$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft File: kBdT4_LIclCGbxxHOQChAP1Mq1M.mft (raw, json) Hash identifier: UV88DItWqa1mOC/+Q16rQ4Q1B3iF8wpmdhRaBDflR0w= Subject key identifier: 73:7C:03:6E:11:51:EB:E8:B2:59:B2:DB:FC:A9:AA:95:3A:0D:FA:00 Authority key identifier: 90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 Certificate issuer: /CN=A91E4FA6/serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft Manifest number: 2A Signing time: Fri 25 Sep 2026 08:54:19 +0000 Manifest this update: Fri 25 Sep 2026 08:54:19 +0000 Manifest next update: Fri 02 Oct 2026 08:54:19 +0000 Files and hashes: 1: kBdT4_LIclCGbxxHOQChAP1Mq1M.crl (hash: RzuhjsO7sFhjKHR9g7fFBlAuMHY1auLih9MQKCm+auo=) 2: 947763C67B4211F1AEF4840594A30FBC.roa (hash: J3btKuOFaL2iAnmc6q/6qXEqUsLNqUcznVApxNof1zE=) 3: 93CAB16C7B4211F1AEF4840594A30FBC.roa (hash: tsHb5mr8RbkReF/Lzb1FiewO29ujOLPqtSMY3Pgh1Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Validity Not Before: Sep 25 08:54:19 2026 GMT Not After : Oct 2 08:54:19 2026 GMT Subject: CN=6ab636bb-ddda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:d2:37:cc:cf:1c:fe:65:4c:5e:36:a2:84: 98:a6:51:34:f3:fa:0d:5a:27:6b:52:06:48:22:42: 00:6a:7d:5d:4c:2e:b1:bc:e2:d4:d1:a0:5d:32:40: e5:4d:a4:9e:6f:66:d3:8a:1e:12:de:20:03:4c:0e: 91:fc:46:ab:4a:b1:13:fa:a1:a8:60:66:7a:1f:86: 90:98:ae:9e:be:b8:3e:45:44:63:38:c5:c2:ee:98: f4:14:5a:05:e6:94:56:a4:e1:a6:d3:9f:b1:61:56: da:1f:23:51:cf:0c:d7:dd:63:ac:44:fe:a1:93:9e: 63:d1:f8:c8:6d:b4:00:bd:ec:98:87:10:55:23:2c: b6:04:ab:9c:a8:ef:a3:d0:5d:1c:ec:df:80:b9:3c: a0:db:81:25:13:f6:b1:3b:b5:35:85:15:71:c4:d5: 30:08:35:49:a2:52:a3:79:92:75:31:9f:23:9c:43: c3:b0:c4:11:81:68:4f:8e:68:66:b1:42:1d:56:f1: 8f:f3:3f:66:49:88:81:e7:61:68:ff:e6:e0:bb:9e: 16:b2:0a:a8:f8:db:a4:a5:8d:73:ea:71:db:c0:2e: f6:b2:08:48:76:67:bc:34:a7:20:79:79:92:e6:b1: f3:fc:e0:2a:51:d2:c4:98:92:66:47:d7:ad:3e:67: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:03:6E:11:51:EB:E8:B2:59:B2:DB:FC:A9:AA:95:3A:0D:FA:00 X509v3 Authority Key Identifier: keyid:90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f2:45:f6:ae:bd:5d:dc:35:a8:6c:12:2b:a7:6e:d9:eb:30: 73:e6:ce:de:40:76:12:01:59:2f:2f:c8:3b:a5:47:70:1a:5f: 0b:82:1c:7c:8d:72:09:ce:82:cb:85:df:b6:8a:e0:20:34:e0: 61:da:61:d5:6f:f3:b0:7d:87:f8:fc:09:37:1e:46:ee:c3:35: 4b:a1:63:90:84:48:db:81:26:49:60:aa:c4:c5:f2:b9:9b:c3: 0e:99:d9:29:e3:78:09:3a:53:a5:f6:ce:69:e0:f6:e0:c3:8b: 30:bb:e6:f7:e6:64:f8:aa:aa:4c:85:a1:69:d4:8d:dd:69:23: 48:41:0c:0f:8a:cf:9b:9c:9a:22:b9:4d:43:a3:01:aa:49:d6: 3d:34:3f:3c:3c:b6:f3:0c:aa:01:8e:63:3e:b8:6c:34:1f:fb: b6:30:51:e3:1e:9b:3f:36:18:7f:74:82:49:79:3f:f0:cc:13: 6d:d1:f9:4b:3f:3e:0d:a2:b6:69:10:a8:70:b8:0e:29:4f:e5: 37:21:fe:9f:63:df:db:40:cc:14:e1:95:a9:6e:c9:30:bd:e8: 68:5e:8e:b9:f7:d9:f0:98:f0:92:a9:12:97:91:1f:06:fd:32: 8c:9e:5a:ec:7b:f8:21:f4:87:41:e7:76:2d:5a:eb:09:39:06: b0:6f:36:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZBNjExMC8GA1UEBRMoOTAxNzUzRTNGMkM4NzI1MDg2NkYxQzQ3MzkwMEExMDBG RDRDQUI1MzAeFw0yNjA5MjUwODU0MTlaFw0yNjEwMDIwODU0MTlaMBgxFjAUBgNV BAMTDTZhYjYzNmJiLWRkZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxr9I3zM8c/mVMXjaihJimUTTz+g1aJ2tSBkgiQgBqfV1MLrG84tTRoF0yQOVN pJ5vZtOKHhLeIANMDpH8RqtKsRP6oahgZnofhpCYrp6+uD5FRGM4xcLumPQUWgXm lFak4abTn7FhVtofI1HPDNfdY6xE/qGTnmPR+MhttAC97JiHEFUjLLYEq5yo76PQ XRzs34C5PKDbgSUT9rE7tTWFFXHE1TAINUmiUqN5knUxnyOcQ8OwxBGBaE+OaGax Qh1W8Y/zP2ZJiIHnYWj/5uC7nhayCqj426SljXPqcdvALvayCEh2Z7w0pyB5eZLm sfP84CpR0sSYkmZH160+Z7VTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc3wDbhFR 6+iyWbLb/KmqlToN+gAwHwYDVR0jBBgwFoAUkBdT4/LIclCGbxxHOQChAP1Mq1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkE2LzJCMEI5NTFBN0I0 MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xDR2J4eEhPUUNoQVAxTXEx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0JkVDRfTEljbENHYnh4SE9RQ2hBUDFNcTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkE2LzJCMEI5NTFBN0I0MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xD R2J4eEhPUUNoQVAxTXExTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBM8kX2rr1d3DWobBIrp27Z6zBz5s7eQHYSAVkvL8g7pUdwGl8Lghx8jXIJzoLL hd+2iuAgNOBh2mHVb/OwfYf4/Ak3HkbuwzVLoWOQhEjbgSZJYKrExfK5m8MOmdkp 43gJOlOl9s5p4Pbgw4swu+b35mT4qqpMhaFp1I3daSNIQQwPis+bnJoiuU1DowGq SdY9ND88PLbzDKoBjmM+uGw0H/u2MFHjHps/Nhh/dIJJeT/wzBNt0flLPz4NorZp EKhwuA4pT+U3If6fY9/bQMwU4ZWpbskwvehoXo6599nwmPCSqRKXkR8G/TKMnlrs e/gh9IdB53YtWusJOQawbzZ5 -----END CERTIFICATE-----Generated at Sat Sep 26 16:43:44 2026 by rpki-client