$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: pKrZxwW1MVhBDTz0xhCUiA+JHCGhXFLBUZ3m7GM76nI= Subject key identifier: 41:A3:7C:FD:EF:9B:8F:87:DE:93:04:15:62:87:78:E3:25:9F:FC:91 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 04A3 Signing time: Tue 22 Sep 2026 23:34:47 +0000 Manifest this update: Tue 22 Sep 2026 23:34:47 +0000 Manifest next update: Tue 29 Sep 2026 23:34:47 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: cYYjPhCqClAGD3BOc7L3R3cU6mMg08NRizTNUvw+/fY=) 2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=) 4: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Sep 22 23:34:47 2026 GMT Not After : Sep 29 23:34:47 2026 GMT Subject: CN=6ab31097-fced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:92:fd:28:c1:c6:ca:91:e9:c0:12:3e:a8: 8b:20:e2:fc:c3:4e:94:eb:46:23:da:3a:2e:9e:1a: 25:94:cf:d0:82:80:87:1e:3c:3e:77:ec:04:33:58: 57:a9:b4:37:7f:d7:89:73:e3:ac:ef:d1:cb:7f:d0: 2b:99:4f:58:74:0f:b8:40:03:0e:99:91:b4:15:3b: e4:0f:4f:78:79:e7:d2:a1:f2:52:93:78:80:d9:d1: 43:df:de:a5:3b:ce:9f:42:4e:45:90:2c:76:21:c2: 4d:4a:0f:4f:1b:73:00:18:f0:03:43:68:d2:62:51: c7:22:43:32:81:d4:98:5d:f8:1d:8a:5f:02:7e:dc: 20:02:e1:3b:4b:f6:95:c5:3a:b3:49:e2:5e:01:cd: 7d:4f:cc:0a:5d:d1:c2:41:b7:23:4e:a8:c4:b1:2b: c7:83:40:f4:8d:bc:2e:a9:32:7c:9c:6c:c5:80:e1: 04:67:ce:af:af:76:61:0f:06:1b:57:1c:09:a9:c5: a7:ff:ca:36:30:96:3d:92:0b:9c:ce:c1:f4:9b:ca: 13:15:8c:b5:f7:08:31:6d:da:0c:87:c6:04:b3:44: 82:bd:82:55:31:e9:f2:b5:32:ed:3d:1a:7f:c2:7d: be:42:9a:25:1e:59:bf:c2:1f:77:17:e8:d7:2f:45: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A3:7C:FD:EF:9B:8F:87:DE:93:04:15:62:87:78:E3:25:9F:FC:91 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:99:ad:48:0b:73:ca:29:2f:d5:f4:af:8d:f0:7c:d6:9d:6b: 07:02:00:cf:d3:73:74:d9:d7:35:0a:ec:51:79:19:97:c8:c4: 95:35:a2:46:c6:a2:30:a5:88:43:7e:82:2c:c8:df:29:5e:96: ef:c4:b3:4b:a4:f2:a6:4d:02:34:0f:79:a8:14:80:36:60:ea: 4b:59:15:6a:d1:3a:f9:df:56:b9:eb:d6:7a:00:d1:6a:7e:53: 20:d1:6c:ae:fe:75:fc:9b:af:82:da:0d:a3:3a:5e:82:5b:37: dd:6b:da:84:5b:e9:56:e6:72:b3:e2:86:51:a2:2d:28:da:d6: 34:53:34:02:c9:56:28:3d:eb:2a:f1:9e:c8:65:64:4a:32:a3: fa:bd:60:ac:3b:08:d2:93:03:f8:ec:88:14:39:9e:f5:21:2a: e0:b1:31:da:c9:8f:ca:b4:82:45:3d:82:c3:64:3f:e4:ea:23: db:fd:53:4f:25:d6:35:24:95:ed:13:26:a6:e5:4d:26:ae:d9: 31:a9:f1:0a:74:45:86:35:a2:00:6c:84:86:5c:1b:6f:fb:c9: c7:1e:d1:e3:d3:db:2c:af:6a:72:75:d8:50:f9:58:98:0d:2b: 60:1f:ba:a7:6e:45:f8:04:ac:c8:96:0d:c7:0a:4d:fc:d1:be: e4:50:fe:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYwOTIyMjMzNDQ3WhcNMjYwOTI5MjMzNDQ3WjAYMRYwFAYD VQQDEw02YWIzMTA5Ny1mY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkeS/SjBxsqR6cASPqiLIOL8w06U60Yj2jounhollM/QgoCHHjw+d+wEM1hX qbQ3f9eJc+Os79HLf9ArmU9YdA+4QAMOmZG0FTvkD094eefSofJSk3iA2dFD396l O86fQk5FkCx2IcJNSg9PG3MAGPADQ2jSYlHHIkMygdSYXfgdil8CftwgAuE7S/aV xTqzSeJeAc19T8wKXdHCQbcjTqjEsSvHg0D0jbwuqTJ8nGzFgOEEZ86vr3ZhDwYb VxwJqcWn/8o2MJY9kguczsH0m8oTFYy19wgxbdoMh8YEs0SCvYJVMenytTLtPRp/ wn2+QpolHlm/wh93F+jXL0X7lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGjfP3v m4+H3pMEFWKHeOMln/yRMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvZmtSAtzyikv1fSvjfB81p1rBwIAz9NzdNnXNQrsUXkZl8jElTWiRsaiMKWI Q36CLMjfKV6W78SzS6Typk0CNA95qBSANmDqS1kVatE6+d9WuevWegDRan5TINFs rv51/JuvgtoNozpegls33WvahFvpVuZys+KGUaItKNrWNFM0AslWKD3rKvGeyGVk SjKj+r1grDsI0pMD+OyIFDme9SEq4LEx2smPyrSCRT2Cw2Q/5Ooj2/1TTyXWNSSV 7RMmpuVNJq7ZManxCnRFhjWiAGyEhlwbb/vJxx7R49PbLK9qcnXYUPlYmA0rYB+6 p25F+ASsyJYNxwpN/NG+5FD+7g== -----END CERTIFICATE-----Generated at Thu Sep 24 20:54:26 2026 by rpki-client