$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: azMNB8fXHjeep7KXfcCtBL0wIATspqkChykpqBfheT0= Subject key identifier: B7:89:52:F0:34:88:37:84:D3:76:7A:86:14:9A:AA:F1:98:F7:32:76 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 10F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 10DF Signing time: Wed 26 Aug 2026 17:15:45 +0000 Manifest this update: Wed 26 Aug 2026 17:15:44 +0000 Manifest next update: Wed 02 Sep 2026 17:15:44 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: fgBA4Ykb5bZdw10VXo1TDvtb8dTFd1jlEhusf+R4DdQ=) 2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=) 3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 17:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4340 (0x10f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Aug 26 17:15:44 2026 GMT Not After : Sep 2 17:15:44 2026 GMT Subject: CN=6a8f1f41-692c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:3d:4b:5c:d1:90:be:68:4f:95:9e:52:fe: 0e:53:26:f0:ba:00:5c:c8:bd:a8:39:ab:71:9f:d8: 2c:9c:e5:0d:fe:09:de:17:5b:5b:ee:26:af:49:1e: 12:8e:08:71:03:e0:04:87:1e:51:ba:a0:05:2f:af: ed:65:48:5c:f1:fd:a6:df:96:c2:f7:87:8b:90:71: e0:ed:ee:e2:ce:fe:60:9f:38:dc:9b:6e:dc:7b:2b: 5e:27:b8:91:42:b1:23:e7:56:86:5d:5e:79:c3:94: a3:84:26:56:02:4d:5c:8d:5f:0a:48:aa:5f:fb:47: 09:57:84:39:c4:41:1c:1c:51:2c:f0:fc:cf:7a:ad: a4:5b:21:bf:3b:14:49:a4:14:42:41:ba:3d:c8:23: bd:5e:58:63:b4:47:08:e4:73:36:b4:62:4a:34:95: 74:41:99:0d:2b:bc:70:b0:90:88:5a:13:a3:36:4f: 8b:bf:24:8c:1a:d2:13:6e:04:14:dc:28:e1:79:3c: bc:a8:85:4d:24:54:d8:50:5f:5d:8d:6e:8a:fa:1b: c1:da:d1:e9:77:6a:5c:01:1e:9e:a2:f2:6f:86:16: 25:cc:89:63:98:75:ac:2a:c7:21:6f:ff:54:e7:b2: 48:f4:1c:b9:35:af:40:2d:a6:4b:e5:ad:2c:fe:cd: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:52:F0:34:88:37:84:D3:76:7A:86:14:9A:AA:F1:98:F7:32:76 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f3:2f:5b:02:06:e3:4d:42:c8:d5:b3:b0:52:55:22:24:85: e0:ca:29:6c:61:89:d6:a9:a1:83:50:b7:41:9e:5a:cc:d6:ed: 82:09:4d:1f:d5:0d:f5:e5:91:ba:35:6f:a5:38:9b:80:e8:f4: 49:a8:09:81:10:d4:ed:da:a0:19:a4:d7:ee:bd:3a:79:5a:b7: 5c:1f:f6:6b:5e:e0:ce:e9:00:b3:19:e6:4d:a4:76:de:68:82: e0:c0:19:5c:b2:3e:03:13:ee:f6:a4:6c:c1:eb:2a:86:d8:5b: d8:dc:6d:fe:32:b0:0a:2a:84:2f:b8:43:7e:7c:8d:6d:b0:40: cf:11:61:27:62:36:dc:df:d4:76:da:2b:12:a7:f4:80:e0:17: 5d:5b:0b:11:7e:97:f6:be:3d:05:66:8f:7c:82:fb:eb:47:b6: 1b:ff:3d:cc:d1:58:a1:09:21:19:1d:a3:20:26:40:a1:12:9c: 14:b3:df:92:21:6f:82:ec:e0:cf:70:54:ef:99:23:53:d4:b0: 16:c7:21:8a:b9:4c:7f:73:e4:fb:10:24:39:bf:3c:b6:98:0c: 28:9b:2e:5f:fb:43:93:a1:d3:7e:42:ba:7c:69:1e:2e:ba:30: be:bf:f3:5e:b3:88:09:44:55:34:a1:eb:b9:52:14:71:c2:f9: ed:ac:79:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjYwODI2MTcxNTQ0WhcNMjYwOTAyMTcxNTQ0WjAYMRYwFAYD VQQDEw02YThmMWY0MS02OTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuo9S1zRkL5oT5WeUv4OUybwugBcyL2oOatxn9gsnOUN/gneF1tb7iavSR4S jghxA+AEhx5RuqAFL6/tZUhc8f2m35bC94eLkHHg7e7izv5gnzjcm27ceyteJ7iR QrEj51aGXV55w5SjhCZWAk1cjV8KSKpf+0cJV4Q5xEEcHFEs8PzPeq2kWyG/OxRJ pBRCQbo9yCO9XlhjtEcI5HM2tGJKNJV0QZkNK7xwsJCIWhOjNk+LvySMGtITbgQU 3CjheTy8qIVNJFTYUF9djW6K+hvB2tHpd2pcAR6eovJvhhYlzIljmHWsKschb/9U 57JI9By5Na9ALaZL5a0s/s3JMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeJUvA0 iDeE03Z6hhSaqvGY9zJ2MB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifMvWwIG401CyNWzsFJVIiSF4MopbGGJ1qmhg1C3QZ5azNbtgglNH9UN9eWR ujVvpTibgOj0SagJgRDU7dqgGaTX7r06eVq3XB/2a17gzukAsxnmTaR23miC4MAZ XLI+AxPu9qRswesqhthb2Nxt/jKwCiqEL7hDfnyNbbBAzxFhJ2I23N/UdtorEqf0 gOAXXVsLEX6X9r49BWaPfIL760e2G/89zNFYoQkhGR2jICZAoRKcFLPfkiFvguzg z3BU75kjU9SwFschirlMf3Pk+xAkOb88tpgMKJsuX/tDk6HTfkK6fGkeLrowvr/z XrOICURVNKHruVIUccL57ax55g== -----END CERTIFICATE-----Generated at Thu Aug 27 09:45:24 2026 by rpki-client