$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: VDuB/xAGVDkS5Z9k23PH+DSjAzMf80ANHkndRqq+nK4= Subject key identifier: BA:1D:93:DC:B6:7E:71:A3:E0:F7:70:BB:F7:9D:A4:D8:6C:9F:3A:E2 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0B41 Signing time: Mon 28 Sep 2026 19:23:34 +0000 Manifest this update: Mon 28 Sep 2026 19:23:33 +0000 Manifest next update: Mon 05 Oct 2026 19:23:33 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: j7AhI7WbeZ1gpOPUJuauQtDTzeoIQ5vF5bVJqUC7+W0=) 2: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=) 3: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Sep 28 19:23:33 2026 GMT Not After : Oct 5 19:23:33 2026 GMT Subject: CN=6ababeb6-e8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:cd:fa:f3:71:5d:f1:6a:23:65:3d:01:d9: 06:15:a0:fe:01:7c:17:f9:0b:51:05:fb:13:87:d8: 64:49:f3:80:c3:80:cd:c2:e2:a6:9d:06:b6:de:2a: 4f:7b:cf:69:ea:cf:2c:8a:85:a1:08:0c:d7:35:7e: e1:1c:15:f6:4b:d8:1e:36:b6:66:16:9b:6f:9b:f5: 32:6e:e4:3c:81:31:c9:c3:73:60:de:ee:5c:50:ef: 35:a1:88:3e:68:12:28:b0:48:11:ff:9e:38:7e:f0: 12:43:21:4b:62:c7:37:21:db:83:43:31:14:25:ee: 14:4f:4f:2a:9e:90:d4:2d:12:0c:8c:e2:d9:c7:ad: 09:d6:49:d6:ea:3f:33:e2:9b:84:87:f8:32:af:4b: c5:93:70:1e:0e:dc:17:bb:ab:c7:67:19:10:f4:72: 28:3e:33:15:93:2b:5b:95:bf:70:2d:0e:5c:95:79: 26:6c:fe:1f:68:e6:d5:74:53:6e:0c:88:f1:5c:ab: b0:4a:f8:c3:de:41:0f:7c:eb:05:c2:fc:24:5e:b4: f8:fc:5a:4b:1e:06:cb:b0:fe:81:3a:91:5c:79:34: fc:70:30:ac:d3:dd:b3:fa:06:12:83:99:22:23:61: 8a:8e:e9:62:72:7a:37:a4:de:3e:6a:a2:e9:3f:96: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:93:DC:B6:7E:71:A3:E0:F7:70:BB:F7:9D:A4:D8:6C:9F:3A:E2 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cb:99:66:ef:64:aa:d7:fa:87:a6:cd:20:fe:cc:dc:82:bb: b9:f6:a1:fe:d5:96:95:72:6b:f9:e7:91:85:0d:73:b7:6d:1c: 37:0d:80:e2:94:26:08:12:e8:32:f6:aa:08:58:62:7c:18:11: 25:b7:22:71:e7:f3:ca:04:2c:73:3c:14:82:3d:b8:dd:20:cf: 67:fc:4e:22:6a:52:eb:55:76:f9:cc:67:53:44:d0:4f:1a:e1: 07:bd:fe:13:17:86:5f:6e:56:8b:1a:35:c6:a2:a8:98:64:b4: fb:8e:9a:38:db:e8:3a:95:99:78:9a:5a:2a:bd:5d:e6:c6:68: 68:fa:e9:87:d8:b7:1f:e3:f1:82:db:11:6c:20:71:85:19:5f: 34:29:d6:35:b2:a2:67:7b:1f:e4:9c:14:97:01:48:e7:80:0b: 45:f3:29:35:8d:6a:66:c2:10:10:6c:a2:3d:3f:a0:9d:c6:db: f7:f0:56:80:69:72:77:fa:31:29:6d:23:63:2d:16:2b:ce:60: cc:d6:02:5c:5f:6e:b3:10:81:be:05:09:86:3a:53:c4:7d:00: 02:2c:bd:8a:6e:6c:bb:81:43:8b:8d:b5:25:cf:70:ae:bf:d8: ca:2d:3c:e5:2a:3b:05:3a:46:5c:b5:20:4c:de:18:23:cc:e4: 1b:c1:2d:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwOTI4MTkyMzMzWhcNMjYxMDA1MTkyMzMzWjAYMRYwFAYD VQQDEw02YWJhYmViNi1lOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKnN+vNxXfFqI2U9AdkGFaD+AXwX+QtRBfsTh9hkSfOAw4DNwuKmnQa23ipP e89p6s8sioWhCAzXNX7hHBX2S9geNrZmFptvm/UybuQ8gTHJw3Ng3u5cUO81oYg+ aBIosEgR/544fvASQyFLYsc3IduDQzEUJe4UT08qnpDULRIMjOLZx60J1knW6j8z 4puEh/gyr0vFk3AeDtwXu6vHZxkQ9HIoPjMVkytblb9wLQ5clXkmbP4faObVdFNu DIjxXKuwSvjD3kEPfOsFwvwkXrT4/FpLHgbLsP6BOpFceTT8cDCs092z+gYSg5ki I2GKjulicno3pN4+aqLpP5YYUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLodk9y2 fnGj4Pdwu/edpNhsnzriMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoMuZZu9kqtf6h6bNIP7M3IK7ufah/tWWlXJr+eeRhQ1zt20cNw2A4pQmCBLo MvaqCFhifBgRJbcicefzygQsczwUgj243SDPZ/xOImpS61V2+cxnU0TQTxrhB73+ ExeGX25Wixo1xqKomGS0+46aONvoOpWZeJpaKr1d5sZoaPrph9i3H+PxgtsRbCBx hRlfNCnWNbKiZ3sf5JwUlwFI54ALRfMpNY1qZsIQEGyiPT+gncbb9/BWgGlyd/ox KW0jYy0WK85gzNYCXF9usxCBvgUJhjpTxH0AAiy9im5su4FDi421Jc9wrr/Yyi08 5So7BTpGXLUgTN4YI8zkG8Et7g== -----END CERTIFICATE-----Generated at Mon Sep 28 23:47:23 2026 by rpki-client