$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: wCHKfCJUWJ60RLTqDNMtqfgEIGS8zdHycVWKYQJzOg8= Subject key identifier: 09:68:DC:9E:F7:BB:0D:D9:5B:02:6D:F5:A3:4A:DB:D7:CB:44:D7:29 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 0237 Signing time: Mon 21 Sep 2026 02:36:06 +0000 Manifest this update: Mon 21 Sep 2026 02:36:05 +0000 Manifest next update: Mon 28 Sep 2026 02:36:05 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: 0YnKeb0eTC3bWgY+eKV1PzbzcNo1h4VMV9JqidpSLFU=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: UYmnUcinM/YS4tsBaXiXnl11jWQgRyt4rogH4x+mFlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Sep 21 02:36:05 2026 GMT Not After : Sep 28 02:36:05 2026 GMT Subject: CN=6ab09816-1e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:d8:6d:68:fe:68:38:0b:78:17:2a:82:98: 38:c2:40:c2:24:c8:c4:86:0c:a3:a7:26:e8:c4:2e: d9:df:fb:6c:99:c1:2c:f8:94:11:91:79:43:f3:f1: 6e:08:eb:e9:12:80:72:7c:94:1a:1e:3e:39:a1:f6: 0d:07:ab:26:38:82:1b:e5:10:d6:6a:72:15:2b:4d: 9b:85:13:84:13:8b:8f:79:99:2b:8b:11:94:37:fb: 0b:07:0f:e4:ed:00:9b:85:7a:84:e5:0d:e0:25:01: 19:88:48:ef:75:c6:fe:7f:c2:b9:e4:ab:7e:c4:63: f8:ef:24:61:cd:97:ee:cb:2c:9b:73:77:00:e5:bb: f1:81:7f:e9:4a:37:46:2a:e5:82:2a:02:dc:ce:de: 61:15:00:a6:3f:95:e0:7a:89:12:b0:fa:45:f3:b9: f1:e0:78:ba:12:ae:15:a0:f8:ba:76:d9:3d:7b:df: c6:77:cc:e6:68:3c:c3:eb:26:b3:5f:6e:05:4c:fb: f0:14:21:ed:5e:9e:03:ba:a8:75:e7:61:b8:ed:7e: f0:e7:3c:2d:e1:c6:51:7e:cc:eb:ad:50:1e:90:5c: bf:f9:0a:5b:8b:f6:85:9e:c3:39:d8:78:96:ff:fb: bf:05:10:3a:bb:11:f2:3f:af:85:3a:31:d6:1b:af: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:68:DC:9E:F7:BB:0D:D9:5B:02:6D:F5:A3:4A:DB:D7:CB:44:D7:29 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:70:3e:5d:4e:0d:8c:a9:00:71:4a:ef:41:bc:00:0f:d7:58: b1:d5:d4:c0:b6:93:67:bf:dd:b0:c4:f4:b8:ea:77:e9:29:29: 3d:56:79:cc:6f:ca:01:37:43:0b:e8:33:b6:68:f1:89:2a:e8: 0c:c4:d8:f4:7f:52:ae:57:77:35:4a:ba:1c:8e:2a:d7:18:4e: 3a:e3:ae:f1:67:37:7b:3d:c6:69:30:63:c9:26:36:d0:de:d3: a1:9b:9e:2b:59:bb:97:0e:e7:bf:d4:16:f5:e7:f2:92:70:e4: 83:4d:30:81:bb:1d:74:ca:dc:ea:7e:70:4b:93:ee:04:f4:60: f2:9f:a1:e6:db:d9:1c:61:a5:2a:de:a7:0c:51:2a:5b:f7:fa: cb:29:54:5e:d0:48:de:ac:96:ed:c6:f3:a1:8a:d5:78:1a:38: 4e:6c:9a:cb:3e:be:cb:5a:4a:b3:db:26:5d:25:9b:9d:ee:a6: 14:58:82:57:6b:c3:bd:2a:c2:27:56:42:ac:b9:a5:bf:f9:1e: d1:0a:5f:c7:f3:24:a6:94:6f:44:84:a9:da:c8:03:0a:e8:29: 9b:01:18:4b:4d:f9:5f:62:f4:4f:8a:da:77:c5:0b:2d:8d:37: 7f:10:1a:ba:9c:4f:bb:aa:8a:44:20:21:8f:a0:ea:f3:50:1e: 57:02:83:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwOTIxMDIzNjA1WhcNMjYwOTI4MDIzNjA1WjAYMRYwFAYD VQQDEw02YWIwOTgxNi0xZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV7YbWj+aDgLeBcqgpg4wkDCJMjEhgyjpyboxC7Z3/tsmcEs+JQRkXlD8/Fu COvpEoByfJQaHj45ofYNB6smOIIb5RDWanIVK02bhROEE4uPeZkrixGUN/sLBw/k 7QCbhXqE5Q3gJQEZiEjvdcb+f8K55Kt+xGP47yRhzZfuyyybc3cA5bvxgX/pSjdG KuWCKgLczt5hFQCmP5XgeokSsPpF87nx4Hi6Eq4VoPi6dtk9e9/Gd8zmaDzD6yaz X24FTPvwFCHtXp4Duqh152G47X7w5zwt4cZRfszrrVAekFy/+Qpbi/aFnsM52HiW //u/BRA6uxHyP6+FOjHWG691rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlo3J73 uw3ZWwJt9aNK29fLRNcpMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvXA+XU4NjKkAcUrvQbwAD9dYsdXUwLaTZ7/dsMT0uOp36SkpPVZ5zG/KATdD C+gztmjxiSroDMTY9H9Srld3NUq6HI4q1xhOOuOu8Wc3ez3GaTBjySY20N7ToZue K1m7lw7nv9QW9efyknDkg00wgbsddMrc6n5wS5PuBPRg8p+h5tvZHGGlKt6nDFEq W/f6yylUXtBI3qyW7cbzoYrVeBo4Tmyayz6+y1pKs9smXSWbne6mFFiCV2vDvSrC J1ZCrLmlv/ke0Qpfx/MkppRvRISp2sgDCugpmwEYS035X2L0T4rad8ULLY03fxAa upxPu6qKRCAhj6Dq81AeVwKDjA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:56:22 2026 by rpki-client