$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json) Hash identifier: rhrL8woGBAJHAkwj67wm1Z4JSUMDeXFJ4ZhdjQos4i4= Subject key identifier: 78:E1:1B:A1:8A:0C:45:B4:51:30:6D:52:4C:E1:05:1D:0C:8B:73:33 Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0D38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft Manifest number: 0D16 Signing time: Tue 06 Oct 2026 18:30:29 +0000 Manifest this update: Tue 06 Oct 2026 18:30:28 +0000 Manifest next update: Tue 13 Oct 2026 18:30:28 +0000 Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: rDWYWc2DwSEgBskQYXA7lZywV2cf0nVjJgk5cKxxEnw=) 2: 5466CCEA756111F1ADC2B2A489A30FBC.roa (hash: D+BZXupaO6XvkGmNZkv/PQJ4t++QmXQARafI6mhSEgU=) 3: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: /W282CqOOeHjOsYgZjL++X+1qtiUVrTREYb/SflQPck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Oct 6 18:30:28 2026 GMT Not After : Oct 13 18:30:28 2026 GMT Subject: CN=6ac53e44-c43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:af:01:8f:d5:ff:ac:b0:7b:3a:b9:27:66: 7d:2a:d6:db:61:75:34:ab:93:86:d9:39:bb:c5:a0: 68:97:49:d6:02:ac:6d:aa:95:aa:6a:3c:7a:d5:bc: f3:fa:c2:12:26:64:cc:48:6d:5f:6b:22:30:52:82: 17:a2:93:d0:73:06:c9:0f:db:c5:66:04:84:0d:5e: 9f:84:5b:55:2c:54:b2:4e:8a:58:26:7e:c8:38:f7: ae:80:b4:b6:88:e3:67:bd:ab:d7:f0:16:f6:2e:5b: 5f:41:76:9c:49:71:a8:cc:1d:67:41:5e:36:78:f2: 3f:4f:c0:ae:07:58:fe:f5:2f:cf:df:f9:0f:d5:dc: 9e:7c:6d:fb:2c:13:cb:a4:db:37:2d:10:e4:a1:3d: 29:32:b8:58:f0:31:e5:5b:1f:d9:b4:0a:bc:e4:e9: 3f:58:70:ce:28:21:1a:f4:1c:66:aa:24:a9:56:e7: 9d:c0:26:66:76:ef:8b:d9:a4:2c:79:33:d7:69:4e: 4d:ec:0d:c3:f7:34:41:79:7c:0d:af:fc:20:69:17: dd:83:25:e0:3d:56:e9:e8:34:dc:b1:16:5e:e7:53: 95:b9:ca:9a:80:c7:28:5a:26:97:a9:a2:8c:3e:a0: 09:9b:c6:91:ab:46:a1:6c:1f:cf:d2:b6:76:2d:f7: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:1B:A1:8A:0C:45:B4:51:30:6D:52:4C:E1:05:1D:0C:8B:73:33 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:84:de:0f:70:b6:76:12:cb:69:50:a1:9d:19:32:3d:f1:22: 32:8c:f3:14:bf:ed:f4:d0:62:fd:ca:95:35:e5:f8:6e:05:e1: 56:6d:b2:91:6a:d5:64:37:de:33:19:f3:74:2f:12:d8:a9:67: 2a:23:00:a5:8b:ef:b6:ac:5a:86:d0:2d:01:9f:09:5b:ce:a3: 0f:b4:e2:64:b1:c5:15:9b:18:54:a3:de:db:f4:44:2f:fa:54: c6:4c:61:01:9a:1f:32:37:70:57:a3:2c:dc:af:5a:20:eb:a4: a4:70:2f:b0:d1:59:01:fc:7c:e6:db:97:e2:a2:b7:c8:bd:21: 12:cc:d3:35:c1:89:b4:93:ce:95:e7:38:d2:b2:16:bc:3f:23: 50:e9:cc:69:0f:13:71:2e:d3:4d:9b:0f:a2:f3:a7:ab:ef:8a: e2:01:28:70:89:68:ae:7a:fe:9e:5a:48:cf:d8:7a:b8:bb:bf: 06:30:39:db:df:62:b9:e5:5a:c8:9f:ea:65:4f:b6:bc:b8:4b: 7f:a1:cb:f1:73:69:c4:56:46:85:fe:06:12:ab:7b:7b:cc:27: ac:3d:0c:cd:ff:52:d4:44:95:ce:ea:bf:90:e7:6e:39:d1:c7: 2d:49:39:dd:aa:48:0f:59:da:07:2e:c7:7b:f6:a6:c7:dd:0d: 70:e5:8d:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjYxMDA2MTgzMDI4WhcNMjYxMDEzMTgzMDI4WjAYMRYwFAYD VQQDEw02YWM1M2U0NC1jNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ivAY/V/6ywezq5J2Z9KtbbYXU0q5OG2Tm7xaBol0nWAqxtqpWqajx61bzz +sISJmTMSG1fayIwUoIXopPQcwbJD9vFZgSEDV6fhFtVLFSyTopYJn7IOPeugLS2 iONnvavX8Bb2LltfQXacSXGozB1nQV42ePI/T8CuB1j+9S/P3/kP1dyefG37LBPL pNs3LRDkoT0pMrhY8DHlWx/ZtAq85Ok/WHDOKCEa9BxmqiSpVuedwCZmdu+L2aQs eTPXaU5N7A3D9zRBeXwNr/wgaRfdgyXgPVbp6DTcsRZe51OVucqagMcoWiaXqaKM PqAJm8aRq0ahbB/P0rZ2LferXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjhG6GK DEW0UTBtUkzhBR0Mi3MzMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTJDQy9GMjZFMDZDRTExRjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0 RVlvdFd0VTAySUtQUzVSalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn4TeD3C2dhLLaVChnRkyPfEiMozzFL/t9NBi/cqVNeX4bgXhVm2ykWrVZDfe MxnzdC8S2KlnKiMApYvvtqxahtAtAZ8JW86jD7TiZLHFFZsYVKPe2/REL/pUxkxh AZofMjdwV6Ms3K9aIOukpHAvsNFZAfx85tuX4qK3yL0hEszTNcGJtJPOlec40rIW vD8jUOnMaQ8TcS7TTZsPovOnq++K4gEocIlornr+nlpIz9h6uLu/BjA5299iueVa yJ/qZU+2vLhLf6HL8XNpxFZGhf4GEqt7e8wnrD0Mzf9S1ESVzuq/kOduOdHHLUk5 3apID1naBy7He/amx90NcOWNEg== -----END CERTIFICATE-----Generated at Thu Oct 8 12:55:27 2026 by rpki-client