$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: CJFFzuT86uf6XuXUkhu/cY5zWmkTeKrGk9ftc+HW3qo= Subject key identifier: B9:B5:52:3C:E4:B7:41:AD:D7:6E:34:33:BC:AF:3E:10:BC:8D:D9:6D Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0BAC Signing time: Mon 26 Oct 2026 19:06:47 +0000 Manifest this update: Mon 26 Oct 2026 19:06:46 +0000 Manifest next update: Mon 02 Nov 2026 19:06:46 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: +EAtfPfmZORWsY1GWzNHeKO+HlrsIPlXV+lor4eLDG4=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Oct 26 19:06:46 2026 GMT Not After : Nov 2 19:06:46 2026 GMT Subject: CN=6adfa4c7-60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:eb:6b:c0:32:b6:3a:6e:78:62:d0:27:f8: 4c:96:05:c1:4d:f2:f5:c9:b7:ef:8d:08:38:d6:45: c0:34:9b:95:20:93:28:95:36:1d:22:91:75:df:b1: 0b:b1:dd:93:24:c0:79:ed:d3:2a:94:b7:d3:5a:b9: e3:42:d7:73:39:10:1c:58:14:3a:28:00:7a:90:a7: dc:f5:4f:f8:29:92:0a:07:f9:a6:e8:c2:c5:7a:e3: 5e:07:6c:d2:9e:f4:fc:f5:b0:2a:77:a8:1d:5d:6b: 40:63:53:f5:27:63:ad:d4:de:d5:a5:fe:ea:f4:a1: c6:cb:d6:24:84:f0:ef:c4:2e:40:5c:15:3a:06:93: ac:f0:92:07:0d:cc:94:73:48:8a:00:06:b2:32:1b: 98:cd:b6:3f:69:18:85:dc:3f:3c:61:53:9a:9a:66: a1:1c:60:33:70:98:c8:ff:77:1d:5b:1e:4e:14:46: 42:6f:2c:cc:64:c4:e6:34:45:05:8c:e7:d7:12:95: f2:63:7c:b1:6a:6e:42:22:39:b3:db:14:7a:48:12: a8:e7:b3:37:51:50:59:c3:4e:76:3a:b8:b7:eb:b4: b9:c6:36:b0:23:e6:8e:46:cf:dc:5c:97:4f:0e:a9: 63:50:6f:a0:b2:8c:95:5d:1f:5c:9c:17:8b:11:70: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:52:3C:E4:B7:41:AD:D7:6E:34:33:BC:AF:3E:10:BC:8D:D9:6D X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:91:a3:e0:39:a7:bc:2a:fc:0d:05:c9:51:13:17:2a:5c:bf: d0:69:3d:bc:95:51:77:eb:4c:3d:72:d8:44:8e:e1:26:6e:02: 35:59:6a:0b:92:24:0b:58:d8:89:c0:86:f5:ee:79:8c:ab:d6: ce:de:d3:f9:b6:42:9f:f6:c0:e3:a3:1d:37:90:b6:6e:c2:cb: 75:57:06:fa:75:61:65:cc:94:ff:13:63:29:b3:5e:bc:a4:f1: 53:7d:e8:7d:32:99:82:98:69:2a:ce:9f:ec:79:61:be:b1:80: 00:05:4b:e8:17:56:cf:b1:2b:54:02:7b:45:06:43:fb:6b:5a: 62:6a:58:b7:38:03:d1:d4:0e:ee:98:58:9b:f0:ea:8d:7a:4b: e7:c3:9e:57:95:b4:53:fc:c0:a5:66:ca:bb:a1:0e:87:5f:9e: ca:37:9e:73:a8:2a:2c:81:5d:e8:51:5d:85:af:b5:d5:75:d1: 6e:37:83:29:a7:ae:e0:6e:bd:94:5b:8b:4a:bc:80:69:2e:af: f3:ab:4d:04:36:f4:a6:f7:65:39:15:e6:ee:52:45:10:ca:72: 0b:6b:1c:f3:44:2b:b8:c1:7c:81:51:5e:c4:65:24:3c:b7:ca: 49:5d:86:5c:4d:31:87:6d:b3:bf:f1:3a:76:6f:3b:57:63:f2: a9:2a:a1:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjYxMDI2MTkwNjQ2WhcNMjYxMTAyMTkwNjQ2WjAYMRYwFAYD VQQDEw02YWRmYTRjNy02MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkZzra8AytjpueGLQJ/hMlgXBTfL1ybfvjQg41kXANJuVIJMolTYdIpF137EL sd2TJMB57dMqlLfTWrnjQtdzORAcWBQ6KAB6kKfc9U/4KZIKB/mm6MLFeuNeB2zS nvT89bAqd6gdXWtAY1P1J2Ot1N7Vpf7q9KHGy9YkhPDvxC5AXBU6BpOs8JIHDcyU c0iKAAayMhuYzbY/aRiF3D88YVOammahHGAzcJjI/3cdWx5OFEZCbyzMZMTmNEUF jOfXEpXyY3yxam5CIjmz2xR6SBKo57M3UVBZw052Ori367S5xjawI+aORs/cXJdP DqljUG+gsoyVXR9cnBeLEXC7zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLm1Ujzk t0Gt1240M7yvPhC8jdltMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5Gj4DmnvCr8DQXJURMXKly/0Gk9vJVRd+tMPXLYRI7hJm4CNVlqC5IkC1jY icCG9e55jKvWzt7T+bZCn/bA46MdN5C2bsLLdVcG+nVhZcyU/xNjKbNevKTxU33o fTKZgphpKs6f7HlhvrGAAAVL6BdWz7ErVAJ7RQZD+2taYmpYtzgD0dQO7phYm/Dq jXpL58OeV5W0U/zApWbKu6EOh1+eyjeec6gqLIFd6FFdha+11XXRbjeDKaeu4G69 lFuLSryAaS6v86tNBDb0pvdlORXm7lJFEMpyC2sc80QruMF8gVFexGUkPLfKSV2G XE0xh22zv/E6dm87V2PyqSqhHQ== -----END CERTIFICATE-----Generated at Tue Oct 27 20:53:26 2026 by rpki-client