$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: ARyEIXV9xjhPgz+f5WDBqa2c7qnpv1l8vNXfNglVXVI= Subject key identifier: B4:AF:E4:57:CF:CD:6C:F7:4D:30:38:CA:E9:CC:94:B4:B9:A5:94:38 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0456 Signing time: Sun 27 Sep 2026 00:12:57 +0000 Manifest this update: Sun 27 Sep 2026 00:12:56 +0000 Manifest next update: Sun 04 Oct 2026 00:12:56 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: G1cfgoOWcK5l172guKylMlX1n9GALKKqjh+gIogqcZI=) 2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=) 3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Sep 27 00:12:56 2026 GMT Not After : Oct 4 00:12:56 2026 GMT Subject: CN=6ab85f88-b185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:87:17:70:6f:0f:a4:8c:d7:c9:f8:0a:fb: d4:bd:91:b5:f6:c9:77:cb:77:60:cf:21:74:3c:88: be:0e:84:d1:6b:bc:a0:1f:64:30:b7:ec:b5:11:c9: 33:06:ec:70:38:cd:b4:87:83:5a:fd:29:3b:fd:b3: dd:cc:be:4e:94:c2:50:e1:97:a0:4b:42:f4:ab:cd: 29:58:66:10:56:33:51:f8:40:f3:b9:c2:16:6c:8b: 8a:2f:66:3b:a2:43:fc:b8:29:27:a3:9b:e2:94:81: a8:f1:e0:c7:ad:4d:ef:a7:f1:0d:ed:c0:a0:35:1f: 1d:a7:3a:74:d6:9c:8f:b6:4a:5c:e1:bc:22:c2:ac: f4:a7:fc:4b:c0:be:04:a7:5a:90:92:bc:22:f1:6f: 16:2d:51:8e:88:f7:cd:3a:70:b1:51:80:ee:62:23: 67:f0:d6:52:90:f7:43:fc:bf:fe:6f:aa:b1:58:2c: 2b:62:ad:c3:97:38:3b:9c:17:a5:89:0f:b5:d7:05: 45:5e:5c:2c:48:30:33:11:db:f5:ef:76:ca:13:17: 43:d7:9f:35:6d:3f:80:00:f5:75:f9:45:eb:e7:cf: 14:34:74:4a:f7:68:d8:bd:4c:a7:e7:16:c9:6c:4c: 32:d4:7b:79:9a:13:f6:6f:19:31:86:18:a3:c7:5d: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:E4:57:CF:CD:6C:F7:4D:30:38:CA:E9:CC:94:B4:B9:A5:94:38 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:91:d3:2c:9e:c8:c6:e6:35:7b:57:c9:51:b3:ab:e6:68:df: 2b:de:ae:23:15:47:d5:78:79:27:8a:57:0f:ea:f9:36:94:60: 03:a5:72:1e:e4:01:79:3d:64:8a:2b:40:77:50:eb:d5:67:db: 70:52:9e:5a:0e:e5:3c:44:82:9a:a1:f7:74:1b:68:45:2d:19: 13:5b:9a:60:e9:7e:23:ed:8c:d4:bc:8b:21:57:9f:75:b8:c9: e4:fa:cb:7d:b0:54:fd:33:7e:68:b3:cc:aa:57:7e:22:0a:fe: be:c5:30:cc:65:b1:e9:d8:ff:c9:2b:53:29:22:b6:83:db:ad: 9f:f2:9f:ac:8a:ff:5a:1a:b4:a1:7d:01:1d:6c:3d:53:de:b1: b0:0a:76:84:aa:25:db:1f:56:52:28:c3:e6:8c:7f:f8:5e:d3: 07:23:e1:79:00:20:b9:4f:cc:a8:5c:7e:60:ff:60:51:1e:60: ab:ab:eb:04:cb:9a:ef:cc:73:85:59:33:d2:63:c4:84:b9:3e: 81:c8:a3:c7:5a:68:cd:76:ca:2e:69:e5:c2:f0:2f:4c:f7:3d: 14:ad:c9:a6:22:1b:4c:84:3b:6f:9e:3a:a3:ed:a3:85:23:e5: cc:12:d2:8b:c5:4c:bd:a2:6d:3b:87:2b:5a:01:4c:a0:89:f3: df:6b:cd:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYwOTI3MDAxMjU2WhcNMjYxMDA0MDAxMjU2WjAYMRYwFAYD VQQDEw02YWI4NWY4OC1iMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDWHF3BvD6SM18n4CvvUvZG19sl3y3dgzyF0PIi+DoTRa7ygH2Qwt+y1Eckz BuxwOM20h4Na/Sk7/bPdzL5OlMJQ4ZegS0L0q80pWGYQVjNR+EDzucIWbIuKL2Y7 okP8uCkno5vilIGo8eDHrU3vp/EN7cCgNR8dpzp01pyPtkpc4bwiwqz0p/xLwL4E p1qQkrwi8W8WLVGOiPfNOnCxUYDuYiNn8NZSkPdD/L/+b6qxWCwrYq3Dlzg7nBel iQ+11wVFXlwsSDAzEdv173bKExdD1581bT+AAPV1+UXr588UNHRK92jYvUyn5xbJ bEwy1Ht5mhP2bxkxhhijx11w5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSv5FfP zWz3TTA4yunMlLS5pZQ4MB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb5HTLJ7IxuY1e1fJUbOr5mjfK96uIxVH1Xh5J4pXD+r5NpRgA6VyHuQBeT1k iitAd1Dr1WfbcFKeWg7lPESCmqH3dBtoRS0ZE1uaYOl+I+2M1LyLIVefdbjJ5PrL fbBU/TN+aLPMqld+Igr+vsUwzGWx6dj/yStTKSK2g9utn/KfrIr/Whq0oX0BHWw9 U96xsAp2hKol2x9WUijD5ox/+F7TByPheQAguU/MqFx+YP9gUR5gq6vrBMua78xz hVkz0mPEhLk+gcijx1pozXbKLmnlwvAvTPc9FK3JpiIbTIQ7b546o+2jhSPlzBLS i8VMvaJtO4crWgFMoInz32vNJw== -----END CERTIFICATE-----Generated at Mon Sep 28 10:12:09 2026 by rpki-client