$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json) Hash identifier: EW51S7s8MjKtkH72FJcPYvU0Si099hl+PHsmFX+wego= Subject key identifier: 42:AB:E0:13:D1:F2:52:64:6C:3E:50:64:00:19:7A:94:11:4D:A7:EF Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 2087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft Manifest number: 2075 Signing time: Thu 08 Oct 2026 15:58:46 +0000 Manifest this update: Thu 08 Oct 2026 15:58:46 +0000 Manifest next update: Thu 15 Oct 2026 15:58:46 +0000 Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: wIh5YoYrGJyNmt5IYW+FhLbUI/fHrI2j7YOKcyDfS1s=) 2: AE41D3E686EF11F19E006003A7EE528E.roa (hash: 4pQpk3p6aMXj55Oacbm1qFqGIyP8w+dcV2l2n/cRoBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8327 (0x2087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Oct 8 15:58:46 2026 GMT Not After : Oct 15 15:58:46 2026 GMT Subject: CN=6ac7bdb6-69a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:e3:59:be:81:c4:e6:b6:42:b3:42:74:2f: 8c:5e:b4:b0:bc:5d:dd:af:6c:92:37:9c:98:68:a6: 10:68:85:6b:ff:ac:44:28:57:15:fe:38:fc:21:06: 35:2b:5e:cb:48:6b:93:8b:9a:3b:38:65:d0:fb:fd: 05:26:40:94:fd:65:c9:f0:f1:a8:fe:85:dc:da:9d: de:10:50:ec:59:d1:78:28:a9:87:3e:39:09:09:a3: 2a:c1:56:d6:41:c0:68:c9:17:e3:fb:14:ba:39:fe: e8:45:40:c8:1a:b8:bd:3b:1d:04:2e:c4:cb:b3:a8: 95:f7:e1:c5:10:db:cd:66:e6:2e:7b:6c:6e:3a:98: 0a:9e:36:2f:aa:22:b5:9c:0e:64:2b:ce:83:1b:48: fc:e3:13:81:97:6d:33:86:a6:f5:d1:e8:b9:d5:5d: 27:80:54:0c:19:b7:96:73:a3:d0:e7:b0:72:ea:42: ba:66:2c:ad:b2:55:10:31:ff:4c:8e:98:83:56:81: 6e:9d:82:1d:e5:d2:17:8e:48:3c:be:48:5d:2d:5a: 06:e6:ba:a3:07:cb:4a:84:31:63:58:86:5d:29:fe: 19:9c:a0:5b:71:01:e2:d6:fb:87:af:07:3c:3d:f7: 55:da:9a:e9:5c:a9:ba:c2:76:74:ed:5b:db:6f:c2: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:E0:13:D1:F2:52:64:6C:3E:50:64:00:19:7A:94:11:4D:A7:EF X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:ef:fa:9a:95:e1:d9:0f:2b:85:eb:ea:59:f1:8a:a3:b7: d3:8f:f8:f4:3d:a9:1a:ca:ad:61:f2:6f:d0:7b:de:b7:b6:f5: 25:54:65:0e:0c:f3:1e:1e:df:99:71:1a:3e:9d:0e:d4:cc:f5: 6c:33:4b:c3:7d:c7:e5:db:a3:9c:55:5a:82:9d:49:c1:c8:41: 80:26:8a:2b:44:9a:13:22:69:c3:8d:b0:21:4e:d7:25:5d:df: 45:61:6c:48:6c:c4:50:59:c0:c6:10:1a:9d:30:ca:6a:99:1c: 1c:95:04:8c:b8:65:41:a3:b2:ca:57:0f:9c:cf:c7:8d:da:f5: 46:4e:20:71:f8:4a:29:d2:e5:ea:4c:4e:51:bf:53:f6:65:38: 05:e4:48:33:72:70:b1:a6:55:31:05:35:7c:e6:cf:7f:18:d6: e5:ce:70:73:cc:91:5b:a3:1b:76:e0:7e:c8:df:70:7c:30:06: 7d:6f:fa:31:a0:ff:f7:96:3c:50:31:64:cb:71:f2:cd:23:d5: 7e:02:c7:76:a0:18:1f:91:ec:49:e7:0a:4f:df:79:71:7a:dc: f4:f3:b5:42:84:1b:64:19:7d:0c:9a:24:e4:bb:1c:da:b6:d5: e9:62:68:b6:8e:b5:83:a6:f0:d1:f8:6a:0f:4a:3b:6a:d6:10: d4:81:e3:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjYxMDA4MTU1ODQ2WhcNMjYxMDE1MTU1ODQ2WjAYMRYwFAYD VQQDEw02YWM3YmRiNi02OWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplvjWb6BxOa2QrNCdC+MXrSwvF3dr2ySN5yYaKYQaIVr/6xEKFcV/jj8IQY1 K17LSGuTi5o7OGXQ+/0FJkCU/WXJ8PGo/oXc2p3eEFDsWdF4KKmHPjkJCaMqwVbW QcBoyRfj+xS6Of7oRUDIGri9Ox0ELsTLs6iV9+HFENvNZuYue2xuOpgKnjYvqiK1 nA5kK86DG0j84xOBl20zhqb10ei51V0ngFQMGbeWc6PQ57By6kK6ZiytslUQMf9M jpiDVoFunYId5dIXjkg8vkhdLVoG5rqjB8tKhDFjWIZdKf4ZnKBbcQHi1vuHrwc8 PfdV2prpXKm6wnZ07Vvbb8LIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKr4BPR 8lJkbD5QZAAZepQRTafvMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ bl9KTTBGMWV6MG5tWXRtY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAufPv+pqV4dkPK4Xr6lnxiqO304/49D2pGsqtYfJv0Hvet7b1JVRlDgzzHh7f mXEaPp0O1Mz1bDNLw33H5dujnFVagp1JwchBgCaKK0SaEyJpw42wIU7XJV3fRWFs SGzEUFnAxhAanTDKapkcHJUEjLhlQaOyylcPnM/Hjdr1Rk4gcfhKKdLl6kxOUb9T 9mU4BeRIM3JwsaZVMQU1fObPfxjW5c5wc8yRW6MbduB+yN9wfDAGfW/6MaD/95Y8 UDFky3HyzSPVfgLHdqAYH5HsSecKT995cXrc9PO1QoQbZBl9DJok5Lsc2rbV6WJo to61g6bw0fhqD0o7atYQ1IHjpQ== -----END CERTIFICATE-----Generated at Sat Oct 10 11:10:55 2026 by rpki-client