$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: ulgskuHSoU5Nw2Bi8/nhYA73ugJFN4/HmV2dXozYbJE= Subject key identifier: 72:DD:92:C3:91:F1:C3:20:66:98:CC:96:43:D6:BB:03:F3:BF:97:E9 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: 01C3 Signing time: Mon 21 Sep 2026 03:55:13 +0000 Manifest this update: Mon 21 Sep 2026 03:55:13 +0000 Manifest next update: Mon 28 Sep 2026 03:55:13 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: 97oUnn4frcfxyuGUUMtkiSDUNKVAl4VqBwYKxqdEH3k=) 2: F5F28CC6739E11F1B96BB9EF75A30FBC.roa (hash: /KxNlXfeXQcDBu4my/p7c/P1DQJwjmP4hrFW2B3nPNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Sep 21 03:55:13 2026 GMT Not After : Sep 28 03:55:13 2026 GMT Subject: CN=6ab0aaa1-0545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:f8:1e:51:c5:ff:fb:4e:1f:07:39:8c:b6: a7:d8:4c:76:1f:2b:9f:9e:8c:8d:92:60:05:f7:0d: a4:0b:ac:79:4c:07:d1:61:ff:5e:bc:50:81:01:6f: 7f:e9:0b:2d:cb:d8:e6:d9:09:15:77:57:fc:36:37: fd:c6:27:e2:4f:5e:90:4d:25:ac:b5:ac:40:bd:9a: 80:6f:7f:4b:e7:16:56:90:35:69:16:a1:30:da:9c: 77:b8:f0:7e:ed:88:f9:b0:8e:7a:e1:e6:4a:3d:7d: 4e:6a:eb:be:ee:f7:45:e4:37:95:8b:fa:5c:ce:ab: d2:3a:9a:1f:a4:55:c6:18:33:43:51:09:09:6e:04: ba:1c:99:95:8c:5c:56:59:a1:0d:d3:18:26:66:60: 28:87:57:fc:91:39:7e:04:b7:e6:ff:d4:c6:0f:41: 43:ba:00:c2:5b:eb:23:51:f8:78:2a:df:0a:20:07: 02:1a:f2:d1:72:d3:48:25:1d:2b:b2:be:9e:d2:e5: 5f:c6:36:b7:3c:a8:ce:25:c9:8c:31:d0:60:f0:dd: 6d:36:d7:92:d9:5f:66:84:6c:3e:a1:ce:5c:f9:a3: 5d:c2:f5:9f:bb:99:83:6b:ff:20:b0:2a:ce:ce:c9: 94:4c:b6:c5:b6:16:2f:23:7e:f8:f5:14:35:bb:e3: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:92:C3:91:F1:C3:20:66:98:CC:96:43:D6:BB:03:F3:BF:97:E9 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ea:fb:f1:6a:48:08:37:fa:ac:eb:d3:95:94:82:35:a0:cc: 52:b1:26:aa:57:b7:92:35:6d:ca:f3:ee:7c:cb:b4:50:62:74: 43:d4:86:4c:71:ba:37:6c:7b:9d:a2:33:a0:83:9b:fb:6b:da: c6:a1:28:31:41:78:04:54:45:c2:b2:03:d1:0d:b5:90:75:6e: b0:c5:8b:26:70:79:24:3a:42:9a:e6:27:e2:f1:61:b6:44:3a: ad:87:c8:15:1d:8c:bc:ed:3e:2d:25:50:9b:da:ba:6f:eb:7b: 6b:4c:dc:57:c8:44:00:1e:c4:6c:ce:38:04:59:03:7f:17:68: 49:62:50:47:7d:7a:01:32:f0:42:32:ef:0c:8a:4d:10:52:19: 82:31:98:bb:f1:da:e7:9c:a6:bf:45:9d:26:ec:af:93:ba:54: e0:61:63:73:cf:d0:f7:8b:dd:65:f8:78:ec:12:1e:78:19:39: be:d1:20:31:99:f6:5e:8e:44:43:e0:66:55:1a:1e:3c:a9:47: d0:03:6a:ef:f5:2e:f2:2a:91:ef:01:d1:2f:47:fd:7a:b7:a7: ca:2f:84:01:9a:60:5e:c0:79:54:41:95:91:74:0c:1d:cf:a5: 0d:6c:61:a1:9f:49:c8:ef:0e:95:88:f9:ef:2a:7b:0a:91:8a: 2a:87:ba:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjYwOTIxMDM1NTEzWhcNMjYwOTI4MDM1NTEzWjAYMRYwFAYD VQQDEw02YWIwYWFhMS0wNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQv4HlHF//tOHwc5jLan2Ex2HyufnoyNkmAF9w2kC6x5TAfRYf9evFCBAW9/ 6Qsty9jm2QkVd1f8Njf9xifiT16QTSWstaxAvZqAb39L5xZWkDVpFqEw2px3uPB+ 7Yj5sI564eZKPX1Oauu+7vdF5DeVi/pczqvSOpofpFXGGDNDUQkJbgS6HJmVjFxW WaEN0xgmZmAoh1f8kTl+BLfm/9TGD0FDugDCW+sjUfh4Kt8KIAcCGvLRctNIJR0r sr6e0uVfxja3PKjOJcmMMdBg8N1tNteS2V9mhGw+oc5c+aNdwvWfu5mDa/8gsCrO zsmUTLbFthYvI3749RQ1u+PinQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLdksOR 8cMgZpjMlkPWuwPzv5fpMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXOr78WpICDf6rOvTlZSCNaDMUrEmqle3kjVtyvPufMu0UGJ0Q9SGTHG6N2x7 naIzoIOb+2vaxqEoMUF4BFRFwrID0Q21kHVusMWLJnB5JDpCmuYn4vFhtkQ6rYfI FR2MvO0+LSVQm9q6b+t7a0zcV8hEAB7EbM44BFkDfxdoSWJQR316ATLwQjLvDIpN EFIZgjGYu/Ha55ymv0WdJuyvk7pU4GFjc8/Q94vdZfh47BIeeBk5vtEgMZn2Xo5E Q+BmVRoePKlH0ANq7/Uu8iqR7wHRL0f9erenyi+EAZpgXsB5VEGVkXQMHc+lDWxh oZ9JyO8OlYj57yp7CpGKKoe66g== -----END CERTIFICATE-----Generated at Tue Sep 22 10:46:53 2026 by rpki-client