$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: gihuw8SED0xRraEXPMJbi1lmKGcNdjzpnKl2Cs9rudM= Subject key identifier: BB:97:E1:B4:94:95:47:DC:1C:0C:A2:7A:BF:A7:52:B2:1F:35:9F:02 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0B3A Signing time: Mon 14 Sep 2026 19:12:02 +0000 Manifest this update: Mon 14 Sep 2026 19:12:02 +0000 Manifest next update: Mon 21 Sep 2026 19:12:02 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: syOKZzsJUE5uO56NUQyqeWLMpg2XL9FBteCUzsLF9vQ=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Sep 14 19:12:02 2026 GMT Not After : Sep 21 19:12:02 2026 GMT Subject: CN=6aa84702-75b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:18:96:fd:98:88:16:02:98:db:82:95:77: 41:cd:a4:b7:24:0c:41:9f:cd:fe:d6:0e:6c:70:e6: e5:c3:47:ef:c7:59:72:d8:02:78:85:73:55:43:b4: 3e:93:2d:a4:e9:d6:14:5e:88:1d:cd:8a:6e:d7:6f: 71:2b:07:eb:82:69:de:c8:76:2e:ea:53:1a:c7:05: b4:a5:3e:26:b3:5c:dd:d3:6d:70:cc:b2:89:88:16: ca:4d:38:76:2e:a7:ef:8f:c5:9f:f0:11:29:86:79: 50:8a:c6:de:d2:6d:68:05:c9:cc:91:80:15:ce:d3: 63:d0:33:1e:53:a9:8f:f3:94:37:64:f4:e4:c5:75: 78:67:dc:cd:6e:ea:f9:06:8e:e6:75:df:f5:32:17: a9:05:b1:93:2f:0d:33:da:67:e1:7b:a3:2c:ca:b7: b3:da:f7:e0:80:8f:3b:2c:a2:5c:0b:2f:61:db:77: 07:fa:12:85:0e:88:7e:ef:99:82:9e:5e:56:b4:08: a8:80:b6:f9:7a:39:b1:f4:e6:a2:7e:91:e8:9d:e2: 54:8f:72:8a:dc:5b:82:1e:6d:fa:90:d3:ac:7d:fe: 6f:6c:94:97:51:12:5e:92:12:f2:9c:e4:a0:a4:d8: c1:02:2d:b0:36:ab:a5:c5:b1:05:2a:78:d5:70:75: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:97:E1:B4:94:95:47:DC:1C:0C:A2:7A:BF:A7:52:B2:1F:35:9F:02 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:62:48:13:f7:bb:41:d1:e0:97:95:82:c8:f7:3b:43:ee: 42:36:4f:d6:91:8d:1b:ac:b6:a5:fc:27:12:df:54:52:ed:7a: 0f:03:45:e5:5b:d2:62:85:c4:b9:08:7c:d4:0a:39:5c:8a:a3: 7f:e1:e5:c8:e1:23:f1:5e:8e:c1:12:8b:82:3d:b6:f4:e0:29: 80:18:12:75:dc:74:b3:0c:6f:56:be:de:3a:ab:c8:89:0f:36: 64:57:73:b8:31:63:aa:3a:17:41:dd:a7:21:06:9c:df:59:a0: d8:98:a3:f4:9e:44:88:97:9a:3d:16:26:5a:ab:e3:b5:28:5f: e9:62:e0:47:76:a1:16:6a:5d:44:6c:a5:fb:ce:df:6f:96:11: 0d:e6:b9:3b:5e:c6:1c:e4:80:03:b1:07:a4:c8:1c:0d:9f:77: 9f:c2:72:de:ff:cb:ee:6d:d8:91:1d:4f:74:be:2a:1d:63:a0: 6a:11:b9:34:c5:63:9a:13:1f:28:0e:4b:4f:a8:73:89:ca:a5: 87:0b:b6:6a:0d:ca:f5:2e:14:3b:d6:cd:8f:25:c1:f4:ef:09: a4:8f:d9:04:50:15:6c:55:41:d6:64:2e:91:5a:e9:67:05:c6: fd:2d:d7:75:56:f5:fe:e4:07:3b:ac:4b:3c:ed:40:86:18:c4: 53:30:a4:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwOTE0MTkxMjAyWhcNMjYwOTIxMTkxMjAyWjAYMRYwFAYD VQQDEw02YWE4NDcwMi03NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIcYlv2YiBYCmNuClXdBzaS3JAxBn83+1g5scOblw0fvx1ly2AJ4hXNVQ7Q+ ky2k6dYUXogdzYpu129xKwfrgmneyHYu6lMaxwW0pT4ms1zd021wzLKJiBbKTTh2 Lqfvj8Wf8BEphnlQisbe0m1oBcnMkYAVztNj0DMeU6mP85Q3ZPTkxXV4Z9zNbur5 Bo7mdd/1MhepBbGTLw0z2mfhe6Msyrez2vfggI87LKJcCy9h23cH+hKFDoh+75mC nl5WtAiogLb5ejmx9OaifpHoneJUj3KK3FuCHm36kNOsff5vbJSXURJekhLynOSg pNjBAi2wNqulxbEFKnjVcHVSeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuX4bSU lUfcHAyier+nUrIfNZ8CMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0tiSBP3u0HR4JeVgsj3O0PuQjZP1pGNG6y2pfwnEt9UUu16DwNF5VvSYoXE uQh81Ao5XIqjf+HlyOEj8V6OwRKLgj229OApgBgSddx0swxvVr7eOqvIiQ82ZFdz uDFjqjoXQd2nIQac31mg2Jij9J5EiJeaPRYmWqvjtShf6WLgR3ahFmpdRGyl+87f b5YRDea5O17GHOSAA7EHpMgcDZ93n8Jy3v/L7m3YkR1PdL4qHWOgahG5NMVjmhMf KA5LT6hzicqlhwu2ag3K9S4UO9bNjyXB9O8JpI/ZBFAVbFVB1mQukVrpZwXG/S3X dVb1/uQHO6xLPO1AhhjEUzCkkw== -----END CERTIFICATE-----Generated at Tue Sep 15 09:40:39 2026 by rpki-client