$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: +iTiuOZ8ZzLNevdwL60P3Vl6crwVtavrfNFDsBYCvHE= Subject key identifier: D5:CA:45:58:54:28:18:2B:52:AA:FC:26:3B:02:2B:99:D2:F0:0A:0F Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 55 Signing time: Sun 11 Oct 2026 08:52:25 +0000 Manifest this update: Sun 11 Oct 2026 08:52:25 +0000 Manifest next update: Sun 18 Oct 2026 08:52:25 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: jUOmNMlEPeES2jSWaegPHJu/uD1eeGDM5n4sJDUYFuk=) 2: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) 3: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Oct 11 08:52:25 2026 GMT Not After : Oct 18 08:52:25 2026 GMT Subject: CN=6acb4e49-8034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:b3:47:f9:87:9f:e0:25:94:60:56:cb:f5: 9d:df:c6:ba:c8:f1:bc:96:b7:94:53:7f:9f:a1:4d: 76:09:72:fa:34:93:0b:be:5f:fa:c4:bd:6f:41:33: 26:3d:0b:89:64:a5:9a:12:07:c0:6d:5f:0a:48:62: 6d:83:61:8b:50:df:ba:20:67:f7:0e:93:88:7b:88: 10:4c:de:bb:dc:f0:c5:b1:1d:fa:da:f1:1e:41:a6: 67:f0:be:0b:15:13:82:a9:d8:9d:96:4d:05:6e:aa: 6e:29:05:eb:1e:51:83:e3:7c:03:6b:02:ea:2c:47: ef:c4:69:1e:9b:37:ed:87:2f:d6:41:11:35:83:f9: ca:02:bc:53:8b:98:70:45:96:21:29:3a:f5:2c:62: 6a:c5:b4:1a:13:9e:56:e5:0e:27:d2:ec:c4:38:d0: 1c:a5:df:80:da:a6:25:60:d1:a7:6f:35:7a:d4:8c: 3c:d6:21:6b:c6:69:1e:6a:3f:98:b7:ce:13:c4:5b: 5a:23:92:47:6b:3d:6f:bb:86:f6:7c:c5:98:61:93: 7d:d4:a5:3e:03:6e:73:c3:64:c5:91:af:de:10:aa: 27:36:88:fa:a8:0e:7f:07:55:9c:ab:6f:08:26:6e: 2c:63:3f:7f:5b:8d:e0:15:19:c9:8e:c3:6c:ec:c7: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CA:45:58:54:28:18:2B:52:AA:FC:26:3B:02:2B:99:D2:F0:0A:0F X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:50:cb:96:20:dc:e1:62:a6:7f:a3:a4:f4:6b:52:a6:c1:22: e9:83:09:d9:1f:64:76:54:0c:de:8c:32:ca:8a:96:ec:dc:ef: 59:4f:0f:92:bd:09:5f:bd:8f:5f:d6:4c:6f:46:bc:ce:15:3d: 80:df:d1:f3:58:42:d5:b0:f6:10:42:c5:9b:85:6d:72:d7:e3: 9d:89:7d:fb:37:25:0f:bf:e1:56:d9:a5:cb:15:8f:ac:09:8d: f1:b5:10:01:53:db:2b:d1:98:56:51:e6:f1:56:4b:e0:a4:5f: c1:8c:04:f5:9b:14:be:e9:24:1f:21:94:e8:af:fc:98:f8:df: 85:08:65:70:68:23:38:03:de:76:18:de:c4:86:b0:1d:18:53: e0:96:f3:22:4c:82:68:f5:8d:2b:24:32:fb:2c:b0:09:24:25: 4d:40:15:6c:89:0f:ec:a2:be:31:2a:65:b1:e7:c7:4c:37:36: 4f:42:76:18:f8:56:3b:7f:df:88:41:5f:a2:1b:17:1b:e0:25: 51:28:55:6f:1b:68:b6:c9:69:04:8e:2e:d0:23:3b:84:5d:b8: 3b:74:0d:6a:7a:51:37:04:3d:80:de:3b:37:9a:80:30:24:e6: 9c:9d:30:d1:fe:3f:53:0e:bf:1b:44:8f:26:f4:6a:76:1f:6e: d0:2b:3b:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjEwMTEwODUyMjVaFw0yNjEwMTgwODUyMjVaMBgxFjAUBgNV BAMTDTZhY2I0ZTQ5LTgwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLnLNH+Yef4CWUYFbL9Z3fxrrI8byWt5RTf5+hTXYJcvo0kwu+X/rEvW9BMyY9 C4lkpZoSB8BtXwpIYm2DYYtQ37ogZ/cOk4h7iBBM3rvc8MWxHfra8R5BpmfwvgsV E4Kp2J2WTQVuqm4pBeseUYPjfANrAuosR+/EaR6bN+2HL9ZBETWD+coCvFOLmHBF liEpOvUsYmrFtBoTnlblDifS7MQ40Byl34DapiVg0advNXrUjDzWIWvGaR5qP5i3 zhPEW1ojkkdrPW+7hvZ8xZhhk33UpT4DbnPDZMWRr94Qqic2iPqoDn8HVZyrbwgm bixjP39bjeAVGcmOw2zsx0w1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1cpFWFQo GCtSqvwmOwIrmdLwCg8wHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/UMuWINzhYqZ/o6T0a1KmwSLpgwnZH2R2VAzejDLKipbs3O9ZTw+SvQlfvY9f 1kxvRrzOFT2A39HzWELVsPYQQsWbhW1y1+OdiX37NyUPv+FW2aXLFY+sCY3xtRAB U9sr0ZhWUebxVkvgpF/BjAT1mxS+6SQfIZTor/yY+N+FCGVwaCM4A952GN7EhrAd GFPglvMiTIJo9Y0rJDL7LLAJJCVNQBVsiQ/sor4xKmWx58dMNzZPQnYY+FY7f9+I QV+iGxcb4CVRKFVvG2i2yWkEji7QIzuEXbg7dA1qelE3BD2A3js3moAwJOacnTDR /j9TDr8bRI8m9Gp2H27QKztk -----END CERTIFICATE-----Generated at Tue Oct 13 05:39:53 2026 by rpki-client