$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: VKf8PPWAMjQobSLP1Paq0g9nQlNhrjMSjmHHjOrZ1w0= Subject key identifier: C2:98:53:04:6A:87:95:DA:6C:86:25:FF:66:D1:22:24:86:EF:8C:5C Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 02C9 Signing time: Mon 21 Sep 2026 01:17:30 +0000 Manifest this update: Mon 21 Sep 2026 01:17:29 +0000 Manifest next update: Mon 28 Sep 2026 01:17:29 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: 1N5N6K/+oNpSHEeysXtbvmexuHXUE78qMBk59Batpk8=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: 1UhMMEwrSvxSK5SenyWo1EuSLvOXjxy88H+VRidBB7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Sep 21 01:17:29 2026 GMT Not After : Sep 28 01:17:29 2026 GMT Subject: CN=6ab085aa-145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:08:1f:66:83:51:83:e1:66:33:83:70:9e: 3d:3d:4c:5d:92:66:92:9b:8d:5e:6c:3a:3e:a5:0b: 40:82:e4:5b:33:59:99:af:cf:ca:4b:13:a7:9d:1e: e8:0f:af:e2:0e:73:e5:2f:71:c3:eb:bf:d2:83:78: ba:43:ab:fd:13:2f:27:3b:1e:90:41:99:16:45:b1: 4f:dd:87:de:b5:c7:d3:2e:1f:84:c2:06:3b:6c:50: 81:b3:ec:7c:07:52:bb:3a:df:a4:2d:9d:04:6b:70: 6a:af:07:d3:99:cd:91:14:50:57:51:e9:78:37:ab: 84:56:94:bb:a5:d2:88:0c:46:1b:fb:2c:fd:99:9c: 14:14:55:c2:0a:f5:50:9c:f0:20:18:e2:43:04:6c: e4:30:92:57:a9:51:8f:56:a6:f9:56:a0:95:87:cb: 42:80:47:e9:da:a0:c5:7e:fa:7a:ed:81:fd:1a:87: 53:a5:15:bf:ea:cc:96:d9:51:b5:14:9d:86:68:d7: 70:31:60:34:b9:e8:2a:eb:be:d6:47:83:46:46:b2: 0a:d9:ff:f1:cb:82:21:b8:63:13:ba:0d:5a:0b:b5: ae:f6:9a:84:84:0e:a3:ad:6f:1e:d2:da:88:a9:35: 70:ab:80:5b:8c:a3:05:c1:99:97:50:91:3b:ee:5a: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:98:53:04:6A:87:95:DA:6C:86:25:FF:66:D1:22:24:86:EF:8C:5C X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:1c:44:7a:fa:2d:47:3a:d6:d9:e1:c8:4d:fb:0c:69:57: 4c:90:82:c6:b9:a7:f5:60:35:a1:c3:54:60:51:69:62:5c:be: ce:bf:92:44:40:78:03:c4:0e:db:69:ab:f7:ab:f1:04:85:c7: 09:40:b2:3f:37:18:ab:ea:29:89:ed:33:b3:05:9d:c4:cf:e4: eb:c3:12:8d:23:8f:08:41:7a:30:e6:54:08:7f:bd:4f:cc:04: c9:68:f9:38:0e:32:68:9a:e9:25:be:6d:1e:f9:2f:e5:f5:d9: 1f:6d:d8:98:d6:29:ea:28:df:64:68:35:d5:b9:88:32:de:df: 78:cf:15:ab:cb:d1:79:b0:6c:59:4f:67:d8:47:0b:1b:4d:61: 81:c9:45:f8:8a:a3:2f:1e:38:6b:63:a8:74:f4:c2:82:d7:64: 7b:fe:b5:11:87:a1:f5:42:33:68:fc:4c:16:98:42:b0:d4:d8: 45:37:f1:a5:85:6c:c5:ad:fa:0d:b5:60:60:a3:2c:b5:ba:6b: 1c:b6:cf:a8:57:94:1c:02:39:e3:9f:bd:1d:e5:a2:33:a6:38: 16:8a:16:ee:3f:bb:cb:f5:9a:06:be:54:54:56:40:e3:3b:c6: 1a:a6:6c:6d:aa:ee:bd:d1:14:9f:fc:f9:5c:14:2b:f4:32:cc: 75:a2:b4:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjYwOTIxMDExNzI5WhcNMjYwOTI4MDExNzI5WjAYMRYwFAYD VQQDEw02YWIwODVhYS0xNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhZ8IH2aDUYPhZjODcJ49PUxdkmaSm41ebDo+pQtAguRbM1mZr8/KSxOnnR7o D6/iDnPlL3HD67/Sg3i6Q6v9Ey8nOx6QQZkWRbFP3YfetcfTLh+EwgY7bFCBs+x8 B1K7Ot+kLZ0Ea3BqrwfTmc2RFFBXUel4N6uEVpS7pdKIDEYb+yz9mZwUFFXCCvVQ nPAgGOJDBGzkMJJXqVGPVqb5VqCVh8tCgEfp2qDFfvp67YH9GodTpRW/6syW2VG1 FJ2GaNdwMWA0uegq677WR4NGRrIK2f/xy4IhuGMTug1aC7Wu9pqEhA6jrW8e0tqI qTVwq4BbjKMFwZmXUJE77lp5OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKYUwRq h5XabIYl/2bRIiSG74xcMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEYcRHr6LUc61tnhyE37DGlXTJCCxrmn9WA1ocNUYFFpYly+zr+SREB4A8QO 22mr96vxBIXHCUCyPzcYq+opie0zswWdxM/k68MSjSOPCEF6MOZUCH+9T8wEyWj5 OA4yaJrpJb5tHvkv5fXZH23YmNYp6ijfZGg11bmIMt7feM8Vq8vRebBsWU9n2EcL G01hgclF+IqjLx44a2OodPTCgtdke/61EYeh9UIzaPxMFphCsNTYRTfxpYVsxa36 DbVgYKMstbprHLbPqFeUHAI545+9HeWiM6Y4FooW7j+7y/WaBr5UVFZA4zvGGqZs baruvdEUn/z5XBQr9DLMdaK0vg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:57:28 2026 by rpki-client