$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json) Hash identifier: 20nYKdIGD+VlUaUW+YHo95WsGzV+p2pROftfhCzM15g= Subject key identifier: 16:95:DA:60:51:C6:8E:6B:D6:7A:75:4B:4D:64:4C:8E:24:73:58:C0 Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft Manifest number: 022A Signing time: Wed 23 Sep 2026 02:36:53 +0000 Manifest this update: Wed 23 Sep 2026 02:36:52 +0000 Manifest next update: Wed 30 Sep 2026 02:36:52 +0000 Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: ak7d0WLC9c65LRmTBBZQ5y6n0bAV19oq2NOcO8P1lMc=) 2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: JE3YkqQWW9mSMDDOp1/CYkJud9Wxp8btHEMRgajpDV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Validity Not Before: Sep 23 02:36:52 2026 GMT Not After : Sep 30 02:36:52 2026 GMT Subject: CN=6ab33b45-767e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:f0:17:ac:81:cc:bb:de:a1:d2:01:e4:b8: a5:c4:1c:1a:94:7f:de:2f:2e:e9:65:36:88:11:72: 3e:f9:99:2b:89:b6:4c:6e:f3:3c:29:18:48:5f:50: 29:c5:40:fd:24:78:80:4f:63:cd:90:80:a2:cb:07: 22:9f:55:6c:60:27:36:88:3e:d8:20:1c:3c:45:95: 7a:fe:62:ee:fb:06:b9:30:0e:fa:eb:b4:42:96:e0: d9:73:7c:f0:3b:6c:59:76:44:2e:43:10:27:98:72: 67:02:9a:75:24:27:dc:cf:aa:dc:0d:d1:1d:58:91: ef:f8:b1:6d:3b:fd:53:be:1f:5c:e7:2a:44:a7:09: 2b:bd:dd:03:4d:07:a8:e4:e3:a2:75:b2:9f:e9:df: 3c:53:3d:f4:90:e3:18:07:c1:60:21:f4:76:31:b5: f4:01:e2:d8:67:40:ee:21:50:75:2d:cb:2d:73:ad: 14:17:62:3b:01:5a:2c:9a:61:eb:fe:6f:1a:4f:d9: 8c:03:91:7f:5f:f0:86:61:18:3c:47:ed:0c:da:32: 94:03:7b:71:f9:87:ea:ca:cb:d5:15:15:e7:7a:d2: 6f:10:b8:73:9f:a6:95:59:4c:e7:33:05:5e:44:79: 06:03:fa:7e:e2:dc:a3:0a:8b:98:25:93:75:87:ab: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:DA:60:51:C6:8E:6B:D6:7A:75:4B:4D:64:4C:8E:24:73:58:C0 X509v3 Authority Key Identifier: keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:18:59:13:d3:3b:5c:8c:eb:e2:09:8f:d8:6c:b8:97:bc: 07:97:94:07:6f:8d:1e:b6:31:2e:64:bd:2d:00:39:e6:dd:dd: 25:85:69:57:4c:53:91:02:55:4d:0c:c3:4b:68:8c:10:b0:65: 80:35:ab:53:10:a6:4b:11:fa:4c:56:10:af:09:87:b5:94:48: 96:68:a2:a0:8f:0b:9b:41:d8:6d:fc:0e:8b:95:11:ab:95:37: c0:14:ad:d0:62:78:dc:21:c2:b8:bb:42:b7:7e:05:06:2e:3f: a8:e6:f0:61:01:47:77:5f:75:78:1e:40:35:83:2d:cd:92:4b: e4:19:ed:f9:15:be:23:fb:31:d4:bd:fd:97:c4:4e:02:b4:da: e1:74:87:76:6c:d7:14:fe:a4:17:3d:26:ba:90:a2:93:4f:c5: 4a:33:20:42:51:f0:ce:41:12:85:ea:60:91:41:c6:bb:09:d5: 57:2a:29:76:a5:84:99:12:5b:ee:46:0d:9f:48:66:91:58:ed: ab:92:e0:74:6f:88:c3:7a:2a:fc:f4:cc:97:78:9c:51:ae:4e: aa:fb:c3:f2:84:11:42:c1:5d:73:fc:41:96:ef:2e:9e:c4:45: ef:e1:8b:9d:81:a3:29:ca:70:5f:ff:49:c1:4e:1c:15:a4:68: a8:ae:d8:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4 QkQ2MThDNjkwHhcNMjYwOTIzMDIzNjUyWhcNMjYwOTMwMDIzNjUyWjAYMRYwFAYD VQQDEw02YWIzM2I0NS03NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1XwF6yBzLveodIB5LilxBwalH/eLy7pZTaIEXI++ZkribZMbvM8KRhIX1Ap xUD9JHiAT2PNkICiywcin1VsYCc2iD7YIBw8RZV6/mLu+wa5MA7667RCluDZc3zw O2xZdkQuQxAnmHJnApp1JCfcz6rcDdEdWJHv+LFtO/1Tvh9c5ypEpwkrvd0DTQeo 5OOidbKf6d88Uz30kOMYB8FgIfR2MbX0AeLYZ0DuIVB1Lcstc60UF2I7AVosmmHr /m8aT9mMA5F/X/CGYRg8R+0M2jKUA3tx+YfqysvVFRXnetJvELhzn6aVWUznMwVe RHkGA/p+4tyjCouYJZN1h6s+MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaV2mBR xo5r1np1S01kTI4kc1jAMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi dXItM3EybGZoWW1MMWhqR2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgXQYWRPTO1yM6+IJj9hsuJe8B5eUB2+NHrYxLmS9LQA55t3dJYVpV0xTkQJV TQzDS2iMELBlgDWrUxCmSxH6TFYQrwmHtZRIlmiioI8Lm0HYbfwOi5URq5U3wBSt 0GJ43CHCuLtCt34FBi4/qObwYQFHd191eB5ANYMtzZJL5Bnt+RW+I/sx1L39l8RO ArTa4XSHdmzXFP6kFz0mupCik0/FSjMgQlHwzkEShepgkUHGuwnVVyopdqWEmRJb 7kYNn0hmkVjtq5LgdG+Iw3oq/PTMl3icUa5OqvvD8oQRQsFdc/xBlu8unsRF7+GL nYGjKcpwX/9JwU4cFaRoqK7Yeg== -----END CERTIFICATE-----Generated at Thu Sep 24 06:46:24 2026 by rpki-client