$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: qoZEM6Da7qlifyywOJXmN4dkNgO3n7BkYxxKN+D9s+s= Subject key identifier: 2E:AC:6C:99:75:9C:DC:39:7F:3F:28:D4:C7:B4:AB:13:AB:33:83:30 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 60 Signing time: Sun 01 Nov 2026 09:12:25 +0000 Manifest this update: Sun 01 Nov 2026 09:12:24 +0000 Manifest next update: Sun 08 Nov 2026 09:12:24 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: ijW75AZvZeHK1B1eKxp2EHJIJe9/02FPhTbK7PBjzCY=) 2: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) 3: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 09:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Nov 1 09:12:24 2026 GMT Not After : Nov 8 09:12:24 2026 GMT Subject: CN=6ae70279-8ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:df:18:cb:0a:f0:ad:58:d2:34:0b:ef:33: b2:72:9d:2c:d0:84:5a:56:b5:5a:96:cd:79:e5:4d: 19:45:4b:ea:c6:6a:d2:f6:dc:d3:27:2d:88:b7:6e: 19:3b:82:a2:96:c3:fe:1a:f8:02:5a:76:d5:eb:e6: ca:37:5b:d5:31:ea:f5:16:97:89:9a:6c:d6:96:55: 93:79:c9:59:f0:3b:fa:4f:74:39:bf:4f:59:09:85: f5:e6:91:8e:72:14:11:1c:42:e7:72:86:a0:a5:aa: 71:4a:e6:ea:f8:d2:32:74:15:86:2d:74:9f:16:a0: 32:83:52:ed:1b:34:64:f6:f7:10:0c:dc:15:66:41: dd:02:d9:59:4f:65:87:97:97:bb:d3:ef:ab:5e:87: cd:57:15:27:50:a4:7b:47:02:1f:9f:a6:cb:79:6d: 77:4b:d4:08:32:71:84:1b:48:b7:2d:af:cb:fb:06: 4d:4e:f8:43:8b:98:b7:2e:da:e0:6f:08:ae:95:77: 0e:48:ab:4a:f5:78:4a:aa:45:fb:f0:36:e7:08:13: ed:7c:26:f6:39:e9:f7:fc:d7:f5:04:d2:c7:e8:91: 04:39:42:e5:fe:b7:03:48:a8:4e:1b:07:27:02:07: f2:11:cc:2c:a3:c0:0d:fc:04:fd:67:4c:0b:dd:88: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AC:6C:99:75:9C:DC:39:7F:3F:28:D4:C7:B4:AB:13:AB:33:83:30 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:22:18:c6:f4:35:e6:d7:b1:18:f6:e0:25:0b:a1:ae:46: a3:eb:47:aa:df:74:03:92:cf:f6:2a:fb:bb:16:0b:a9:f7:9f: 83:4c:f5:32:87:0a:04:9d:07:d2:bf:e0:56:6b:82:6f:1a:b7: df:f9:c0:03:1e:40:39:34:f8:e0:bb:b8:00:e0:43:96:7d:8f: 61:a0:60:84:d5:2f:7e:90:53:4c:40:6a:11:9d:5e:64:dd:13: 20:a5:4a:d8:5a:8d:51:92:2c:80:6c:c0:50:5c:2c:c5:e0:02: c4:69:96:8b:a6:de:4c:f7:3f:41:01:6a:45:05:64:41:71:dd: 7b:37:9d:f0:c6:f8:f5:dd:b6:0f:67:45:8d:2d:c2:21:85:00: ed:f9:2e:9b:cd:97:3b:09:fe:a2:e8:fe:04:c5:cb:bb:0b:d5: 0b:b9:01:4c:bf:91:b0:16:49:6e:58:68:f6:9d:51:33:d8:fa: ad:00:a1:64:76:39:40:da:a6:68:47:6b:e4:57:67:a0:c0:1c: 3d:15:0b:37:05:57:89:76:f9:9f:2d:a0:c3:64:9a:0f:c3:b8: 8e:de:82:3c:a6:ff:e9:cf:e4:df:e0:e8:4d:ba:64:cb:20:43: 87:bf:71:bc:03:ee:86:cb:dd:12:08:5f:4c:74:c7:d0:eb:a9: 9a:56:75:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjExMDEwOTEyMjRaFw0yNjExMDgwOTEyMjRaMBgxFjAUBgNV BAMTDTZhZTcwMjc5LThhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkL98YywrwrVjSNAvvM7JynSzQhFpWtVqWzXnlTRlFS+rGatL23NMnLYi3bhk7 gqKWw/4a+AJadtXr5so3W9Ux6vUWl4mabNaWVZN5yVnwO/pPdDm/T1kJhfXmkY5y FBEcQudyhqClqnFK5ur40jJ0FYYtdJ8WoDKDUu0bNGT29xAM3BVmQd0C2VlPZYeX l7vT76teh81XFSdQpHtHAh+fpst5bXdL1AgycYQbSLctr8v7Bk1O+EOLmLcu2uBv CK6Vdw5Iq0r1eEqqRfvwNucIE+18JvY56ff81/UE0sfokQQ5QuX+twNIqE4bBycC B/IRzCyjwA38BP1nTAvdiM/BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULqxsmXWc 3Dl/PyjUx7SrE6szgzAwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB83SIYxvQ15texGPbgJQuhrkaj60eq33QDks/2Kvu7Fgup95+DTPUyhwoEnQfS v+BWa4JvGrff+cADHkA5NPjgu7gA4EOWfY9hoGCE1S9+kFNMQGoRnV5k3RMgpUrY Wo1RkiyAbMBQXCzF4ALEaZaLpt5M9z9BAWpFBWRBcd17N53wxvj13bYPZ0WNLcIh hQDt+S6bzZc7Cf6i6P4Excu7C9ULuQFMv5GwFkluWGj2nVEz2PqtAKFkdjlA2qZo R2vkV2egwBw9FQs3BVeJdvmfLaDDZJoPw7iO3oI8pv/pz+Tf4OhNumTLIEOHv3G8 A+6Gy90SCF9MdMfQ66maVnVl -----END CERTIFICATE-----Generated at Sun Nov 1 17:14:41 2026 by rpki-client