$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft File: kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft (raw, json) Hash identifier: eJvUVFe3rZs0FwUlB3xB9sGatKj2NImyRpsUWfErZmM= Subject key identifier: 95:98:E3:B8:FF:42:92:BE:9A:95:3D:86:12:75:5F:78:1D:8A:CA:A3 Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft Manifest number: 02AE Signing time: Fri 25 Sep 2026 01:43:33 +0000 Manifest this update: Fri 25 Sep 2026 01:43:33 +0000 Manifest next update: Fri 02 Oct 2026 01:43:33 +0000 Files and hashes: 1: kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl (hash: uK2JIB47FMwcgJt2UE14wx3mL6rGouZNU0xjHa7WV9Q=) 2: F96174ECC27D11EDB8226F2DC4F9AE02.roa (hash: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Validity Not Before: Sep 25 01:43:33 2026 GMT Not After : Oct 2 01:43:33 2026 GMT Subject: CN=6ab5d1c5-888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:e8:4f:fc:af:fa:09:99:45:df:04:e7:8c: 4a:a5:1c:ec:e1:9d:8e:17:39:a8:df:fe:8b:85:3c: b9:de:d0:b5:e8:95:e7:67:90:81:da:77:66:98:8c: e4:3a:94:64:32:c5:b9:1f:ba:3c:e6:fb:d9:e5:64: 19:e4:24:ed:51:2b:98:bc:ab:ec:2a:7e:d6:67:d0: ea:6e:f7:da:a2:51:82:fd:f5:1a:8e:dd:ef:1f:6a: 29:f2:4c:c7:27:5c:77:8e:97:14:d2:9b:d8:67:6c: b9:57:1b:15:62:4a:35:e0:42:4a:ca:8b:ad:83:05: b9:a8:a2:68:90:1c:42:58:eb:22:a5:f8:f4:e1:4b: 08:54:7c:b7:fb:d5:f1:99:55:38:4e:51:39:48:ca: a9:06:f7:fc:7b:06:e7:49:72:2e:8f:89:68:92:a4: c7:86:79:ca:3d:eb:17:3c:f7:8d:0e:0e:84:ee:f3: 12:e2:70:43:92:64:b5:ee:75:81:d0:78:54:c8:ad: ef:3f:05:fa:3b:07:1f:9a:c5:55:38:7a:66:a8:7d: b9:5a:8c:bd:91:31:da:e0:15:69:b7:49:77:5f:ed: d8:04:7e:ae:37:ec:de:59:8e:53:85:8a:9f:f3:a4: d2:61:84:9e:6d:bd:c3:e2:fd:b5:fc:9b:44:59:90: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:98:E3:B8:FF:42:92:BE:9A:95:3D:86:12:75:5F:78:1D:8A:CA:A3 X509v3 Authority Key Identifier: keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5c:e6:4d:9d:62:c9:2a:be:dc:52:e5:34:3e:63:75:0e:8f: ad:65:f8:75:2c:db:69:f3:40:b7:56:e8:63:89:ca:81:b7:b9: 21:5e:68:5d:23:17:26:7e:dc:64:5c:d5:80:4a:ea:be:01:7d: 0a:06:7f:d0:83:1e:55:66:09:e2:40:0d:b9:1d:c8:aa:5f:dc: fd:b4:ad:70:78:e7:96:00:39:3f:d6:49:01:1c:88:87:c1:59: b1:f1:c3:3e:04:b2:f7:09:35:90:d9:26:83:d4:7e:c6:18:c1: 70:a7:20:99:98:6e:f5:a7:e5:a4:a5:78:cc:a9:bd:f3:66:7c: 22:cb:12:f4:07:d6:98:b3:e8:55:13:a2:8f:e1:7e:cb:cb:d5: 80:13:c9:a9:c8:1e:a9:34:f1:a8:ee:c9:50:1b:09:09:f8:5a: 87:e3:a8:d0:25:66:50:20:3b:b6:f6:7f:73:92:03:ee:c0:2e: bc:24:74:d2:ab:9a:67:79:36:eb:94:f9:b1:a3:0f:f1:2c:64: b1:8b:51:41:af:bd:14:4a:7b:4d:e4:6a:2b:6a:f5:99:42:67: 96:c5:ab:9f:57:b4:ee:bd:e1:67:89:a5:b7:45:1f:ad:74:9a: 69:6d:60:ec:81:7b:87:e8:f0:e8:3f:1b:d3:4b:55:e5:90:58: 6a:48:1c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3 RTc5MTRBNDkwHhcNMjYwOTI1MDE0MzMzWhcNMjYxMDAyMDE0MzMzWjAYMRYwFAYD VQQDEw02YWI1ZDFjNS04ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhQLoT/yv+gmZRd8E54xKpRzs4Z2OFzmo3/6LhTy53tC16JXnZ5CB2ndmmIzk OpRkMsW5H7o85vvZ5WQZ5CTtUSuYvKvsKn7WZ9DqbvfaolGC/fUajt3vH2op8kzH J1x3jpcU0pvYZ2y5VxsVYko14EJKyoutgwW5qKJokBxCWOsipfj04UsIVHy3+9Xx mVU4TlE5SMqpBvf8ewbnSXIuj4lokqTHhnnKPesXPPeNDg6E7vMS4nBDkmS17nWB 0HhUyK3vPwX6OwcfmsVVOHpmqH25Woy9kTHa4BVpt0l3X+3YBH6uN+zeWY5ThYqf 86TSYYSebb3D4v21/JtEWZA27wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWY47j/ QpK+mpU9hhJ1X3gdisqjMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhV VlNHdlprQTFKNDUtZVJTa2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFzmTZ1iySq+3FLlND5jdQ6PrWX4dSzbafNAt1boY4nKgbe5IV5oXSMXJn7c ZFzVgErqvgF9CgZ/0IMeVWYJ4kANuR3Iql/c/bStcHjnlgA5P9ZJARyIh8FZsfHD PgSy9wk1kNkmg9R+xhjBcKcgmZhu9aflpKV4zKm982Z8IssS9AfWmLPoVROij+F+ y8vVgBPJqcgeqTTxqO7JUBsJCfhah+Oo0CVmUCA7tvZ/c5ID7sAuvCR00quaZ3k2 65T5saMP8SxksYtRQa+9FEp7TeRqK2r1mUJnlsWrn1e07r3hZ4mlt0UfrXSaaW1g 7IF7h+jw6D8b00tV5ZBYakgc/w== -----END CERTIFICATE-----Generated at Sat Sep 26 09:12:38 2026 by rpki-client