$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft File: KJS89-I5RAOCbTtLS4B6RKekFoI.mft (raw, json) Hash identifier: qCF7QMYSQ+u5dwW85lbosPZpyHaUGYRLnZlQPU6ojdU= Subject key identifier: 1B:EC:D2:F1:F8:BA:A0:1E:FF:4D:11:4A:18:19:D0:6D:63:B7:A9:7C Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft Manifest number: 27 Signing time: Wed 23 Sep 2026 08:33:16 +0000 Manifest this update: Wed 23 Sep 2026 08:33:16 +0000 Manifest next update: Wed 30 Sep 2026 08:33:16 +0000 Files and hashes: 1: KJS89-I5RAOCbTtLS4B6RKekFoI.crl (hash: i8qEr1HeG5fm9uI7RvBx6gjJ+cDv79J1ryis/GsMYrU=) 2: 2A71D75884B211F18866DC898FA30FBC.roa (hash: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU=) 3: 35BF0DAA84B811F1831C967990A30FBC.roa (hash: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Sep 23 08:33:16 2026 GMT Not After : Sep 30 08:33:16 2026 GMT Subject: CN=6ab38ecc-585f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:7d:ee:9f:b9:ac:cb:78:f3:a0:23:9f:5c: e5:85:fa:2f:03:a2:cd:64:3b:34:16:cb:91:16:64: 2a:27:ff:fb:06:0f:75:57:68:89:e1:86:78:77:39: e7:e0:58:85:8e:ce:18:af:fe:41:b1:21:64:94:9c: ca:99:35:e9:31:79:45:95:53:2b:41:d4:99:6a:e6: b7:00:9c:17:43:b9:26:7c:82:33:19:17:a1:cc:75: 6c:90:b4:b3:0b:48:bb:6e:d2:2e:f0:e5:0b:79:f4: 35:9c:f9:bd:ad:0e:7c:d1:71:ed:1a:71:09:36:5b: 34:22:ea:23:a6:a4:a9:3c:11:26:10:e7:ed:ac:59: ed:62:f2:24:f4:a9:df:43:89:08:f4:c8:78:38:28: 7e:a3:9c:99:c4:b0:db:2a:29:f1:d3:c4:bb:3e:57: 40:0f:86:45:84:17:67:38:6f:db:8b:a5:10:1e:be: 8c:07:da:37:4e:18:73:67:99:68:85:0d:65:c7:4a: 51:18:8e:61:a7:a7:b6:1e:52:fc:94:f9:93:c1:28: c5:10:e2:e6:1a:db:89:fc:10:1c:ac:05:3a:62:c5: a1:6d:16:eb:2b:4e:a5:75:bb:66:ac:7f:c4:21:a8: a9:4e:ab:c8:f5:8c:6f:e6:b5:94:ea:65:9e:e1:8b: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:D2:F1:F8:BA:A0:1E:FF:4D:11:4A:18:19:D0:6D:63:B7:A9:7C X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:2b:8f:73:ad:6e:9a:a9:d9:39:dc:0c:99:26:65:ad:5d: 0a:78:2a:e4:af:55:d1:40:fd:26:41:3a:53:69:a7:b2:05:cc: c3:cc:ea:f8:0b:a7:16:e0:30:da:c2:1f:c1:3d:df:05:01:df: 40:e8:55:e8:6d:10:59:1c:57:af:e6:d3:9b:23:44:99:f7:a7: 3d:d8:ac:65:9c:0a:12:b7:62:ba:35:96:5f:d6:32:2b:0b:11: 19:31:d0:f9:84:85:ea:48:12:bb:79:c8:15:9d:6e:c7:0d:7c: a9:f5:a5:10:cd:79:12:03:4d:21:e8:1d:13:d7:eb:dc:97:bf: d0:de:b6:b8:94:21:02:70:1e:86:7c:ad:27:3f:52:c3:48:9a: b3:b4:96:7f:1c:79:cd:cb:75:72:dc:1f:74:a5:59:96:fb:6a: 02:a8:c4:f6:35:e7:9e:31:d8:7c:f5:fe:bc:56:f2:31:37:ca: 60:fc:25:37:02:28:9f:26:2e:94:1b:c6:9e:5f:c5:3b:21:c5: b6:0d:c1:71:9b:60:ed:bc:6f:58:89:df:88:08:38:a3:92:7b: 27:a6:42:4e:08:c7:a0:5b:b4:88:c1:c6:ba:a1:0f:7a:2f:a4: 09:f7:b7:09:01:d8:5e:d2:28:01:9a:f7:31:1b:b6:9d:13:68: 6d:40:30:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA5MjMwODMzMTZaFw0yNjA5MzAwODMzMTZaMBgxFjAUBgNV BAMTDTZhYjM4ZWNjLTU4NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCouH3un7msy3jzoCOfXOWF+i8Dos1kOzQWy5EWZCon//sGD3VXaInhhnh3Oefg WIWOzhiv/kGxIWSUnMqZNekxeUWVUytB1Jlq5rcAnBdDuSZ8gjMZF6HMdWyQtLML SLtu0i7w5Qt59DWc+b2tDnzRce0acQk2WzQi6iOmpKk8ESYQ5+2sWe1i8iT0qd9D iQj0yHg4KH6jnJnEsNsqKfHTxLs+V0APhkWEF2c4b9uLpRAevowH2jdOGHNnmWiF DWXHSlEYjmGnp7YeUvyU+ZPBKMUQ4uYa24n8EBysBTpixaFtFusrTqV1u2asf8Qh qKlOq8j1jG/mtZTqZZ7hi+5nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG+zS8fi6 oB7/TRFKGBnQbWO3qXwwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUVELzczNjRGMTBDODE1NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFP Q2JUdExTNEI2Uktla0ZvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB63iuPc61umqnZOdwMmSZlrV0KeCrkr1XRQP0mQTpTaaeyBczDzOr4C6cW4DDa wh/BPd8FAd9A6FXobRBZHFev5tObI0SZ96c92KxlnAoSt2K6NZZf1jIrCxEZMdD5 hIXqSBK7ecgVnW7HDXyp9aUQzXkSA00h6B0T1+vcl7/Q3ra4lCECcB6GfK0nP1LD SJqztJZ/HHnNy3Vy3B90pVmW+2oCqMT2NeeeMdh89f68VvIxN8pg/CU3AiifJi6U G8aeX8U7IcW2DcFxm2DtvG9Yid+ICDijknsnpkJOCMegW7SIwca6oQ96L6QJ97cJ Adhe0igBmvcxG7adE2htQDAx -----END CERTIFICATE-----Generated at Thu Sep 24 10:03:43 2026 by rpki-client