$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: vrIAKwplsW6JuIsGrdvqVUsgrjTWQEofhxkVMteNpuo= Subject key identifier: D4:94:BD:DA:CB:A9:24:7B:C2:B3:44:D0:0D:75:F0:CC:DD:FF:DB:81 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0FC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F58 Signing time: Fri 18 Sep 2026 17:36:08 +0000 Manifest this update: Fri 18 Sep 2026 17:36:07 +0000 Manifest next update: Fri 25 Sep 2026 17:36:07 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: 0f2h0vWZFnj6XhqTg0SijI6C5yk2cfYuWZuz7uU6P7M=) 2: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: fWUBv/Gp2qw1UZEr3XjxQsuXEeaBLIJR0Xh74UCm7Ts=) 3: 8gVKVblLBz5nhRiGHl3DrQzkT_8.asa (hash: 1aYy+GoQ/OpgHh8bcjq4PAwa6BjfDmEqa+OAlnRrNn4=) 4: 10E905682CCE11F1BB1925E192833773.roa (hash: HkIXrKm45gEIaL69eK9NolITOExBggdE2/CFBbaKfNc=) 5: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: aZPZjU2X9q7Uezgbc+/YwtYMqbcTXMspTEvxkBuOs1c=) 6: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: w5d0LH96WqLLdOjMnBfiuhx00FMURmhDRlkPHPYAqNM=) 7: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: 9k8Fht4Br+99Bt5Yrwgpw9dr0xvUubqA6YyCzt85eWA=) 8: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: Ja4/CMw03eHsoSI1SxDv/gmDoWhVR1WIiVpoLLzR9uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4036 (0xfc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Sep 18 17:36:07 2026 GMT Not After : Sep 25 17:36:07 2026 GMT Subject: CN=6aad7688-632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:23:89:c5:68:45:2d:19:e7:7e:a0:b3:6f: 45:dd:88:02:6b:ee:69:05:2d:4b:30:74:22:96:05: a4:87:ab:52:85:7c:9a:41:44:c3:b0:57:de:74:6c: 6f:13:e6:8c:6a:fb:05:a6:79:52:4e:a6:eb:a2:16: c6:3b:e5:85:df:c1:7f:8f:c0:f0:90:4c:8e:be:4a: a6:af:fc:b0:6c:e8:b6:d8:19:f5:29:06:f2:75:2c: 2c:e8:02:d5:f7:10:7b:80:60:92:84:a9:9e:dc:cf: 99:d7:52:78:e9:db:16:f9:3f:fc:3d:cc:4b:4b:cc: 02:3f:32:8e:74:2f:8f:99:f3:ff:f9:e1:8c:9d:dc: 75:84:be:fa:2a:29:fa:71:2a:ae:59:7a:d2:75:2d: c9:3d:a2:51:9b:c4:36:27:94:47:e7:30:02:22:9a: ca:78:a2:d8:c3:a9:30:3d:2a:83:07:20:36:20:84: 57:94:f3:67:57:8a:b3:91:5e:fe:d6:f0:f5:3f:d1: f6:cc:ad:e1:63:ac:a3:f7:f3:51:37:e1:c6:f6:de: 34:7c:e1:9f:2b:9e:01:be:df:06:74:f1:3b:6c:b2: 1c:1d:35:05:bf:37:08:c8:b7:1f:17:92:11:61:49: 02:53:11:05:d7:f5:e5:77:db:1c:c4:9b:bb:d6:f9: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:BD:DA:CB:A9:24:7B:C2:B3:44:D0:0D:75:F0:CC:DD:FF:DB:81 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:34:1f:90:04:b7:29:d5:30:9d:ff:b2:1c:2b:c9:8a:e2:6f: 95:a5:cb:5b:2e:a9:5e:e2:0e:92:33:c9:59:47:b0:22:0b:d1: ce:05:bf:4e:ea:28:05:d0:66:14:88:9b:50:d0:39:be:bb:1e: 33:9c:9c:fb:3d:ad:e7:23:cf:cc:f7:87:e9:e2:7c:d0:b9:7a: 06:0c:f8:3a:3b:01:ac:24:65:83:bd:3f:d9:8f:db:b1:cb:8e: 39:3d:c1:c5:8d:24:32:af:d3:cc:c2:75:e7:22:d2:b4:aa:4f: d1:87:a4:a6:40:6e:71:5f:c0:ee:31:39:e4:01:ff:49:fd:cd: f1:fe:91:cd:db:24:7f:5f:a4:3d:30:75:e0:f2:e9:d6:7e:8c: a4:06:01:d0:71:37:87:89:53:4b:2c:3d:ec:d9:ef:97:53:66: 00:47:f1:f7:48:d2:c2:18:88:8e:43:79:7e:90:64:8f:07:66: 98:3c:18:a2:b5:f0:63:1c:8f:38:95:74:c9:87:4c:66:1f:2c: 7b:ab:85:e3:e1:da:9d:8f:a2:41:35:4f:9e:15:a8:bd:c0:a9: 62:db:7c:92:2f:bb:c8:1a:7c:e8:d4:64:0f:50:db:b2:c1:65: f2:8a:80:4f:49:5c:1a:73:d4:09:e5:27:b2:05:fd:3a:a7:de: b8:7b:75:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwOTE4MTczNjA3WhcNMjYwOTI1MTczNjA3WjAYMRYwFAYD VQQDEw02YWFkNzY4OC02MzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOgjicVoRS0Z536gs29F3YgCa+5pBS1LMHQilgWkh6tShXyaQUTDsFfedGxv E+aMavsFpnlSTqbrohbGO+WF38F/j8DwkEyOvkqmr/ywbOi22Bn1KQbydSws6ALV 9xB7gGCShKme3M+Z11J46dsW+T/8PcxLS8wCPzKOdC+PmfP/+eGMndx1hL76Kin6 cSquWXrSdS3JPaJRm8Q2J5RH5zACIprKeKLYw6kwPSqDByA2IIRXlPNnV4qzkV7+ 1vD1P9H2zK3hY6yj9/NRN+HG9t40fOGfK54Bvt8GdPE7bLIcHTUFvzcIyLcfF5IR YUkCUxEF1/Xld9scxJu71vlKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSUvdrL qSR7wrNE0A118Mzd/9uBMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzQfkAS3KdUwnf+yHCvJiuJvlaXLWy6pXuIOkjPJWUewIgvRzgW/TuooBdBm FIibUNA5vrseM5yc+z2t5yPPzPeH6eJ80Ll6Bgz4OjsBrCRlg70/2Y/bscuOOT3B xY0kMq/TzMJ15yLStKpP0YekpkBucV/A7jE55AH/Sf3N8f6Rzdskf1+kPTB14PLp 1n6MpAYB0HE3h4lTSyw97Nnvl1NmAEfx90jSwhiIjkN5fpBkjwdmmDwYorXwYxyP OJV0yYdMZh8se6uF4+HanY+iQTVPnhWovcCpYtt8ki+7yBp86NRkD1DbssFl8oqA T0lcGnPUCeUnsgX9OqfeuHt1cw== -----END CERTIFICATE-----Generated at Sun Sep 20 15:06:32 2026 by rpki-client