$ rpki-client -vvvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft File: KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json) Hash identifier: coa2TwcbwT3kFVuuuj8aOcPoPs2euYJvFNew/NOzew4= Subject key identifier: 03:BD:FB:8B:5B:1C:AB:51:B3:4B:09:7E:76:D8:50:41:F3:D2:2D:3F Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft Manifest number: FB Signing time: Wed 07 Oct 2026 06:47:25 +0000 Manifest this update: Wed 07 Oct 2026 06:47:24 +0000 Manifest next update: Wed 14 Oct 2026 06:47:24 +0000 Files and hashes: 1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: G9ZVzmNxEsqk2MVqkgSnqdIaQwgBUhDL25FqTT5AscA=) 2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: KFUjr9QWRsxI527gU0QRbojtiksV6rD5duzhhoB/lus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B Validity Not Before: Oct 7 06:47:24 2026 GMT Not After : Oct 14 06:47:24 2026 GMT Subject: CN=6ac5eafc-2c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:04:ef:fd:89:f3:7a:ea:13:7b:7e:17:ab: 94:cc:f4:76:13:2e:08:3b:d2:20:fd:e4:e7:5f:f3: 6f:59:24:5d:7e:e0:27:b5:49:d6:d3:c8:12:ed:f4: b0:56:85:53:58:41:90:70:05:dc:a7:e9:74:53:2b: de:1d:0a:87:13:a8:74:5f:20:6f:79:60:bf:e3:b5: 2a:ba:94:83:32:8b:3c:11:a5:97:5b:70:cc:b9:85: 8c:1e:cc:60:4a:80:17:3b:c7:d5:75:c4:ad:e1:bd: 64:4b:35:2d:97:cb:ee:92:c9:ab:4f:69:1d:89:89: 97:7d:4b:e8:0e:18:5a:d3:5b:1b:ed:a9:ca:1b:ae: 49:96:b6:38:87:d7:23:8b:5a:13:80:fc:b4:b6:d0: 07:2d:6c:03:5c:04:82:c4:3b:e2:be:65:c2:f8:61: 0f:60:76:37:24:dc:07:80:f9:c4:9a:f2:fd:d0:c6: 82:8e:bc:ed:64:64:10:0f:7a:21:68:fb:18:67:c1: 95:09:13:88:50:1b:e8:7a:c7:95:ea:0b:d3:27:e1: 62:4b:74:10:c3:59:cb:20:d6:d0:9d:f8:9d:d3:ec: 22:28:50:55:55:0d:de:a9:fd:7c:78:52:84:6a:4b: 78:b0:49:32:5e:ea:4a:bb:05:7c:7b:f4:ec:d8:5e: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:FB:8B:5B:1C:AB:51:B3:4B:09:7E:76:D8:50:41:F3:D2:2D:3F X509v3 Authority Key Identifier: keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:5e:43:f3:7e:80:ae:79:44:59:bb:2f:9e:97:ba:5c:10: 39:96:4e:d0:97:4e:dd:dd:e3:2f:8d:e7:36:ab:56:1b:2b:17: 78:01:1c:dc:99:80:e2:06:75:18:b7:85:65:f8:91:45:c7:30: 97:13:92:9f:96:c5:b2:33:a9:73:b4:fc:de:3c:2b:af:03:fc: d4:ab:11:2a:62:bc:35:22:5e:a7:54:cc:34:f0:a2:8b:13:7e: bb:45:7e:c4:ef:6c:52:97:44:e0:7a:be:14:e8:47:45:89:22: 0a:fc:54:33:b3:6d:e5:c2:7c:e9:86:12:6b:28:6e:10:e2:9d: 8a:2b:ad:ee:36:b7:54:14:a8:f4:2c:77:d1:a9:49:4e:aa:eb: 75:ac:88:8f:34:11:b8:b1:7c:53:24:2d:4e:89:d5:f1:bc:ae: f8:20:f3:aa:d4:b2:24:a0:63:7b:cf:6a:84:0c:b4:ca:8b:ed: 9b:14:0e:be:cf:19:4c:3f:a4:2e:a3:dc:8f:be:b4:07:bd:5b: 76:97:25:aa:e1:b5:1c:94:be:58:e8:19:09:24:80:09:7e:fb: d7:25:a5:99:0e:8d:5c:ea:6a:b9:3e:bc:8f:e7:85:dc:5b:fe: e6:59:ee:83:e2:db:c3:ed:1f:b6:39:49:5e:66:cd:2d:90:00: b9:20:a1:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4QjIxMTAvBgNVBAUTKDI5QzlCMzM3RDY3QjBGMTQ0NDgxNzk4QjRENUIwRDcz RDc4OEFGMkIwHhcNMjYxMDA3MDY0NzI0WhcNMjYxMDE0MDY0NzI0WjAYMRYwFAYD VQQDEw02YWM1ZWFmYy0yYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOwE7/2J83rqE3t+F6uUzPR2Ey4IO9Ig/eTnX/NvWSRdfuAntUnW08gS7fSw VoVTWEGQcAXcp+l0UyveHQqHE6h0XyBveWC/47UqupSDMos8EaWXW3DMuYWMHsxg SoAXO8fVdcSt4b1kSzUtl8vuksmrT2kdiYmXfUvoDhha01sb7anKG65JlrY4h9cj i1oTgPy0ttAHLWwDXASCxDvivmXC+GEPYHY3JNwHgPnEmvL90MaCjrztZGQQD3oh aPsYZ8GVCROIUBvoeseV6gvTJ+FiS3QQw1nLINbQnfid0+wiKFBVVQ3eqf18eFKE akt4sEkyXupKuwV8e/Ts2F5dKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAO9+4tb HKtRs0sJfnbYUEHz0i0/MB8GA1UdIwQYMBaAFCnJszfWew8URIF5i01bDXPXiK8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDhCMi9DOTVBNDlBRTRB NTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4UkVnWG1MVFZzTmM5ZUly eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDhCMi9DOTVBNDlBRTRBNTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4 UkVnWG1MVFZzTmM5ZUlyeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXGZeQ/N+gK55RFm7L56XulwQOZZO0JdO3d3jL43nNqtWGysXeAEc3JmA4gZ1 GLeFZfiRRccwlxOSn5bFsjOpc7T83jwrrwP81KsRKmK8NSJep1TMNPCiixN+u0V+ xO9sUpdE4Hq+FOhHRYkiCvxUM7Nt5cJ86YYSayhuEOKdiiut7ja3VBSo9Cx30alJ TqrrdayIjzQRuLF8UyQtTonV8byu+CDzqtSyJKBje89qhAy0yovtmxQOvs8ZTD+k LqPcj760B71bdpclquG1HJS+WOgZCSSACX771yWlmQ6NXOpquT68j+eF3Fv+5lnu g+Lbw+0ftjlJXmbNLZAAuSCh0g== -----END CERTIFICATE-----Generated at Wed Oct 7 11:17:40 2026 by rpki-client