$ rpki-client -vvvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: j1dSLdfyDErRjld1FTIjaC9fLVHrH7/g8WhYG6d852k= Subject key identifier: 90:EA:20:65:2B:5E:60:42:A9:2B:34:2F:EB:C2:8A:B8:F2:14:CE:30 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 022C Signing time: Mon 05 Oct 2026 03:02:58 +0000 Manifest this update: Mon 05 Oct 2026 03:02:57 +0000 Manifest next update: Mon 12 Oct 2026 03:02:57 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: phYrjSEValWw6hoYN4UQLj5rstZNYYR1qxJnM6tFfKc=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: vzk36cElXbr9pzf6gRs2JC/c6v0AhvC98Hwa+npIsfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Oct 5 03:02:57 2026 GMT Not After : Oct 12 03:02:57 2026 GMT Subject: CN=6ac31362-1a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:12:30:19:01:78:36:50:9e:5f:e1:40:b1: ed:c9:08:ca:42:c0:b1:68:48:54:75:91:38:bf:7e: 89:5f:72:dc:0e:f7:43:e7:4b:4a:81:88:bd:b6:e9: ec:20:ac:22:52:68:91:98:77:f4:98:0b:37:a3:38: 57:bf:ce:fe:15:a5:a7:b0:bb:b2:0e:ac:62:e2:cf: 55:7b:0a:e7:2b:13:7e:0e:23:d5:13:6d:08:90:c0: e6:e3:cd:5a:02:9f:06:c2:86:35:ba:fe:7c:6b:ea: 50:69:59:73:60:6e:2a:db:95:f3:4f:d9:dc:98:f8: 1d:aa:57:18:d8:d6:f7:af:c1:4c:77:72:b8:45:27: 78:6b:7c:d5:3e:70:87:61:e0:3a:6b:24:5b:e1:90: 6c:41:2c:31:b5:81:2c:b1:93:af:73:48:8e:95:0c: 22:3b:41:7d:53:1d:f0:1c:bd:4b:13:81:93:45:52: ad:4b:37:af:49:59:a2:df:da:cd:4b:41:9a:af:dd: 9f:77:d3:bf:16:18:b8:24:04:ba:50:04:34:54:0e: 51:b3:4b:ea:80:31:50:4f:b4:05:81:eb:cb:00:b5: 41:25:f7:da:94:85:42:3e:da:84:7a:6d:bf:de:8a: 0a:fa:61:28:ea:69:94:ec:e3:42:db:53:c3:40:53: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:20:65:2B:5E:60:42:A9:2B:34:2F:EB:C2:8A:B8:F2:14:CE:30 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:50:0c:23:df:9c:bf:96:41:b8:66:65:5d:79:b8:56:7c:9c: ae:c8:ba:fc:66:b3:54:6d:9b:6a:91:09:8d:d9:1e:29:9d:f3: ff:eb:12:58:0f:f3:81:e1:66:d3:42:0a:e9:fc:75:34:eb:00: f2:bd:56:2e:e0:c3:8b:87:68:3a:0a:d4:1f:c8:d4:50:b1:ab: b6:fa:a8:d2:12:0b:bb:5e:aa:51:68:b7:0e:de:d4:ff:6a:59: 7a:d1:c9:ce:53:25:ff:21:51:50:cf:51:ff:c6:4b:b7:e0:86: e5:3b:b1:00:22:a1:b1:c0:a9:c0:39:c1:5c:06:2b:31:1c:c1: 54:af:f7:69:a9:6d:a5:26:30:d1:1d:28:1f:e9:fd:04:9e:f5: 25:d2:44:d5:1c:ed:9a:d5:4d:1d:70:f9:a0:09:af:fd:d2:fc: a0:ab:ea:2a:12:a2:a5:09:cb:3b:1b:ba:ef:93:c6:e1:c9:0c: e2:dc:39:98:c2:0d:b8:b7:cc:90:ef:cd:01:a7:cb:dc:99:df: 41:9b:6d:7b:44:d3:c0:a6:05:24:42:1f:2a:55:2f:21:bc:36: 92:f6:b1:0e:83:a4:62:cf:ac:5d:b1:30:ed:89:dc:82:00:04: c3:19:c0:ff:84:89:5d:7d:e6:04:f0:80:cd:28:de:04:73:02: 52:40:e9:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjYxMDA1MDMwMjU3WhcNMjYxMDEyMDMwMjU3WjAYMRYwFAYD VQQDEw02YWMzMTM2Mi0xYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW0SMBkBeDZQnl/hQLHtyQjKQsCxaEhUdZE4v36JX3LcDvdD50tKgYi9tuns IKwiUmiRmHf0mAs3ozhXv87+FaWnsLuyDqxi4s9VewrnKxN+DiPVE20IkMDm481a Ap8GwoY1uv58a+pQaVlzYG4q25XzT9ncmPgdqlcY2Nb3r8FMd3K4RSd4a3zVPnCH YeA6ayRb4ZBsQSwxtYEssZOvc0iOlQwiO0F9Ux3wHL1LE4GTRVKtSzevSVmi39rN S0Gar92fd9O/Fhi4JAS6UAQ0VA5Rs0vqgDFQT7QFgevLALVBJffalIVCPtqEem2/ 3ooK+mEo6mmU7ONC21PDQFNbIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDqIGUr XmBCqSs0L+vCirjyFM4wMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB1AMI9+cv5ZBuGZlXXm4Vnycrsi6/GazVG2bapEJjdkeKZ3z/+sSWA/zgeFm 00IK6fx1NOsA8r1WLuDDi4doOgrUH8jUULGrtvqo0hILu16qUWi3Dt7U/2pZetHJ zlMl/yFRUM9R/8ZLt+CG5TuxACKhscCpwDnBXAYrMRzBVK/3aaltpSYw0R0oH+n9 BJ71JdJE1RztmtVNHXD5oAmv/dL8oKvqKhKipQnLOxu675PG4ckM4tw5mMINuLfM kO/NAafL3JnfQZtte0TTwKYFJEIfKlUvIbw2kvaxDoOkYs+sXbEw7YncggAEwxnA /4SJXX3mBPCAzSjeBHMCUkDpog== -----END CERTIFICATE-----Generated at Tue Oct 6 06:48:22 2026 by rpki-client