$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json) Hash identifier: DEuyKQzCspCRaLZT74cswcmxfQnrjkLdcBr53jd3m/s= Subject key identifier: 9F:0E:BB:0B:17:7D:1A:53:15:69:1E:BE:59:5F:F9:F2:B4:A8:17:25 Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft Manifest number: 81 Signing time: Wed 23 Sep 2026 07:41:29 +0000 Manifest this update: Wed 23 Sep 2026 07:41:28 +0000 Manifest next update: Wed 30 Sep 2026 07:41:28 +0000 Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: mjVBzNKWMAyD7yb3ImKYT1rRNsVDz7KoWEsq3PsZ6zY=) 2: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=) 3: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Validity Not Before: Sep 23 07:41:28 2026 GMT Not After : Sep 30 07:41:28 2026 GMT Subject: CN=6ab382a9-1c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:7d:06:f6:24:cd:91:be:12:a1:a6:ed:d9: 51:7e:99:ce:7e:cf:39:97:11:7c:ad:1c:de:fa:d8: 87:b6:b8:a8:fd:3d:ac:70:96:1e:c0:0e:e0:1a:f5: 14:ef:25:6b:c0:ca:29:37:fc:89:20:8d:d6:2d:2a: 5f:dc:2e:03:d9:48:05:a2:d1:f0:77:e6:22:72:8f: f2:30:80:e8:28:e7:18:7d:84:cd:14:71:c4:2e:bd: 16:c4:42:85:6d:53:5c:eb:0b:73:bf:45:74:f3:d4: 38:8b:20:5b:3b:a6:89:cf:7d:9b:16:33:ca:94:c0: d7:ca:82:df:4b:12:4a:0e:a1:de:7a:5d:ff:27:23: 44:e1:d3:a2:75:4f:63:8e:08:65:11:7c:9e:27:f3: 8f:fb:d6:79:74:a7:0f:c0:d7:74:2c:0c:0d:6f:e7: d5:5a:d3:cb:1c:9d:14:ef:8b:05:cb:00:77:e6:55: c7:80:6b:b4:0d:22:1d:78:d7:43:28:76:f8:97:ec: eb:78:20:1a:78:e0:d7:95:04:13:10:0e:38:d0:14: 50:73:70:80:e3:3a:38:4f:bb:75:78:7e:5a:5a:8a: fe:24:5e:78:18:ea:55:d2:9e:2c:3d:73:62:26:ce: db:fb:e6:28:d2:06:b7:28:76:50:9e:e6:88:b8:ef: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0E:BB:0B:17:7D:1A:53:15:69:1E:BE:59:5F:F9:F2:B4:A8:17:25 X509v3 Authority Key Identifier: keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:9f:58:c0:82:b8:e0:ed:13:cb:f4:b0:c5:a8:41:af:0d: ed:e9:fa:ee:b7:5e:d6:77:47:41:6f:94:df:7d:2f:68:34:7f: b2:5b:d8:45:cd:3c:0d:de:b5:da:a1:38:a1:b1:71:a7:84:56: 7f:61:2d:a7:6f:89:b2:50:ea:5d:54:e1:bb:6a:19:e3:5b:9d: c8:1a:6b:63:23:b5:13:f8:3a:a5:ee:6d:4d:df:11:5c:5f:21: d1:be:65:e1:9a:59:64:4f:37:3f:61:75:0d:59:14:53:6a:81: 43:e8:68:9b:97:5b:16:16:32:50:8b:8e:f5:fc:10:19:04:db: 8d:dd:02:6f:9f:25:1e:42:5d:14:5d:a8:58:ae:2a:cc:1f:ab: 9d:ca:f7:1c:29:b4:0a:d8:24:6f:e9:8b:10:e4:f4:76:c6:43: c8:56:0e:1b:8a:de:fc:96:5b:7a:68:60:9b:d3:13:60:42:78: 6a:ed:44:8b:7b:23:f7:85:f6:a6:49:bc:34:fb:c0:06:e1:c2: 38:54:c9:00:01:65:81:57:c8:85:07:3a:db:ff:66:ce:44:c6: 37:1f:fe:97:e9:52:d0:2d:5b:c9:b0:59:78:7e:8e:ea:31:3a: 8f:33:60:12:cf:40:ad:46:dc:46:4b:76:36:08:26:8d:1b:e8: 26:27:de:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxNTcxMTAvBgNVBAUTKDkxREEzQTE3NjM3Q0QyOTJDRUE0NjcwREQxM0E3MkQ4 NkVBQTJEOTEwHhcNMjYwOTIzMDc0MTI4WhcNMjYwOTMwMDc0MTI4WjAYMRYwFAYD VQQDEw02YWIzODJhOS0xYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhB59BvYkzZG+EqGm7dlRfpnOfs85lxF8rRze+tiHtrio/T2scJYewA7gGvUU 7yVrwMopN/yJII3WLSpf3C4D2UgFotHwd+Yico/yMIDoKOcYfYTNFHHELr0WxEKF bVNc6wtzv0V089Q4iyBbO6aJz32bFjPKlMDXyoLfSxJKDqHeel3/JyNE4dOidU9j jghlEXyeJ/OP+9Z5dKcPwNd0LAwNb+fVWtPLHJ0U74sFywB35lXHgGu0DSIdeNdD KHb4l+zreCAaeODXlQQTEA440BRQc3CA4zo4T7t1eH5aWor+JF54GOpV0p4sPXNi Js7b++Yo0ga3KHZQnuaIuO+axQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8OuwsX fRpTFWkevllf+fK0qBclMB8GA1UdIwQYMBaAFJHaOhdjfNKSzqRnDdE6cthuqi2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE1Ny8yNTA4MzhBRTEx NDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBwTE9wR2NOMFRweTJHNnFM WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE1Ny8yNTA4MzhBRTExNDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBw TE9wR2NOMFRweTJHNnFMWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmX6fWMCCuODtE8v0sMWoQa8N7en67rde1ndHQW+U330vaDR/slvYRc08Dd61 2qE4obFxp4RWf2Etp2+JslDqXVThu2oZ41udyBprYyO1E/g6pe5tTd8RXF8h0b5l 4ZpZZE83P2F1DVkUU2qBQ+hom5dbFhYyUIuO9fwQGQTbjd0Cb58lHkJdFF2oWK4q zB+rncr3HCm0Ctgkb+mLEOT0dsZDyFYOG4re/JZbemhgm9MTYEJ4au1Ei3sj94X2 pkm8NPvABuHCOFTJAAFlgVfIhQc62/9mzkTGNx/+l+lS0C1bybBZeH6O6jE6jzNg Es9ArUbcRkt2NggmjRvoJifeOA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:59:50 2026 by rpki-client