$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: mvqxM96v1M3pJ1r0Pek0VqZIeeGXt6tYaDBcmWr01ok= Subject key identifier: 40:68:39:CE:94:BD:91:36:7E:D3:FA:12:88:58:15:7C:6E:73:02:FE Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 047B Signing time: Fri 04 Sep 2026 23:49:57 +0000 Manifest this update: Fri 04 Sep 2026 23:49:57 +0000 Manifest next update: Fri 11 Sep 2026 23:49:57 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: 1lWrUGYccajazyLzgNras0+svRCWkTsfihCDtQ3qR5k=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Sep 4 23:49:57 2026 GMT Not After : Sep 11 23:49:57 2026 GMT Subject: CN=6a9b5925-b454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:3a:d7:03:cd:99:4b:a3:fa:50:35:e5:83: 2c:89:e7:ff:a7:c9:5a:b7:7d:c2:39:41:69:e7:9b: 55:f8:99:76:9e:6d:8b:8c:a4:3d:04:61:98:12:21: 2f:e8:90:f7:d8:4a:75:0d:c6:34:e6:0e:c4:44:f8: e2:83:8b:f6:01:3c:70:f5:8c:2b:0c:65:ca:04:44: 23:0f:e0:fd:b8:b4:e8:69:54:a5:9f:15:ae:4f:9f: af:c4:9d:8d:fb:5d:ae:c9:69:50:9c:7a:ef:2d:36: 38:2f:4c:7d:28:df:13:d2:30:f9:35:4f:4c:5c:17: cc:66:70:bd:7b:9c:32:6a:50:a4:e0:ba:29:32:9e: fd:2f:89:3e:f2:91:df:d8:52:63:40:58:f8:75:42: 32:53:b0:23:66:28:54:86:1c:77:02:f8:41:d4:6c: d0:38:0c:41:d6:96:1a:47:5d:e9:6b:3a:ba:85:9b: 02:25:97:bc:30:ef:ee:d4:70:a6:2e:89:7b:e6:5a: dd:36:4a:ff:6f:6c:20:8b:6c:46:b9:ca:25:26:3c: 54:98:b0:af:0d:b5:e1:94:9b:c6:65:9d:ab:ef:1e: 93:2f:f6:24:09:b9:7b:90:fe:4d:0a:dd:67:3a:85: b4:47:fd:19:dd:3d:8f:65:35:63:11:9d:ff:a7:f3: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:39:CE:94:BD:91:36:7E:D3:FA:12:88:58:15:7C:6E:73:02:FE X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:5b:7c:41:e1:45:5c:65:c8:45:ca:73:f3:aa:d7:07:d9:25: d2:ba:a9:af:03:da:2b:d2:1a:c6:82:d7:7d:6b:a3:20:31:dd: 49:fa:18:d8:54:b7:78:1a:35:cb:8d:0b:a8:dd:5e:8c:10:a2: 26:00:68:cb:1f:2c:95:12:0c:b1:bf:7b:0c:ab:ab:8e:f1:02: b4:92:9f:11:85:18:bf:46:9c:8d:f0:12:b2:89:e9:32:fc:77: 56:53:b6:e5:6e:4b:71:c9:7d:a7:1d:ea:16:31:fe:ac:aa:59: 12:e8:2c:2a:6e:0e:ce:a6:c6:7d:2c:9e:20:e3:8f:86:26:26: d1:41:46:62:bd:b8:e8:9a:23:43:b3:8f:da:f9:59:0d:0d:3b: 1b:c3:bf:2a:3f:01:73:43:9e:27:d7:96:75:a7:39:6e:72:32: 03:8c:8b:19:58:e9:79:ac:fe:76:f4:e9:e7:35:96:f9:ce:ac: 5f:38:58:ca:42:98:42:c1:96:97:4d:96:48:93:be:22:0a:85: 3a:bf:a2:ee:46:f2:73:34:10:34:50:cf:e2:4b:02:9f:f8:1b: 77:c3:2a:c4:ca:f2:43:84:09:45:ef:bd:d2:49:da:1d:71:a1: 91:6a:55:1b:b7:5b:f3:f6:eb:8c:e4:5b:2b:3b:82:32:a6:3d: 8b:1e:c5:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjYwOTA0MjM0OTU3WhcNMjYwOTExMjM0OTU3WjAYMRYwFAYD VQQDEw02YTliNTkyNS1iNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGk61wPNmUuj+lA15YMsief/p8lat33COUFp55tV+Jl2nm2LjKQ9BGGYEiEv 6JD32Ep1DcY05g7ERPjig4v2ATxw9YwrDGXKBEQjD+D9uLToaVSlnxWuT5+vxJ2N +12uyWlQnHrvLTY4L0x9KN8T0jD5NU9MXBfMZnC9e5wyalCk4LopMp79L4k+8pHf 2FJjQFj4dUIyU7AjZihUhhx3AvhB1GzQOAxB1pYaR13pazq6hZsCJZe8MO/u1HCm Lol75lrdNkr/b2wgi2xGucolJjxUmLCvDbXhlJvGZZ2r7x6TL/YkCbl7kP5NCt1n OoW0R/0Z3T2PZTVjEZ3/p/PiXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBoOc6U vZE2ftP6EohYFXxucwL+MB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJlt8QeFFXGXIRcpz86rXB9kl0rqprwPaK9IaxoLXfWujIDHdSfoY2FS3eBo1 y40LqN1ejBCiJgBoyx8slRIMsb97DKurjvECtJKfEYUYv0acjfASsonpMvx3VlO2 5W5Lccl9px3qFjH+rKpZEugsKm4OzqbGfSyeIOOPhiYm0UFGYr246JojQ7OP2vlZ DQ07G8O/Kj8Bc0OeJ9eWdac5bnIyA4yLGVjpeaz+dvTp5zWW+c6sXzhYykKYQsGW l02WSJO+IgqFOr+i7kbyczQQNFDP4ksCn/gbd8MqxMryQ4QJRe+90knaHXGhkWpV G7db8/brjORbKzuCMqY9ix7Flg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:17:50 2026 by rpki-client