$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: UYsp3aik2NE7Wegdz34CTaipJB0SygzAuAWjCGNkHiM= Subject key identifier: F1:1B:DF:3E:8C:9E:7B:CA:25:9D:67:A6:E3:89:50:70:ED:39:0E:8F Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 06F1 Signing time: Tue 22 Sep 2026 15:56:05 +0000 Manifest this update: Tue 22 Sep 2026 15:56:04 +0000 Manifest next update: Tue 29 Sep 2026 15:56:04 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: 4HwyDEdP0VYpmLBa6G5EYVEnuoRsfcxTVt5NwzRh8wU=) 2: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: IXVHf+2WBfW6oS9Q18tT00qCn3zKH5TAOtknryxx7jA=) 3: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: 8b4jo2m0Ngh7TWy3IkuEiD0GJam3IZH9UOeev3O9qQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Sep 22 15:56:04 2026 GMT Not After : Sep 29 15:56:04 2026 GMT Subject: CN=6ab2a515-dafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:46:3f:70:21:45:bb:13:6d:c2:60:6c:f9: 95:c1:c2:3e:6e:81:5d:17:92:42:dc:6e:30:86:bd: a6:51:92:98:6e:06:c1:5b:24:33:ac:68:fb:c4:b3: 25:dc:05:08:c2:b5:3a:e2:e9:2f:71:e6:2d:f5:c2: ee:61:f0:70:53:32:50:cc:2a:03:b4:1a:92:ec:4c: 61:6c:96:47:17:6c:c2:5f:9c:f6:b1:6f:82:37:5e: 10:86:33:9b:af:bb:d5:77:7c:96:f8:87:7c:26:03: 2c:e1:71:ef:85:80:94:c7:b9:f7:ee:1d:72:76:46: c7:51:df:ab:c7:98:5d:bf:84:f0:b9:9f:6e:3c:fa: 71:4c:67:01:7b:b2:a5:74:d6:94:04:f5:59:64:e1: 81:a7:e6:86:12:27:33:62:8d:bc:3f:95:2f:78:fa: 57:5a:3c:c2:7c:45:9c:1d:21:96:2f:f6:bb:62:da: 1a:25:d8:c9:1a:76:ef:f2:c7:9c:52:c2:6b:ee:f5: 17:1e:79:a1:64:07:0f:db:0b:18:ab:b1:2f:11:16: b2:32:61:f8:7a:c1:af:1e:19:de:b6:de:8a:10:af: 2b:5f:ba:1a:d0:1b:80:24:7e:0c:a4:3f:66:9b:0e: b2:a0:0e:ce:d5:5c:ea:1a:fb:31:8b:da:88:e6:4c: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1B:DF:3E:8C:9E:7B:CA:25:9D:67:A6:E3:89:50:70:ED:39:0E:8F X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d5:eb:5e:3a:fc:9c:9e:13:98:47:20:78:04:82:ce:9f:ae: 25:a4:11:0e:9c:35:48:90:8d:c2:18:45:6f:02:4c:b8:dd:9b: ef:c7:d6:88:85:94:ce:c1:47:97:04:80:3b:27:b9:85:d4:60: 42:43:a6:ab:46:49:0f:b1:ee:24:31:78:7d:62:67:be:e1:7c: ee:2e:95:b1:9d:ec:db:ea:73:68:25:b4:61:b1:2c:2b:96:77: b6:1c:43:53:f2:89:d1:41:89:1e:a8:7f:36:1f:4e:3f:8c:5d: 48:81:58:b0:6b:cd:72:f8:4a:69:42:32:42:c8:c6:33:80:8d: 75:c8:08:95:a1:f0:7c:69:1c:31:6b:b3:f6:e4:12:fd:ec:04: 04:80:97:c9:53:9f:bc:54:74:72:25:05:a6:a7:1c:f0:b8:ff: a0:4b:4a:16:53:cd:75:f6:12:8e:0e:6a:65:00:b9:eb:9c:85: a3:66:0c:1e:14:02:1d:1d:9e:30:65:a8:07:35:de:1f:23:4b: 38:26:9d:d5:96:5d:de:82:7b:ba:a9:da:1f:6e:65:cc:34:4f: 5e:0d:c0:08:3c:f6:f4:a2:58:3a:13:9a:fe:0e:20:7a:3f:64: d8:c5:05:37:dc:3c:86:30:03:db:f7:04:68:b6:ed:73:05:3a: 0c:10:e8:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwOTIyMTU1NjA0WhcNMjYwOTI5MTU1NjA0WjAYMRYwFAYD VQQDEw02YWIyYTUxNS1kYWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcFGP3AhRbsTbcJgbPmVwcI+boFdF5JC3G4whr2mUZKYbgbBWyQzrGj7xLMl 3AUIwrU64ukvceYt9cLuYfBwUzJQzCoDtBqS7ExhbJZHF2zCX5z2sW+CN14QhjOb r7vVd3yW+Id8JgMs4XHvhYCUx7n37h1ydkbHUd+rx5hdv4TwuZ9uPPpxTGcBe7Kl dNaUBPVZZOGBp+aGEiczYo28P5UvePpXWjzCfEWcHSGWL/a7YtoaJdjJGnbv8sec UsJr7vUXHnmhZAcP2wsYq7EvERayMmH4esGvHhnett6KEK8rX7oa0BuAJH4MpD9m mw6yoA7O1VzqGvsxi9qI5kyzOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEb3z6M nnvKJZ1npuOJUHDtOQ6PMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIdXrXjr8nJ4TmEcgeASCzp+uJaQRDpw1SJCNwhhFbwJMuN2b78fWiIWUzsFH lwSAOye5hdRgQkOmq0ZJD7HuJDF4fWJnvuF87i6VsZ3s2+pzaCW0YbEsK5Z3thxD U/KJ0UGJHqh/Nh9OP4xdSIFYsGvNcvhKaUIyQsjGM4CNdcgIlaHwfGkcMWuz9uQS /ewEBICXyVOfvFR0ciUFpqcc8Lj/oEtKFlPNdfYSjg5qZQC565yFo2YMHhQCHR2e MGWoBzXeHyNLOCad1ZZd3oJ7uqnaH25lzDRPXg3ACDz29KJYOhOa/g4gej9k2MUF N9w8hjAD2/cEaLbtcwU6DBDoAQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:59:07 2026 by rpki-client