$ rpki-client -vvvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: uwZFZxwMws6VLiRu/6iFFHcKPhb0u5OrZUkjSVFtXGg= Subject key identifier: BA:43:46:53:A8:6D:E4:81:BA:96:EA:94:0B:D9:4C:30:38:DD:3C:99 Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: 01AC Signing time: Sat 03 Oct 2026 04:44:25 +0000 Manifest this update: Sat 03 Oct 2026 04:44:24 +0000 Manifest next update: Sat 10 Oct 2026 04:44:24 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: UkUq/oXBIy7QAlsaYdWm/1yD9ozend+B9WtkZ3WFEQY=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 0mQHZNKSu/fOdeBAKFYNxdU/VQzOEWz87PHkDUFkGGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Oct 3 04:44:24 2026 GMT Not After : Oct 10 04:44:24 2026 GMT Subject: CN=6ac08828-3e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:b4:d8:bf:8f:79:e0:a1:cc:e8:cb:92:e3: 08:bd:6c:36:df:25:83:cf:8b:01:84:7c:64:2c:b0: 86:eb:22:3b:e0:9e:c9:79:90:25:7a:87:3d:eb:2d: 01:8c:5b:3a:5a:4d:c7:e0:64:d7:f1:0b:15:cd:b7: d2:cc:ac:8b:86:52:bb:81:2d:d0:9c:75:ec:27:d7: a7:b0:b9:aa:f2:eb:0a:d4:dd:79:29:75:bf:01:f5: 05:4a:a9:cc:50:64:cb:c2:44:52:3f:33:6d:84:b9: ce:2a:c3:c6:18:07:05:ae:fe:c4:02:8e:2d:24:77: 30:22:f2:fc:d8:87:18:c1:d3:cb:20:f7:dd:0f:4f: 71:2f:62:c6:c0:40:8f:98:4e:ba:02:6b:c6:e7:12: 3e:ba:db:a0:9f:6e:b6:84:c3:c0:ef:cf:9f:8b:07: 88:a3:5d:78:76:6f:2b:8e:a6:5c:82:91:5c:01:d8: 47:e1:bf:18:8c:df:43:d1:fc:63:00:98:55:56:d4: a3:e0:38:55:0a:1d:b3:73:5f:a9:96:ae:0c:f3:ad: 03:cc:c5:24:02:85:39:fb:fd:ac:ab:f8:89:63:17: ae:f4:0c:b0:28:c5:4e:f4:8e:1b:e9:9d:7b:09:81: 24:46:2a:9c:fa:ea:6e:21:04:06:a1:d5:d8:a6:2f: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:43:46:53:A8:6D:E4:81:BA:96:EA:94:0B:D9:4C:30:38:DD:3C:99 X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c4:87:58:43:69:b0:d5:c5:ba:25:fc:b8:cc:90:b8:ab:6e: 01:9b:57:f7:11:bd:54:6e:23:71:64:b5:a0:d2:0f:0b:b5:43: c8:72:51:89:6f:70:37:56:fc:84:e6:62:1c:b5:2c:6a:60:a9: 51:96:2c:3b:f0:06:27:fb:4b:3c:3f:29:b5:0b:21:c8:3c:e3: 61:15:d6:c0:0b:ae:b0:8c:57:17:b4:ee:1d:1d:ed:c1:5c:f8: 70:2e:a7:7f:14:46:ce:8c:3c:81:b5:0e:4c:0c:cd:86:d8:6c: 1d:84:af:92:fa:3c:67:57:f1:ca:6f:33:b3:e9:a2:bb:e8:b3: 61:87:22:f9:d0:b8:1c:9f:33:9f:3b:2f:ae:d6:a3:9c:33:78: 51:bf:94:7c:25:7b:0d:65:f2:12:20:2c:7a:d8:2b:a5:eb:b1: 5b:72:2c:87:6e:56:5b:50:b0:3b:fe:9c:51:9e:d8:d0:f8:0e: 74:a9:9d:39:cc:cb:94:a3:fc:c2:35:e1:28:63:5d:32:d5:8a: 5b:28:75:b1:56:46:52:10:8c:24:fa:55:a3:00:df:48:71:b1: df:1b:50:c9:9e:67:a0:45:9c:55:9e:78:36:16:af:2b:c0:6d: 3c:4f:0d:e1:64:04:39:f6:7e:62:82:f0:66:69:21:22:cf:32: 8b:5c:04:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjYxMDAzMDQ0NDI0WhcNMjYxMDEwMDQ0NDI0WjAYMRYwFAYD VQQDEw02YWMwODgyOC0zZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjy02L+PeeChzOjLkuMIvWw23yWDz4sBhHxkLLCG6yI74J7JeZAleoc96y0B jFs6Wk3H4GTX8QsVzbfSzKyLhlK7gS3QnHXsJ9ensLmq8usK1N15KXW/AfUFSqnM UGTLwkRSPzNthLnOKsPGGAcFrv7EAo4tJHcwIvL82IcYwdPLIPfdD09xL2LGwECP mE66AmvG5xI+utugn262hMPA78+fiweIo114dm8rjqZcgpFcAdhH4b8YjN9D0fxj AJhVVtSj4DhVCh2zc1+plq4M860DzMUkAoU5+/2sq/iJYxeu9AywKMVO9I4b6Z17 CYEkRiqc+upuIQQGodXYpi+U3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpDRlOo beSBupbqlAvZTDA43TyZMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACsSHWENpsNXFuiX8uMyQuKtuAZtX9xG9VG4jcWS1oNIPC7VDyHJRiW9wN1b8 hOZiHLUsamCpUZYsO/AGJ/tLPD8ptQshyDzjYRXWwAuusIxXF7TuHR3twVz4cC6n fxRGzow8gbUOTAzNhthsHYSvkvo8Z1fxym8zs+miu+izYYci+dC4HJ8znzsvrtaj nDN4Ub+UfCV7DWXyEiAsetgrpeuxW3Ish25WW1CwO/6cUZ7Y0PgOdKmdOczLlKP8 wjXhKGNdMtWKWyh1sVZGUhCMJPpVowDfSHGx3xtQyZ5noEWcVZ54NhavK8BtPE8N 4WQEOfZ+YoLwZmkhIs8yi1wE3Q== -----END CERTIFICATE-----Generated at Sun Oct 4 19:59:53 2026 by rpki-client