$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: NntJssT/UvGVOlWEdxL2DxxarHYTyZ4VvpQklgENSuQ= Subject key identifier: B7:20:3F:2B:A9:8F:10:7C:D8:89:EE:24:D0:E9:7B:DF:0D:F4:B1:58 Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 02A3 Signing time: Sat 19 Sep 2026 01:46:47 +0000 Manifest this update: Sat 19 Sep 2026 01:46:47 +0000 Manifest next update: Sat 26 Sep 2026 01:46:47 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: Py0fzC+SqIy9qG67mgg5fXc/BULD6G539dnxJfe9Tr4=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Sep 19 01:46:47 2026 GMT Not After : Sep 26 01:46:47 2026 GMT Subject: CN=6aade987-799a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:4e:80:a3:64:db:66:09:09:1a:ae:e7:63: e8:7c:df:0b:17:e9:0f:02:30:66:1d:a4:9a:0c:bf: 72:55:75:4b:99:0a:4d:93:ee:5d:76:fa:43:1d:c5: 4c:76:31:6d:1f:d4:d7:4c:61:7e:18:ae:a0:b5:e5: d8:38:10:a4:d9:70:bd:83:94:5a:24:a2:c2:54:15: 79:8c:15:fb:cb:09:73:5a:56:c0:6a:ff:86:1e:cf: 26:34:aa:65:47:d9:f4:75:ec:49:f6:9b:08:86:5d: 0f:f6:e7:46:bf:0a:59:53:cb:80:ba:31:6e:6e:d4: 6a:0d:75:70:89:7a:2f:6d:3e:9d:45:01:60:3a:74: 65:34:61:25:b3:4a:4f:84:a6:8b:65:d6:19:04:7f: 01:09:6e:0c:ea:4f:5f:00:8c:83:4e:14:a0:da:18: 28:bd:17:f5:9c:3c:82:7b:0c:0d:d0:03:99:25:52: a6:14:f3:9f:3d:c4:6c:43:d5:4c:95:a8:56:c1:b3: ac:10:07:64:da:80:ed:c3:96:63:dd:48:67:1b:d7: b6:b1:05:b1:0d:c2:00:c3:d5:c1:f8:66:71:35:3b: 35:fa:db:55:50:c5:30:e4:09:76:f1:7b:d1:fd:ac: 95:22:8d:47:79:2a:74:35:97:6f:cc:7a:d6:64:c5: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:3F:2B:A9:8F:10:7C:D8:89:EE:24:D0:E9:7B:DF:0D:F4:B1:58 X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:84:e6:1c:dc:85:4d:dd:c6:60:9a:76:4a:81:fb:5d:be:e5: 5d:f7:b8:70:1f:1a:02:29:d0:a9:f3:49:34:58:46:d6:c3:bc: a0:d6:98:22:91:b1:c8:7b:e0:b4:cd:0f:d0:49:a7:ff:d8:02: c9:3a:38:4d:d7:ae:22:ea:39:b6:7b:96:75:b7:68:4e:cf:60: 7a:eb:e1:c0:7d:e0:a3:5e:0a:81:64:c0:97:d5:b7:06:67:c7: 45:74:71:de:82:b8:7b:38:44:21:51:d3:0b:e9:5e:7f:a1:af: 98:02:b8:9d:06:f8:48:47:7d:91:b2:b8:58:a4:e0:88:41:c1: 91:c3:58:cf:be:0f:99:10:2d:cd:f5:f6:7a:15:22:94:86:8c: 2e:20:36:74:e2:f5:5b:da:85:99:f8:c6:d5:2e:37:3c:cf:f5: 58:53:1b:13:4a:49:e7:de:29:36:60:b0:9d:72:f8:17:5f:66: d3:c0:d4:fc:43:5d:eb:42:3a:88:42:15:b5:e3:83:c8:94:78: 76:cf:47:1f:4a:b5:10:80:76:ed:63:ab:3b:8d:16:8f:96:87: 34:e4:a0:74:94:1c:4f:c5:d9:ce:28:73:90:31:9d:85:ac:94: 6f:db:2e:5a:17:de:ee:e4:d5:dd:1c:60:29:38:d2:65:82:e0: 68:4a:ff:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjYwOTE5MDE0NjQ3WhcNMjYwOTI2MDE0NjQ3WjAYMRYwFAYD VQQDEw02YWFkZTk4Ny03OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1FOgKNk22YJCRqu52PofN8LF+kPAjBmHaSaDL9yVXVLmQpNk+5ddvpDHcVM djFtH9TXTGF+GK6gteXYOBCk2XC9g5RaJKLCVBV5jBX7ywlzWlbAav+GHs8mNKpl R9n0dexJ9psIhl0P9udGvwpZU8uAujFubtRqDXVwiXovbT6dRQFgOnRlNGEls0pP hKaLZdYZBH8BCW4M6k9fAIyDThSg2hgovRf1nDyCewwN0AOZJVKmFPOfPcRsQ9VM lahWwbOsEAdk2oDtw5Zj3UhnG9e2sQWxDcIAw9XB+GZxNTs1+ttVUMUw5Al28XvR /ayVIo1HeSp0NZdvzHrWZMVN5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcgPyup jxB82InuJNDpe98N9LFYMB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVYTmHNyFTd3GYJp2SoH7Xb7lXfe4cB8aAinQqfNJNFhG1sO8oNaYIpGxyHvg tM0P0Emn/9gCyTo4TdeuIuo5tnuWdbdoTs9geuvhwH3go14KgWTAl9W3BmfHRXRx 3oK4ezhEIVHTC+lef6GvmAK4nQb4SEd9kbK4WKTgiEHBkcNYz74PmRAtzfX2ehUi lIaMLiA2dOL1W9qFmfjG1S43PM/1WFMbE0pJ594pNmCwnXL4F19m08DU/ENd60I6 iEIVteODyJR4ds9HH0q1EIB27WOrO40Wj5aHNOSgdJQcT8XZzihzkDGdhayUb9su Whfe7uTV3RxgKTjSZYLgaEr/Hw== -----END CERTIFICATE-----Generated at Mon Sep 21 02:47:25 2026 by rpki-client