$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: hOZeXE6DDiVCK3bNwaf5z+vimfuJqgOo9vJxAnLHF2Y= Subject key identifier: 72:A7:14:CF:75:AD:79:68:B1:17:D4:88:7A:65:96:4F:95:11:A5:06 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 0122 Signing time: Sat 19 Sep 2026 06:02:55 +0000 Manifest this update: Sat 19 Sep 2026 06:02:54 +0000 Manifest next update: Sat 26 Sep 2026 06:02:54 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: QybBkPX6IKUEryNZGbzUnjWtPQscI732iMEAJ5BKxpk=) 2: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) 3: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 4: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 5: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) 6: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 7: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Sep 19 06:02:54 2026 GMT Not After : Sep 26 06:02:54 2026 GMT Subject: CN=6aae258e-80e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:b5:0d:0d:d1:4b:c5:0c:03:7c:95:fb:67: 18:d5:e4:93:4c:8e:67:42:0c:ee:9b:bf:cb:cd:fc: 59:df:db:2d:85:39:a3:b9:16:83:69:7f:d9:55:e4: aa:e7:a0:bf:15:f5:ec:36:85:5f:32:6e:82:0f:ef: 37:9d:b8:20:f9:8c:1b:63:fe:41:f9:06:ab:2c:da: a4:13:d3:af:6f:8f:1e:2b:1f:0d:93:f8:1e:62:07: c6:b2:fc:3d:14:43:de:fd:2d:64:83:14:43:0b:66: b0:6d:52:86:86:2a:fc:ac:e7:2c:52:f6:79:c4:f9: 63:dc:16:dc:bc:d4:48:25:27:10:1c:d4:49:cf:2f: c3:4f:bb:de:41:73:ac:11:fb:45:10:6a:6d:e0:7c: e1:96:68:dd:8c:3c:31:30:7c:e4:97:61:b4:ba:d8: e4:bc:6d:ca:30:53:79:d4:8f:9c:a6:02:d9:c9:3d: 1d:d1:e8:e3:b4:f0:e7:cb:99:01:84:32:40:33:8d: 03:fb:78:96:27:50:25:cb:c6:87:3b:e2:b4:bc:4c: b2:0b:9b:a9:81:56:65:6f:1d:8e:a0:98:3f:a6:03: 15:ab:7b:1b:4b:c2:43:a4:17:ff:6c:06:36:ed:f9: 34:cc:54:87:36:90:e9:1e:45:50:fe:50:68:5b:85: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:14:CF:75:AD:79:68:B1:17:D4:88:7A:65:96:4F:95:11:A5:06 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:5c:cc:be:1b:d3:12:82:30:b1:67:c6:34:20:76:62:32: bb:26:2a:a7:fc:95:53:79:80:88:3e:96:f1:99:10:91:29:a1: 52:f3:bc:0a:89:05:8f:fc:ff:e2:4f:bd:76:ef:f2:d1:fd:ae: 65:a5:ea:60:59:fe:42:4a:a8:c5:f6:3e:89:64:01:a4:e4:2b: 71:ff:0d:56:4a:74:fd:a4:3d:17:35:8b:67:e3:2c:f0:6f:2d: 2a:c4:1e:64:95:67:c8:de:86:99:1a:83:e3:ac:5a:2c:0e:c1: e4:24:18:ee:f8:03:ed:ef:52:75:05:fb:7a:bc:e6:66:63:86: 96:ae:24:05:69:66:39:4a:83:92:10:04:cf:9d:3f:7b:4e:0c: 88:51:9e:04:87:59:57:e9:c2:2e:48:d7:01:94:71:92:86:29: 47:b9:fb:2d:08:60:04:f6:e3:3c:00:02:b4:c3:21:87:dd:cb: 87:39:2a:fb:4e:28:44:9c:7d:dd:2e:b3:c8:75:51:6a:b7:b8: 50:4d:98:ad:ea:d1:6a:4c:b4:36:ea:b5:42:aa:93:a3:0c:93: 5e:e1:f5:a8:1c:1d:60:da:72:f2:91:5c:20:95:15:08:3c:de: c6:3f:c5:f0:74:2e:c0:6d:26:2c:58:4a:98:9e:fd:89:3a:f0: 41:89:b2:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwOTE5MDYwMjU0WhcNMjYwOTI2MDYwMjU0WjAYMRYwFAYD VQQDEw02YWFlMjU4ZS04MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi5G1DQ3RS8UMA3yV+2cY1eSTTI5nQgzum7/LzfxZ39sthTmjuRaDaX/ZVeSq 56C/FfXsNoVfMm6CD+83nbgg+YwbY/5B+QarLNqkE9Ovb48eKx8Nk/geYgfGsvw9 FEPe/S1kgxRDC2awbVKGhir8rOcsUvZ5xPlj3BbcvNRIJScQHNRJzy/DT7veQXOs EftFEGpt4HzhlmjdjDwxMHzkl2G0utjkvG3KMFN51I+cpgLZyT0d0ejjtPDny5kB hDJAM40D+3iWJ1Aly8aHO+K0vEyyC5upgVZlbx2OoJg/pgMVq3sbS8JDpBf/bAY2 7fk0zFSHNpDpHkVQ/lBoW4WckwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKnFM91 rXlosRfUiHpllk+VEaUGMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUiRczL4b0xKCMLFnxjQgdmIyuyYqp/yVU3mAiD6W8ZkQkSmhUvO8CokFj/z/ 4k+9du/y0f2uZaXqYFn+QkqoxfY+iWQBpOQrcf8NVkp0/aQ9FzWLZ+Ms8G8tKsQe ZJVnyN6GmRqD46xaLA7B5CQY7vgD7e9SdQX7erzmZmOGlq4kBWlmOUqDkhAEz50/ e04MiFGeBIdZV+nCLkjXAZRxkoYpR7n7LQhgBPbjPAACtMMhh93Lhzkq+04oRJx9 3S6zyHVRare4UE2YrerRaky0Nuq1QqqTowyTXuH1qBwdYNpy8pFcIJUVCDzexj/F 8HQuwG0mLFhKmJ79iTrwQYmyCA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:34 2026 by rpki-client