$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft File: RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json) Hash identifier: AduJSVpzhznOVnGpAe31eyY1KIQ+IwEpGkZxwyYqd38= Subject key identifier: 70:26:47:21:CE:5C:24:2D:21:BE:8B:3F:9E:C1:72:7A:52:8A:97:45 Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A Certificate issuer: /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft Manifest number: 95 Signing time: Wed 23 Sep 2026 07:16:34 +0000 Manifest this update: Wed 23 Sep 2026 07:16:34 +0000 Manifest next update: Wed 30 Sep 2026 07:16:34 +0000 Files and hashes: 1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: /CD3ggRnTxrJc0GkFAgXjdiK7q+F1ksLdnPce2pzYQQ=) 2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A Validity Not Before: Sep 23 07:16:34 2026 GMT Not After : Sep 30 07:16:34 2026 GMT Subject: CN=6ab37cd2-135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:d1:a2:c5:0f:e2:d4:45:1d:58:f7:6a:91: b4:dc:3a:04:ce:78:7d:71:1b:60:b8:d1:e1:26:6e: 66:fb:c7:54:ae:2a:50:c6:b1:8c:8c:d9:8e:08:a0: d9:c0:89:07:7d:ec:72:54:85:cd:0a:9f:bd:93:36: 18:9f:69:73:78:d9:f0:0a:52:24:a3:4c:19:01:90: a1:f9:a7:9b:a6:2c:cd:e8:2e:44:6b:90:2e:51:d8: fc:e7:bf:d0:c8:da:fd:89:c5:e0:ff:53:f0:4b:88: 5b:05:c0:0d:94:ce:4b:f7:64:5a:60:49:1a:6f:f2: 64:25:f3:6b:c0:dd:0f:9c:24:3c:7a:bb:c9:1b:36: be:5c:3b:46:ce:5c:e4:30:47:77:bd:c1:0a:60:c5: 71:e5:63:eb:c1:45:31:0d:ae:42:00:83:b8:1d:42: 13:f9:a3:6e:16:db:4c:ac:5a:c8:d4:94:1e:fa:37: 5e:59:91:3a:ef:76:47:a6:4a:01:16:64:bc:52:c0: 04:d5:d0:e6:60:57:ec:18:77:80:e2:d4:10:ac:a0: 51:a1:8f:b1:82:2a:69:b4:84:60:d1:b5:26:e0:5b: f7:c4:0c:14:af:19:40:bf:ba:2b:60:33:9b:4c:4b: 2f:73:c7:1e:3c:81:cf:18:1b:c3:b5:1b:df:f5:b8: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:26:47:21:CE:5C:24:2D:21:BE:8B:3F:9E:C1:72:7A:52:8A:97:45 X509v3 Authority Key Identifier: keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:63:6b:b9:ca:fd:26:e1:3c:93:c1:7c:cf:23:dd:7f:fc:63: 21:8d:f2:05:74:63:55:f3:17:88:bf:98:f0:c8:9e:ba:56:78: 36:dc:83:c7:a4:56:10:75:7f:64:7c:98:42:c9:a1:a6:6d:ce: 45:9c:4b:d5:ff:ea:ff:3a:67:b4:75:05:19:a4:59:3f:89:6f: 18:a4:cf:e3:e6:b7:e0:05:86:96:d1:ff:89:4e:00:08:63:d1: 34:1f:68:11:6a:04:5c:7d:e2:ae:ae:d2:ea:4e:28:31:29:58: 10:01:5f:2c:0f:ac:45:4d:8f:bd:b4:87:68:09:10:eb:79:14: 33:c2:cd:75:fa:20:a3:61:cc:8a:b7:c6:3f:be:f9:81:fe:62: 70:1d:70:26:de:b5:1c:b8:47:80:28:af:82:ee:f5:f3:3b:b8: b8:c6:ba:a5:69:d5:ce:61:53:ed:34:4d:c2:27:9c:7b:a0:af: 4e:e8:77:70:6c:33:dd:30:db:fc:50:77:2e:bb:b4:16:92:31: 38:3c:6a:dd:85:33:f9:f1:bb:15:8a:60:86:e0:65:9f:89:65: 40:b0:79:77:c7:21:36:7d:95:b3:fa:5e:80:bd:0c:31:0a:3c: 37:3f:55:ca:3a:3e:5d:36:a6:e7:60:cc:0d:ca:ad:96:c5:c0: 5e:50:2f:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1M0IxMTAvBgNVBAUTKDQ0QTZBNUU0RDFDMkI4RUZFMzlFOUQwM0FBM0IzNzkw QkMwQjgzMkEwHhcNMjYwOTIzMDcxNjM0WhcNMjYwOTMwMDcxNjM0WjAYMRYwFAYD VQQDEw02YWIzN2NkMi0xMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJDRosUP4tRFHVj3apG03DoEznh9cRtguNHhJm5m+8dUripQxrGMjNmOCKDZ wIkHfexyVIXNCp+9kzYYn2lzeNnwClIko0wZAZCh+aebpizN6C5Ea5AuUdj857/Q yNr9icXg/1PwS4hbBcANlM5L92RaYEkab/JkJfNrwN0PnCQ8ervJGza+XDtGzlzk MEd3vcEKYMVx5WPrwUUxDa5CAIO4HUIT+aNuFttMrFrI1JQe+jdeWZE673ZHpkoB FmS8UsAE1dDmYFfsGHeA4tQQrKBRoY+xgipptIRg0bUm4Fv3xAwUrxlAv7orYDOb TEsvc8cePIHPGBvDtRvf9bjgnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAmRyHO XCQtIb6LP57BcnpSipdFMB8GA1UdIwQYMBaAFESmpeTRwrjv456dA6o7N5C8C4Mq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjUzQi9GN0VENUJBMEUw MTkxMUYwOEFEM0VCOEQ2MjZGNTZCQy9SS2FsNU5IQ3VPX2pucDBEcWpzM2tMd0xn eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JLYWw1TkhDdU9fam5wMERxanMza0x3TGd5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjUzQi9GN0VENUJBMEUwMTkxMUYwOEFEM0VCOEQ2MjZGNTZCQy9SS2FsNU5IQ3VP X2pucDBEcWpzM2tMd0xneW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2Nrucr9JuE8k8F8zyPdf/xjIY3yBXRjVfMXiL+Y8MieulZ4NtyDx6RWEHV/ ZHyYQsmhpm3ORZxL1f/q/zpntHUFGaRZP4lvGKTP4+a34AWGltH/iU4ACGPRNB9o EWoEXH3irq7S6k4oMSlYEAFfLA+sRU2PvbSHaAkQ63kUM8LNdfogo2HMirfGP775 gf5icB1wJt61HLhHgCivgu718zu4uMa6pWnVzmFT7TRNwiece6CvTuh3cGwz3TDb /FB3Lru0FpIxODxq3YUz+fG7FYpghuBln4llQLB5d8chNn2Vs/pegL0MMQo8Nz9V yjo+XTam52DMDcqtlsXAXlAvxg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:27:14 2026 by rpki-client