$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: sCmBBQ7mXNtJw2ECtF1MvbnzS9UW0AqRv9aSYh7BxMw= Subject key identifier: 00:9A:FF:FE:13:E0:19:BA:10:7C:33:8B:F7:FC:19:76:F6:96:9E:5E Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 115A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 114F Signing time: Thu 24 Sep 2026 17:11:47 +0000 Manifest this update: Thu 24 Sep 2026 17:11:46 +0000 Manifest next update: Thu 01 Oct 2026 17:11:46 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 68wXPFaDQlY78NawXkwiJG4pGWnDJNyn13XqS22FMx4=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: ScpjORZmn+vL8yc91GDtzc451SzfE69TeEu9yzTW0Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4442 (0x115a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Sep 24 17:11:46 2026 GMT Not After : Oct 1 17:11:46 2026 GMT Subject: CN=6ab559d3-c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6d:f4:0f:f5:dd:0a:32:a2:e4:1b:52:b8:f6: ec:75:12:3f:cb:18:7d:eb:c9:eb:b4:5c:c3:f6:b2: ff:0c:50:e2:19:dd:2f:5f:65:e6:da:fa:e8:ea:f4: 22:47:36:14:dd:1f:72:de:1c:ba:71:2a:26:c2:ef: e2:74:01:ec:f1:40:7a:56:6b:ca:75:e6:99:34:cb: 68:01:b6:05:63:c2:de:da:f2:f5:a7:1a:22:1f:b0: fd:93:3f:d0:8e:74:5b:e3:b6:8a:87:f2:f8:df:76: f2:15:72:33:f8:d5:d0:2b:09:55:a4:34:d1:b0:cc: 61:dc:d1:7e:89:7f:ed:6f:30:1c:bb:7e:e6:e1:64: 6d:4f:21:38:8c:2d:e5:dd:02:b1:da:d5:df:9d:e3: 34:7c:0a:c6:82:cb:0a:91:38:3b:df:fb:2e:f2:e6: d9:eb:2c:33:dd:9c:1f:be:34:02:5c:a8:c6:8c:f7: 20:8a:1f:98:0a:28:44:bd:b5:ec:8c:cf:58:7c:a1: ea:01:f8:3d:b6:b2:79:fe:a2:bf:ef:a4:14:bd:6f: de:a7:f8:3c:e8:cd:89:56:08:ae:70:6d:c8:53:23: c4:e5:96:d1:a4:6a:d4:a8:2d:fd:fa:fa:cf:1b:2d: f9:02:11:a0:f1:21:3c:64:cf:b9:33:12:f4:35:d8: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:FF:FE:13:E0:19:BA:10:7C:33:8B:F7:FC:19:76:F6:96:9E:5E X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:76:0a:1e:0f:d6:5f:a3:38:d0:5c:ab:52:7f:61:e4:6a:20: a4:d7:ee:8b:70:e6:0d:d3:7d:5f:31:84:31:62:01:13:dd:b1: 33:cf:8d:f8:77:b7:af:6d:45:1d:fc:9d:b1:28:bf:85:1e:b3: 73:fc:84:07:4a:20:b8:ad:d0:ea:26:43:77:fb:fd:69:53:18: d3:84:dd:04:40:9d:c4:05:b2:07:3c:33:b1:11:4a:6e:90:f0: 4f:e7:92:f9:23:e4:55:85:98:1d:08:33:9e:28:e8:0d:5d:ba: 13:dd:45:e7:8c:91:91:d4:c5:5a:ef:99:9f:59:14:41:3b:de: 07:41:fd:91:14:0e:53:6a:b5:32:a1:29:e4:db:22:5f:6e:99: 93:31:ec:be:f7:e8:7a:7b:b6:f2:34:25:05:ff:78:fb:cf:d1: fb:61:db:e8:01:bf:da:f4:55:9f:75:5a:8d:a6:c3:47:e3:75: f1:77:1a:55:43:38:96:40:c9:b7:d5:72:87:49:97:e2:ca:a7: 07:b8:56:f5:e9:cf:65:48:94:87:8a:fa:6f:f6:50:f2:b6:86: 68:7e:ca:49:38:66:8a:5b:de:ab:ac:c6:1e:bf:52:d8:9b:4d: 82:c5:2e:a1:01:a3:a8:f3:03:56:d4:cc:ff:b8:c0:61:e1:50: 0d:4c:12:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjYwOTI0MTcxMTQ2WhcNMjYxMDAxMTcxMTQ2WjAYMRYwFAYD VQQDEw02YWI1NTlkMy1jMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4W30D/XdCjKi5BtSuPbsdRI/yxh968nrtFzD9rL/DFDiGd0vX2Xm2vro6vQi RzYU3R9y3hy6cSomwu/idAHs8UB6VmvKdeaZNMtoAbYFY8Le2vL1pxoiH7D9kz/Q jnRb47aKh/L433byFXIz+NXQKwlVpDTRsMxh3NF+iX/tbzAcu37m4WRtTyE4jC3l 3QKx2tXfneM0fArGgssKkTg73/su8ubZ6ywz3ZwfvjQCXKjGjPcgih+YCihEvbXs jM9YfKHqAfg9trJ5/qK/76QUvW/ep/g86M2JVgiucG3IUyPE5ZbRpGrUqC39+vrP Gy35AhGg8SE8ZM+5MxL0Ndgb/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACa//4T 4Bm6EHwzi/f8GXb2lp5eMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANnYKHg/WX6M40FyrUn9h5GogpNfui3DmDdN9XzGEMWIBE92xM8+N+He3r21F HfydsSi/hR6zc/yEB0oguK3Q6iZDd/v9aVMY04TdBECdxAWyBzwzsRFKbpDwT+eS +SPkVYWYHQgznijoDV26E91F54yRkdTFWu+Zn1kUQTveB0H9kRQOU2q1MqEp5Nsi X26ZkzHsvvfoenu28jQlBf94+8/R+2Hb6AG/2vRVn3VajabDR+N18XcaVUM4lkDJ t9Vyh0mX4sqnB7hW9enPZUiUh4r6b/ZQ8raGaH7KSThmilveq6zGHr9S2JtNgsUu oQGjqPMDVtTM/7jAYeFQDUwSOQ== -----END CERTIFICATE-----Generated at Fri Sep 25 00:17:55 2026 by rpki-client