$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: +SxptPRcRgwhmucprnQ3ZNUHzRbljwdW0ZVq0u7RNKQ= Subject key identifier: D6:E9:B1:93:20:9F:F4:3F:D0:60:BE:85:B5:B2:25:3C:01:3E:6B:92 Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0DC6 Signing time: Sat 26 Sep 2026 17:56:54 +0000 Manifest this update: Sat 26 Sep 2026 17:56:54 +0000 Manifest next update: Sat 03 Oct 2026 17:56:54 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: banV1XYlUjJON0Qp+/5+nbFIXKiTp3I5nf0+yGnWhLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 17:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3545 (0xdd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Sep 26 17:56:54 2026 GMT Not After : Oct 3 17:56:54 2026 GMT Subject: CN=6ab80766-4534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:eb:07:47:1e:46:7f:49:b8:89:32:31:55: f4:46:6a:26:0e:c1:70:fe:e6:ac:7c:15:85:41:20: 7b:af:6d:bd:3a:37:a4:cc:bd:a6:0c:c7:b6:2a:3a: 33:b8:56:b3:99:e1:c6:34:5c:0e:2f:ee:31:6a:1f: 18:7a:4b:dc:65:67:2f:71:0d:b3:ce:66:c0:75:35: 9e:5c:7f:0f:9e:cc:c8:97:ce:75:f3:65:fe:a0:d7: 11:83:67:ae:86:ca:70:db:97:4f:21:6b:df:0a:c5: 40:a1:35:34:74:95:c5:70:d9:e8:eb:e1:9c:d0:5b: ba:31:a2:ce:42:76:2a:2d:a6:5f:a8:44:b7:4e:a3: a2:48:d3:ae:37:7f:67:9d:c7:17:94:91:28:1b:16: cc:c7:e3:e4:5a:13:05:a7:01:ae:84:24:d8:5d:d3: 97:71:cc:e2:b7:8b:5f:2c:0f:f9:ab:01:b1:1c:44: b4:b9:15:9b:16:74:53:2b:5b:08:b7:75:4b:29:b2: 24:57:ff:fb:91:46:d7:e1:ab:01:87:de:ef:89:16: a4:1e:5b:61:70:4d:17:45:57:d6:17:50:05:56:9e: b2:4f:5a:ef:65:cf:02:bc:66:6d:73:cc:6d:97:d8: c8:91:8c:38:2d:eb:11:75:55:87:ae:0e:72:be:a7: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:B1:93:20:9F:F4:3F:D0:60:BE:85:B5:B2:25:3C:01:3E:6B:92 X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e9:d3:f0:2c:cd:ab:0b:91:db:20:b6:da:e2:7d:85:51:b1: e4:b2:81:69:ec:4c:39:0c:b2:db:9b:c4:09:ad:9a:68:14:53: 78:34:6b:cd:69:4f:20:48:31:51:e0:d0:3d:43:d5:d9:66:7f: bd:c1:58:21:7d:42:89:30:9c:32:31:54:60:e1:54:ea:2f:e3: de:0b:53:d4:90:92:20:6d:04:49:4a:70:fe:49:ed:3d:3e:18: 93:15:d5:9f:7a:53:d8:ad:87:94:86:04:6d:ed:07:04:b2:a7: ff:bc:9a:32:60:03:4d:b1:aa:37:e6:71:46:95:8a:ef:88:ab: 47:5e:b7:f0:62:66:f9:45:d6:d8:7d:93:40:86:6c:e7:6c:f1: 29:7f:7f:8d:a5:f6:40:6b:ea:5e:8a:f1:04:57:f7:cc:39:3c: 51:13:c4:ca:ea:ac:68:2b:8a:da:a5:96:ac:74:d6:27:5f:63: 80:ea:0a:62:d2:e7:b8:e4:f3:35:1a:80:82:8a:3f:84:64:a9: 0e:89:fb:96:4f:76:7e:23:45:b0:ac:6e:0d:1a:e7:d0:f1:94: 24:2a:ef:3c:e4:67:a7:c5:fc:21:e9:18:22:35:e1:8a:e1:46: 47:85:86:78:6e:c3:d5:64:1d:e9:3e:16:58:44:06:a9:5a:15: a0:56:b6:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjYwOTI2MTc1NjU0WhcNMjYxMDAzMTc1NjU0WjAYMRYwFAYD VQQDEw02YWI4MDc2Ni00NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTzrB0ceRn9JuIkyMVX0RmomDsFw/uasfBWFQSB7r229OjekzL2mDMe2Kjoz uFazmeHGNFwOL+4xah8YekvcZWcvcQ2zzmbAdTWeXH8PnszIl85182X+oNcRg2eu hspw25dPIWvfCsVAoTU0dJXFcNno6+Gc0Fu6MaLOQnYqLaZfqES3TqOiSNOuN39n nccXlJEoGxbMx+PkWhMFpwGuhCTYXdOXcczit4tfLA/5qwGxHES0uRWbFnRTK1sI t3VLKbIkV//7kUbX4asBh97viRakHlthcE0XRVfWF1AFVp6yT1rvZc8CvGZtc8xt l9jIkYw4LesRdVWHrg5yvqdt5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbpsZMg n/Q/0GC+hbWyJTwBPmuSMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+nT8CzNqwuR2yC22uJ9hVGx5LKBaexMOQyy25vECa2aaBRTeDRrzWlPIEgx UeDQPUPV2WZ/vcFYIX1CiTCcMjFUYOFU6i/j3gtT1JCSIG0ESUpw/kntPT4YkxXV n3pT2K2HlIYEbe0HBLKn/7yaMmADTbGqN+ZxRpWK74irR1638GJm+UXW2H2TQIZs 52zxKX9/jaX2QGvqXorxBFf3zDk8URPEyuqsaCuK2qWWrHTWJ19jgOoKYtLnuOTz NRqAgoo/hGSpDon7lk92fiNFsKxuDRrn0PGUJCrvPORnp8X8IekYIjXhiuFGR4WG eG7D1WQd6T4WWEQGqVoVoFa2AA== -----END CERTIFICATE-----Generated at Sun Sep 27 10:15:54 2026 by rpki-client