$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json) Hash identifier: 7Z0rvQwcaMxEYeyHEPpXmBDrSLUdPylFvrKGZgeozOo= Subject key identifier: 17:C3:61:99:DC:D1:7B:F0:0A:35:AD:C3:EE:45:12:A8:85:8F:3F:0C Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft Manifest number: 019F Signing time: Sun 27 Sep 2026 04:45:07 +0000 Manifest this update: Sun 27 Sep 2026 04:45:06 +0000 Manifest next update: Sun 04 Oct 2026 04:45:06 +0000 Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: 6f4cTQQcK+zvJGH1oGzrc51sy6ClFsb4AHw14YTZH+A=) 2: AAF88862D51811F0B469126CC4F9AE02.roa (hash: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg=) 3: AB61CD86D51811F09422126CC4F9AE02.roa (hash: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y=) 4: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: TDlLh34Bo1Qa+MNIEkMopEk/3BJaO3P1cNy38YBcx/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Sep 27 04:45:06 2026 GMT Not After : Oct 4 04:45:06 2026 GMT Subject: CN=6ab89f52-66f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8f:ef:5b:d6:a5:2b:df:df:01:0e:c8:66:0d: bc:56:4a:f6:5f:07:50:33:2e:fd:8d:a9:b0:b1:0e: 12:5b:74:3c:5d:37:ad:c2:e7:85:b1:70:93:f5:47: 72:4a:dc:cc:65:9a:f0:8f:06:b3:9c:72:fb:1a:4f: 35:ad:a5:08:48:0a:59:e9:77:e5:7a:94:44:af:31: 3c:bc:d2:5c:35:a5:1b:aa:35:af:89:c1:f9:1d:c0: ec:f6:bb:80:59:d2:8b:3f:95:be:bd:39:20:32:60: ee:43:7c:a6:6e:84:5b:41:a6:57:4b:05:e2:e8:f1: 9b:b5:3d:bd:d7:09:f9:ca:94:93:a7:f8:c6:18:c9: 4e:f4:50:4a:12:1f:55:30:7a:77:8a:d8:54:d0:20: 4e:26:ba:ec:f4:94:2e:3f:62:5c:2e:e2:04:c5:b8: 24:69:b0:38:56:8e:a8:b9:2c:b7:17:32:7d:e0:92: 5b:a9:e4:ea:20:19:f7:bd:3c:67:11:53:f5:8f:55: f2:4a:61:9f:ba:9a:5e:6a:c8:7b:53:32:f0:51:83: 15:cf:87:d6:62:15:db:b6:b1:84:2c:c4:32:b9:87: 4e:41:c9:cc:b5:cc:0c:b3:29:72:7c:dc:25:97:56: 32:6f:f8:bb:64:de:bc:13:65:db:00:75:4e:b4:2f: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C3:61:99:DC:D1:7B:F0:0A:35:AD:C3:EE:45:12:A8:85:8F:3F:0C X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c4:80:fc:0c:f7:9a:50:ee:39:2f:78:93:74:f8:dc:44:6d: 7e:eb:7a:61:8c:8d:db:2e:da:1f:32:ec:5d:8d:cb:3d:f7:45: 15:76:ce:25:ea:9f:7e:9d:7b:bf:48:f9:00:12:df:62:85:c0: 87:f5:cd:00:df:e3:8b:eb:23:34:46:86:a6:ee:e1:4f:13:21: aa:1b:67:1c:19:b3:29:8f:e3:97:30:10:68:e8:e4:9b:e9:ee: 75:16:01:0d:74:86:4c:3e:74:b9:24:03:12:80:cb:a6:73:d7: 91:b3:4f:2f:e5:dd:8a:e0:7b:e3:92:04:fd:fb:90:b3:19:ef: 6b:8c:ad:0d:32:ee:71:87:72:40:6a:42:03:e0:62:83:fb:f8: 80:6a:ed:f9:f7:ab:3d:32:2f:0a:c5:e0:9b:17:c2:5f:04:14: ed:a6:6d:b6:5c:bd:8c:19:46:9f:a3:fa:e7:db:53:52:67:b1: 2c:16:d2:a6:a1:d4:d4:3e:87:cd:3a:b6:65:10:99:cd:3f:1b: 9a:69:13:08:40:e3:bf:c0:05:25:9f:96:92:22:9a:af:1a:85: 41:38:c2:66:6c:fa:40:d5:5e:e0:70:82:8c:af:38:e5:7a:f0: a0:a8:b4:96:d3:69:ac:37:ab:96:8e:e3:cb:42:4c:bf:fe:27: e1:4d:69:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjYwOTI3MDQ0NTA2WhcNMjYxMDA0MDQ0NTA2WjAYMRYwFAYD VQQDEw02YWI4OWY1Mi02NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhI/vW9alK9/fAQ7IZg28Vkr2XwdQMy79jamwsQ4SW3Q8XTetwueFsXCT9Udy StzMZZrwjwaznHL7Gk81raUISApZ6XflepRErzE8vNJcNaUbqjWvicH5HcDs9ruA WdKLP5W+vTkgMmDuQ3ymboRbQaZXSwXi6PGbtT291wn5ypSTp/jGGMlO9FBKEh9V MHp3ithU0CBOJrrs9JQuP2JcLuIExbgkabA4Vo6ouSy3FzJ94JJbqeTqIBn3vTxn EVP1j1XySmGfuppeash7UzLwUYMVz4fWYhXbtrGELMQyuYdOQcnMtcwMsylyfNwl l1Yyb/i7ZN68E2XbAHVOtC/L7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfDYZnc 0XvwCjWtw+5FEqiFjz8MMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfMSA/Az3mlDuOS94k3T43ERtfut6YYyN2y7aHzLsXY3LPfdFFXbOJeqffp17 v0j5ABLfYoXAh/XNAN/ji+sjNEaGpu7hTxMhqhtnHBmzKY/jlzAQaOjkm+nudRYB DXSGTD50uSQDEoDLpnPXkbNPL+XdiuB745IE/fuQsxnva4ytDTLucYdyQGpCA+Bi g/v4gGrt+ferPTIvCsXgmxfCXwQU7aZttly9jBlGn6P659tTUmexLBbSpqHU1D6H zTq2ZRCZzT8bmmkTCEDjv8AFJZ+WkiKarxqFQTjCZmz6QNVe4HCCjK845XrwoKi0 ltNprDerlo7jy0JMv/4n4U1prg== -----END CERTIFICATE-----Generated at Tue Sep 29 06:46:28 2026 by rpki-client