$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft File: 8O-KITM_UQdy8x7aMkGe3iQXrTk.mft (raw, json) Hash identifier: /RpRaQXCWmwjn/t+H1sTyLdI6uH6zQDshbjIDm3onak= Subject key identifier: 2C:1C:29:43:17:97:00:D7:08:7E:C5:50:1C:1A:4C:15:27:1D:90:2D Authority key identifier: F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 Certificate issuer: /CN=A91F352B/serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft Manifest number: 2E Signing time: Fri 25 Sep 2026 08:50:10 +0000 Manifest this update: Fri 25 Sep 2026 08:50:10 +0000 Manifest next update: Fri 02 Oct 2026 08:50:10 +0000 Files and hashes: 1: 8O-KITM_UQdy8x7aMkGe3iQXrTk.crl (hash: aW3wv/7A+SJ455XDRG+KfsBZsJSo29jqssIAHNAiX1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F352B, serialNumber=F0EF8A21333F510772F31EDA32419EDE2417AD39 Validity Not Before: Sep 25 08:50:10 2026 GMT Not After : Oct 2 08:50:10 2026 GMT Subject: CN=6ab635c2-fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:04:74:97:6d:bc:7e:92:23:37:47:36:02: 4a:82:96:b5:0d:6e:c7:6b:3e:7c:6f:8d:a6:58:b8: 1a:8c:29:14:48:e0:14:fd:e4:93:84:05:55:5e:6b: 83:06:07:d8:da:6b:94:17:ad:43:1a:6e:0d:31:a8: 4c:d7:c5:ed:29:48:2d:62:0b:db:e4:e7:38:41:bd: 18:8b:f3:2a:b3:f5:a5:47:b6:7a:86:35:a9:a9:21: 5b:e3:60:bf:62:e4:51:f7:89:82:32:ee:3a:57:07: 06:6e:e2:d8:94:1d:cc:e5:31:b5:23:e3:ba:0e:52: 94:03:cf:a1:13:0b:71:bd:37:b1:21:52:8e:64:30: 8d:c5:3c:ff:97:4a:a8:38:ae:50:71:4f:7a:5c:f3: 4e:12:b5:f1:57:86:c5:7f:9c:36:96:f7:ae:ec:a4: 67:73:50:a9:3f:d8:8b:0e:2a:3f:37:33:62:02:d9: 9d:76:34:35:e6:f7:80:66:12:62:e0:76:3b:2b:20: fe:45:0d:6b:13:08:6e:97:d9:fc:67:c2:bf:2a:79: 04:b4:61:1d:c4:e8:55:e3:d8:95:3c:28:27:21:87: 6d:3c:f8:c3:2e:ef:65:1b:65:8d:a6:1e:b1:fc:e1: 62:01:ed:ce:bd:74:66:f6:fb:3a:cb:4b:94:85:f9: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:29:43:17:97:00:D7:08:7E:C5:50:1C:1A:4C:15:27:1D:90:2D X509v3 Authority Key Identifier: keyid:F0:EF:8A:21:33:3F:51:07:72:F3:1E:DA:32:41:9E:DE:24:17:AD:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O-KITM_UQdy8x7aMkGe3iQXrTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F352B/15358D98736A11F1B5754CDF64A30FBC/8O-KITM_UQdy8x7aMkGe3iQXrTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:99:2c:32:43:1d:3b:11:a8:e4:f2:47:d8:bc:55:60:98: 60:14:11:69:cb:63:a8:45:f8:07:23:32:d7:12:04:d5:7e:17: 2e:81:d9:2a:ec:4d:77:c7:63:bc:0a:9c:71:88:11:49:46:92: 16:ba:f6:8a:6d:47:72:57:45:98:7f:95:e2:2c:32:32:cd:86: 0c:cc:87:33:39:89:8d:5a:de:f3:2c:23:c1:76:0e:48:11:c7: fd:1e:ce:08:26:0d:dd:2b:03:bd:fe:eb:e9:06:aa:08:e9:0d: e6:83:af:d9:ff:19:00:9e:46:98:82:b6:fd:1d:c9:16:fb:0d: 05:cb:16:67:21:f7:ba:54:b5:9c:91:a1:ea:49:66:05:8f:05: 29:18:3a:4d:50:93:d8:ce:e0:9c:2a:59:64:b7:01:0c:d7:66: 73:8a:e7:e4:9e:90:67:fb:86:28:bd:0b:a5:15:45:25:9b:d0: c5:4f:8e:53:b5:7a:5b:e2:06:70:4a:3a:97:ee:86:5a:68:2b: c3:9a:2b:44:d7:5c:e2:89:66:30:f2:da:6c:a2:d7:34:34:c7: 6e:47:e8:73:b4:74:92:34:df:4b:3e:2c:f7:bf:a2:32:7c:dd: 49:fb:82:cc:5a:9d:c8:c5:78:ff:70:d5:e0:55:e8:43:e9:b2: 3d:49:37:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzUyQjExMC8GA1UEBRMoRjBFRjhBMjEzMzNGNTEwNzcyRjMxRURBMzI0MTlFREUy NDE3QUQzOTAeFw0yNjA5MjUwODUwMTBaFw0yNjEwMDIwODUwMTBaMBgxFjAUBgNV BAMTDTZhYjYzNWMyLWZkZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3MwR0l228fpIjN0c2AkqClrUNbsdrPnxvjaZYuBqMKRRI4BT95JOEBVVea4MG B9jaa5QXrUMabg0xqEzXxe0pSC1iC9vk5zhBvRiL8yqz9aVHtnqGNampIVvjYL9i 5FH3iYIy7jpXBwZu4tiUHczlMbUj47oOUpQDz6ETC3G9N7EhUo5kMI3FPP+XSqg4 rlBxT3pc804StfFXhsV/nDaW967spGdzUKk/2IsOKj83M2IC2Z12NDXm94BmEmLg djsrIP5FDWsTCG6X2fxnwr8qeQS0YR3E6FXj2JU8KCchh208+MMu72UbZY2mHrH8 4WIB7c69dGb2+zrLS5SF+T5/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULBwpQxeX ANcIfsVQHBpMFScdkC0wHwYDVR0jBBgwFoAU8O+KITM/UQdy8x7aMkGe3iQXrTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNTJCLzE1MzU4RDk4NzM2 QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFkeTh4N2FNa0dlM2lRWHJU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOE8tS0lUTV9VUWR5OHg3YU1rR2UzaVFYclRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NTJCLzE1MzU4RDk4NzM2QTExRjFCNTc1NENERjY0QTMwRkJDLzhPLUtJVE1fVVFk eTh4N2FNa0dlM2lRWHJUay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaRpksMkMdOxGo5PJH2LxVYJhgFBFpy2OoRfgHIzLXEgTVfhcugdkq7E13x2O8 CpxxiBFJRpIWuvaKbUdyV0WYf5XiLDIyzYYMzIczOYmNWt7zLCPBdg5IEcf9Hs4I Jg3dKwO9/uvpBqoI6Q3mg6/Z/xkAnkaYgrb9HckW+w0FyxZnIfe6VLWckaHqSWYF jwUpGDpNUJPYzuCcKllktwEM12ZziufknpBn+4YovQulFUUlm9DFT45TtXpb4gZw SjqX7oZaaCvDmitE11ziiWYw8tpsotc0NMduR+hztHSSNN9LPiz3v6IyfN1J+4LM Wp3IxXj/cNXgVehD6bI9STfZ -----END CERTIFICATE-----Generated at Sat Sep 26 07:30:39 2026 by rpki-client