$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: x0RcSr6WVoIz3D0aAfsDT3rByvS2SGGaLbF2VziCUi8= Subject key identifier: 82:7C:A6:4F:34:1E:5B:BC:81:B7:0A:02:91:81:7C:74:78:F9:5B:C3 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 023D Signing time: Sat 03 Oct 2026 03:08:31 +0000 Manifest this update: Sat 03 Oct 2026 03:08:30 +0000 Manifest next update: Sat 10 Oct 2026 03:08:30 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: VbtzzTX746mez9Ik9WgMBBDynt0FGzmdXSetDPnCZhE=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: UYmnUcinM/YS4tsBaXiXnl11jWQgRyt4rogH4x+mFlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Oct 3 03:08:30 2026 GMT Not After : Oct 10 03:08:30 2026 GMT Subject: CN=6ac071af-432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:3f:f1:fe:1a:e9:65:9d:af:80:66:11:9b: 08:c3:fc:45:9f:31:aa:dc:bf:59:03:38:c7:e8:a4: 70:1b:fb:77:06:57:2d:14:b4:2a:26:e5:dd:8c:95: 0e:db:02:97:c0:9d:fa:14:bc:07:f8:54:50:59:30: 4d:aa:12:ac:7e:25:6e:c9:49:43:f3:22:0d:c4:27: 1f:37:7f:e5:b0:6b:db:1d:8c:1d:65:78:c2:2d:0b: 93:78:6a:5d:e4:82:3d:a1:c8:30:95:6c:e3:14:92: 17:94:9c:9c:fe:13:33:a3:d1:e2:0b:ef:d7:d6:c3: 40:d5:41:99:a5:25:cd:85:98:09:4d:6f:c2:83:a1: 34:07:7d:3b:ab:ec:e7:fd:34:3c:67:04:a3:a0:60: 42:1a:97:23:4c:4d:9d:f4:c2:69:03:39:3d:1e:fc: ed:4b:00:36:13:56:ad:b4:87:03:f3:7c:98:a9:00: 9f:8b:4f:87:59:98:82:50:dd:01:5c:2a:56:e1:cb: 62:83:0a:f4:93:b0:d4:71:4c:fb:85:f7:09:a6:77: 8b:06:3f:bb:04:40:3d:5e:32:60:9c:2b:75:1b:7d: 1b:51:96:8d:4c:ca:f8:9a:72:5d:3b:6e:4e:3a:c9: 68:ac:77:ae:9b:c2:a0:7d:66:0c:65:13:39:70:15: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7C:A6:4F:34:1E:5B:BC:81:B7:0A:02:91:81:7C:74:78:F9:5B:C3 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fd:99:4a:5f:b1:70:8c:02:3a:f0:fe:4b:20:59:94:f2:90: 58:65:79:09:be:1f:35:e7:96:aa:48:c1:36:df:e1:b1:77:45: f3:dd:41:49:fb:9e:d1:6f:49:c1:fa:12:b2:4d:78:e9:ac:26: d9:f6:db:7a:69:fc:69:e5:82:d9:a6:f6:b4:67:51:7c:14:f7: 76:c6:82:1a:3d:fa:84:9b:3f:a8:66:75:1a:ab:b7:b1:6d:51: 15:e5:b9:67:89:ef:d4:5f:a5:e2:ae:84:86:d9:cd:1e:c9:a3: 7c:42:d5:11:2f:34:1d:18:08:d3:95:1c:e6:a9:3b:9c:87:22: d1:f1:0e:7e:42:21:24:80:32:59:4c:4d:88:00:2e:a1:ba:c9: 52:a8:ec:91:bf:f6:34:46:be:9d:be:17:ec:05:66:f7:5c:6c: f3:d4:eb:82:a9:d1:35:31:34:4b:82:b6:7c:e0:45:5e:cc:2e: 63:de:36:52:3e:0a:e5:95:80:c1:62:c3:75:c5:21:9f:fe:d9: 2a:5c:c2:14:b5:d4:3b:85:ff:d6:75:62:ae:d6:0f:5b:08:8c: df:a8:5e:95:fd:68:21:bf:e0:6a:a8:84:b9:a8:57:4b:75:f9: 16:a1:b3:43:2b:6b:36:59:96:d3:6a:c0:05:ef:26:5e:0b:46: b7:96:4c:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYxMDAzMDMwODMwWhcNMjYxMDEwMDMwODMwWjAYMRYwFAYD VQQDEw02YWMwNzFhZi00MzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Nw/8f4a6WWdr4BmEZsIw/xFnzGq3L9ZAzjH6KRwG/t3BlctFLQqJuXdjJUO 2wKXwJ36FLwH+FRQWTBNqhKsfiVuyUlD8yINxCcfN3/lsGvbHYwdZXjCLQuTeGpd 5II9ocgwlWzjFJIXlJyc/hMzo9HiC+/X1sNA1UGZpSXNhZgJTW/Cg6E0B307q+zn /TQ8ZwSjoGBCGpcjTE2d9MJpAzk9HvztSwA2E1attIcD83yYqQCfi0+HWZiCUN0B XCpW4ctigwr0k7DUcUz7hfcJpneLBj+7BEA9XjJgnCt1G30bUZaNTMr4mnJdO25O OslorHeum8KgfWYMZRM5cBWOrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJ8pk80 Hlu8gbcKApGBfHR4+VvDMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGP2ZSl+xcIwCOvD+SyBZlPKQWGV5Cb4fNeeWqkjBNt/hsXdF891BSfue0W9J wfoSsk146awm2fbbemn8aeWC2ab2tGdRfBT3dsaCGj36hJs/qGZ1Gqu3sW1RFeW5 Z4nv1F+l4q6EhtnNHsmjfELVES80HRgI05Uc5qk7nIci0fEOfkIhJIAyWUxNiAAu obrJUqjskb/2NEa+nb4X7AVm91xs89TrgqnRNTE0S4K2fOBFXswuY942Uj4K5ZWA wWLDdcUhn/7ZKlzCFLXUO4X/1nVirtYPWwiM36helf1oIb/gaqiEuahXS3X5FqGz QytrNlmW02rABe8mXgtGt5ZMdg== -----END CERTIFICATE-----Generated at Sat Oct 3 11:39:38 2026 by rpki-client