$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json) Hash identifier: ZP2cxSmmpTulW6IipoweJTH5ay6xX4u/59fNqq3AFNo= Subject key identifier: 9E:C0:B0:47:F4:8A:AA:C9:D7:AE:5E:85:A5:23:1E:E7:7D:5F:76:BA Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft Manifest number: CD Signing time: Wed 23 Sep 2026 06:32:50 +0000 Manifest this update: Wed 23 Sep 2026 06:32:49 +0000 Manifest next update: Wed 30 Sep 2026 06:32:49 +0000 Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: GrB1QoO7xstc7aDeUZJIrYgGZkayU8LewfsReM2Z7uk=) 2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Sep 23 06:32:49 2026 GMT Not After : Sep 30 06:32:49 2026 GMT Subject: CN=6ab37291-d616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:7b:9f:43:77:78:21:7f:7e:65:13:ab:de: 41:94:62:02:94:35:ad:bc:75:3c:24:4f:52:f2:0e: 03:8c:3c:5e:8d:d3:8e:bf:12:0d:38:72:d1:29:27: 2d:6e:e8:25:6d:cc:18:e0:1a:7e:e7:e0:d4:00:82: b6:d7:85:49:66:33:18:83:3a:74:e3:0f:43:c8:e8: 31:18:9c:41:9b:8b:f0:c7:bf:dc:c7:fc:1a:a0:d0: eb:39:61:f6:e4:5c:11:d9:e5:2d:1a:fc:67:19:c9: bc:b7:63:bc:09:8f:19:19:29:b6:43:51:15:2a:f3: 26:81:1a:bf:69:4c:89:2f:44:a8:80:41:e4:01:e6: 2a:68:b8:1a:3f:14:ea:85:22:7e:c7:52:10:9f:a4: 17:8a:f7:e6:e7:ae:69:bf:93:a0:c5:fa:c6:42:6b: 7a:08:08:e3:22:52:c4:25:a2:b0:02:15:fb:33:81: fe:07:84:f2:08:fb:41:c9:eb:e2:47:3a:56:83:44: 9d:78:f7:ad:36:cc:8f:63:e9:ea:5e:44:bf:df:06: b7:61:9d:d2:a5:63:db:cd:d1:7f:5a:8b:ee:c6:58: e4:c2:15:25:0d:70:5a:d8:32:9f:f0:da:fe:95:83: 95:14:d5:50:24:38:66:89:fd:fc:a0:96:e0:0b:27: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C0:B0:47:F4:8A:AA:C9:D7:AE:5E:85:A5:23:1E:E7:7D:5F:76:BA X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:e6:ba:2f:ec:50:43:51:19:25:03:d3:09:4b:72:6b:6a: 59:9e:e3:3d:37:59:b1:60:33:bc:c9:a8:32:05:34:b6:56:1b: 51:57:ce:73:f8:06:c2:d0:48:97:88:56:4e:25:7d:9a:81:06: e5:de:02:35:0f:1d:1a:11:00:69:bc:af:a8:09:43:a2:28:92: 78:70:db:b6:25:c7:5b:3d:ae:26:83:b7:08:78:2d:75:cd:ee: e7:6f:87:02:9c:da:f6:0d:1c:36:4a:62:f2:5c:56:68:a7:c4: 5c:41:eb:7f:80:0f:95:3f:95:ac:d2:a0:f8:57:e0:0f:56:43: ae:0c:fb:55:26:f5:47:57:8b:e5:d9:89:e7:9e:e8:d1:ab:7a: a7:f0:ab:a3:20:0a:66:cb:6e:f3:ba:71:31:2f:61:00:1e:8b: eb:6b:ee:3a:50:25:d3:3f:f9:69:ed:b1:b9:94:8b:3e:7c:32: 01:fc:61:ba:1a:cc:29:43:9b:f1:6a:aa:ae:ed:90:f6:0b:0b: 75:de:73:92:0c:15:52:81:9f:e4:93:5c:93:3e:4b:4d:6c:2f: d1:e8:7e:9d:88:61:6f:9e:7e:e7:2c:5d:a5:3c:5e:83:5e:8e: 3a:4f:de:a6:56:cf:2c:72:cb:ef:ec:fc:b4:59:81:8c:ed:6b: 79:9c:80:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RDkxMTAvBgNVBAUTKDJCQjdFNkY2NEU4OTNEOTEzMDRBOEIyNTg4NjAzNTBE Njc1MDU0QUQwHhcNMjYwOTIzMDYzMjQ5WhcNMjYwOTMwMDYzMjQ5WjAYMRYwFAYD VQQDEw02YWIzNzI5MS1kNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBZ7n0N3eCF/fmUTq95BlGIClDWtvHU8JE9S8g4DjDxejdOOvxINOHLRKSct buglbcwY4Bp+5+DUAIK214VJZjMYgzp04w9DyOgxGJxBm4vwx7/cx/waoNDrOWH2 5FwR2eUtGvxnGcm8t2O8CY8ZGSm2Q1EVKvMmgRq/aUyJL0SogEHkAeYqaLgaPxTq hSJ+x1IQn6QXivfm565pv5OgxfrGQmt6CAjjIlLEJaKwAhX7M4H+B4TyCPtByevi RzpWg0SdePetNsyPY+nqXkS/3wa3YZ3SpWPbzdF/WovuxljkwhUlDXBa2DKf8Nr+ lYOVFNVQJDhmif38oJbgCydDMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7AsEf0 iqrJ165ehaUjHud9X3a6MB8GA1UdIwQYMBaAFCu35vZOiT2RMEqLJYhgNQ1nUFSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhEOS8wRkQ2QUI1Mjgx NzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBaRXdTb3NsaUdBMURXZFFW SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhEOS8wRkQ2QUI1MjgxNzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBa RXdTb3NsaUdBMURXZFFWSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUlDmui/sUENRGSUD0wlLcmtqWZ7jPTdZsWAzvMmoMgU0tlYbUVfOc/gGwtBI l4hWTiV9moEG5d4CNQ8dGhEAabyvqAlDoiiSeHDbtiXHWz2uJoO3CHgtdc3u52+H Apza9g0cNkpi8lxWaKfEXEHrf4APlT+VrNKg+FfgD1ZDrgz7VSb1R1eL5dmJ557o 0at6p/CroyAKZstu87pxMS9hAB6L62vuOlAl0z/5ae2xuZSLPnwyAfxhuhrMKUOb 8Wqqru2Q9gsLdd5zkgwVUoGf5JNckz5LTWwv0eh+nYhhb55+5yxdpTxeg16OOk/e plbPLHLL7+z8tFmBjO1reZyAdw== -----END CERTIFICATE-----Generated at Thu Sep 24 02:07:50 2026 by rpki-client