$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: ZBQc2TZB/XVpPqwTKjqVRECjViBMpRXGJ6mH5CQwwgc= Subject key identifier: 28:62:7F:87:79:B9:F0:9C:4C:16:9F:C9:56:A2:FE:52:C9:05:CA:37 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: B3 Signing time: Tue 27 Oct 2026 07:20:35 +0000 Manifest this update: Tue 27 Oct 2026 07:20:34 +0000 Manifest next update: Tue 03 Nov 2026 07:20:34 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: tRbYleJHa4nhWp7fZwFRmCgNEGlry8hjgfYEB5P+7p4=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: rWbPnjm/JvnTJWnBFd9TRsQ84zFWbQzVjnxVj9NliVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Oct 27 07:20:34 2026 GMT Not After : Nov 3 07:20:34 2026 GMT Subject: CN=6ae050c3-b04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e3:6e:28:7e:b2:f0:67:1d:e0:cf:a8:7d:90: f7:69:6e:f4:fc:a3:24:2a:63:0e:8f:42:49:ee:8d: 2c:81:51:cf:b3:91:31:71:9e:6a:b7:df:8f:cd:ac: ac:61:ca:af:c7:66:bd:94:8c:23:87:2c:7a:de:fd: b0:6d:cf:b7:0b:be:5b:89:01:00:2f:59:3d:c7:49: d3:a7:61:a4:d5:a5:a0:4e:24:cb:ea:f4:40:11:94: 5f:6e:81:4d:04:f1:1a:17:9d:da:e3:10:4c:c3:33: c4:bc:94:fe:b2:6d:c0:1c:23:5b:9a:67:53:32:68: 7f:ba:7c:79:97:6a:87:65:86:99:ec:53:92:24:ca: f0:d9:db:7a:6c:23:94:03:63:2a:47:04:6b:d1:bf: dc:25:13:44:fa:45:b5:3e:c9:0b:69:97:7f:ea:07: 7d:df:20:9f:00:88:5a:e9:60:a2:f3:7f:85:41:57: 1a:cb:ad:34:24:fa:95:3d:8a:b1:75:bf:83:6e:8b: 33:51:67:86:2b:cd:a0:b4:a2:a1:75:ba:75:33:83: 98:e9:92:ab:f9:49:f0:f4:6a:95:60:99:4b:ea:9d: 2b:de:4e:3c:8f:0f:52:f9:17:7d:9e:5e:dd:e7:e8: 36:d7:01:45:35:c2:9b:12:54:6c:34:7c:0d:2b:3c: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:7F:87:79:B9:F0:9C:4C:16:9F:C9:56:A2:FE:52:C9:05:CA:37 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:31:54:8b:ee:5f:a2:92:64:2c:86:ee:8e:e8:ac:f1:40:40: 7b:55:17:18:b5:5b:1b:95:f3:c1:88:88:a5:e3:21:70:f5:de: c7:be:04:de:c1:45:4a:9a:71:82:83:35:06:5d:b6:5b:61:ce: 42:f8:ec:d5:a0:03:f8:86:ac:63:89:78:cd:f9:6d:63:91:50: 92:e9:fe:9c:96:cd:dc:32:2d:ae:67:93:f1:08:d4:35:26:c8: f4:1e:34:e6:4a:22:e4:aa:29:9d:03:b8:f3:74:dd:6d:e0:14: cd:57:8f:77:cb:94:6b:5e:02:71:36:ed:6c:60:f6:b4:2b:02: 26:2d:c8:37:ef:7c:12:81:c8:82:a3:df:ed:34:1d:6a:f9:2a: 95:3f:e7:ee:4a:9b:ad:ed:a7:2f:6b:c6:2f:dc:01:fe:7a:9e: 52:0c:e7:30:30:2c:55:38:a7:93:41:4a:3b:6a:4f:a0:f7:82: 1c:e6:cc:e7:d4:91:3e:0e:33:31:06:f2:5c:a6:b9:30:12:ae: 30:41:0d:7a:a2:0e:e6:6f:33:f1:e7:38:72:d5:e7:c5:b6:07: 27:32:9d:1e:96:37:05:91:e9:c8:95:c5:36:86:03:56:ac:0e: 92:c0:fc:8c:e4:03:f8:51:58:78:38:53:85:ec:33:5a:0b:48: 0e:d2:4f:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC MzY0RTQzQzAwHhcNMjYxMDI3MDcyMDM0WhcNMjYxMTAzMDcyMDM0WjAYMRYwFAYD VQQDEw02YWUwNTBjMy1iMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uNuKH6y8Gcd4M+ofZD3aW70/KMkKmMOj0JJ7o0sgVHPs5ExcZ5qt9+Pzays Ycqvx2a9lIwjhyx63v2wbc+3C75biQEAL1k9x0nTp2Gk1aWgTiTL6vRAEZRfboFN BPEaF53a4xBMwzPEvJT+sm3AHCNbmmdTMmh/unx5l2qHZYaZ7FOSJMrw2dt6bCOU A2MqRwRr0b/cJRNE+kW1PskLaZd/6gd93yCfAIha6WCi83+FQVcay600JPqVPYqx db+DboszUWeGK82gtKKhdbp1M4OY6ZKr+Unw9GqVYJlL6p0r3k48jw9S+Rd9nl7d 5+g21wFFNcKbElRsNHwNKzyyAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChif4d5 ufCcTBafyVai/lLJBco3MB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1 MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3 Tm9hYk82Z1F3a1d6Wk9ROEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoTFUi+5fopJkLIbujuis8UBAe1UXGLVbG5XzwYiIpeMhcPXex74E3sFFSppx goM1Bl22W2HOQvjs1aAD+IasY4l4zfltY5FQkun+nJbN3DItrmeT8QjUNSbI9B40 5koi5KopnQO483TdbeAUzVePd8uUa14CcTbtbGD2tCsCJi3IN+98EoHIgqPf7TQd avkqlT/n7kqbre2nL2vGL9wB/nqeUgznMDAsVTink0FKO2pPoPeCHObM59SRPg4z MQbyXKa5MBKuMEENeqIO5m8z8ec4ctXnxbYHJzKdHpY3BZHpyJXFNoYDVqwOksD8 jOQD+FFYeDhThewzWgtIDtJPog== -----END CERTIFICATE-----Generated at Thu Oct 29 05:51:30 2026 by rpki-client