$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft File: kBdT4_LIclCGbxxHOQChAP1Mq1M.mft (raw, json) Hash identifier: 3fgbIQFFbg1wEYTWS7NEYvfjJSibSnoZwLTYygQlLcg= Subject key identifier: 62:21:20:6B:6A:85:66:1E:E3:29:AE:72:9B:DC:AE:F0:CD:03:9B:84 Authority key identifier: 90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 Certificate issuer: /CN=A91E4FA6/serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft Manifest number: 28 Signing time: Mon 21 Sep 2026 08:45:43 +0000 Manifest this update: Mon 21 Sep 2026 08:45:43 +0000 Manifest next update: Mon 28 Sep 2026 08:45:43 +0000 Files and hashes: 1: kBdT4_LIclCGbxxHOQChAP1Mq1M.crl (hash: znb4muhJXpTsAKD/lovH+HpMSEjzY5l9TNclSlKwBvM=) 2: 947763C67B4211F1AEF4840594A30FBC.roa (hash: J3btKuOFaL2iAnmc6q/6qXEqUsLNqUcznVApxNof1zE=) 3: 93CAB16C7B4211F1AEF4840594A30FBC.roa (hash: tsHb5mr8RbkReF/Lzb1FiewO29ujOLPqtSMY3Pgh1Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53 Validity Not Before: Sep 21 08:45:43 2026 GMT Not After : Sep 28 08:45:43 2026 GMT Subject: CN=6ab0eeb7-0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:a2:fe:98:b7:f6:c1:38:7c:c7:ac:c8:60: c7:f4:58:33:d3:05:12:ee:97:e2:ce:43:30:e4:c5: 72:42:71:8d:5e:72:e8:c2:4a:97:fe:12:96:32:be: 21:94:4d:e5:91:11:c3:bf:5d:38:e7:e0:09:62:af: 5a:94:e1:e2:01:33:e8:44:a7:2e:9a:87:e0:14:ef: 6f:91:e3:d4:5b:e1:53:35:41:c3:c7:b0:31:7e:ee: 76:f5:bd:4f:6e:31:cf:d1:02:f3:32:c0:fe:06:93: b5:56:8e:7f:6c:15:25:76:a1:e2:ea:de:27:0c:32: c3:ea:84:1f:c6:c5:a6:93:71:fc:49:70:06:83:0a: 07:8c:0e:b9:b9:ac:85:9c:7a:dc:cb:b3:a9:52:41: 3b:f3:f7:43:22:d6:59:c0:50:24:aa:1e:e8:12:0e: 65:12:dc:fe:95:fe:4c:a7:ba:b8:b5:f3:1c:3b:21: a3:59:40:06:f3:d5:e8:f7:dd:64:7c:1e:17:82:c4: 2d:c8:ae:d9:21:5c:b7:30:e0:df:5a:08:d4:5e:6d: f5:0e:97:9e:45:6a:d8:fd:a5:ae:68:0e:02:27:a3: d2:83:34:13:e0:f5:77:3a:6b:ae:f2:db:83:3b:31: 7c:ca:e4:0b:b9:22:70:92:69:38:5e:e5:3a:af:31: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:20:6B:6A:85:66:1E:E3:29:AE:72:9B:DC:AE:F0:CD:03:9B:84 X509v3 Authority Key Identifier: keyid:90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:90:d8:35:e4:98:a7:00:94:67:0f:4f:57:ee:1a:c2:c3:58: f1:0b:03:4a:39:a9:9d:6b:d6:85:7a:e8:e3:8f:97:55:a6:e2: b3:10:67:4e:45:d0:d5:91:8e:da:8d:a6:5f:ec:f5:c8:49:8a: 67:11:6e:22:dd:4f:16:9e:a7:ad:ca:cb:d6:d0:38:10:09:b4: ad:7a:30:8f:1a:55:37:11:aa:e0:0c:7c:5e:09:f8:fb:c8:16: a4:84:82:0c:f0:f4:97:a0:17:71:17:c5:e6:97:19:df:d3:9d: 3b:aa:1e:34:ea:13:cf:c5:56:77:75:4e:9f:eb:db:a7:f6:db: ce:1f:25:f2:d1:90:39:c1:7f:78:1a:cd:2b:55:6b:dd:3b:06: 12:6e:80:b5:e4:b1:f3:21:0b:df:59:ee:32:4b:e3:9b:0c:4e: b0:78:1b:b8:7c:86:01:d8:85:cf:53:00:a4:ab:dc:fd:fa:ce: 6d:d8:e3:a4:ff:b3:25:a9:f4:49:00:57:b9:27:b7:3a:47:53: 8a:12:80:56:3e:94:30:ba:21:8b:26:78:c5:6d:f4:98:02:04: a0:9e:be:dc:8d:89:05:5c:57:20:f1:53:7f:1d:c4:21:cb:b8: c5:a9:f3:a6:b6:3c:de:0c:b9:d8:46:4d:de:79:df:39:da:7c: 77:af:d7:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEZBNjExMC8GA1UEBRMoOTAxNzUzRTNGMkM4NzI1MDg2NkYxQzQ3MzkwMEExMDBG RDRDQUI1MzAeFw0yNjA5MjEwODQ1NDNaFw0yNjA5MjgwODQ1NDNaMBgxFjAUBgNV BAMTDTZhYjBlZWI3LTA4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqKKL+mLf2wTh8x6zIYMf0WDPTBRLul+LOQzDkxXJCcY1ecujCSpf+EpYyviGU TeWREcO/XTjn4Alir1qU4eIBM+hEpy6ah+AU72+R49Rb4VM1QcPHsDF+7nb1vU9u Mc/RAvMywP4Gk7VWjn9sFSV2oeLq3icMMsPqhB/GxaaTcfxJcAaDCgeMDrm5rIWc etzLs6lSQTvz90Mi1lnAUCSqHugSDmUS3P6V/kynuri18xw7IaNZQAbz1ej33WR8 HheCxC3IrtkhXLcw4N9aCNRebfUOl55Fatj9pa5oDgIno9KDNBPg9Xc6a67y24M7 MXzK5Au5InCSaThe5TqvMWTvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYiEga2qF Zh7jKa5ym9yu8M0Dm4QwHwYDVR0jBBgwFoAUkBdT4/LIclCGbxxHOQChAP1Mq1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RkE2LzJCMEI5NTFBN0I0 MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xDR2J4eEhPUUNoQVAxTXEx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0JkVDRfTEljbENHYnh4SE9RQ2hBUDFNcTFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 RkE2LzJCMEI5NTFBN0I0MjExRjFCNTVCNjVBQjkzQTMwRkJDL2tCZFQ0X0xJY2xD R2J4eEhPUUNoQVAxTXExTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAakNg15JinAJRnD09X7hrCw1jxCwNKOamda9aFeujjj5dVpuKzEGdORdDVkY7a jaZf7PXISYpnEW4i3U8WnqetysvW0DgQCbStejCPGlU3EargDHxeCfj7yBakhIIM 8PSXoBdxF8Xmlxnf0507qh406hPPxVZ3dU6f69un9tvOHyXy0ZA5wX94Gs0rVWvd OwYSboC15LHzIQvfWe4yS+ObDE6weBu4fIYB2IXPUwCkq9z9+s5t2OOk/7MlqfRJ AFe5J7c6R1OKEoBWPpQwuiGLJnjFbfSYAgSgnr7cjYkFXFcg8VN/HcQhy7jFqfOm tjzeDLnYRk3eed852nx3r9eS -----END CERTIFICATE-----Generated at Mon Sep 21 20:14:05 2026 by rpki-client