$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json) Hash identifier: jSVdObqKlLsxrb7Nmp+P0gv45GZNNc6KFpoXzN3FkrM= Subject key identifier: EC:0E:2B:3E:93:52:4A:5B:B3:35:85:9A:4B:C4:5D:D4:47:94:DA:A4 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 359D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft Manifest number: 358D Signing time: Thu 24 Sep 2026 14:51:02 +0000 Manifest this update: Thu 24 Sep 2026 14:51:01 +0000 Manifest next update: Thu 01 Oct 2026 14:51:01 +0000 Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: 62h7aIMHB8J6sQ/+ylVIIhsrnN++eFK7WTbF3eESkTw=) 2: F5223048791711F195779BF068A30FBC.roa (hash: xe2EZMVbnxYIb+bVcKPMMf7o2pQWJ5gKMVCawEBa/98=) 3: 62D956E4706B11F1BCF9211474A30FBC.roa (hash: qIR0Cnf/Tw3jmEWlP5g5lhVl5hdbItrkQSAnuy1RWvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Sep 24 14:51:01 2026 GMT Not After : Oct 1 14:51:01 2026 GMT Subject: CN=6ab538d6-750b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:7b:d6:e0:36:f4:0b:7f:07:1f:96:1b:f6: 80:30:b2:dc:e0:6e:f3:44:f2:71:84:e8:4a:5c:59: d4:ee:52:b7:2c:8c:5e:8d:c3:74:46:34:fc:ea:fe: f6:66:49:30:b5:cb:78:85:dd:3e:cd:e1:3e:2a:b6: 7b:34:9f:9a:c7:da:0e:cf:d4:ed:c0:cd:e0:9f:6a: aa:52:15:30:4f:01:e0:9c:2d:91:d7:9b:c6:9d:16: 78:3f:f5:45:8a:92:15:f2:0e:51:fb:05:04:4f:19: 0b:5e:ad:66:d0:b6:b6:6d:7e:e0:94:60:71:f5:32: 3d:eb:0d:99:db:ad:30:29:9e:e4:2a:72:e5:03:4b: a9:54:44:41:e7:bc:31:fc:08:31:e5:62:dd:af:fd: 24:49:22:e7:cd:95:a1:96:10:05:98:75:a5:1e:37: 5b:a8:a7:72:8c:7b:be:ee:da:a0:cf:f5:ac:f8:6c: 55:96:af:c5:d7:1f:34:63:31:7c:0b:56:7e:a6:b8: da:22:e1:51:b1:49:58:16:b3:0b:6c:b8:6e:ff:29: 5d:fd:d0:70:ef:5b:79:87:e7:e4:69:46:18:de:a2: b1:38:8b:82:75:43:a6:97:eb:e7:19:81:eb:92:d2: 37:a4:c6:3c:31:5d:7d:ca:97:09:f3:ee:26:c5:43: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0E:2B:3E:93:52:4A:5B:B3:35:85:9A:4B:C4:5D:D4:47:94:DA:A4 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:42:1f:a4:6c:b3:df:40:5d:d2:72:da:03:df:2e:4e:d5:43: f6:1a:4b:97:19:a4:2c:9a:c4:8c:40:4c:f1:ff:85:61:fc:32: e5:2f:9a:8a:08:61:8d:be:32:cd:a1:4f:7b:84:10:e0:d4:c3: 51:72:0b:4a:3e:8b:e4:4d:a4:89:ed:3c:c9:c9:a4:ae:05:05: f5:cd:dc:b5:db:f6:1c:88:7a:d3:66:26:8b:49:58:42:0b:64: 39:12:d4:f8:ba:8a:aa:85:c9:86:24:23:bc:9b:90:30:53:cb: c9:31:f4:6e:9f:b7:19:c3:16:c9:21:b8:9c:4f:21:f3:8f:f0: f7:ca:fe:5b:75:5c:09:c1:85:a6:34:f0:a4:f2:11:d6:b3:38: 7a:60:11:1e:1a:37:63:20:77:c5:43:26:e0:52:02:bf:ef:cd: 78:e0:99:11:d9:2e:43:29:a7:83:e3:94:77:96:0b:f9:f9:24: 0e:28:50:28:31:a7:13:56:3f:96:8b:ad:cd:79:4e:3c:54:de: 8d:86:c6:2a:83:06:a9:a3:ef:b0:0c:d4:32:6f:1e:05:04:7a: 4b:a3:6f:a7:34:da:e6:3b:0a:ac:0b:49:97:f7:12:ec:03:55: cb:e4:10:b5:0b:80:04:63:c9:42:37:6c:56:a0:ca:68:69:dd: 36:2c:56:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYwOTI0MTQ1MTAxWhcNMjYxMDAxMTQ1MTAxWjAYMRYwFAYD VQQDEw02YWI1MzhkNi03NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+R71uA29At/Bx+WG/aAMLLc4G7zRPJxhOhKXFnU7lK3LIxejcN0RjT86v72 Zkkwtct4hd0+zeE+KrZ7NJ+ax9oOz9TtwM3gn2qqUhUwTwHgnC2R15vGnRZ4P/VF ipIV8g5R+wUETxkLXq1m0La2bX7glGBx9TI96w2Z260wKZ7kKnLlA0upVERB57wx /Agx5WLdr/0kSSLnzZWhlhAFmHWlHjdbqKdyjHu+7tqgz/Ws+GxVlq/F1x80YzF8 C1Z+prjaIuFRsUlYFrMLbLhu/yld/dBw71t5h+fkaUYY3qKxOIuCdUOml+vnGYHr ktI3pMY8MV19ypcJ8+4mxUMddwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwOKz6T UkpbszWFmkvEXdRHlNqkMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91 Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATkIfpGyz30Bd0nLaA98uTtVD9hpLlxmkLJrEjEBM8f+FYfwy5S+aighhjb4y zaFPe4QQ4NTDUXILSj6L5E2kie08ycmkrgUF9c3ctdv2HIh602Ymi0lYQgtkORLU +LqKqoXJhiQjvJuQMFPLyTH0bp+3GcMWySG4nE8h84/w98r+W3VcCcGFpjTwpPIR 1rM4emARHho3YyB3xUMm4FICv+/NeOCZEdkuQymng+OUd5YL+fkkDihQKDGnE1Y/ loutzXlOPFTejYbGKoMGqaPvsAzUMm8eBQR6S6NvpzTa5jsKrAtJl/cS7ANVy+QQ tQuABGPJQjdsVqDKaGndNixWqQ== -----END CERTIFICATE-----Generated at Sat Sep 26 13:17:21 2026 by rpki-client