$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json) Hash identifier: 44T6LD+zsjqUQjr/gLUXOBxkYo0zpjYK08WtG5G49ho= Subject key identifier: 4C:90:4D:DD:36:4C:C8:85:90:2D:25:70:13:2E:93:28:A4:F5:67:ED Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft Manifest number: 018F Signing time: Wed 23 Sep 2026 04:15:06 +0000 Manifest this update: Wed 23 Sep 2026 04:15:06 +0000 Manifest next update: Wed 30 Sep 2026 04:15:06 +0000 Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: 0RqRS+hGxguMMdiX+kkZUuu7Hocm6B0oEuLPzzyPlTw=) 2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: jP6TZWwRFPY1LK/E2kOV63Xfi0StNXGzAgbQFJN0A6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Validity Not Before: Sep 23 04:15:06 2026 GMT Not After : Sep 30 04:15:06 2026 GMT Subject: CN=6ab3524a-a148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:46:47:21:0e:42:9a:64:43:52:57:33:91:ea: e7:d4:38:6d:b6:cd:1c:36:69:6e:88:9d:ce:24:dc: 36:75:08:81:5e:ee:0a:5a:47:51:07:15:b5:0c:91: e2:06:9b:cd:17:81:5b:60:85:50:77:ea:f5:3e:8d: ee:61:74:ce:41:24:c2:1f:fa:13:f3:93:34:3b:0b: 08:fa:02:c3:a9:09:e9:11:09:a5:e3:e1:65:52:11: a8:37:d5:f1:ab:e8:ab:80:31:2d:a7:13:44:07:af: 78:4c:bf:7e:ce:bb:ef:d0:e7:03:e6:06:09:83:ff: cb:6d:07:69:18:c0:cd:bd:29:33:c9:e2:59:88:84: 8d:a5:39:72:2a:d1:a3:90:8b:ad:ea:83:da:72:47: 9d:fa:3e:26:e3:3a:1e:b2:0f:60:cb:57:55:47:5a: f3:43:9a:ab:50:b2:35:23:a8:17:7f:3e:22:08:90: 74:e6:30:83:d2:58:07:33:fc:10:38:c4:23:1b:b8: e5:80:95:6e:07:bf:ac:a5:2f:59:10:e0:73:85:67: a3:19:8e:dd:e1:71:e5:e2:b0:c4:b6:df:e9:b6:fc: 98:6b:26:0d:d3:df:cb:c0:06:37:b5:eb:84:2f:ef: 91:78:55:77:98:63:27:7c:50:17:ed:2a:e6:2a:3c: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:90:4D:DD:36:4C:C8:85:90:2D:25:70:13:2E:93:28:A4:F5:67:ED X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d5:8a:b5:44:42:b0:91:93:a1:c3:6d:0a:0a:df:32:f2:ef: ca:c9:e6:f9:05:c1:30:33:a4:ff:42:7a:f5:db:ab:35:cc:72: 64:ee:e0:64:19:d3:d7:de:d4:7d:39:ac:04:c1:77:c3:7e:15: d0:d2:1d:c7:92:d6:7a:d2:91:a0:35:b9:53:a2:de:53:e7:c5: 4c:a4:98:0f:d4:cd:0a:ad:7e:45:8b:75:d9:6a:ab:60:0a:3f: d0:69:e7:e7:ef:d4:41:34:85:56:82:23:27:b3:9d:76:e7:e3: 9f:32:78:6c:41:2e:e0:71:3a:7d:8c:70:b8:1e:9b:b9:2c:96: 1b:e6:7d:91:ca:1a:19:54:66:25:da:cd:75:a1:57:28:06:77: 5a:ff:4d:fe:28:a3:6f:d8:52:8b:8f:7b:f4:02:42:12:17:4f: 1a:2c:8f:1b:55:29:58:a9:07:e6:e2:f7:4f:68:c2:97:62:dd: 2d:7a:f4:23:4c:5e:01:a2:76:ba:9f:64:27:97:10:fd:fe:98: 9c:cd:10:e0:22:9e:5c:a1:57:4d:2c:95:83:df:e7:9f:ee:fa: ff:48:b8:c1:5f:08:2b:e6:a6:eb:1c:78:98:b9:52:99:71:98: 81:a6:6b:a0:87:38:5e:bc:31:d9:7a:91:2a:ed:6c:4e:6f:e9: bc:bc:9a:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2NTJEOEU5RkVF N0VDNUFFMzMwHhcNMjYwOTIzMDQxNTA2WhcNMjYwOTMwMDQxNTA2WjAYMRYwFAYD VQQDEw02YWIzNTI0YS1hMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAikZHIQ5CmmRDUlczkern1Dhtts0cNmluiJ3OJNw2dQiBXu4KWkdRBxW1DJHi BpvNF4FbYIVQd+r1Po3uYXTOQSTCH/oT85M0OwsI+gLDqQnpEQml4+FlUhGoN9Xx q+irgDEtpxNEB694TL9+zrvv0OcD5gYJg//LbQdpGMDNvSkzyeJZiISNpTlyKtGj kIut6oPacked+j4m4zoesg9gy1dVR1rzQ5qrULI1I6gXfz4iCJB05jCD0lgHM/wQ OMQjG7jlgJVuB7+spS9ZEOBzhWejGY7d4XHl4rDEtt/ptvyYayYN09/LwAY3teuE L++ReFV3mGMnfFAX7SrmKjyLFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEyQTd02 TMiFkC0lcBMukyik9WftMB8GA1UdIwQYMBaAFJAan56K5AYuUhm3ZS2On+5+xa4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNFNy83MkY3NUI5ODVB REQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0JpNVNHYmRsTFk2ZjduN0Zy ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0Jp NVNHYmRsTFk2ZjduN0Zyak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdWKtURCsJGTocNtCgrfMvLvysnm+QXBMDOk/0J69durNcxyZO7gZBnT197U fTmsBMF3w34V0NIdx5LWetKRoDW5U6LeU+fFTKSYD9TNCq1+RYt12WqrYAo/0Gnn 5+/UQTSFVoIjJ7OddufjnzJ4bEEu4HE6fYxwuB6buSyWG+Z9kcoaGVRmJdrNdaFX KAZ3Wv9N/iijb9hSi4979AJCEhdPGiyPG1UpWKkH5uL3T2jCl2LdLXr0I0xeAaJ2 up9kJ5cQ/f6YnM0Q4CKeXKFXTSyVg9/nn+76/0i4wV8IK+am6xx4mLlSmXGYgaZr oIc4Xrwx2XqRKu1sTm/pvLyaww== -----END CERTIFICATE-----Generated at Thu Sep 24 17:25:49 2026 by rpki-client