$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft File: KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json) Hash identifier: gpA58dv05hm4zfaoA0g9+6maXdOUarkQY+9P6xFJy4o= Subject key identifier: D4:FC:9D:A3:0B:71:49:07:22:F5:F4:21:A1:05:0E:FE:DF:5C:8E:3B Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft Manifest number: 018A Signing time: Sun 11 Oct 2026 05:06:25 +0000 Manifest this update: Sun 11 Oct 2026 05:06:25 +0000 Manifest next update: Sun 18 Oct 2026 05:06:25 +0000 Files and hashes: 1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: IDdjMrnjSJrfEVLsKKNcCHGFd41Vi1n4vbAohxaf4c8=) 2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422 Validity Not Before: Oct 11 05:06:25 2026 GMT Not After : Oct 18 05:06:25 2026 GMT Subject: CN=6acb1951-12f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:68:24:e9:15:60:a3:7f:59:cb:a4:fb:f7: fe:4a:05:4b:1b:70:66:a1:40:3b:3f:50:fd:dc:0f: c6:de:54:45:be:34:32:fc:97:7f:2a:d1:9f:9d:72: 36:a9:ef:7a:7d:ae:a1:8d:88:b4:61:ed:5b:81:7d: 20:42:f0:7f:06:d7:1e:f5:b4:76:dd:bf:f0:bf:86: bb:02:f4:88:52:c7:a0:ae:63:bb:a6:48:9b:47:1f: dc:c2:34:28:e4:a0:d7:18:c9:4e:5a:ba:97:91:9e: e0:c6:9b:9a:cf:b5:1c:15:dd:ad:74:9d:12:14:92: 4a:22:f5:f7:72:e3:18:da:15:07:b6:1e:09:95:0e: 12:41:24:97:dc:60:d9:d2:48:26:91:d1:ef:aa:5f: e6:d3:fb:02:22:2b:89:8e:70:49:ba:e2:25:68:32: 52:b5:ba:9f:08:35:91:31:4a:27:bf:9f:18:e8:f9: 4b:48:9b:bc:0d:99:31:3d:2c:11:c1:2a:3b:44:cd: 44:a4:19:fe:06:9c:0d:48:b1:a4:d8:c2:29:36:30: 36:e5:b5:98:9d:eb:dc:17:4c:f4:ef:04:24:fd:92: fd:91:b4:dd:fb:8f:17:dd:66:96:b2:0c:48:c7:a5: 64:d7:c3:87:8f:a7:ac:96:41:54:10:37:12:5d:c1: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:9D:A3:0B:71:49:07:22:F5:F4:21:A1:05:0E:FE:DF:5C:8E:3B X509v3 Authority Key Identifier: keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2e:55:76:2e:bf:2a:24:74:6f:20:30:6a:9b:85:49:fa:f0: d2:19:56:fb:79:2f:54:3d:78:db:4a:37:ff:5f:17:7e:29:cf: f3:7e:0b:91:d8:b9:e3:9d:77:9c:67:59:c5:1d:9c:4c:53:31: a3:e5:45:a5:32:4d:0c:03:81:ea:65:87:e0:7f:6b:73:a7:b0: 6f:7b:d1:e1:44:26:11:27:ca:2f:fd:90:2c:c9:75:d0:aa:3d: f0:b4:00:03:53:42:82:59:7f:17:56:9e:b2:41:c8:76:6b:30: f0:3d:8c:f9:7a:74:4b:58:58:97:a2:3f:ca:87:86:f0:5a:6c: 85:52:54:79:dd:fb:61:07:17:d2:f1:86:cc:0d:26:85:5c:88: 19:25:fa:11:fe:c6:0e:78:38:2d:e8:51:c9:97:34:b3:40:bf: e2:1d:34:9b:8a:b0:88:72:59:04:b4:79:1f:70:d0:a0:f9:a0: 4b:5f:8f:00:18:2d:b3:f8:f2:50:89:ac:66:fa:52:c1:30:4c: bb:5f:0f:45:e0:82:fb:a5:e8:72:51:c1:b9:b5:d9:20:28:ec: 12:46:2e:c9:be:a5:6c:36:0a:ca:79:b5:22:4c:9d:fc:07:e0: be:e7:a8:1a:2e:dc:e2:ec:90:46:36:25:43:52:b5:65:bd:3e: e3:56:7e:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDI5MDM3QkJGOTJGMkIwRjRDMzMwQTFDREQ0QTc2MjU2 Q0Q3QTU0MjIwHhcNMjYxMDExMDUwNjI1WhcNMjYxMDE4MDUwNjI1WjAYMRYwFAYD VQQDEw02YWNiMTk1MS0xMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KVoJOkVYKN/Wcuk+/f+SgVLG3BmoUA7P1D93A/G3lRFvjQy/Jd/KtGfnXI2 qe96fa6hjYi0Ye1bgX0gQvB/Btce9bR23b/wv4a7AvSIUsegrmO7pkibRx/cwjQo 5KDXGMlOWrqXkZ7gxpuaz7UcFd2tdJ0SFJJKIvX3cuMY2hUHth4JlQ4SQSSX3GDZ 0kgmkdHvql/m0/sCIiuJjnBJuuIlaDJStbqfCDWRMUonv58Y6PlLSJu8DZkxPSwR wSo7RM1EpBn+BpwNSLGk2MIpNjA25bWYnevcF0z07wQk/ZL9kbTd+48X3WaWsgxI x6Vk18OHj6eslkFUEDcSXcGyUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNT8naML cUkHIvX0IaEFDv7fXI47MB8GA1UdIwQYMBaAFCkDe7+S8rD0wzChzdSnYlbNelQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS80MzY3QzIwRTZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQVERNS0hOMUtkaVZzMTZW Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRTjd2NUx5c1BURE1LSE4xS2RpVnMxNlZDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS80MzY3QzIwRTZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQ VERNS0hOMUtkaVZzMTZWQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJC5Vdi6/KiR0byAwapuFSfrw0hlW+3kvVD1420o3/18XfinP834Lkdi54513 nGdZxR2cTFMxo+VFpTJNDAOB6mWH4H9rc6ewb3vR4UQmESfKL/2QLMl10Ko98LQA A1NCgll/F1aeskHIdmsw8D2M+Xp0S1hYl6I/yoeG8FpshVJUed37YQcX0vGGzA0m hVyIGSX6Ef7GDng4LehRyZc0s0C/4h00m4qwiHJZBLR5H3DQoPmgS1+PABgts/jy UImsZvpSwTBMu18PReCC+6XoclHBubXZICjsEkYuyb6lbDYKynm1Ikyd/Afgvueo Gi7c4uyQRjYlQ1K1Zb0+41Z+Pg== -----END CERTIFICATE-----Generated at Mon Oct 12 14:39:59 2026 by rpki-client