$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: i7Epo4662kjVp5fibrZPlAvedgymwHbu+gLhW4t4II8= Subject key identifier: FD:6B:0D:65:CC:6D:15:3B:B9:54:C7:7C:1A:86:FD:3B:26:09:33:5F Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: 01CD Signing time: Sun 11 Oct 2026 04:22:50 +0000 Manifest this update: Sun 11 Oct 2026 04:22:50 +0000 Manifest next update: Sun 18 Oct 2026 04:22:50 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: fYZkzmA5BlvIWb/cF3v6y3iLmSl+yT2Q2Xz5GzCzuWI=) 2: F5F28CC6739E11F1B96BB9EF75A30FBC.roa (hash: /KxNlXfeXQcDBu4my/p7c/P1DQJwjmP4hrFW2B3nPNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Oct 11 04:22:50 2026 GMT Not After : Oct 18 04:22:50 2026 GMT Subject: CN=6acb0f1a-195a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:65:0a:7a:c7:05:8a:3f:46:8f:f9:3d:3e: 40:08:85:f7:f3:eb:28:ae:4b:c9:fb:8d:a7:24:00: 74:a8:9e:f1:d3:54:23:69:24:c6:74:92:10:5b:99: 35:46:a6:97:b7:28:a8:ea:29:d4:a7:42:ce:65:d3: f9:90:c4:ac:4c:68:ad:da:b4:8e:05:7e:1f:fb:21: 31:b8:9d:20:c0:48:dc:dd:5e:6e:a0:55:5c:8f:54: c7:9d:70:2a:75:ca:83:2c:5d:26:b1:55:fa:3e:d3: 65:16:22:d9:b4:17:a9:f4:c1:80:32:fd:ca:2d:a9: 06:e1:78:3e:40:45:66:8c:1e:42:ae:7a:c9:8d:f0: db:5f:ab:32:cf:6a:8c:81:0e:4e:80:45:54:57:2b: 5a:af:46:c3:89:a8:94:23:7f:be:da:b0:67:5d:2b: 53:35:7c:8d:79:9b:0f:f8:ee:49:b4:9b:98:2e:77: fc:e7:20:6a:53:fa:60:8d:8d:a0:37:b5:35:a7:e8: 39:b7:05:b0:99:9c:4e:af:68:96:4e:60:51:e5:c7: 1c:5f:a3:ac:67:7a:58:ce:6e:61:bc:e9:d3:b3:1c: 41:2d:43:80:02:32:e7:11:d5:1a:85:29:35:42:51: c8:04:65:98:fa:5b:66:e9:c7:9d:9d:b1:44:69:ae: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6B:0D:65:CC:6D:15:3B:B9:54:C7:7C:1A:86:FD:3B:26:09:33:5F X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4f:75:45:9f:22:d6:14:ea:27:36:e6:2c:f9:92:4b:c1:9d: f3:4e:1a:aa:36:31:eb:80:fe:d4:4d:16:8f:d9:47:62:6c:1f: 2e:07:25:16:51:22:bd:64:b9:69:db:74:c5:87:19:24:d1:fb: aa:40:cb:1c:36:f2:2b:32:d9:1b:05:52:84:ff:b8:c1:06:15: 77:3f:88:fc:4e:f4:4d:68:8e:7a:ba:52:cd:30:7f:6d:10:00: 23:b6:3d:1e:f0:0d:72:d6:a1:c2:c0:58:0f:c8:97:78:31:c2: dd:75:b2:57:e3:7f:88:69:fd:71:87:23:d8:41:ec:95:84:13: 8b:c2:60:25:ce:6f:79:90:d3:9c:cb:21:a0:38:c3:77:cb:f4: ff:45:a8:96:00:25:97:02:e1:5f:84:d5:a1:0d:1a:82:2d:d8: 4a:a4:95:98:21:c6:75:34:61:d2:1f:88:4e:99:df:fc:c4:68: 64:56:c5:c4:90:c9:54:3f:53:a2:e1:a7:45:a2:8f:1d:e9:48: 69:10:1d:be:1f:21:c3:ff:70:2e:c1:27:06:ca:ac:d4:4b:3b: 66:55:de:eb:16:45:0f:2c:bd:e4:6b:59:ca:0a:c1:9e:3b:77: 31:1c:fc:9b:ab:1f:bc:8b:94:67:56:c7:34:17:9a:ef:ec:ad: 99:e9:60:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjYxMDExMDQyMjUwWhcNMjYxMDE4MDQyMjUwWjAYMRYwFAYD VQQDEw02YWNiMGYxYS0xOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC5lCnrHBYo/Ro/5PT5ACIX38+sorkvJ+42nJAB0qJ7x01QjaSTGdJIQW5k1 RqaXtyio6inUp0LOZdP5kMSsTGit2rSOBX4f+yExuJ0gwEjc3V5uoFVcj1THnXAq dcqDLF0msVX6PtNlFiLZtBep9MGAMv3KLakG4Xg+QEVmjB5CrnrJjfDbX6syz2qM gQ5OgEVUVytar0bDiaiUI3++2rBnXStTNXyNeZsP+O5JtJuYLnf85yBqU/pgjY2g N7U1p+g5twWwmZxOr2iWTmBR5cccX6OsZ3pYzm5hvOnTsxxBLUOAAjLnEdUahSk1 QlHIBGWY+ltm6cednbFEaa6YTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1rDWXM bRU7uVTHfBqG/TsmCTNfMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfU91RZ8i1hTqJzbmLPmSS8Gd804aqjYx64D+1E0Wj9lHYmwfLgclFlEivWS5 adt0xYcZJNH7qkDLHDbyKzLZGwVShP+4wQYVdz+I/E70TWiOerpSzTB/bRAAI7Y9 HvANctahwsBYD8iXeDHC3XWyV+N/iGn9cYcj2EHslYQTi8JgJc5veZDTnMshoDjD d8v0/0WolgAllwLhX4TVoQ0agi3YSqSVmCHGdTRh0h+ITpnf/MRoZFbFxJDJVD9T ouGnRaKPHelIaRAdvh8hw/9wLsEnBsqs1Es7ZlXe6xZFDyy95GtZygrBnjt3MRz8 m6sfvIuUZ1bHNBea7+ytmelgNA== -----END CERTIFICATE-----Generated at Sun Oct 11 15:10:56 2026 by rpki-client