$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: rKVRrzSjYulSfB33s8XdbWHMH/Crwixac77CYLGjuWY= Subject key identifier: 3D:D3:41:1E:5C:09:DE:1A:66:AA:77:00:ED:D0:0E:EC:19:BC:E5:95 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: A9 Signing time: Wed 07 Oct 2026 07:40:38 +0000 Manifest this update: Wed 07 Oct 2026 07:40:37 +0000 Manifest next update: Wed 14 Oct 2026 07:40:37 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: A/MS5tAb450pIumDjAf4S+ibvhLu458SkWFHbGijSlY=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: rWbPnjm/JvnTJWnBFd9TRsQ84zFWbQzVjnxVj9NliVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Oct 7 07:40:37 2026 GMT Not After : Oct 14 07:40:37 2026 GMT Subject: CN=6ac5f776-349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:a5:dd:b7:f6:a6:9b:d9:17:e4:f4:c7:f8: f9:cc:ef:2f:98:e0:a4:3d:df:1e:15:7a:73:1e:18: 8a:42:fe:8e:13:67:28:7c:fb:55:29:4f:05:4f:9f: 5e:71:c0:51:ce:07:e8:24:c3:9e:f6:e1:f6:e4:2d: 42:93:82:28:7b:8c:62:42:04:a7:b7:9b:8d:a3:ff: 31:70:0d:0b:ef:f1:15:b0:4a:16:60:97:25:0d:34: f7:e8:e5:29:84:e1:0a:4e:e7:d1:cb:c5:e9:fb:85: 4a:81:e9:3f:e7:08:d5:83:03:0f:4d:45:2b:78:1a: a8:01:a6:88:e7:7e:5e:80:fe:0c:de:38:5d:d0:ff: 22:dc:f8:df:e3:d0:69:c1:4d:84:22:0e:fb:85:63: 8d:6f:aa:97:b2:81:de:50:05:d9:0e:08:10:76:2d: ce:7d:1c:f1:69:b7:05:2c:ab:23:c2:52:00:9e:5e: 7f:ee:f4:c1:6e:31:c7:eb:91:84:53:a3:7d:94:5d: cc:f5:bc:52:b6:01:6c:1d:6b:f9:c4:58:f4:2e:26: be:18:e9:ff:71:38:4d:8d:4c:ca:0a:12:0f:64:cf: 39:62:ad:58:ae:31:4a:2a:3b:e8:4b:c9:2a:53:94: 4b:79:44:48:95:fe:c1:15:3a:94:18:3e:19:8b:4c: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D3:41:1E:5C:09:DE:1A:66:AA:77:00:ED:D0:0E:EC:19:BC:E5:95 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ab:b9:4e:b4:1d:d0:9b:96:9f:de:12:4c:3a:8e:83:d8:96: 94:92:b4:32:c1:03:31:61:e4:33:cc:68:ae:bd:3e:07:9a:c2: 3e:a2:96:cb:9c:d2:23:cf:16:62:b8:4d:c5:e6:07:fe:78:31: 5d:6f:31:b2:53:24:4a:e3:50:5f:53:f6:8f:fa:d4:f8:46:21: 41:5c:f1:3d:12:69:96:85:51:0f:04:f0:4e:7b:27:35:47:94: 8b:46:fc:ed:9c:b7:33:30:64:0b:99:a0:e9:ab:96:52:d5:11: 47:17:59:64:fe:2d:71:32:87:08:b7:c4:f6:30:95:dd:0e:e8: 43:3f:c7:d4:5c:e5:f0:55:bc:da:d6:22:cc:63:8f:a3:18:78: 51:27:b3:2d:d7:9e:46:2b:ec:59:a7:24:a7:1d:4d:e9:cd:9e: d9:69:0d:55:b8:9d:e3:b6:2f:1d:b1:17:ef:8a:05:56:32:4c: ed:fd:07:e2:f7:e1:53:2b:ca:22:c5:c7:6a:56:0e:14:18:f6: d9:3d:07:80:ea:49:1d:d4:bc:b5:1e:b1:c7:3a:ef:5d:52:7f: f9:0d:d5:df:26:0f:63:d1:40:4f:d3:2a:c4:e3:28:37:4d:ef: 19:ed:f2:0b:25:05:70:ab:7b:0c:3a:ce:91:bf:66:bd:f9:e2: bd:4d:5d:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC MzY0RTQzQzAwHhcNMjYxMDA3MDc0MDM3WhcNMjYxMDE0MDc0MDM3WjAYMRYwFAYD VQQDEw02YWM1Zjc3Ni0zNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E6l3bf2ppvZF+T0x/j5zO8vmOCkPd8eFXpzHhiKQv6OE2cofPtVKU8FT59e ccBRzgfoJMOe9uH25C1Ck4Ioe4xiQgSnt5uNo/8xcA0L7/EVsEoWYJclDTT36OUp hOEKTufRy8Xp+4VKgek/5wjVgwMPTUUreBqoAaaI535egP4M3jhd0P8i3Pjf49Bp wU2EIg77hWONb6qXsoHeUAXZDggQdi3OfRzxabcFLKsjwlIAnl5/7vTBbjHH65GE U6N9lF3M9bxStgFsHWv5xFj0Lia+GOn/cThNjUzKChIPZM85Yq1YrjFKKjvoS8kq U5RLeURIlf7BFTqUGD4Zi0ytHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3TQR5c Cd4aZqp3AO3QDuwZvOWVMB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1 MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3 Tm9hYk82Z1F3a1d6Wk9ROEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKu5TrQd0JuWn94STDqOg9iWlJK0MsEDMWHkM8xorr0+B5rCPqKWy5zSI88W YrhNxeYH/ngxXW8xslMkSuNQX1P2j/rU+EYhQVzxPRJploVRDwTwTnsnNUeUi0b8 7Zy3MzBkC5mg6auWUtURRxdZZP4tcTKHCLfE9jCV3Q7oQz/H1Fzl8FW82tYizGOP oxh4USezLdeeRivsWackpx1N6c2e2WkNVbid47YvHbEX74oFVjJM7f0H4vfhUyvK IsXHalYOFBj22T0HgOpJHdS8tR6xxzrvXVJ/+Q3V3yYPY9FAT9MqxOMoN03vGe3y CyUFcKt7DDrOkb9mvfnivU1dCg== -----END CERTIFICATE-----Generated at Thu Oct 8 15:26:56 2026 by rpki-client