$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft File: KJS89-I5RAOCbTtLS4B6RKekFoI.mft (raw, json) Hash identifier: 9M32iTPWJt8hpcY+y0sJLRPeuT8lebC20gpv8pBBDeU= Subject key identifier: 92:46:14:CE:C6:69:8C:34:2A:4D:A8:AF:AC:E5:03:98:E6:6C:E9:45 Authority key identifier: 28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 Certificate issuer: /CN=A91CCAED/serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft Manifest number: 26 Signing time: Mon 21 Sep 2026 08:47:49 +0000 Manifest this update: Mon 21 Sep 2026 08:47:48 +0000 Manifest next update: Mon 28 Sep 2026 08:47:48 +0000 Files and hashes: 1: KJS89-I5RAOCbTtLS4B6RKekFoI.crl (hash: ltDHH6kzbhLOMHjPVq/83jIkD2r8lGWIaFW9TS/uV54=) 2: 2A71D75884B211F18866DC898FA30FBC.roa (hash: 9LAzaxPLoBaW2eqQGlqzYn1GjONpsxX5ahH4vvA9HxU=) 3: 35BF0DAA84B811F1831C967990A30FBC.roa (hash: HWBAdMe8FSClbVLPqjcTR1x0l7ScvbAKX35W7AgEFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAED, serialNumber=2894BCF7E2394403826D3B4B4B807A44A7A41682 Validity Not Before: Sep 21 08:47:48 2026 GMT Not After : Sep 28 08:47:48 2026 GMT Subject: CN=6ab0ef35-dc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:44:f1:7d:5c:79:0a:e5:29:82:ea:12:a8: 21:4e:5e:23:80:2c:66:be:41:ff:fb:18:b0:f5:d2: 55:2f:cf:ec:4f:06:03:8d:85:f4:5a:46:50:86:9d: 10:13:d5:8a:86:97:0c:da:1c:99:6d:26:3a:59:94: a8:2a:3d:1e:5a:7a:c0:b2:2b:1c:df:47:98:46:f5: 24:42:89:fa:78:7b:02:00:03:63:27:56:14:e9:de: 8b:e3:df:a5:9a:a1:61:c1:f4:d4:ba:d6:6e:8b:71: a7:f0:d7:fd:e3:f8:aa:d7:82:89:d3:7e:8e:de:6d: d0:1b:0c:0d:fb:a2:cc:8f:c6:f3:06:2d:d0:87:45: 91:9a:1e:50:0b:9e:45:4c:c9:ee:68:ed:83:03:32: f4:77:5c:cc:81:7b:b0:b6:a7:f4:2c:de:bc:8b:41: ca:1b:9b:90:5f:c3:78:b8:6e:f4:3e:aa:cf:ad:be: 7e:19:25:35:f8:5c:de:d3:0b:19:24:61:9c:90:8d: d1:d7:52:b5:50:d6:14:61:a3:f1:3a:b5:42:53:23: 07:ff:13:19:21:54:5b:7c:fe:a7:d0:25:bf:97:1e: 4d:95:59:7d:3b:31:e8:02:14:87:70:1d:3e:c1:de: f1:9a:79:1e:36:fa:91:41:f2:c4:56:18:f1:cc:00: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:14:CE:C6:69:8C:34:2A:4D:A8:AF:AC:E5:03:98:E6:6C:E9:45 X509v3 Authority Key Identifier: keyid:28:94:BC:F7:E2:39:44:03:82:6D:3B:4B:4B:80:7A:44:A7:A4:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJS89-I5RAOCbTtLS4B6RKekFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAED/7364F10C815611F18FBB1E3184A30FBC/KJS89-I5RAOCbTtLS4B6RKekFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:d5:42:89:89:da:64:58:f4:d0:5e:94:85:0a:a6:56:6e:99: 84:d7:e5:7e:8e:7c:ba:6c:95:04:76:53:98:80:45:f0:f0:ff: a4:31:bd:72:88:ed:99:0b:5b:2d:e8:d1:06:94:25:70:63:7a: a9:d2:82:d2:a4:a9:86:88:23:da:4c:14:d8:57:f7:74:ab:31: 8c:37:18:06:0e:d2:38:54:fe:9a:8b:d4:aa:3d:56:cd:73:7b: b1:a9:84:e1:ca:87:58:5f:87:6a:56:6e:c3:8f:18:3b:46:10: 61:8f:eb:bb:55:56:d3:23:71:d6:d1:58:60:e2:8e:2b:02:87: cb:8d:7a:8e:1c:1c:29:c1:9a:c9:d8:23:18:93:1b:0e:2c:b6: 55:ad:92:ba:c4:90:1d:69:24:97:4a:a8:f2:fc:3d:81:5e:cd: 9b:98:e3:a3:c8:87:4a:c0:22:83:14:29:42:f9:1a:80:c0:78: 6b:bf:e6:e0:85:45:b8:15:71:c0:d7:8c:36:1c:4c:de:16:b5: d8:3f:00:c3:03:9b:55:54:68:ef:5e:3a:f5:b2:5f:11:ae:e5: 20:ba:14:cc:77:a3:c4:3b:2c:a6:5b:b9:7a:c0:2e:8e:d8:11: 88:c6:04:7e:ba:d1:08:16:0e:77:fe:04:f4:d6:2c:73:14:13: a6:c6:65:aa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FFRDExMC8GA1UEBRMoMjg5NEJDRjdFMjM5NDQwMzgyNkQzQjRCNEI4MDdBNDRB N0E0MTY4MjAeFw0yNjA5MjEwODQ3NDhaFw0yNjA5MjgwODQ3NDhaMBgxFjAUBgNV BAMTDTZhYjBlZjM1LWRjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsO0TxfVx5CuUpguoSqCFOXiOALGa+Qf/7GLD10lUvz+xPBgONhfRaRlCGnRAT 1YqGlwzaHJltJjpZlKgqPR5aesCyKxzfR5hG9SRCifp4ewIAA2MnVhTp3ovj36Wa oWHB9NS61m6Lcafw1/3j+KrXgonTfo7ebdAbDA37osyPxvMGLdCHRZGaHlALnkVM ye5o7YMDMvR3XMyBe7C2p/Qs3ryLQcobm5Bfw3i4bvQ+qs+tvn4ZJTX4XN7TCxkk YZyQjdHXUrVQ1hRho/E6tUJTIwf/ExkhVFt8/qfQJb+XHk2VWX07MegCFIdwHT7B 3vGaeR42+pFB8sRWGPHMAHGfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkkYUzsZp jDQqTaivrOUDmOZs6UUwHwYDVR0jBBgwFoAUKJS89+I5RAOCbTtLS4B6RKekFoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUVELzczNjRGMTBDODE1 NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFPQ2JUdExTNEI2Uktla0Zv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0pTODktSTVSQU9DYlR0TFM0QjZSS2VrRm9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUVELzczNjRGMTBDODE1NjExRjE4RkJCMUUzMTg0QTMwRkJDL0tKUzg5LUk1UkFP Q2JUdExTNEI2Uktla0ZvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDS1UKJidpkWPTQXpSFCqZWbpmE1+V+jny6bJUEdlOYgEXw8P+kMb1yiO2ZC1st 6NEGlCVwY3qp0oLSpKmGiCPaTBTYV/d0qzGMNxgGDtI4VP6ai9SqPVbNc3uxqYTh yodYX4dqVm7Djxg7RhBhj+u7VVbTI3HW0Vhg4o4rAofLjXqOHBwpwZrJ2CMYkxsO LLZVrZK6xJAdaSSXSqjy/D2BXs2bmOOjyIdKwCKDFClC+RqAwHhrv+bghUW4FXHA 14w2HEzeFrXYPwDDA5tVVGjvXjr1sl8RruUguhTMd6PEOyymW7l6wC6O2BGIxgR+ utEIFg53/gT01ixzFBOmxmWq -----END CERTIFICATE-----Generated at Mon Sep 21 15:58:30 2026 by rpki-client