9hSy9Di PIMgrpz8kRpNFXI+zC970xOqx6v/VNeuoVs7vtjAiHvD//lG+SQN0I+qz2zDdJRp dYdCSK66yt0+e83YgAsvf2S7Dw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:59:22 2026 by rpki-client