$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: hJuSqOuqD+Cej3oIH70SNiJWZn6KR6VgGYEU/2oyKro= Subject key identifier: 43:96:27:6B:6A:FE:5C:AD:74:59:C3:BF:2C:83:D4:F8:99:20:F5:7A Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0FCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F62 Signing time: Thu 08 Oct 2026 17:41:48 +0000 Manifest this update: Thu 08 Oct 2026 17:41:48 +0000 Manifest next update: Thu 15 Oct 2026 17:41:48 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: yqT8ntdFycI7+ytww09kdr/E91Bnx/yDM3Tg8QJESYk=) 2: 8gVKVblLBz5nhRiGHl3DrQzkT_8.asa (hash: 1aYy+GoQ/OpgHh8bcjq4PAwa6BjfDmEqa+OAlnRrNn4=) 3: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: Ja4/CMw03eHsoSI1SxDv/gmDoWhVR1WIiVpoLLzR9uI=) 4: 10E905682CCE11F1BB1925E192833773.roa (hash: HkIXrKm45gEIaL69eK9NolITOExBggdE2/CFBbaKfNc=) 5: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: aZPZjU2X9q7Uezgbc+/YwtYMqbcTXMspTEvxkBuOs1c=) 6: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: 9k8Fht4Br+99Bt5Yrwgpw9dr0xvUubqA6YyCzt85eWA=) 7: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: fWUBv/Gp2qw1UZEr3XjxQsuXEeaBLIJR0Xh74UCm7Ts=) 8: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: w5d0LH96WqLLdOjMnBfiuhx00FMURmhDRlkPHPYAqNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Oct 8 17:41:48 2026 GMT Not After : Oct 15 17:41:48 2026 GMT Subject: CN=6ac7d5dc-3662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:36:30:29:9b:ad:14:34:4c:2f:6c:1f:9a: 2b:5e:ee:d3:20:1e:bb:40:6d:d6:5d:3a:b1:e2:59: 82:00:9d:15:cd:f4:73:dd:64:0f:ca:e9:5b:30:fc: 33:0e:5b:7e:e8:dc:79:6a:60:df:7d:32:a6:b9:0c: 8d:67:7b:b8:cb:af:ac:f1:8d:3a:02:9c:52:b9:16: 30:ea:b6:16:14:7e:fc:b8:28:ed:93:9b:3a:06:d2: e6:a3:72:48:5c:b5:26:6d:c1:7d:0c:94:dc:07:98: d8:7c:04:b8:5f:ac:d8:ee:7b:c1:41:cc:91:36:e0: 28:d6:b5:68:99:2e:3f:cf:4e:a0:10:df:17:ca:ed: 46:e9:0e:42:7f:14:fb:f6:87:b6:59:5c:d6:f7:29: d8:e9:c6:21:15:23:1d:04:cc:56:b9:d4:9b:33:3d: 0e:71:b3:b7:d9:e5:bd:6a:ea:b8:89:af:b3:e1:67: 2c:9c:20:76:06:93:93:f2:a5:0a:ee:f8:10:3f:08: e1:ce:aa:00:f6:bd:d5:5b:5f:92:62:55:c5:88:ac: 99:6d:fb:83:89:69:e0:94:58:8e:f2:62:b3:72:58: 47:4a:72:d0:88:87:8e:6e:75:db:1c:ee:e8:a1:4c: 82:ab:d9:70:8d:7b:ad:f1:44:de:9b:3d:6a:7f:35: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:27:6B:6A:FE:5C:AD:74:59:C3:BF:2C:83:D4:F8:99:20:F5:7A X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:66:3e:ab:fc:2d:32:00:ed:3a:22:e4:94:65:32:1a:c9:bb: 87:f7:95:f8:88:0b:5f:26:9d:a3:b6:cb:43:8c:7a:77:09:5c: e8:01:bd:20:18:a7:e3:f3:51:35:a5:86:af:02:92:de:9f:56: b3:c1:6c:e8:d4:98:6b:36:68:24:83:d1:91:48:21:f1:f8:4d: 21:5a:a9:1f:5d:85:dc:83:8c:5c:37:e6:80:0b:9c:ae:4d:d6: 9a:37:bc:8c:75:0e:d6:fc:60:13:46:83:cd:54:87:92:8a:4b: 6c:93:3b:c3:f0:9b:97:ca:38:49:3b:44:ed:c7:5a:47:1a:da: 27:ce:b5:cd:82:8f:87:20:50:58:2a:f5:71:50:34:9a:38:f0: d7:dd:b2:88:35:08:f5:f7:08:80:f8:ea:1c:af:ec:b7:3d:eb: 89:7c:b6:e5:b0:ad:8c:70:b3:16:7c:5f:53:2c:6f:80:76:78: c4:58:64:21:27:7f:11:9d:9d:89:af:90:4d:fa:5f:33:f2:db: 84:e2:33:6f:89:de:ba:27:00:aa:f2:49:dc:81:22:42:1c:71: 0d:ce:c0:88:ae:f9:35:cf:78:6f:10:b5:bb:14:6c:a6:88:bc: 09:3f:2e:dd:74:8c:26:db:05:db:14:26:14:b4:f5:ac:1c:48: fe:38:80:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYxMDA4MTc0MTQ4WhcNMjYxMDE1MTc0MTQ4WjAYMRYwFAYD VQQDEw02YWM3ZDVkYy0zNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Jg2MCmbrRQ0TC9sH5orXu7TIB67QG3WXTqx4lmCAJ0VzfRz3WQPyulbMPwz Dlt+6Nx5amDffTKmuQyNZ3u4y6+s8Y06ApxSuRYw6rYWFH78uCjtk5s6BtLmo3JI XLUmbcF9DJTcB5jYfAS4X6zY7nvBQcyRNuAo1rVomS4/z06gEN8Xyu1G6Q5CfxT7 9oe2WVzW9ynY6cYhFSMdBMxWudSbMz0OcbO32eW9auq4ia+z4WcsnCB2BpOT8qUK 7vgQPwjhzqoA9r3VW1+SYlXFiKyZbfuDiWnglFiO8mKzclhHSnLQiIeObnXbHO7o oUyCq9lwjXut8UTemz1qfzXn2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOWJ2tq /lytdFnDvyyD1PiZIPV6MB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVGY+q/wtMgDtOiLklGUyGsm7h/eV+IgLXyado7bLQ4x6dwlc6AG9IBin4/NR NaWGrwKS3p9Ws8Fs6NSYazZoJIPRkUgh8fhNIVqpH12F3IOMXDfmgAucrk3Wmje8 jHUO1vxgE0aDzVSHkopLbJM7w/Cbl8o4STtE7cdaRxraJ861zYKPhyBQWCr1cVA0 mjjw192yiDUI9fcIgPjqHK/stz3riXy25bCtjHCzFnxfUyxvgHZ4xFhkISd/EZ2d ia+QTfpfM/LbhOIzb4neuicAqvJJ3IEiQhxxDc7AiK75Nc94bxC1uxRspoi8CT8u 3XSMJtsF2xQmFLT1rBxI/jiApQ== -----END CERTIFICATE-----Generated at Fri Oct 9 21:13:35 2026 by rpki-client