$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: Lv3dK9W4cz9Jk6N4GPRI7bZ+eUOwGi+W+F/H4sOMoXs= Subject key identifier: B3:55:EF:72:63:F3:55:2D:BA:B7:02:77:E0:92:DF:DF:0D:43:01:E6 Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 0424 Signing time: Fri 18 Sep 2026 23:54:31 +0000 Manifest this update: Fri 18 Sep 2026 23:54:30 +0000 Manifest next update: Fri 25 Sep 2026 23:54:30 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: oZSviDO5Z8r5ZievBPhFchuDDU4/dDTpJPIOhTpS6QU=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Sep 18 23:54:30 2026 GMT Not After : Sep 25 23:54:30 2026 GMT Subject: CN=6aadcf37-7271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:1e:8f:c9:d0:07:8b:da:37:a3:1e:96:05: 8b:33:26:e8:df:fe:b8:2d:a5:88:26:87:60:71:59: a8:0f:a8:b5:85:fe:b7:07:b6:3f:fa:7a:95:71:0f: 1f:ad:0e:ba:b3:ed:a8:8a:83:cc:ba:b2:9c:18:e6: 23:9b:2f:84:26:24:4f:9d:a0:bf:e0:bf:fe:18:29: ab:28:e0:e8:9b:ab:5d:3c:6e:8a:e6:5f:1d:63:2e: 22:a5:4c:22:c4:c3:c7:6f:44:25:77:b8:eb:f4:dd: 8e:e5:79:d9:17:6d:7f:88:30:12:8a:c7:69:aa:c6: d4:ab:e5:5d:a7:70:f8:db:6f:64:51:a1:ca:6d:7e: d1:ef:1f:30:c1:4c:79:24:bf:d5:f2:cd:8b:c2:ed: d5:1e:90:fc:ed:67:53:04:e0:42:79:a3:e0:bc:7a: 35:59:78:63:93:0e:65:58:b9:2b:63:57:12:6c:8d: e0:e2:2e:29:cf:2d:6f:fa:9f:61:5b:75:53:ec:f2: b9:4f:fb:61:1d:b6:cd:e7:c6:ad:3f:79:55:55:3d: 94:be:b3:da:37:53:89:7b:a6:26:7f:a2:80:a6:b3: 6f:46:dc:af:ee:cb:1b:0f:d2:97:b3:0f:fa:79:7e: fc:c6:c2:fc:7e:1f:2c:43:e6:80:6a:46:fd:c0:29: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:55:EF:72:63:F3:55:2D:BA:B7:02:77:E0:92:DF:DF:0D:43:01:E6 X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:cd:84:85:aa:4f:21:19:99:cd:63:75:c8:6e:b6:0a:f8: 9f:d8:3c:e4:42:ff:b1:0f:a7:0f:30:22:ff:0c:b0:0f:cf:c0: ae:5a:5c:2a:49:e2:16:e8:d2:6d:da:14:81:ce:1a:33:48:cd: 9d:aa:d0:b0:a5:c6:f5:18:0a:1f:4d:92:08:47:6a:6a:f2:e6: f3:4f:bd:41:5b:1f:77:bf:e1:f3:e4:af:31:92:9d:fd:51:c7: c3:15:1a:4e:d5:c6:b6:05:47:56:5c:8e:e9:31:75:85:d2:8d: 94:c8:a4:67:f6:73:db:1b:6e:1d:30:34:4c:d8:1b:5e:0c:8b: 50:a0:98:08:6d:0c:fc:4e:92:af:07:9f:51:f5:0e:90:de:5a: e8:8f:8e:9d:a2:08:a2:1e:c7:96:a6:43:1c:5d:10:09:b4:4e: e5:08:c4:51:41:c6:4e:01:7c:7e:7f:7f:6b:2d:0c:88:66:a4: 4c:ae:e5:a7:cb:a0:7a:91:2d:5a:32:1c:58:21:08:7e:12:2c: 1d:01:f9:57:42:99:4a:48:2e:89:1e:8c:85:98:e1:24:81:d4: 42:90:2e:7a:68:9d:38:26:7d:fc:eb:d4:a3:63:b7:f8:40:e8: 1f:f8:9e:36:ca:c0:f8:89:b5:6d:f0:24:2b:53:93:fe:6f:51: 73:d6:60:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYwOTE4MjM1NDMwWhcNMjYwOTI1MjM1NDMwWjAYMRYwFAYD VQQDEw02YWFkY2YzNy03MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbEej8nQB4vaN6MelgWLMybo3/64LaWIJodgcVmoD6i1hf63B7Y/+nqVcQ8f rQ66s+2oioPMurKcGOYjmy+EJiRPnaC/4L/+GCmrKODom6tdPG6K5l8dYy4ipUwi xMPHb0Qld7jr9N2O5XnZF21/iDASisdpqsbUq+Vdp3D4229kUaHKbX7R7x8wwUx5 JL/V8s2Lwu3VHpD87WdTBOBCeaPgvHo1WXhjkw5lWLkrY1cSbI3g4i4pzy1v+p9h W3VT7PK5T/thHbbN58atP3lVVT2UvrPaN1OJe6Ymf6KAprNvRtyv7ssbD9KXsw/6 eX78xsL8fh8sQ+aAakb9wCkN7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNV73Jj 81UturcCd+CS398NQwHmMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyTNhIWqTyEZmc1jdchutgr4n9g85EL/sQ+nDzAi/wywD8/ArlpcKkniFujS bdoUgc4aM0jNnarQsKXG9RgKH02SCEdqavLm80+9QVsfd7/h8+SvMZKd/VHHwxUa TtXGtgVHVlyO6TF1hdKNlMikZ/Zz2xtuHTA0TNgbXgyLUKCYCG0M/E6SrwefUfUO kN5a6I+OnaIIoh7HlqZDHF0QCbRO5QjEUUHGTgF8fn9/ay0MiGakTK7lp8ugepEt WjIcWCEIfhIsHQH5V0KZSkguiR6MhZjhJIHUQpAuemidOCZ9/OvUo2O3+EDoH/ie NsrA+Im1bfAkK1OT/m9Rc9ZgcA== -----END CERTIFICATE-----Generated at Sun Sep 20 22:11:28 2026 by rpki-client