$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: UfFuFjgEWhzR+5l4bPAdsYn722e6JytkNwJdyGYYKy4= Subject key identifier: 12:2B:7E:A8:60:FA:3C:DA:F4:A1:30:86:E6:50:05:3C:87:21:FA:D4 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 022E Signing time: Thu 03 Sep 2026 02:49:06 +0000 Manifest this update: Thu 03 Sep 2026 02:49:06 +0000 Manifest next update: Thu 10 Sep 2026 02:49:06 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: NXTrM4nKosWSBxsGxAn6kb2IVLHcVpGhSCkVRCP61Hc=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: UYmnUcinM/YS4tsBaXiXnl11jWQgRyt4rogH4x+mFlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Sep 3 02:49:06 2026 GMT Not After : Sep 10 02:49:06 2026 GMT Subject: CN=6a98e022-7667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:26:d1:d3:4e:fd:67:f9:96:99:04:ca:ed: 45:a9:c2:28:6a:92:44:ee:d8:38:fc:9a:3c:06:57: 8a:75:ac:b4:7d:1f:f4:3e:e1:1a:41:46:7f:f6:1b: 2a:a5:71:1f:4f:35:29:0b:c7:46:57:89:27:05:b1: 6f:91:78:1d:7c:4f:e3:53:b8:84:4a:b4:26:44:10: ba:13:05:57:67:13:18:5e:e4:65:ad:ec:99:70:ad: 32:c7:e8:70:a1:eb:38:d5:b6:57:3d:7d:0f:38:00: c7:b0:2b:d1:e1:3a:a5:02:35:fa:75:fe:bc:a8:6d: 06:71:0a:8d:80:9b:ff:de:66:2a:f0:c6:33:0e:af: 43:f9:8e:14:2d:62:d6:02:2b:82:36:e6:bb:2e:4f: d2:83:76:34:48:59:a0:34:d9:ca:aa:33:da:d3:cc: 6a:de:ff:bc:5e:fb:4a:3b:82:90:62:c7:da:76:be: b0:99:d5:0d:1c:ae:cb:f8:d9:94:32:44:94:b5:42: c2:c4:4b:d0:6a:77:89:f3:54:d5:80:56:6a:4f:66: 08:a0:69:5a:c7:34:81:a5:60:90:c0:db:be:20:41: 45:c1:7d:2a:1d:7f:9d:8e:c4:9f:e3:d0:a6:99:cd: 98:60:70:f4:46:da:b0:f2:fa:bc:aa:f2:9b:cb:18: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:7E:A8:60:FA:3C:DA:F4:A1:30:86:E6:50:05:3C:87:21:FA:D4 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:94:c6:97:6c:6c:95:45:e5:dc:50:7f:59:e2:62:0b:23:fe: 8a:a1:f7:a4:cc:ad:ce:07:15:94:f1:1a:18:1a:f8:44:89:26: cc:ae:4b:be:37:25:8e:cf:4c:e7:c9:9b:76:4c:47:ff:82:e0: 8d:c2:a9:ad:2d:0a:4d:9d:d6:00:de:94:18:b4:bb:e4:34:8a: a8:6d:73:1a:98:da:44:c1:ce:2b:dc:74:45:4e:c6:8d:ef:95: 62:c7:a0:f6:7a:25:b5:37:0b:95:b2:36:68:00:60:be:c9:b2: ff:ea:5b:6c:21:5e:06:04:51:89:11:ec:b8:ab:e6:17:95:fe: 13:cc:49:4f:ae:5f:7d:76:b1:f7:67:11:d6:0d:3b:05:62:35: b2:7e:9e:a7:aa:d2:73:82:e6:07:55:59:63:e5:d1:26:25:c2: 80:1a:e4:15:12:a6:04:c3:4d:1b:4e:53:90:af:0e:f9:13:d6: 53:6b:2f:44:41:cd:ed:21:ea:d8:18:38:f3:09:f5:41:ca:60: 48:2c:54:ac:93:29:12:42:20:70:57:00:c0:90:7b:76:16:68: 16:8a:54:b1:16:48:d5:fe:2f:ff:5a:5c:a7:78:87:8e:20:24: cd:c5:b7:38:0f:56:d8:f5:97:e5:ff:42:e3:7b:6b:29:ac:e1: 28:dc:b7:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwOTAzMDI0OTA2WhcNMjYwOTEwMDI0OTA2WjAYMRYwFAYD VQQDEw02YTk4ZTAyMi03NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVkm0dNO/Wf5lpkEyu1FqcIoapJE7tg4/Jo8BleKday0fR/0PuEaQUZ/9hsq pXEfTzUpC8dGV4knBbFvkXgdfE/jU7iESrQmRBC6EwVXZxMYXuRlreyZcK0yx+hw oes41bZXPX0POADHsCvR4TqlAjX6df68qG0GcQqNgJv/3mYq8MYzDq9D+Y4ULWLW AiuCNua7Lk/Sg3Y0SFmgNNnKqjPa08xq3v+8XvtKO4KQYsfadr6wmdUNHK7L+NmU MkSUtULCxEvQaneJ81TVgFZqT2YIoGlaxzSBpWCQwNu+IEFFwX0qHX+djsSf49Cm mc2YYHD0Rtqw8vq8qvKbyxiLewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIrfqhg +jza9KEwhuZQBTyHIfrUMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5TGl2xslUXl3FB/WeJiCyP+iqH3pMytzgcVlPEaGBr4RIkmzK5Lvjcljs9M 58mbdkxH/4LgjcKprS0KTZ3WAN6UGLS75DSKqG1zGpjaRMHOK9x0RU7Gje+VYseg 9noltTcLlbI2aABgvsmy/+pbbCFeBgRRiRHsuKvmF5X+E8xJT65ffXax92cR1g07 BWI1sn6ep6rSc4LmB1VZY+XRJiXCgBrkFRKmBMNNG05TkK8O+RPWU2svREHN7SHq 2Bg48wn1QcpgSCxUrJMpEkIgcFcAwJB7dhZoFopUsRZI1f4v/1pcp3iHjiAkzcW3 OA9W2PWX5f9C43trKazhKNy3qg== -----END CERTIFICATE-----Generated at Thu Sep 3 20:07:49 2026 by rpki-client