$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: mDBqpOlqPpkjEB9mjhgMqmk0qMVGe7RdPVt9Ie+brFU= Subject key identifier: AE:DA:32:5B:AE:D0:EB:64:02:8E:EA:CC:3C:0A:38:17:93:9C:75:A5 Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 0244 Signing time: Mon 21 Sep 2026 02:29:03 +0000 Manifest this update: Mon 21 Sep 2026 02:29:03 +0000 Manifest next update: Mon 28 Sep 2026 02:29:03 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: G9l5DAMfyIPpMRHm0UZhV5/FHyjmx6LqZfTnT21Fe20=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: 7N2StUmPE70BVOLqSC1CSXVVp2n3H7wqr0u0r+i43tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Sep 21 02:29:03 2026 GMT Not After : Sep 28 02:29:03 2026 GMT Subject: CN=6ab0966f-c7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:53:58:25:a4:9c:22:04:56:27:0b:0d:d2: e4:11:9e:36:dd:b5:aa:d9:45:73:2b:05:78:76:25: fa:7b:9d:b9:00:50:13:f7:70:85:29:8d:b8:f8:d9: 53:98:41:19:9e:fd:74:90:5f:a3:e4:42:e8:90:9f: 11:ad:cd:e0:d6:85:ec:5a:03:42:e4:08:02:c1:c8: b4:74:1c:7e:77:c9:8b:b5:3c:ec:c9:c0:47:0f:27: b4:18:1d:1f:dc:86:90:74:c7:74:3c:55:09:41:a9: bc:f5:5a:7b:da:34:0e:62:55:f5:9b:15:71:d0:d3: 7c:3b:98:ad:84:56:f3:78:76:2e:1b:16:03:35:4a: a5:e2:1f:7a:b5:e7:a9:d6:0b:53:5e:1f:c1:a8:b0: 8b:5d:f5:5c:8d:a4:07:3f:9a:6c:55:1b:27:d0:5c: 07:8d:10:d0:73:00:35:ac:47:bc:3b:6f:c6:10:a7: 41:82:35:e2:86:8a:03:a4:c4:b1:5a:2f:a0:d8:f2: 92:56:12:db:e3:de:b8:b8:fb:27:c7:75:55:d3:c2: 8a:f5:6e:7b:b5:c3:b8:ac:e3:32:b1:8c:15:98:ea: 51:e1:e8:2f:7b:2d:f1:40:4b:45:1b:4b:6d:86:25: 9b:03:ce:e7:3d:8d:4c:5a:07:e3:2b:b6:20:24:49: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:32:5B:AE:D0:EB:64:02:8E:EA:CC:3C:0A:38:17:93:9C:75:A5 X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:dd:7c:9a:3f:b0:76:b2:b5:e7:a3:30:10:76:35:2e:bd:b6: ba:ce:c3:ec:8b:88:3e:66:7d:04:5c:27:18:0c:d0:d4:72:d9: ce:40:ff:45:b4:10:02:68:48:72:a1:6e:e0:95:99:4b:06:03: b5:16:e0:66:06:0f:c3:e3:f3:8d:07:35:50:b2:20:be:96:92: 11:f6:8a:5c:87:f3:f7:d8:22:fb:9a:81:1e:ef:36:78:2d:07: 19:f2:88:c2:0a:ef:87:15:59:b4:ad:08:49:6b:f3:3c:f2:60: 71:96:a1:3c:f9:81:b8:b9:a8:69:d8:15:b2:14:35:1d:4e:f8: 09:2f:57:aa:55:ab:05:1d:e2:f0:77:48:89:27:66:13:1d:ec: 45:fe:4a:08:52:ec:15:7b:ea:d8:4e:72:de:e0:50:43:6a:65: e2:18:25:68:6c:66:f0:c6:13:8f:88:fb:80:5d:6f:9c:dd:01: d5:1b:ee:2d:93:8a:e9:32:72:4f:03:17:88:ab:4d:52:4f:4f: c2:bd:e6:9b:4a:ff:6e:ca:b4:0c:ea:90:8b:00:ce:82:72:c2: 48:39:fa:3b:11:8d:d7:37:29:42:43:7d:e2:4a:cb:11:4e:82: e1:48:e7:dc:03:50:25:11:b3:88:fb:97:30:5a:49:61:35:06: 39:d4:bc:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjYwOTIxMDIyOTAzWhcNMjYwOTI4MDIyOTAzWjAYMRYwFAYD VQQDEw02YWIwOTY2Zi1jN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5hTWCWknCIEVicLDdLkEZ423bWq2UVzKwV4diX6e525AFAT93CFKY24+NlT mEEZnv10kF+j5ELokJ8Rrc3g1oXsWgNC5AgCwci0dBx+d8mLtTzsycBHDye0GB0f 3IaQdMd0PFUJQam89Vp72jQOYlX1mxVx0NN8O5ithFbzeHYuGxYDNUql4h96teep 1gtTXh/BqLCLXfVcjaQHP5psVRsn0FwHjRDQcwA1rEe8O2/GEKdBgjXihooDpMSx Wi+g2PKSVhLb4964uPsnx3VV08KK9W57tcO4rOMysYwVmOpR4egvey3xQEtFG0tt hiWbA87nPY1MWgfjK7YgJEknIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7aMluu 0OtkAo7qzDwKOBeTnHWlMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEN18mj+wdrK156MwEHY1Lr22us7D7IuIPmZ9BFwnGAzQ1HLZzkD/RbQQAmhI cqFu4JWZSwYDtRbgZgYPw+PzjQc1ULIgvpaSEfaKXIfz99gi+5qBHu82eC0HGfKI wgrvhxVZtK0ISWvzPPJgcZahPPmBuLmoadgVshQ1HU74CS9XqlWrBR3i8HdIiSdm Ex3sRf5KCFLsFXvq2E5y3uBQQ2pl4hglaGxm8MYTj4j7gF1vnN0B1RvuLZOK6TJy TwMXiKtNUk9Pwr3mm0r/bsq0DOqQiwDOgnLCSDn6OxGN1zcpQkN94krLEU6C4Ujn 3ANQJRGziPuXMFpJYTUGOdS8IQ== -----END CERTIFICATE-----Generated at Tue Sep 22 05:17:19 2026 by rpki-client