$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: ng3Y2nFhnQUT01ty0W+OhBbKCiULeACC0EUA34MufMI= Subject key identifier: BF:40:32:DF:5F:98:CE:E9:0B:67:AB:FA:46:64:D4:83:24:2A:26:DA Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 02AB Signing time: Mon 05 Oct 2026 01:54:43 +0000 Manifest this update: Mon 05 Oct 2026 01:54:43 +0000 Manifest next update: Mon 12 Oct 2026 01:54:43 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: n8rXZ1/785cwsAQuxwl4Lm4NvYqSf64xZmNm85vHzFc=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Oct 5 01:54:43 2026 GMT Not After : Oct 12 01:54:43 2026 GMT Subject: CN=6ac30363-6dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:88:48:ff:33:77:bc:0c:15:12:99:a7:ee: 43:34:b6:8f:3e:2a:4f:15:03:a3:21:9d:92:0f:a3: d6:75:19:13:b8:77:bb:00:31:e6:59:83:17:59:94: 83:11:64:44:ae:93:cb:28:3b:5b:30:4e:57:59:72: ff:14:fc:5f:c3:1b:81:b6:49:1a:41:44:a9:d7:4e: 6c:1e:09:4c:2e:1c:a4:0b:b4:98:98:e6:da:0e:8d: e2:eb:65:67:c0:da:67:f6:55:b5:b7:40:0d:6c:cc: 1b:ff:ea:0a:15:ad:4a:ae:52:f3:de:e0:e1:b0:2f: 4f:cb:11:c4:67:f9:af:6d:3d:cc:14:5f:8b:35:f2: 51:f8:c6:06:2d:8d:6e:ba:d1:b8:2f:01:93:9e:02: 37:ea:62:fe:84:45:f7:17:37:a9:35:d9:41:94:76: fe:cf:33:c4:f2:94:aa:b7:fb:be:76:6d:e8:3d:d9: 46:b6:d5:79:b1:9e:d0:dc:5a:0c:a2:f5:4e:37:e7: 04:16:f5:2c:67:c4:cf:71:6c:b0:a5:07:18:ed:02: c7:e7:9d:c4:08:86:3b:ac:3f:69:69:b5:a9:67:53: b6:3c:c5:6e:ac:73:3d:25:97:28:5b:30:8f:73:03: 16:07:08:98:a3:fb:93:38:6a:96:1e:28:80:83:ee: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:32:DF:5F:98:CE:E9:0B:67:AB:FA:46:64:D4:83:24:2A:26:DA X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e0:5e:e3:28:9b:83:41:7f:8a:41:11:30:a4:ea:63:89:9b: 0a:30:af:97:b5:51:80:09:7c:46:5a:1c:39:38:c2:4f:be:85: 45:a5:3c:80:df:b2:f6:8c:fd:64:48:ae:a0:0b:03:57:2e:11: a6:55:23:be:f8:85:bf:2e:e1:f1:67:fb:f2:dd:a4:78:04:7d: 66:87:ad:37:27:36:54:2f:37:b1:ff:b5:6a:8a:12:e7:cf:07: 54:28:13:5c:91:2d:05:54:e6:32:e7:26:f1:ef:24:a6:8c:0c: 8d:b3:ef:e8:d6:34:8a:86:17:4b:74:ef:9c:32:d9:ed:d6:3d: 17:63:53:f9:23:1b:e8:81:66:2f:55:45:61:7f:39:53:e0:f5: 26:f5:8f:84:69:3e:68:ba:47:ec:85:d9:1a:60:53:69:96:e7: 1a:33:84:d3:f3:a3:51:d3:4b:fe:c8:30:bb:b3:f7:44:1c:37: 15:7b:ad:04:db:3e:30:b0:9e:55:91:6f:46:74:2b:0f:33:82: 0d:17:12:70:0c:bd:e5:b6:73:f5:69:bf:1d:a1:48:1b:c5:c7: e4:a2:8d:24:a5:57:1b:e1:fe:de:d3:f7:d7:26:04:8b:d5:41: 4d:48:74:8a:5a:e2:a0:de:96:cc:c8:50:6e:62:b6:2d:43:c2: dd:90:bc:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjYxMDA1MDE1NDQzWhcNMjYxMDEyMDE1NDQzWjAYMRYwFAYD VQQDEw02YWMzMDM2My02ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQWISP8zd7wMFRKZp+5DNLaPPipPFQOjIZ2SD6PWdRkTuHe7ADHmWYMXWZSD EWRErpPLKDtbME5XWXL/FPxfwxuBtkkaQUSp105sHglMLhykC7SYmObaDo3i62Vn wNpn9lW1t0ANbMwb/+oKFa1KrlLz3uDhsC9PyxHEZ/mvbT3MFF+LNfJR+MYGLY1u utG4LwGTngI36mL+hEX3FzepNdlBlHb+zzPE8pSqt/u+dm3oPdlGttV5sZ7Q3FoM ovVON+cEFvUsZ8TPcWywpQcY7QLH553ECIY7rD9pabWpZ1O2PMVurHM9JZcoWzCP cwMWBwiYo/uTOGqWHiiAg+4erQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9AMt9f mM7pC2er+kZk1IMkKibaMB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuBe4yibg0F/ikERMKTqY4mbCjCvl7VRgAl8RlocOTjCT76FRaU8gN+y9oz9 ZEiuoAsDVy4RplUjvviFvy7h8Wf78t2keAR9ZoetNyc2VC83sf+1aooS588HVCgT XJEtBVTmMucm8e8kpowMjbPv6NY0ioYXS3TvnDLZ7dY9F2NT+SMb6IFmL1VFYX85 U+D1JvWPhGk+aLpH7IXZGmBTaZbnGjOE0/OjUdNL/sgwu7P3RBw3FXutBNs+MLCe VZFvRnQrDzOCDRcScAy95bZz9Wm/HaFIG8XH5KKNJKVXG+H+3tP31yYEi9VBTUh0 ilrioN6WzMhQbmK2LUPC3ZC8BQ== -----END CERTIFICATE-----Generated at Tue Oct 6 18:08:33 2026 by rpki-client