$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft File: KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft (raw, json) Hash identifier: 6mQDDwEx5nEwNsA3nO7FOitLV45sPMrUMwEOkyu1k1M= Subject key identifier: A3:F8:77:DC:65:2A:87:DE:3B:D6:67:AD:F2:F6:A6:4B:2A:8E:8B:13 Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B Certificate issuer: /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft Manifest number: 0124 Signing time: Wed 07 Oct 2026 06:17:09 +0000 Manifest this update: Wed 07 Oct 2026 06:17:08 +0000 Manifest next update: Wed 14 Oct 2026 06:17:08 +0000 Files and hashes: 1: KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl (hash: Kea79W/Mw+Y4ZDnfvZ6vpmDowIpaVK3WfVQ6w8gMFl8=) 2: 8CC07FC0047211F0A6541526C4F9AE02.roa (hash: xg+5Kz8DfP64v+0K6uLKgS3hlywm1P1UwcX/Q9P2caM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B Validity Not Before: Oct 7 06:17:08 2026 GMT Not After : Oct 14 06:17:08 2026 GMT Subject: CN=6ac5e3e5-aaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:43:7a:29:cb:8b:d9:de:99:c2:10:96:d7: 2a:e8:bc:cf:54:b5:b7:d9:40:3a:24:b2:99:2c:6b: ab:9e:7b:7b:b6:eb:88:06:63:48:77:e6:20:ec:ca: a2:a1:02:b4:54:ed:73:25:bf:db:3d:d0:84:d3:ac: 72:5f:7a:57:ed:1b:b7:e7:76:22:33:a3:94:75:bb: cd:e2:72:2a:dc:da:79:e2:ee:7b:21:7f:2f:b8:33: d1:12:ba:92:9c:00:56:f0:41:d3:1f:69:88:d2:bc: cb:09:b4:0d:d5:0d:1d:0d:06:c2:6a:4a:9c:a2:25: 2b:f6:3b:6a:ad:57:34:63:8a:5f:8c:f5:2f:16:9a: dd:15:e3:dd:50:4c:15:72:82:e6:03:a1:a7:47:0b: 18:d4:fc:ac:13:fb:ad:54:56:93:53:11:03:85:f9: 36:55:18:eb:36:3f:3e:55:81:a9:d7:a6:aa:b3:64: 48:9d:10:34:a1:49:33:30:f6:3c:06:bc:fd:2a:7a: b4:72:1c:ed:55:a9:d3:46:8c:4c:bf:11:e4:fd:af: be:21:86:bf:1d:a2:78:50:54:b7:1c:f1:e2:91:bf: 83:22:20:c6:fb:d0:9b:2b:55:2d:cb:1e:5e:74:38: dc:ce:18:7f:e2:fa:86:67:42:26:d6:81:84:31:ac: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:77:DC:65:2A:87:DE:3B:D6:67:AD:F2:F6:A6:4B:2A:8E:8B:13 X509v3 Authority Key Identifier: keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:5d:a0:75:70:d5:89:06:78:59:49:5f:91:1a:f8:b6:08: f3:73:20:9e:b3:b9:89:eb:63:42:cf:67:1e:e8:d3:02:00:a7: af:ce:9e:8f:ff:de:a1:73:b1:c5:48:98:fa:ba:87:cf:1e:bf: 00:5c:f4:ee:d8:fc:ce:e9:71:3a:c0:96:fc:c8:ed:a0:fe:bb: 51:a7:f8:6d:52:b5:3c:d5:66:84:08:e8:38:41:69:9f:83:e5: ab:4b:1b:bc:d4:7b:de:d8:a0:f7:68:47:f2:ee:e5:ae:a1:4f: 5e:ce:78:0c:57:41:f1:e5:0f:e7:36:b7:53:6e:fb:6d:36:4a: 16:df:b9:54:b7:9b:d7:fe:21:ee:d0:ff:0b:8d:89:ef:40:31: 44:e1:20:97:c7:a8:05:a2:0c:a6:5c:21:41:2a:10:cc:90:61: 9c:ac:ae:39:1e:62:d0:33:67:f2:df:54:15:29:50:fe:f0:25: 8f:09:d0:8d:c3:63:cd:aa:18:c0:29:36:ba:9f:56:8e:76:a7: 8c:5e:15:a4:0f:82:d3:c0:ea:2d:70:8b:b5:47:8e:e7:c7:29: da:c7:37:c4:64:ae:97:20:89:aa:91:f2:3e:d9:8c:69:43:03: cb:be:e0:8a:6b:b5:03:88:f7:87:c9:f8:0a:ff:2f:48:ee:21: 6a:db:e2:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyODcxMTAvBgNVBAUTKDJBNDVBNDFENjBFMkYxMDREM0REMzlDODZGMTRCQzU5 MDA4ODNGNEIwHhcNMjYxMDA3MDYxNzA4WhcNMjYxMDE0MDYxNzA4WjAYMRYwFAYD VQQDEw02YWM1ZTNlNS1hYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5xDeinLi9nemcIQltcq6LzPVLW32UA6JLKZLGurnnt7tuuIBmNId+Yg7Mqi oQK0VO1zJb/bPdCE06xyX3pX7Ru353YiM6OUdbvN4nIq3Np54u57IX8vuDPRErqS nABW8EHTH2mI0rzLCbQN1Q0dDQbCakqcoiUr9jtqrVc0Y4pfjPUvFprdFePdUEwV coLmA6GnRwsY1PysE/utVFaTUxEDhfk2VRjrNj8+VYGp16aqs2RInRA0oUkzMPY8 Brz9Knq0chztVanTRoxMvxHk/a++IYa/HaJ4UFS3HPHikb+DIiDG+9CbK1Utyx5e dDjczhh/4vqGZ0Im1oGEMayDwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKP4d9xl KofeO9ZnrfL2pksqjosTMB8GA1UdIwQYMBaAFCpFpB1g4vEE0905yG8UvFkAiD9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI4Ny8zNzI3OEMxNjA0 NkQxMUYwQjc3RDAzNjFDNEY5QUUwMi9La1drSFdEaThRVFQzVG5JYnhTOFdRQ0lQ MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trV2tIV0RpOFFUVDNUbklieFM4V1FDSVAwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI4Ny8zNzI3OEMxNjA0NkQxMUYwQjc3RDAzNjFDNEY5QUUwMi9La1drSFdEaThR VFQzVG5JYnhTOFdRQ0lQMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf7hdoHVw1YkGeFlJX5Ea+LYI83MgnrO5ietjQs9nHujTAgCnr86ej//eoXOx xUiY+rqHzx6/AFz07tj8zulxOsCW/MjtoP67Uaf4bVK1PNVmhAjoOEFpn4Plq0sb vNR73tig92hH8u7lrqFPXs54DFdB8eUP5za3U277bTZKFt+5VLeb1/4h7tD/C42J 70AxROEgl8eoBaIMplwhQSoQzJBhnKyuOR5i0DNn8t9UFSlQ/vAljwnQjcNjzaoY wCk2up9WjnanjF4VpA+C08DqLXCLtUeO58cp2sc3xGSulyCJqpHyPtmMaUMDy77g imu1A4j3h8n4Cv8vSO4hatviWQ== -----END CERTIFICATE-----Generated at Thu Oct 8 00:58:42 2026 by rpki-client