$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: TMbGZJydhRDt8HzXMP1TpAES1s6rQEvrpRHma76Nu6A= Subject key identifier: 1B:69:68:8A:89:6D:3C:0B:4D:C7:C7:5A:89:C9:6A:FB:39:0D:64:61 Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 0201 Signing time: Mon 05 Oct 2026 03:26:39 +0000 Manifest this update: Mon 05 Oct 2026 03:26:38 +0000 Manifest next update: Mon 12 Oct 2026 03:26:38 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: cUqsPiVg8omLnDmU6OwY/LnuZlIjhAqWG0aybkEHEVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Oct 5 03:26:38 2026 GMT Not After : Oct 12 03:26:38 2026 GMT Subject: CN=6ac318ee-5919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a2:54:00:04:1c:bb:16:43:8d:d1:a1:13:ec: d8:ef:46:ff:c0:61:55:b9:19:2d:47:c4:c3:2a:a8: 60:b8:55:a9:a2:4a:76:44:d0:06:ea:f5:ff:6a:73: ee:59:4e:d2:aa:d6:39:fd:0f:e4:2b:0a:82:f2:54: 16:dc:d0:6c:46:bf:cf:b0:72:ed:2f:e6:01:18:4d: 31:79:24:28:86:af:1c:5e:a0:3f:fd:23:55:51:8b: 44:73:32:bd:87:52:15:64:64:5a:f8:a2:2b:b0:eb: d0:07:f8:b5:4d:16:ea:f4:ec:ea:ad:2f:01:71:dc: 03:13:6c:74:e5:72:23:e7:dd:d6:13:16:af:0a:32: 0a:a1:0c:9f:88:67:d6:11:33:0e:a0:12:c3:a1:62: 27:66:fc:78:86:8c:e3:55:ee:f3:da:ec:70:10:d2: e4:ce:f1:5f:1a:a2:db:a1:0a:47:97:70:97:61:a2: 38:55:95:33:e9:fa:0a:b1:6c:9d:82:bc:0c:aa:45: 21:15:4d:0c:19:c8:81:04:13:53:ae:72:97:2e:b2: e9:6e:b7:75:d8:87:de:fa:ae:a2:f1:a5:57:db:f8: 44:58:16:2d:b7:7e:e6:e1:56:63:f3:1a:eb:88:4a: 5c:4e:1a:0d:c1:7a:86:8c:16:b4:d3:77:fb:51:33: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:68:8A:89:6D:3C:0B:4D:C7:C7:5A:89:C9:6A:FB:39:0D:64:61 X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f8:5c:eb:66:aa:e7:ea:2e:1f:5e:3d:f4:04:42:7c:b8:9f: f9:b8:7d:58:8e:66:25:0b:0c:3d:cf:8b:f0:f0:a3:bc:8d:3c: 06:da:ba:d4:93:3b:4f:e5:36:c5:b8:02:57:59:da:08:c4:b6: 5f:2d:32:bb:58:5d:2f:5b:7f:c5:58:c7:57:a3:c9:d2:e6:e0: 8e:4f:93:46:18:e1:6c:47:40:d2:d4:39:f6:c0:52:83:3c:17: 76:98:94:b2:b8:2c:a2:2c:df:86:a9:ae:3e:8c:31:e2:77:d5: db:c2:f4:2b:d8:d3:45:18:79:85:80:c0:e3:9a:f7:0f:ed:f3: 21:42:99:5a:80:82:9d:f8:6f:04:f6:38:e0:18:b9:bb:10:3d: 14:86:05:9c:44:3e:c0:f8:44:0c:b9:ce:2c:ad:9c:09:55:a0: 75:00:27:b2:18:cf:a0:58:46:53:f4:95:47:8e:b0:a9:07:58: 1a:01:96:51:03:4a:c8:41:e8:57:20:12:8f:77:9c:a5:63:cb: 22:5b:0d:b3:70:f8:83:7e:18:f5:60:d7:60:ae:41:e7:08:25: de:07:65:5a:da:97:2e:22:95:32:ab:c7:ab:56:ee:64:1d:cf: c4:6c:94:4f:17:ee:cf:2c:67:8e:dc:e3:b5:a2:67:8e:86:0f: 12:08:21:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjYxMDA1MDMyNjM4WhcNMjYxMDEyMDMyNjM4WjAYMRYwFAYD VQQDEw02YWMzMThlZS01OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66JUAAQcuxZDjdGhE+zY70b/wGFVuRktR8TDKqhguFWpokp2RNAG6vX/anPu WU7SqtY5/Q/kKwqC8lQW3NBsRr/PsHLtL+YBGE0xeSQohq8cXqA//SNVUYtEczK9 h1IVZGRa+KIrsOvQB/i1TRbq9OzqrS8BcdwDE2x05XIj593WExavCjIKoQyfiGfW ETMOoBLDoWInZvx4hozjVe7z2uxwENLkzvFfGqLboQpHl3CXYaI4VZUz6foKsWyd grwMqkUhFU0MGciBBBNTrnKXLrLpbrd12Ife+q6i8aVX2/hEWBYtt37m4VZj8xrr iEpcThoNwXqGjBa003f7UTNqXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtpaIqJ bTwLTcfHWonJavs5DWRhMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARfhc62aq5+ouH1499ARCfLif+bh9WI5mJQsMPc+L8PCjvI08Btq61JM7T+U2 xbgCV1naCMS2Xy0yu1hdL1t/xVjHV6PJ0ubgjk+TRhjhbEdA0tQ59sBSgzwXdpiU srgsoizfhqmuPowx4nfV28L0K9jTRRh5hYDA45r3D+3zIUKZWoCCnfhvBPY44Bi5 uxA9FIYFnEQ+wPhEDLnOLK2cCVWgdQAnshjPoFhGU/SVR46wqQdYGgGWUQNKyEHo VyASj3ecpWPLIlsNs3D4g34Y9WDXYK5B5wgl3gdlWtqXLiKVMqvHq1buZB3PxGyU TxfuzyxnjtzjtaJnjoYPEgghHA== -----END CERTIFICATE-----Generated at Mon Oct 5 06:07:40 2026 by rpki-client