$ rpki-client -vvvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: J7qtRRgXUHcWvghyxEwug88ZsVsmWVQjdluJYVsgRxA= Subject key identifier: 03:DB:AF:FE:8A:1D:40:3D:36:8F:48:80:0D:71:EC:F0:32:6D:5B:DE Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0225 Signing time: Mon 21 Sep 2026 02:48:58 +0000 Manifest this update: Mon 21 Sep 2026 02:48:58 +0000 Manifest next update: Mon 28 Sep 2026 02:48:58 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: rHhvjz81aoFC+fz/Z+jHIlJqP7IVPVMOq5w32upvAmQ=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: vzk36cElXbr9pzf6gRs2JC/c6v0AhvC98Hwa+npIsfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Sep 21 02:48:58 2026 GMT Not After : Sep 28 02:48:58 2026 GMT Subject: CN=6ab09b1a-de43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:31:c5:1c:98:6c:58:d7:e9:79:8f:2b:10: 8a:39:0d:46:55:25:6c:fd:3d:83:e1:c6:39:cd:40: 04:00:79:d7:d0:fd:cc:f8:69:48:79:82:17:d9:43: 3b:0c:9e:f7:bf:d1:73:97:16:6d:95:71:5b:ad:f8: 66:17:a0:cd:f8:1d:3b:9c:29:8a:ee:8d:14:06:ea: b7:67:0c:d1:fb:87:eb:32:bc:3d:a2:59:0f:9d:fd: d6:70:04:bc:be:18:6e:61:8e:54:e7:b4:3b:b4:a8: 85:f3:17:91:ba:48:4a:2d:21:98:04:df:93:cd:9c: c3:a8:4c:69:c6:9c:01:f8:75:ae:a5:cd:43:98:fb: 5d:a5:72:17:12:c1:46:be:c3:6c:69:88:e1:18:55: cd:bb:e9:73:7a:ca:f1:2f:b1:66:8d:c0:f4:e7:00: ca:a3:da:bc:03:b4:c3:c7:5c:43:df:31:db:b4:80: f2:46:8d:0a:88:e0:30:8e:95:f8:cb:3b:1d:ab:be: e2:48:83:83:46:93:44:7e:f9:8f:69:33:67:b2:99: 9f:41:31:54:18:a5:f6:2e:8b:cb:33:ec:2a:b3:76: c2:ad:36:d2:c1:81:fd:74:01:fe:05:c6:93:8b:d0: a6:3a:99:8c:17:29:17:fd:c2:5e:b5:05:64:14:63: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:AF:FE:8A:1D:40:3D:36:8F:48:80:0D:71:EC:F0:32:6D:5B:DE X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:14:d7:ca:57:33:06:58:4c:8e:49:b9:31:c2:2b:26:0b:0d: 49:25:fc:b4:1d:3c:7c:5c:8d:92:42:e5:7a:93:78:3a:a9:15: bd:1f:18:b5:4f:b0:18:a0:42:14:6d:74:1a:7e:e5:e4:df:2b: 0e:49:51:2c:36:22:4a:b5:1b:58:3c:fd:bd:f9:af:61:5f:cc: df:cb:91:ec:6b:f0:73:f5:51:0a:9d:cd:a5:30:7c:45:c7:25: 1d:10:12:6a:56:42:82:e4:dd:b7:a6:a7:25:69:ee:d6:8d:66: f9:2c:70:d1:21:9b:61:02:ca:f3:e1:fe:50:f7:9b:7f:fd:81: 73:07:ec:b8:6b:ac:51:94:c8:bf:cc:6f:49:8c:d0:6f:0a:3e: ba:5a:69:bf:73:1f:3a:c6:90:cd:75:a8:43:57:5c:07:5f:4d: 45:7b:59:ed:1c:ac:4e:0e:a0:26:23:0c:40:1e:59:f8:fc:e8: 26:20:b2:c0:c6:98:1f:0f:57:4d:70:58:9a:0a:c5:0f:6b:a5: e0:32:e8:35:46:f0:b6:90:20:a0:c3:4d:50:d4:52:a9:07:b3: 01:29:8e:d5:39:f5:27:b2:91:09:e7:9f:9f:aa:73:ea:43:4a: f3:b4:36:46:63:87:86:60:15:65:88:fc:ec:f6:fb:0b:2d:69: 78:af:ec:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjYwOTIxMDI0ODU4WhcNMjYwOTI4MDI0ODU4WjAYMRYwFAYD VQQDEw02YWIwOWIxYS1kZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyExxRyYbFjX6XmPKxCKOQ1GVSVs/T2D4cY5zUAEAHnX0P3M+GlIeYIX2UM7 DJ73v9FzlxZtlXFbrfhmF6DN+B07nCmK7o0UBuq3ZwzR+4frMrw9olkPnf3WcAS8 vhhuYY5U57Q7tKiF8xeRukhKLSGYBN+TzZzDqExpxpwB+HWupc1DmPtdpXIXEsFG vsNsaYjhGFXNu+lzesrxL7FmjcD05wDKo9q8A7TDx1xD3zHbtIDyRo0KiOAwjpX4 yzsdq77iSIODRpNEfvmPaTNnspmfQTFUGKX2LovLM+wqs3bCrTbSwYH9dAH+BcaT i9CmOpmMFykX/cJetQVkFGPj6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPbr/6K HUA9No9IgA1x7PAybVveMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEhTXylczBlhMjkm5McIrJgsNSSX8tB08fFyNkkLlepN4OqkVvR8YtU+wGKBC FG10Gn7l5N8rDklRLDYiSrUbWDz9vfmvYV/M38uR7Gvwc/VRCp3NpTB8RcclHRAS alZCguTdt6anJWnu1o1m+Sxw0SGbYQLK8+H+UPebf/2BcwfsuGusUZTIv8xvSYzQ bwo+ulppv3MfOsaQzXWoQ1dcB19NRXtZ7RysTg6gJiMMQB5Z+PzoJiCywMaYHw9X TXBYmgrFD2ul4DLoNUbwtpAgoMNNUNRSqQezASmO1Tn1J7KRCeefn6pz6kNK87Q2 RmOHhmAVZYj87Pb7Cy1peK/siw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:27:41 2026 by rpki-client