$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft File: Kxn0VfTTBpR34BlB90IUn7kADYE.mft (raw, json) Hash identifier: aqlGkZOvJ52Q8nXgKH4iphbd+9W8vlx1xVx0JuJScWU= Subject key identifier: 0B:B1:76:21:1F:9B:9D:0A:4A:A9:71:AB:39:73:3A:AA:3A:25:0E:E3 Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft Manifest number: 67 Signing time: Sat 10 Oct 2026 15:38:20 +0000 Manifest this update: Sat 10 Oct 2026 15:38:19 +0000 Manifest next update: Sat 17 Oct 2026 15:38:19 +0000 Files and hashes: 1: Kxn0VfTTBpR34BlB90IUn7kADYE.crl (hash: En1V2hXxNg64AzWtG9Br2gOjg8nzHrAToHCngFucBJY=) 2: 41E1B62C439B11F1B25C79F98F833773.roa (hash: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA=) 3: 8556D60A479011F187A637ED9C833773.roa (hash: grslGX/L7YYdiHw2ISG2NCkAz+QfsF2GNEwK6BVY9z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Validity Not Before: Oct 10 15:38:19 2026 GMT Not After : Oct 17 15:38:19 2026 GMT Subject: CN=6aca5bec-56de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:62:9a:d9:23:96:b6:08:92:6b:9a:a1:ba: d3:35:c1:cb:e6:bc:68:ca:a1:2a:7a:24:86:eb:89: ae:c3:82:37:52:e6:9a:45:b0:3c:5c:69:bc:3c:82: 2f:87:d6:8d:27:a4:e0:a5:81:06:29:b5:2b:be:2d: e7:e1:72:31:83:93:35:eb:04:b2:b6:c8:1e:16:d8: 10:8f:72:21:24:6b:c0:dd:e8:83:f0:03:59:ba:d5: 16:d0:07:b6:de:f6:e9:43:f4:63:c1:dd:1c:c0:31: 8f:8c:85:eb:04:95:3c:38:53:a1:f6:f2:bc:96:25: b2:2f:21:b7:0a:2e:4a:d1:9f:b4:7f:72:1a:e1:5b: 87:4a:30:51:f5:7d:9f:2f:49:d4:52:4f:e5:d2:86: 3b:22:64:be:3b:31:30:15:15:af:40:8c:bf:02:55: 3f:02:ee:e9:9b:e4:6b:e4:ce:84:22:fd:d1:51:f5: 0d:3d:89:26:04:b6:e0:d6:7e:ae:be:e1:22:85:36: a1:74:32:d1:1b:8a:79:b3:fe:6b:3c:aa:0b:b1:5b: 80:38:08:b3:ea:70:b5:67:bd:8c:c2:fa:e7:35:0f: 4a:53:f6:26:d4:08:dd:e8:f8:a3:b6:10:a6:42:92: d8:2f:5b:72:63:3d:ba:d6:59:23:d0:e4:77:e2:7d: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B1:76:21:1F:9B:9D:0A:4A:A9:71:AB:39:73:3A:AA:3A:25:0E:E3 X509v3 Authority Key Identifier: keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:cb:1f:b5:cc:8e:05:2f:af:91:fa:8d:61:43:fa:e4:2d: 55:14:71:da:47:89:b0:4c:0a:13:ac:6b:49:56:62:7d:94:d4: 81:cc:71:8f:92:24:f1:84:fd:2a:20:4d:bd:c6:1a:3b:29:3e: b2:88:cd:f5:b9:51:72:0a:ff:62:db:38:13:cf:a2:d7:78:58: 80:28:81:b7:95:cb:99:e3:50:a0:45:7a:cb:f0:a7:18:f3:89: 0d:8f:ff:5e:17:1f:8a:c5:ec:26:42:b7:19:c9:d6:aa:44:72: 51:97:c9:17:3e:ee:9f:16:84:01:bc:2b:02:b0:77:bd:5f:76: 92:0d:fa:a6:5c:28:c3:21:84:5e:56:a0:c8:e1:d7:18:cc:51: ea:08:77:3b:f2:18:61:22:98:0f:1b:55:8b:39:60:55:77:0d: 9f:74:6a:b7:96:45:ad:2b:8a:00:49:11:65:9c:3b:23:e9:56: 56:b9:e6:e1:65:cf:1b:57:6e:7e:6e:6c:54:4c:8f:07:bb:9b: 99:85:e2:b0:74:aa:01:57:63:2a:2b:cf:bc:bc:bc:b6:f4:48: df:87:e2:b0:17:67:ef:34:07:4a:57:eb:5b:d0:e3:8b:d6:0c: 76:48:46:b5:38:37:df:d1:44:0b:8a:30:ed:2a:72:58:8d:e6: 8d:a8:ac:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC OTAwMEQ4MTAeFw0yNjEwMTAxNTM4MTlaFw0yNjEwMTcxNTM4MTlaMBgxFjAUBgNV BAMTDTZhY2E1YmVjLTU2ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qmKa2SOWtgiSa5qhutM1wcvmvGjKoSp6JIbria7DgjdS5ppFsDxcabw8gi+H 1o0npOClgQYptSu+LefhcjGDkzXrBLK2yB4W2BCPciEka8Dd6IPwA1m61RbQB7be 9ulD9GPB3RzAMY+MhesElTw4U6H28ryWJbIvIbcKLkrRn7R/chrhW4dKMFH1fZ8v SdRST+XShjsiZL47MTAVFa9AjL8CVT8C7umb5GvkzoQi/dFR9Q09iSYEtuDWfq6+ 4SKFNqF0MtEbinmz/ms8qguxW4A4CLPqcLVnvYzC+uc1D0pT9ibUCN3o+KO2EKZC ktgvW3JjPbrWWSPQ5HfifSvFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC7F2IR+b nQpKqXGrOXM6qjolDuMwHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2 MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 MjJGLzJDQUU2MjZDM0U2MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBS MzRCbEI5MElVbjdrQURZRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGessftcyOBS+vkfqNYUP65C1VFHHaR4mwTAoTrGtJVmJ9lNSBzHGPkiTxhP0q IE29xho7KT6yiM31uVFyCv9i2zgTz6LXeFiAKIG3lcuZ41CgRXrL8KcY84kNj/9e Fx+KxewmQrcZydaqRHJRl8kXPu6fFoQBvCsCsHe9X3aSDfqmXCjDIYReVqDI4dcY zFHqCHc78hhhIpgPG1WLOWBVdw2fdGq3lkWtK4oASRFlnDsj6VZWuebhZc8bV25+ bmxUTI8Hu5uZheKwdKoBV2MqK8+8vLy29Ejfh+KwF2fvNAdKV+tb0OOL1gx2SEa1 ODff0UQLijDtKnJYjeaNqKyz -----END CERTIFICATE-----Generated at Mon Oct 12 04:58:49 2026 by rpki-client