$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json) Hash identifier: z5D2ZXM+c5RO/1tdgwWMxyjZQBeKF2aor/yQKEObZ5E= Subject key identifier: 9F:9E:17:F6:96:23:06:76:7D:76:4F:4F:0F:39:37:97:4D:17:DB:26 Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17 Certificate issuer: /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft Manifest number: 128A Signing time: Sun 20 Sep 2026 17:04:46 +0000 Manifest this update: Sun 20 Sep 2026 17:04:45 +0000 Manifest next update: Sun 27 Sep 2026 17:04:45 +0000 Files and hashes: 1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: LCKAaCSzSSNHAEzI13occmofB/3KC2HuB5dicn6IcSU=) 2: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=) 3: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=) 4: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=) 5: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=) 6: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17 Validity Not Before: Sep 20 17:04:45 2026 GMT Not After : Sep 27 17:04:45 2026 GMT Subject: CN=6ab0122d-1ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:aa:d7:c1:1c:25:39:2d:30:43:9e:4d:ea: f1:e4:ab:65:c5:a5:18:33:03:02:19:b2:85:ad:7e: 22:e7:9a:92:e1:93:d1:89:38:ab:84:21:47:6f:3a: ef:1d:95:01:3e:99:40:8a:91:29:48:8c:38:f7:b8: 19:55:79:0f:44:77:2d:3b:68:6e:7d:a3:54:1f:90: ad:4f:2b:ce:40:f7:ff:d0:c4:8e:29:14:ce:c3:45: 84:0f:7e:f3:74:a5:91:cd:35:bb:5d:54:f1:9f:ce: 5a:dc:71:ab:41:98:72:e5:03:99:93:95:86:de:94: 11:c1:5b:bf:83:5b:ff:fe:b4:1a:dc:62:93:6f:8e: 1c:ff:45:ab:dd:80:02:f5:8d:07:b6:a0:c6:c8:24: f3:c4:e1:2c:5f:9e:93:41:98:c9:c9:2b:12:32:cb: 7c:35:46:f5:e0:c0:1d:fb:a3:0a:d1:15:57:fb:9e: 81:75:7f:a0:05:13:52:2f:da:e6:b5:d5:8e:8e:6c: c2:bd:26:4a:fe:92:61:70:11:69:04:dd:fb:0d:75: 54:16:5a:6f:b8:bf:6a:b6:e3:ec:20:a2:18:ac:1b: fb:b3:a9:72:c4:a7:6c:99:85:ae:5a:6e:07:bf:88: 92:0d:33:0e:92:d3:f2:a9:ff:d5:86:79:e5:7e:20: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:17:F6:96:23:06:76:7D:76:4F:4F:0F:39:37:97:4D:17:DB:26 X509v3 Authority Key Identifier: keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:65:06:bb:01:a6:7b:84:4f:d3:d9:84:60:f9:db:e2:ee:6e: ea:9b:f4:86:8b:6c:3e:c8:70:3d:1b:a2:6f:67:ae:2f:82:d3: 9b:ce:aa:97:8a:f8:3d:a3:f4:41:11:19:8b:52:81:69:2a:23: 89:ac:04:4c:d4:e0:b3:e3:35:18:ac:39:82:d0:a1:fe:97:57: a0:f5:25:26:1c:7d:76:a0:84:b6:ff:09:d9:6a:21:98:d3:85: 8d:27:92:ce:a4:d0:a4:21:65:46:42:94:ff:21:69:67:9e:cf: dc:81:25:45:34:ec:c4:2b:18:ac:db:18:35:ee:f5:ae:a1:06: 29:67:e7:fa:51:ae:d4:15:57:46:63:9e:d7:14:8f:2f:d3:66: 80:1a:45:63:a3:33:69:06:18:be:db:75:0f:8e:5c:55:cb:93: 11:2d:46:01:8e:ca:da:59:50:e3:d4:5f:d6:61:ae:85:1a:02: 4e:fb:49:8b:60:01:cf:c7:57:f9:ea:2e:3d:bf:52:8d:80:09: 7d:f0:2d:6c:30:14:f2:c7:2e:57:8a:22:34:84:c7:bc:fb:77: b5:e4:e7:64:fe:9e:63:5d:31:3c:1e:aa:2c:95:9d:a0:8e:d6: d2:89:a1:82:f6:93:2d:1f:32:91:f6:2e:b3:90:f1:5e:69:06: 89:3c:31:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEZCNTExMC8GA1UEBRMoOTE4NTE2MUY0NkY1NkE4M0JEMThBNUJGMjQ5MDg0RDY4 MzRDQUMxNzAeFw0yNjA5MjAxNzA0NDVaFw0yNjA5MjcxNzA0NDVaMBgxFjAUBgNV BAMTDTZhYjAxMjJkLTFlYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3PKrXwRwlOS0wQ55N6vHkq2XFpRgzAwIZsoWtfiLnmpLhk9GJOKuEIUdvOu8d lQE+mUCKkSlIjDj3uBlVeQ9Edy07aG59o1QfkK1PK85A9//QxI4pFM7DRYQPfvN0 pZHNNbtdVPGfzlrccatBmHLlA5mTlYbelBHBW7+DW//+tBrcYpNvjhz/RavdgAL1 jQe2oMbIJPPE4SxfnpNBmMnJKxIyy3w1RvXgwB37owrRFVf7noF1f6AFE1Iv2ua1 1Y6ObMK9Jkr+kmFwEWkE3fsNdVQWWm+4v2q24+wgohisG/uzqXLEp2yZha5abge/ iJINMw6S0/Kp/9WGeeV+IKcNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn54X9pYj BnZ9dk9PDzk3l00X2yYwHwYDVR0jBBgwFoAUkYUWH0b1aoO9GKW/JJCE1oNMrBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RkI1L0VGOTg3RUUyMDlE MTExRTk5NTYwN0I1MkM0RjlBRTAyL2tZVVdIMGIxYW9POUdLV19KSkNFMW9OTXJC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1lVV0gwYjFhb085R0tXX0pKQ0Uxb05NckJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 RkI1L0VGOTg3RUUyMDlEMTExRTk5NTYwN0I1MkM0RjlBRTAyL2tZVVdIMGIxYW9P OUdLV19KSkNFMW9OTXJCYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9ZQa7AaZ7hE/T2YRg+dvi7m7qm/SGi2w+yHA9G6JvZ64vgtObzqqXivg9o/RB ERmLUoFpKiOJrARM1OCz4zUYrDmC0KH+l1eg9SUmHH12oIS2/wnZaiGY04WNJ5LO pNCkIWVGQpT/IWlnns/cgSVFNOzEKxis2xg17vWuoQYpZ+f6Ua7UFVdGY57XFI8v 02aAGkVjozNpBhi+23UPjlxVy5MRLUYBjsraWVDj1F/WYa6FGgJO+0mLYAHPx1f5 6i49v1KNgAl98C1sMBTyxy5XiiI0hMe8+3e15Odk/p5jXTE8HqoslZ2gjtbSiaGC 9pMtHzKR9i6zkPFeaQaJPDHK -----END CERTIFICATE-----Generated at Mon Sep 21 23:08:47 2026 by rpki-client