$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: Mm10BjCdEkAGzxC3QzNrT9Hjpn9bwSNFvQnXbwVgHJg= Subject key identifier: B1:6A:BB:54:6C:72:F3:4C:A1:57:CE:DE:2B:8B:8B:7C:DF:1E:8E:70 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 4B Signing time: Mon 21 Sep 2026 08:21:28 +0000 Manifest this update: Mon 21 Sep 2026 08:21:28 +0000 Manifest next update: Mon 28 Sep 2026 08:21:28 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: xaOW3MNi8YvMAoZkjkCrORaHCOvRTU2GXPfzChy5GmY=) 2: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) 3: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Sep 21 08:21:28 2026 GMT Not After : Sep 28 08:21:28 2026 GMT Subject: CN=6ab0e908-c7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:27:74:ff:b1:37:34:a4:b5:b9:6f:26:1a: b3:c1:26:4e:01:2d:2f:c3:be:68:d8:73:cb:0b:33: 84:3c:42:cd:63:d1:76:47:88:be:e6:b9:e6:39:30: a6:db:e7:63:be:54:28:51:89:23:b3:b1:77:d5:49: 28:99:03:e4:9e:fc:07:f0:ed:bc:5c:b1:29:d7:b0: 74:04:41:6b:4b:d3:ae:13:91:1d:1f:55:9e:44:b1: bd:e0:3c:af:77:fa:71:82:7e:ef:04:8a:64:61:d0: 89:7b:df:f5:38:e4:0e:9f:bd:e0:59:88:31:06:16: ea:5b:6d:14:c4:fe:b0:57:8b:98:ba:60:17:86:1a: 3e:f2:8f:63:c8:c8:d1:5a:ed:b6:00:99:5f:01:42: 43:27:6c:24:f2:81:2f:2d:bc:b3:3e:c2:4c:b4:5c: 7e:8f:4b:30:0f:40:09:63:2e:fe:3c:14:3e:dc:8f: a1:d4:bd:06:6f:ca:61:0f:b2:31:44:ab:cb:86:55: fd:f8:85:44:94:2a:f2:21:f9:21:8d:a1:82:c6:84: d2:4f:92:60:e6:17:6c:0e:ef:3f:2d:ec:39:65:9f: f8:94:e2:3d:58:84:f3:68:42:69:fb:ab:2c:46:c9: aa:27:61:b3:16:49:72:da:27:49:09:e3:61:5e:89: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:BB:54:6C:72:F3:4C:A1:57:CE:DE:2B:8B:8B:7C:DF:1E:8E:70 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:db:43:6b:29:ef:41:c7:39:bd:59:66:15:88:2d:f9:e6:43: 83:34:34:e4:f6:d6:2e:38:f2:8a:41:dc:ff:a4:9a:48:48:74: 25:43:c2:85:0a:04:9f:04:f2:76:08:3a:9f:d1:f4:22:86:3e: 5c:a7:81:3f:fc:bc:15:65:11:57:c3:6b:09:13:85:36:af:f3: dd:5d:fb:fb:73:00:bc:9e:c6:75:ac:a6:0f:75:ee:bb:c9:f3: be:45:02:7c:96:8b:4e:34:35:f1:cb:fb:68:5e:f5:e0:ef:7a: c8:da:c7:18:b6:d7:dc:09:cf:b1:9c:c0:e1:5b:7d:4c:70:1f: 6d:f9:e1:e6:05:08:b1:a2:1c:7e:8e:d9:30:0a:11:d4:32:fa: 4c:80:ba:9f:37:dd:d4:69:ae:5d:54:68:70:75:17:ab:b2:79: c9:1b:fa:d4:62:b0:80:f6:92:ec:c7:d6:96:0d:65:80:ee:f7: 0b:40:84:b4:e3:a3:9f:b0:74:0d:c3:21:81:3f:9e:e2:90:6e: e7:2d:b6:dc:d7:8d:4b:43:6f:62:5f:5e:cd:b6:d0:7a:76:05: e7:a7:e3:36:83:06:f9:4e:48:be:4c:50:33:64:18:ba:99:42: a8:fd:44:ab:3b:c7:a2:7d:de:0c:01:66:ad:3f:74:d1:a6:53: a6:d0:98:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA5MjEwODIxMjhaFw0yNjA5MjgwODIxMjhaMBgxFjAUBgNV BAMTDTZhYjBlOTA4LWM3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRECd0/7E3NKS1uW8mGrPBJk4BLS/DvmjYc8sLM4Q8Qs1j0XZHiL7mueY5MKbb 52O+VChRiSOzsXfVSSiZA+Se/Afw7bxcsSnXsHQEQWtL064TkR0fVZ5Esb3gPK93 +nGCfu8EimRh0Il73/U45A6fveBZiDEGFupbbRTE/rBXi5i6YBeGGj7yj2PIyNFa 7bYAmV8BQkMnbCTygS8tvLM+wky0XH6PSzAPQAljLv48FD7cj6HUvQZvymEPsjFE q8uGVf34hUSUKvIh+SGNoYLGhNJPkmDmF2wO7z8t7Dlln/iU4j1YhPNoQmn7qyxG yaonYbMWSXLaJ0kJ42FeiVbTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsWq7VGxy 80yhV87eK4uLfN8ejnAwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCA20NrKe9Bxzm9WWYViC355kODNDTk9tYuOPKKQdz/pJpISHQlQ8KFCgSfBPJ2 CDqf0fQihj5cp4E//LwVZRFXw2sJE4U2r/PdXfv7cwC8nsZ1rKYPde67yfO+RQJ8 lotONDXxy/toXvXg73rI2scYttfcCc+xnMDhW31McB9t+eHmBQixohx+jtkwChHU MvpMgLqfN93Uaa5dVGhwdRersnnJG/rUYrCA9pLsx9aWDWWA7vcLQIS046OfsHQN wyGBP57ikG7nLbbc141LQ29iX17NttB6dgXnp+M2gwb5Tki+TFAzZBi6mUKo/USr O8eifd4MAWatP3TRplOm0JiH -----END CERTIFICATE-----Generated at Tue Sep 22 22:46:16 2026 by rpki-client