$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: RS5t/KDkTQM2EcXe43PYdupRgzV4ocZCcA+HPH9XqUs= Subject key identifier: A6:96:41:F8:1F:F0:2D:FE:6C:7D:C7:21:F9:25:1F:4E:74:25:08:EE Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 0125 Signing time: Fri 25 Sep 2026 05:59:57 +0000 Manifest this update: Fri 25 Sep 2026 05:59:56 +0000 Manifest next update: Fri 02 Oct 2026 05:59:56 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: VOFI3trbkStU145Sdrkz++ccimb9nomfRuwNg/vyVos=) 2: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 3: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) 4: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 5: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) 6: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 7: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Sep 25 05:59:56 2026 GMT Not After : Oct 2 05:59:56 2026 GMT Subject: CN=6ab60ddd-55e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:20:31:2b:f7:e4:74:54:7a:ce:26:01:27: f3:0c:43:56:2c:fc:f8:f7:76:30:39:d3:a2:d0:12: 92:e4:fd:17:9d:62:7f:75:cf:be:b4:65:37:59:76: bb:27:a3:44:36:34:00:4f:0b:20:c6:41:f7:ad:d3: ec:4d:81:27:06:ce:09:22:3a:ea:33:af:fa:ab:15: 3d:e4:d0:26:6d:46:c9:93:0d:3b:96:68:aa:30:fb: 94:cf:c9:2c:aa:e3:7c:e3:a1:8d:d1:95:93:00:20: 62:c0:2e:30:5a:68:a0:b1:7a:29:08:e7:25:b8:2a: b3:90:90:4d:cf:e4:01:f3:09:be:41:39:24:83:c8: 8a:ec:f3:1c:02:ef:4f:c2:dc:ad:1f:b2:42:da:53: 99:53:3f:f1:dd:76:4b:59:f7:49:bf:af:14:3b:67: 49:dd:74:15:c1:3a:78:cd:b8:f7:f1:dc:11:80:1e: 15:52:12:77:62:ba:a3:16:e5:b6:9a:a8:2c:45:18: db:60:26:26:fd:8b:96:f4:38:11:b9:46:d3:a2:6d: bc:8f:24:36:3a:41:62:00:9e:81:87:7a:4e:31:84: 15:4b:fd:3f:5d:08:58:aa:22:1f:3a:f6:55:f1:61: cf:f5:e5:26:12:89:40:ae:c0:c8:bd:c2:b5:6d:a1: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:96:41:F8:1F:F0:2D:FE:6C:7D:C7:21:F9:25:1F:4E:74:25:08:EE X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:b5:61:0e:98:4b:7e:0f:00:69:f4:30:59:fe:9d:62:d3: 56:e5:6b:49:21:6a:eb:97:9c:e7:09:19:e5:a9:d1:b8:c4:35: 89:1a:73:22:72:73:2e:f3:05:8b:f4:2c:20:72:09:7d:9b:90: fd:fd:01:b2:90:1f:a4:ab:18:56:2b:3b:59:6c:30:c0:ab:55: 5e:af:44:0f:33:2e:ef:47:47:29:89:d5:74:1e:ce:f5:32:3f: 7d:48:03:7d:ab:1b:57:9b:c1:62:a1:e7:f2:81:11:b6:a1:56: a4:d6:74:55:d7:0a:2e:1a:ba:37:8a:9f:f9:6f:00:ef:f6:fb: ba:29:00:db:e8:e6:9d:89:b9:d1:cc:cd:53:60:3e:6c:09:25: 86:1f:79:f5:79:e5:b4:eb:0a:db:94:9a:50:20:b2:70:34:15: bf:89:fe:10:f4:da:a2:10:47:05:40:18:dd:e9:84:5f:d5:45: 6d:6e:6e:b3:10:2e:72:20:9b:f0:4a:8a:83:16:5a:8d:19:87: 72:ea:33:79:f1:2c:8a:21:29:6a:30:87:71:1a:3b:06:f3:1e: 81:41:be:d1:ae:fc:1e:ca:f0:cc:5c:2f:95:be:72:7b:b3:7f: d3:23:2c:9b:08:5f:8f:ad:50:38:67:6b:65:3e:2e:59:dc:82: 1a:21:31:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwOTI1MDU1OTU2WhcNMjYxMDAyMDU1OTU2WjAYMRYwFAYD VQQDEw02YWI2MGRkZC01NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVkgMSv35HRUes4mASfzDENWLPz493YwOdOi0BKS5P0XnWJ/dc++tGU3WXa7 J6NENjQATwsgxkH3rdPsTYEnBs4JIjrqM6/6qxU95NAmbUbJkw07lmiqMPuUz8ks quN846GN0ZWTACBiwC4wWmigsXopCOcluCqzkJBNz+QB8wm+QTkkg8iK7PMcAu9P wtytH7JC2lOZUz/x3XZLWfdJv68UO2dJ3XQVwTp4zbj38dwRgB4VUhJ3YrqjFuW2 mqgsRRjbYCYm/YuW9DgRuUbTom28jyQ2OkFiAJ6Bh3pOMYQVS/0/XQhYqiIfOvZV 8WHP9eUmEolArsDIvcK1baEi7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaWQfgf 8C3+bH3HIfklH050JQjuMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADY21YQ6YS34PAGn0MFn+nWLTVuVrSSFq65ec5wkZ5anRuMQ1iRpzInJzLvMF i/QsIHIJfZuQ/f0BspAfpKsYVis7WWwwwKtVXq9EDzMu70dHKYnVdB7O9TI/fUgD fasbV5vBYqHn8oERtqFWpNZ0VdcKLhq6N4qf+W8A7/b7uikA2+jmnYm50czNU2A+ bAklhh959XnltOsK25SaUCCycDQVv4n+EPTaohBHBUAY3emEX9VFbW5usxAuciCb 8EqKgxZajRmHcuozefEsiiEpajCHcRo7BvMegUG+0a78HsrwzFwvlb5ye7N/0yMs mwhfj61QOGdrZT4uWdyCGiExpw== -----END CERTIFICATE-----Generated at Sat Sep 26 04:39:02 2026 by rpki-client