$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: aSSFeU5OE3fIhkJTn+skMgMoh/JJXrRE/T/oUOyF5Dg= Subject key identifier: 5A:83:43:63:3E:D2:73:3C:70:91:FC:A7:A8:8B:F6:63:A3:93:58:17 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 0487 Signing time: Tue 29 Sep 2026 00:11:09 +0000 Manifest this update: Tue 29 Sep 2026 00:11:08 +0000 Manifest next update: Tue 06 Oct 2026 00:11:08 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: jwgaIsck6Xwp2FgsQ+rZr3iuC/o1As10qxjiF7LkHDg=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Sep 29 00:11:08 2026 GMT Not After : Oct 6 00:11:08 2026 GMT Subject: CN=6abb021d-0e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:2f:df:e8:35:b7:52:90:98:fe:39:fa:21: 4b:73:7f:5b:2c:61:33:4b:ae:6d:e6:d0:18:a3:66: 3f:ab:6f:d4:d1:9a:68:53:62:cb:a9:cd:57:71:c8: 4b:76:6e:12:9c:3d:5a:b9:8a:11:56:cc:31:f1:51: 02:17:4b:eb:e3:d8:d7:84:4a:3e:2c:24:4b:84:04: 38:66:d7:d3:53:83:25:89:95:75:7e:d0:70:1a:67: ed:11:26:06:eb:01:26:cb:e8:71:67:0e:e1:99:81: 55:6c:81:b2:2b:eb:8f:83:2c:de:bd:16:07:42:6e: fe:e1:c5:0b:eb:4a:83:84:70:19:7b:8e:f4:02:2b: f1:a4:bc:a8:58:5d:31:71:5f:33:07:a3:14:e6:99: 2b:0f:52:83:07:7b:9f:83:83:5b:ec:3b:57:49:7d: bf:e1:d5:68:72:4a:98:03:f7:b6:24:7b:21:50:4f: 1b:3a:be:fc:76:d7:6b:9e:7e:09:5c:3a:03:ba:61: ec:46:2d:03:45:6c:d7:c2:8e:c4:01:61:1e:83:d4: 09:aa:1d:ac:08:ae:41:52:5f:d4:2f:e8:96:73:de: b0:41:0e:d4:65:63:ee:6d:69:aa:67:ca:6e:1f:08: f5:b0:cf:1d:73:94:39:44:6c:91:95:f9:68:ea:12: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:43:63:3E:D2:73:3C:70:91:FC:A7:A8:8B:F6:63:A3:93:58:17 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:0f:10:63:81:24:12:a9:84:eb:76:6f:8d:fe:dc:55:6b: 0d:5a:03:7c:76:6a:83:2a:93:c3:06:36:d8:5a:46:b7:37:00: 0e:f3:22:85:02:71:8e:f3:b6:6c:3d:5a:89:8e:2d:61:54:68: 09:d4:c0:72:85:4f:cb:eb:f2:69:5c:21:c4:38:50:8b:82:e8: 2b:15:ab:0a:82:bc:a7:97:2a:45:ad:da:5b:1b:d6:2c:5f:49: 84:a1:ed:c8:41:08:36:12:6e:65:f2:ee:c0:7e:49:ef:9c:68: 15:16:bb:64:42:20:88:44:34:ce:df:05:22:56:c9:94:c4:c6: 56:4f:46:64:19:37:59:be:1a:47:ff:a6:29:84:10:26:50:1c: 17:31:c9:3a:97:ad:3a:8b:4c:e0:97:2f:3d:8a:d2:84:74:2d: 28:fa:99:d9:a1:37:b6:35:ca:d9:88:e9:99:62:a8:99:94:39: 0d:62:ff:59:27:cf:0b:9d:04:5b:28:2b:fc:d4:d6:79:1d:fb: f1:b7:60:e9:18:46:94:73:c2:ac:f9:58:b5:cf:4b:22:3a:f1: ac:1b:bb:5a:b2:87:3f:b4:92:3f:22:39:66:c3:bc:f0:84:3f: 1f:03:c6:67:ca:24:f1:8a:7f:e1:11:c0:b2:64:ad:9c:55:4a: 57:c1:33:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjYwOTI5MDAxMTA4WhcNMjYxMDA2MDAxMTA4WjAYMRYwFAYD VQQDEw02YWJiMDIxZC0wZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsUv3+g1t1KQmP45+iFLc39bLGEzS65t5tAYo2Y/q2/U0ZpoU2LLqc1XcchL dm4SnD1auYoRVswx8VECF0vr49jXhEo+LCRLhAQ4ZtfTU4MliZV1ftBwGmftESYG 6wEmy+hxZw7hmYFVbIGyK+uPgyzevRYHQm7+4cUL60qDhHAZe470AivxpLyoWF0x cV8zB6MU5pkrD1KDB3ufg4Nb7DtXSX2/4dVockqYA/e2JHshUE8bOr78dtdrnn4J XDoDumHsRi0DRWzXwo7EAWEeg9QJqh2sCK5BUl/UL+iWc96wQQ7UZWPubWmqZ8pu Hwj1sM8dc5Q5RGyRlflo6hKBCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqDQ2M+ 0nM8cJH8p6iL9mOjk1gXMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYkPEGOBJBKphOt2b43+3FVrDVoDfHZqgyqTwwY22FpGtzcADvMihQJxjvO2 bD1aiY4tYVRoCdTAcoVPy+vyaVwhxDhQi4LoKxWrCoK8p5cqRa3aWxvWLF9JhKHt yEEINhJuZfLuwH5J75xoFRa7ZEIgiEQ0zt8FIlbJlMTGVk9GZBk3Wb4aR/+mKYQQ JlAcFzHJOpetOotM4JcvPYrShHQtKPqZ2aE3tjXK2YjpmWKomZQ5DWL/WSfPC50E Wygr/NTWeR378bdg6RhGlHPCrPlYtc9LIjrxrBu7WrKHP7SSPyI5ZsO88IQ/HwPG Z8ok8Yp/4RHAsmStnFVKV8EzYw== -----END CERTIFICATE-----Generated at Tue Sep 29 07:58:23 2026 by rpki-client