$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: 3zSjMnmHe47xVVYf6Kf2zwoG5pPDAW1BeX2usfb88hI= Subject key identifier: F2:5B:7C:06:DD:BD:1F:CE:CB:E3:F2:14:42:4D:FE:8E:FA:61:69:B2 Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 012A Signing time: Sun 27 Sep 2026 06:12:51 +0000 Manifest this update: Sun 27 Sep 2026 06:12:51 +0000 Manifest next update: Sun 04 Oct 2026 06:12:51 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: fFAcTWRrvbbaTH7HtMEediHrGg7aw/WJiJ9ezc/SRjU=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Sep 27 06:12:51 2026 GMT Not After : Oct 4 06:12:51 2026 GMT Subject: CN=6ab8b3e3-d0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:72:60:dc:05:69:3b:da:68:7b:25:cb:97: 10:aa:e7:ff:c6:82:84:76:f3:17:da:6f:3e:a6:a3: 3b:d3:e2:7f:e0:da:4a:63:06:c6:07:b8:0c:81:62: 70:b2:bc:c6:63:62:16:4f:1f:e7:2d:7e:e7:3d:d4: 1d:0c:94:f0:18:0a:a6:01:37:c2:95:ff:bf:5f:fd: 85:3a:73:b6:d0:78:e8:a2:6c:21:4b:b4:eb:69:94: b0:54:49:bc:c2:8d:84:f8:23:34:d1:60:1a:78:02: 86:4a:80:e2:29:8a:1a:d1:31:06:06:79:8a:0f:aa: 7f:81:dd:e6:85:44:04:11:c6:28:50:b2:37:8e:f7: 88:bd:42:f7:90:d9:5b:1f:de:55:5b:02:c4:c9:bc: 65:09:e8:b8:e6:ce:dd:f0:03:4d:62:2e:3e:a7:e5: eb:31:09:03:11:73:c7:0c:70:a9:c5:73:c8:af:6b: 4b:18:6f:22:29:36:b2:78:dd:d9:e1:57:7d:f2:de: a0:e2:cb:a1:1b:c5:54:b1:26:b5:53:f0:43:19:a4: 75:59:49:27:71:12:0a:d5:90:c1:fa:44:d3:21:cf: 7f:64:38:31:0b:00:38:3c:20:fa:d1:31:f3:32:ac: f3:16:d4:60:2e:d4:db:3f:96:19:74:b2:b7:a7:f6: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5B:7C:06:DD:BD:1F:CE:CB:E3:F2:14:42:4D:FE:8E:FA:61:69:B2 X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d0:5c:69:e3:63:9c:8b:61:35:1a:ad:5c:1c:11:26:f5:e0: 40:33:95:b4:73:4f:b0:df:30:82:b3:01:50:23:27:00:3c:f4: af:05:03:21:19:f7:f2:2b:f8:67:c4:19:3c:bf:aa:70:97:21: 60:30:cf:eb:65:4a:75:15:8e:d3:6d:ea:c5:80:a3:e0:c8:e1: 07:cd:ae:6b:a9:e8:b0:fd:35:83:54:aa:e5:70:b3:da:9a:51: d9:d9:09:36:da:10:06:1d:ae:ce:24:0f:44:3c:b9:2a:f3:b0: 70:1b:31:66:47:b7:7c:16:53:b5:93:2f:bb:0b:07:0e:80:6c: e8:63:da:b0:d3:70:bb:10:e2:29:ca:92:6d:c1:f4:00:a6:87: 70:5d:60:b6:6e:ee:37:31:d6:20:f8:91:77:00:ec:2b:8c:0f: e9:de:cb:d5:d3:d9:f4:3a:77:ea:97:40:2a:96:54:86:7c:eb: c6:5f:2f:15:b9:27:ce:91:cb:b1:aa:66:66:da:9f:67:60:87: 2e:8c:79:5b:08:4f:2f:41:44:97:d7:7a:7a:56:e4:26:f3:c3: a8:ef:b2:09:9f:17:1e:3b:36:59:0e:1c:79:52:1f:a5:90:58: 8a:d3:85:d5:9a:e6:48:e2:d9:9d:70:16:f8:f1:d0:98:15:a1: c7:22:69:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5ODUxMTAvBgNVBAUTKDI5QURCMzlCNjIwRUFFM0NCOEFGQ0EyQ0ExODVGNUM0 ODc2RkQwNDMwHhcNMjYwOTI3MDYxMjUxWhcNMjYxMDA0MDYxMjUxWjAYMRYwFAYD VQQDEw02YWI4YjNlMy1kMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC5yYNwFaTvaaHsly5cQquf/xoKEdvMX2m8+pqM70+J/4NpKYwbGB7gMgWJw srzGY2IWTx/nLX7nPdQdDJTwGAqmATfClf+/X/2FOnO20HjoomwhS7TraZSwVEm8 wo2E+CM00WAaeAKGSoDiKYoa0TEGBnmKD6p/gd3mhUQEEcYoULI3jveIvUL3kNlb H95VWwLEybxlCei45s7d8ANNYi4+p+XrMQkDEXPHDHCpxXPIr2tLGG8iKTayeN3Z 4Vd98t6g4suhG8VUsSa1U/BDGaR1WUkncRIK1ZDB+kTTIc9/ZDgxCwA4PCD60THz MqzzFtRgLtTbP5YZdLK3p/bb3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJbfAbd vR/Oy+PyFEJN/o76YWmyMB8GA1UdIwQYMBaAFCmts5tiDq48uK/KLKGF9cSHb9BD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzk4NS82NzNBQTJGNEY1 QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3JqeTRyOG9zb1lYMXhJZHYw RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzk4NS82NzNBQTJGNEY1QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3Jq eTRyOG9zb1lYMXhJZHYwRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdBcaeNjnIthNRqtXBwRJvXgQDOVtHNPsN8wgrMBUCMnADz0rwUDIRn38iv4 Z8QZPL+qcJchYDDP62VKdRWO023qxYCj4MjhB82ua6nosP01g1Sq5XCz2ppR2dkJ NtoQBh2uziQPRDy5KvOwcBsxZke3fBZTtZMvuwsHDoBs6GPasNNwuxDiKcqSbcH0 AKaHcF1gtm7uNzHWIPiRdwDsK4wP6d7L1dPZ9Dp36pdAKpZUhnzrxl8vFbknzpHL sapmZtqfZ2CHLox5WwhPL0FEl9d6elbkJvPDqO+yCZ8XHjs2WQ4ceVIfpZBYitOF 1ZrmSOLZnXAW+PHQmBWhxyJpVQ== -----END CERTIFICATE-----Generated at Mon Sep 28 21:04:34 2026 by rpki-client