$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: kJOoVc1losVgE+ueveGKWRJgUaLaCEdmA5DpfV0zJEo= Subject key identifier: 7C:CE:B2:AA:4F:14:A3:4B:6B:0A:2D:3E:99:C1:C1:01:99:1D:67:13 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 04A1 Signing time: Fri 18 Sep 2026 23:49:58 +0000 Manifest this update: Fri 18 Sep 2026 23:49:57 +0000 Manifest next update: Fri 25 Sep 2026 23:49:57 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: 8o9+wOb2OzkQtV8bOqR7VDw4cRCySflF3GoRTVAVvuI=) 2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=) 3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=) 4: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Sep 18 23:49:57 2026 GMT Not After : Sep 25 23:49:57 2026 GMT Subject: CN=6aadce26-40b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:96:38:70:ac:82:d8:12:1b:7f:e0:db:60: 1d:7e:71:15:d9:2c:fa:53:23:77:49:a7:a3:02:ce: e9:bf:08:7b:09:e8:af:1e:91:86:76:7c:bf:78:eb: 8f:61:b9:d9:cc:e7:61:52:bd:f8:86:a0:28:f3:1a: cb:43:8d:79:b7:24:01:1c:5e:6e:94:39:66:e3:e2: 9a:73:ad:5e:eb:a5:7f:93:d2:2f:0b:63:42:a3:ce: 9f:b3:39:bb:a2:da:38:a8:92:dd:91:62:3d:99:b2: 12:dc:4a:13:22:50:37:cc:e1:fd:78:c9:7d:b2:9e: 04:75:a9:6d:bf:b4:74:e5:3e:39:a5:53:cb:d7:d3: 1c:33:fe:fa:31:f0:fd:37:62:90:86:af:85:74:50: 2d:f0:c8:50:6d:08:d4:75:02:cf:a6:b4:aa:a6:c0: 96:50:67:5b:50:72:f4:eb:27:fe:be:92:02:ef:c1: a4:f2:68:2f:ba:04:61:2e:49:9d:ae:a5:fc:7e:ee: 9b:7f:0e:07:a7:3d:db:bb:aa:3b:f5:fb:f7:d4:64: cb:6f:cc:41:69:9b:a8:a5:37:15:69:9a:ae:12:52: 0a:6f:6f:72:f2:76:5e:f8:21:38:1d:96:c4:3c:5e: dd:91:f9:98:19:c2:eb:c3:34:d9:a5:50:20:cd:df: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CE:B2:AA:4F:14:A3:4B:6B:0A:2D:3E:99:C1:C1:01:99:1D:67:13 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:86:a6:28:5f:70:40:c6:a0:f3:c0:8e:e5:dc:00:fd:f8: 0f:a1:d8:47:e2:37:b8:ed:e3:f0:fa:ad:4e:dd:75:cf:0d:d9: 15:79:0c:a6:ac:d4:40:5e:14:71:2e:90:f5:9c:1a:89:a8:29: 6e:8e:f3:cd:e4:fa:8d:e1:44:b7:e2:63:42:88:7d:27:e9:2e: c9:3e:9c:ca:5b:3d:57:4f:8f:f0:94:b8:9a:2c:90:99:61:43: b5:65:21:17:ab:98:ce:43:06:16:f5:58:35:10:70:d7:5b:9b: 7e:e9:56:80:f2:b3:1e:a0:e1:db:4e:76:66:c5:39:60:1b:63: 5d:99:eb:4d:76:fc:34:76:48:74:14:40:dc:bd:a8:ab:c4:fc: c9:01:f2:c1:66:fc:43:36:be:0a:97:5c:3e:20:86:5c:1c:15: 2f:b9:fc:b1:3b:a1:7d:cd:5f:0f:52:0f:51:f1:49:2b:31:45: ee:a1:8f:b0:db:0f:37:42:0f:89:dc:66:99:22:6f:d9:68:86: e1:66:53:2e:4e:22:f3:c8:e0:6a:04:7b:fe:36:c3:a2:f7:5e: 04:5d:b3:73:8e:fc:ad:a8:21:b0:77:d2:ce:e8:23:9a:40:17: 1e:a4:87:63:a0:d1:0b:44:f4:b2:23:04:36:7c:4c:c5:b7:ec: bf:c5:6c:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYwOTE4MjM0OTU3WhcNMjYwOTI1MjM0OTU3WjAYMRYwFAYD VQQDEw02YWFkY2UyNi00MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkm+WOHCsgtgSG3/g22AdfnEV2Sz6UyN3SaejAs7pvwh7CeivHpGGdny/eOuP YbnZzOdhUr34hqAo8xrLQ415tyQBHF5ulDlm4+Kac61e66V/k9IvC2NCo86fszm7 oto4qJLdkWI9mbIS3EoTIlA3zOH9eMl9sp4Edaltv7R05T45pVPL19McM/76MfD9 N2KQhq+FdFAt8MhQbQjUdQLPprSqpsCWUGdbUHL06yf+vpIC78Gk8mgvugRhLkmd rqX8fu6bfw4Hpz3bu6o79fv31GTLb8xBaZuopTcVaZquElIKb29y8nZe+CE4HZbE PF7dkfmYGcLrwzTZpVAgzd9NrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzOsqpP FKNLawotPpnBwQGZHWcTMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbgGGpihfcEDGoPPAjuXcAP34D6HYR+I3uO3j8PqtTt11zw3ZFXkMpqzUQF4U cS6Q9Zwaiagpbo7zzeT6jeFEt+JjQoh9J+kuyT6cyls9V0+P8JS4miyQmWFDtWUh F6uYzkMGFvVYNRBw11ubfulWgPKzHqDh2052ZsU5YBtjXZnrTXb8NHZIdBRA3L2o q8T8yQHywWb8Qza+CpdcPiCGXBwVL7n8sTuhfc1fD1IPUfFJKzFF7qGPsNsPN0IP idxmmSJv2WiG4WZTLk4i88jgagR7/jbDovdeBF2zc478raghsHfSzugjmkAXHqSH Y6DRC0T0siMENnxMxbfsv8VsBA== -----END CERTIFICATE-----Generated at Mon Sep 21 02:14:17 2026 by rpki-client