$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: FVglTPBDh7gopY41d4u6g1ND7zbt3FVD/gZYScm694Y= Subject key identifier: 9F:0F:1F:44:1A:9C:11:58:BF:DA:7B:41:3E:F2:96:C8:87:FB:95:30 Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: 0132 Signing time: Tue 13 Oct 2026 06:16:47 +0000 Manifest this update: Tue 13 Oct 2026 06:16:46 +0000 Manifest next update: Tue 20 Oct 2026 06:16:46 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: WjyP1DrW4+Z0fevfJWWcjVZAF4vnV0/Xuk2n+cf/zHQ=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 06:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Oct 13 06:16:46 2026 GMT Not After : Oct 20 06:16:46 2026 GMT Subject: CN=6acdcccf-19c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:34:a3:95:c8:b9:82:46:be:4a:b3:e2:59: 86:ac:52:ca:c5:47:57:b6:fe:03:71:88:45:6e:1b: 93:6e:3f:a5:49:d6:03:21:59:9f:30:5d:a0:f3:ba: 9c:b5:5c:0d:5b:aa:48:e5:71:b6:fe:b0:cc:24:47: b0:16:c6:44:b3:97:8d:22:e5:61:c5:76:15:2a:db: 25:b4:f8:60:cf:66:e8:3b:ac:81:21:d1:7d:e6:53: 42:f3:c3:79:89:f4:45:af:8a:13:3f:c6:65:d3:8e: d1:2f:b9:05:82:e8:8e:bb:0e:97:5a:04:fd:7f:5e: 20:38:c0:df:8e:4e:a3:7b:b0:b1:2f:33:53:cb:c8: 3a:d2:cb:11:fa:71:a4:22:d3:31:e9:44:04:60:da: 90:0e:14:56:18:40:03:47:7d:cb:5d:f7:90:64:3e: 59:47:ca:83:3d:c5:e2:93:66:01:ae:52:be:1f:32: 41:c9:b9:7a:5e:f0:ec:c4:ff:ca:1b:9e:ec:9d:13: 3e:81:ea:82:61:ef:2b:64:49:3a:d4:5c:b9:7b:99: 91:c4:dc:bc:f3:46:f9:d8:ab:e6:b6:e4:20:f0:ec: f3:b2:3c:ca:5d:0b:6c:7e:3d:65:38:51:a0:88:a9: 14:76:04:2b:93:d0:cb:57:9e:fc:36:a9:62:7c:40: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:1F:44:1A:9C:11:58:BF:DA:7B:41:3E:F2:96:C8:87:FB:95:30 X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c2:78:14:76:8f:46:19:5f:a2:6b:b7:94:2e:5c:39:2a:e3: 51:e8:8d:42:ec:bd:0c:22:ed:89:4d:a4:b3:2e:c1:88:cf:25: e1:69:61:40:dd:79:e5:55:a9:ad:19:bf:03:d8:7f:e0:30:d4: fd:dd:2a:7f:39:af:f5:2c:0d:53:77:a2:f0:2f:b2:52:8d:58: d4:3f:b9:7f:cb:60:df:40:e6:c0:18:89:a0:8d:53:bd:99:3d: 3e:e0:0c:0b:8a:5e:27:f8:76:8b:9b:a3:f9:12:68:20:52:23: a9:cc:1c:0b:a2:9a:0f:97:2e:2e:b6:79:ec:6e:1c:d9:d6:7c: 79:e9:9a:c3:46:7e:13:8b:ac:6e:85:e7:46:36:b8:aa:8f:ce: 65:a9:0b:ae:54:04:42:c7:b7:0f:b3:05:03:a6:48:cf:c7:24: 20:d5:13:e4:53:3a:cf:e5:02:9d:6f:29:a6:4b:28:6d:41:76: 66:15:c3:ab:54:9b:e4:a1:18:41:4e:f9:9e:e0:fd:20:23:16: c3:ce:df:e2:56:bf:c0:bb:df:5e:9b:bc:31:95:13:ee:7f:1c: fb:8c:99:f1:52:68:9f:29:6b:6d:de:2e:ad:93:71:45:3c:a4: a8:8f:28:b4:3c:14:59:8d:f1:ec:73:2c:4d:23:4b:b0:e5:0b: 16:14:5e:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5ODUxMTAvBgNVBAUTKDI5QURCMzlCNjIwRUFFM0NCOEFGQ0EyQ0ExODVGNUM0 ODc2RkQwNDMwHhcNMjYxMDEzMDYxNjQ2WhcNMjYxMDIwMDYxNjQ2WjAYMRYwFAYD VQQDEw02YWNkY2NjZi0xOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zo0o5XIuYJGvkqz4lmGrFLKxUdXtv4DcYhFbhuTbj+lSdYDIVmfMF2g87qc tVwNW6pI5XG2/rDMJEewFsZEs5eNIuVhxXYVKtsltPhgz2boO6yBIdF95lNC88N5 ifRFr4oTP8Zl047RL7kFguiOuw6XWgT9f14gOMDfjk6je7CxLzNTy8g60ssR+nGk ItMx6UQEYNqQDhRWGEADR33LXfeQZD5ZR8qDPcXik2YBrlK+HzJBybl6XvDsxP/K G57snRM+geqCYe8rZEk61Fy5e5mRxNy880b52KvmtuQg8OzzsjzKXQtsfj1lOFGg iKkUdgQrk9DLV578NqlifEDLQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8PH0Qa nBFYv9p7QT7ylsiH+5UwMB8GA1UdIwQYMBaAFCmts5tiDq48uK/KLKGF9cSHb9BD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzk4NS82NzNBQTJGNEY1 QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3JqeTRyOG9zb1lYMXhJZHYw RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzk4NS82NzNBQTJGNEY1QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3Jq eTRyOG9zb1lYMXhJZHYwRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH8J4FHaPRhlfomu3lC5cOSrjUeiNQuy9DCLtiU2ksy7BiM8l4WlhQN155VWp rRm/A9h/4DDU/d0qfzmv9SwNU3ei8C+yUo1Y1D+5f8tg30DmwBiJoI1TvZk9PuAM C4peJ/h2i5uj+RJoIFIjqcwcC6KaD5cuLrZ57G4c2dZ8eemaw0Z+E4usboXnRja4 qo/OZakLrlQEQse3D7MFA6ZIz8ckINUT5FM6z+UCnW8ppksobUF2ZhXDq1Sb5KEY QU75nuD9ICMWw87f4la/wLvfXpu8MZUT7n8c+4yZ8VJonylrbd4urZNxRTykqI8o tDwUWY3x7HMsTSNLsOULFhReJg== -----END CERTIFICATE-----Generated at Wed Oct 14 16:11:42 2026 by rpki-client