$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: +XF+iykQAmbnjCXqB64mgcdCmqDnb3TG0rWmxvprfyM= Subject key identifier: 72:66:5E:F3:9A:CE:66:B9:45:59:6C:B3:4F:7E:D0:FE:CE:84:7A:57 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 0124 Signing time: Wed 23 Sep 2026 05:44:39 +0000 Manifest this update: Wed 23 Sep 2026 05:44:39 +0000 Manifest next update: Wed 30 Sep 2026 05:44:39 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: 663VxUiPMrpx1wkDKIDcwlKQ2ERVmV+z3F+sC7oB8qI=) 2: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 3: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 4: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) 5: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) 6: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 7: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Sep 23 05:44:39 2026 GMT Not After : Sep 30 05:44:39 2026 GMT Subject: CN=6ab36747-b85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:e6:a5:fe:39:a2:2a:7b:4c:3e:bc:c8:e6: 73:16:77:06:17:46:14:f8:3f:05:28:86:95:7b:c2: 00:8d:f1:82:11:d8:0a:39:f6:4f:2d:10:b9:62:a6: 31:16:6d:ae:d2:9f:e3:9f:ce:85:84:b3:9c:a4:fc: dd:d4:9e:de:64:a8:d6:b6:ae:5e:52:a2:a5:7e:bf: b6:07:0f:84:ac:eb:1f:5a:89:70:99:75:81:b7:53: 14:5a:b0:6e:27:cf:4c:a7:ce:0c:cd:dd:e9:6b:29: 42:07:93:63:24:c2:e9:a7:27:fd:4f:e2:6d:80:38: 7d:7b:ae:8d:8c:82:37:7a:3e:03:b7:2f:f5:e5:32: fc:59:76:bf:4a:92:1c:e2:57:45:c1:7e:f4:65:17: 17:28:08:d8:20:36:43:83:16:c9:c8:08:64:66:e6: 40:fb:fe:09:cf:50:c8:d2:9b:37:46:54:f4:63:c3: 25:c0:13:18:b5:bb:ee:8b:15:c7:0e:47:45:9e:2c: 61:97:c6:64:37:61:50:f6:ac:d3:06:13:15:e8:83: 2b:82:3a:0f:1c:0c:8a:86:58:f7:65:fa:1f:d0:50: a2:54:78:9e:5f:76:79:dc:9b:60:57:9d:6c:ff:ce: cf:a3:4e:86:c1:95:4f:38:95:5f:ce:b0:3a:cd:48: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:66:5E:F3:9A:CE:66:B9:45:59:6C:B3:4F:7E:D0:FE:CE:84:7A:57 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a8:ab:c8:d0:88:9d:b1:7f:db:11:cd:ef:7d:8a:6c:0a:64: 9b:fb:b4:6d:d7:e1:41:70:8a:83:63:57:30:dd:0b:c0:dc:b0: 92:b4:fc:36:81:29:0e:62:13:79:17:26:f5:d4:4c:e0:77:f5: b7:dd:b0:d2:2e:c6:82:c1:89:ef:01:db:3d:ad:11:1b:3a:42: 0e:de:26:7a:8f:1c:b5:bb:32:76:96:f5:22:60:7e:d4:32:71: b0:ca:86:10:5a:18:3a:c6:b9:ba:15:69:e1:d6:dd:20:33:05: a8:ca:11:c4:b9:d1:cb:5c:e1:75:f6:f3:09:ab:b0:67:a6:ac: 2f:3b:85:ef:05:ca:b0:c4:84:f2:42:1d:b3:a7:79:40:18:e0: 76:fa:9b:82:73:cb:98:f1:af:56:ae:ef:5c:53:27:05:39:64: 8d:ef:a5:26:b8:02:a1:fe:d0:c5:30:33:c9:9e:d5:fe:61:52: cc:36:49:06:43:d8:5e:cb:b6:a8:a0:f7:89:85:1a:6e:0e:f8: e6:33:83:1f:e6:2c:85:e7:d3:9d:0a:88:5f:66:6f:7d:f6:f1: 91:f1:02:5e:a8:52:d2:a2:09:33:74:78:ee:f9:3c:a2:f3:06: af:d8:8d:38:62:6c:ce:59:c6:71:06:6f:a8:2d:fa:a9:8b:cb: f8:ce:01:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwOTIzMDU0NDM5WhcNMjYwOTMwMDU0NDM5WjAYMRYwFAYD VQQDEw02YWIzNjc0Ny1iODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrvmpf45oip7TD68yOZzFncGF0YU+D8FKIaVe8IAjfGCEdgKOfZPLRC5YqYx Fm2u0p/jn86FhLOcpPzd1J7eZKjWtq5eUqKlfr+2Bw+ErOsfWolwmXWBt1MUWrBu J89Mp84Mzd3paylCB5NjJMLppyf9T+JtgDh9e66NjII3ej4Dty/15TL8WXa/SpIc 4ldFwX70ZRcXKAjYIDZDgxbJyAhkZuZA+/4Jz1DI0ps3RlT0Y8MlwBMYtbvuixXH DkdFnixhl8ZkN2FQ9qzTBhMV6IMrgjoPHAyKhlj3Zfof0FCiVHieX3Z53JtgV51s /87Po06GwZVPOJVfzrA6zUi55wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJmXvOa zma5RVlss09+0P7OhHpXMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxairyNCInbF/2xHN732KbApkm/u0bdfhQXCKg2NXMN0LwNywkrT8NoEpDmIT eRcm9dRM4Hf1t92w0i7GgsGJ7wHbPa0RGzpCDt4meo8ctbsydpb1ImB+1DJxsMqG EFoYOsa5uhVp4dbdIDMFqMoRxLnRy1zhdfbzCauwZ6asLzuF7wXKsMSE8kIds6d5 QBjgdvqbgnPLmPGvVq7vXFMnBTlkje+lJrgCof7QxTAzyZ7V/mFSzDZJBkPYXsu2 qKD3iYUabg745jODH+YshefTnQqIX2ZvffbxkfECXqhS0qIJM3R47vk8ovMGr9iN OGJszlnGcQZvqC36qYvL+M4Byg== -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:33 2026 by rpki-client