$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json) Hash identifier: wM9NO2LbgRGkFYoKlVfSguDKwZibJjNwozg1dF/m27I= Subject key identifier: 3C:2F:0D:A2:61:E0:95:F9:E3:AE:43:E8:32:AD:C5:16:7E:C8:41:A3 Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft Manifest number: 081F Signing time: Thu 24 Sep 2026 21:07:47 +0000 Manifest this update: Thu 24 Sep 2026 21:07:46 +0000 Manifest next update: Thu 01 Oct 2026 21:07:46 +0000 Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: TjO4vNJkwtS3BiTJ55KumU4lmcgq+o+Cl9/JfnjD540=) 2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Validity Not Before: Sep 24 21:07:46 2026 GMT Not After : Oct 1 21:07:46 2026 GMT Subject: CN=6ab59123-8b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:77:d7:0b:c1:a6:ba:4b:7a:02:16:46:cd: c7:c4:84:ee:23:07:04:50:d5:eb:71:7d:53:bd:22: b0:d8:12:af:ef:ed:06:c6:4b:af:2d:76:8c:18:eb: ed:b7:a5:7d:22:83:d3:ab:7e:7a:6d:a1:13:fa:0b: 2d:5d:f5:31:e7:95:a3:88:5f:26:f4:57:6e:f2:64: 67:7b:53:0b:2e:0d:77:0e:a3:68:3a:67:2d:c9:24: 28:2d:88:06:9c:37:02:50:ef:6f:02:6b:b6:1b:1b: c9:e2:9b:f6:7c:3c:7f:60:b1:e7:16:d6:2b:c5:b3: 24:86:04:47:7d:6e:17:4b:15:e8:bc:9d:61:df:0a: e9:34:a2:c6:11:17:bb:6e:bb:25:ed:48:29:4f:8d: 55:e1:a3:2e:dc:a6:bc:e9:70:bb:8b:de:60:f7:ac: 82:1a:6f:61:25:a7:7a:e0:3b:76:a1:ba:59:9e:1c: b5:62:8f:63:91:c9:dd:c2:52:67:d3:c9:30:27:6d: d0:ac:ad:74:74:dd:85:b5:1c:94:7e:0b:c0:33:a7: b9:37:5c:38:e8:fa:f7:9a:68:b9:59:3f:e5:89:90: 0c:ad:53:c9:08:2f:e1:54:80:68:ad:b6:e7:24:9e: ba:54:03:e0:40:17:15:ac:17:31:e0:4c:2b:4d:17: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2F:0D:A2:61:E0:95:F9:E3:AE:43:E8:32:AD:C5:16:7E:C8:41:A3 X509v3 Authority Key Identifier: keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:68:30:06:ee:f0:78:ec:d9:75:99:2f:97:82:80:0a:7c:a0: 5c:35:52:32:09:30:d0:3c:79:e2:a0:c7:33:a4:8a:9a:6a:4e: ea:03:89:f6:bd:03:1c:a4:b4:d5:df:43:9e:1a:2d:49:d0:64: b1:a5:6f:41:70:67:27:a7:3c:20:99:00:ca:e6:db:32:5a:2f: 41:53:e1:65:af:c4:4b:43:ec:25:f0:5c:e3:c0:fb:49:79:f4: de:4b:a6:c5:da:63:d1:4f:86:cf:33:fe:81:19:3c:cd:31:0d: 32:e0:58:4d:d9:f3:d2:b4:fb:da:88:27:73:38:b3:14:36:26: 14:bf:ef:17:0d:08:90:66:f4:34:de:47:3e:1f:c3:93:73:8f: 86:18:e1:f7:2f:c4:82:6d:97:34:30:14:96:2d:a8:db:a9:b0: 4c:c8:5c:c2:51:48:35:8f:bd:21:e3:ae:68:c2:70:d7:f1:8f: 7b:c5:31:d3:0f:ec:e2:33:c5:a0:f4:6e:17:fb:be:a1:cf:90: ce:e4:f5:2c:d1:50:8d:f4:dd:e7:83:3b:6a:60:6f:0b:36:fd: ce:52:ca:92:c7:c6:ae:1f:f5:69:da:e7:51:e3:a5:91:e6:87: ac:46:e0:50:75:62:79:dd:ae:23:00:53:08:fc:2c:fd:7a:9d: 06:c5:06:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF QjdEM0U5MDIwHhcNMjYwOTI0MjEwNzQ2WhcNMjYxMDAxMjEwNzQ2WjAYMRYwFAYD VQQDEw02YWI1OTEyMy04YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17Z31wvBprpLegIWRs3HxITuIwcEUNXrcX1TvSKw2BKv7+0GxkuvLXaMGOvt t6V9IoPTq356baET+gstXfUx55WjiF8m9Fdu8mRne1MLLg13DqNoOmctySQoLYgG nDcCUO9vAmu2GxvJ4pv2fDx/YLHnFtYrxbMkhgRHfW4XSxXovJ1h3wrpNKLGERe7 brsl7UgpT41V4aMu3Ka86XC7i95g96yCGm9hJad64Dt2obpZnhy1Yo9jkcndwlJn 08kwJ23QrK10dN2FtRyUfgvAM6e5N1w46Pr3mmi5WT/liZAMrVPJCC/hVIBorbbn JJ66VAPgQBcVrBcx4EwrTRczxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwvDaJh 4JX5465D6DKtxRZ+yEGjMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL TzZhanBLaDlhT25yZlQ2UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf2gwBu7weOzZdZkvl4KACnygXDVSMgkw0Dx54qDHM6SKmmpO6gOJ9r0DHKS0 1d9DnhotSdBksaVvQXBnJ6c8IJkAyubbMlovQVPhZa/ES0PsJfBc48D7SXn03kum xdpj0U+GzzP+gRk8zTENMuBYTdnz0rT72ognczizFDYmFL/vFw0IkGb0NN5HPh/D k3OPhhjh9y/Egm2XNDAUli2o26mwTMhcwlFINY+9IeOuaMJw1/GPe8Ux0w/s4jPF oPRuF/u+oc+QzuT1LNFQjfTd54M7amBvCzb9zlLKksfGrh/1adrnUeOlkeaHrEbg UHVied2uIwBTCPws/XqdBsUG8w== -----END CERTIFICATE-----Generated at Fri Sep 25 11:38:03 2026 by rpki-client