$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: W0scONB6htwMhA1/V9Wl0xCk5AaZ9sUFWs+OUIY+dJs= Subject key identifier: 7B:0A:CD:C1:01:45:D7:58:E4:15:FB:68:C2:60:01:11:36:B9:E6:D2 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: B4 Signing time: Thu 29 Oct 2026 07:47:00 +0000 Manifest this update: Thu 29 Oct 2026 07:46:59 +0000 Manifest next update: Thu 05 Nov 2026 07:46:59 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: ILMWgYZB+ssT9Ih5P7DTLBEoJwxgjamYOGAJaMMD2k8=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: rWbPnjm/JvnTJWnBFd9TRsQ84zFWbQzVjnxVj9NliVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Oct 29 07:46:59 2026 GMT Not After : Nov 5 07:46:59 2026 GMT Subject: CN=6ae2f9f3-bd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:db:87:ee:77:06:6f:62:9d:4f:7a:59:49: da:77:e4:c0:8b:1a:03:2e:cc:66:f9:3f:8a:5b:10: d7:8b:73:b2:55:9c:38:57:26:97:92:f0:56:c2:8b: 0b:2e:92:da:18:46:08:4b:de:ee:49:af:42:a9:f3: c5:1d:aa:55:e5:84:f4:b4:af:3b:8e:37:3f:5a:03: 30:21:66:6b:c2:53:fc:68:64:ec:77:5c:44:11:9c: d9:cd:3a:48:40:91:26:5d:1a:ba:31:bf:76:3d:3c: ee:e4:47:94:d8:68:4f:07:74:1b:ca:dd:3c:66:19: 4b:bd:fa:d2:ca:2e:ca:21:1a:d7:2c:5b:3a:ea:d0: 84:7a:8d:04:f5:ab:cb:c6:c3:ff:fe:e4:d9:32:d4: 0d:bd:8e:75:39:8b:28:6a:ab:f0:41:16:f8:36:ea: 10:0c:6c:51:2e:a4:a2:e4:11:80:1c:09:fb:c5:6f: e0:e3:f1:8e:fa:17:96:99:ec:85:34:5d:51:5a:fb: 32:db:f7:8a:a9:f8:74:4e:55:62:b7:a1:c0:6e:4f: 13:30:cf:3e:4b:b9:69:b2:29:8f:c7:76:90:2b:59: 72:28:d5:1a:0c:26:07:03:85:c7:0c:05:72:51:a0: 75:a8:10:83:75:df:61:9e:34:1b:74:e6:76:a6:8b: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0A:CD:C1:01:45:D7:58:E4:15:FB:68:C2:60:01:11:36:B9:E6:D2 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:26:91:c4:f4:1e:cc:b1:c6:06:a8:b6:26:81:ea:72:0b:69: c3:73:80:d3:55:ca:89:fc:15:f9:4a:25:70:c0:53:89:1d:70: 35:da:61:f2:98:fc:a6:cf:0b:2b:ca:07:d2:88:20:f9:d7:20: 54:0d:05:16:af:af:e8:7f:7d:b0:7f:93:64:12:ea:b0:35:a6: c3:f4:47:d2:0e:b1:70:dc:f3:b0:30:84:8a:9e:15:f8:5b:08: d1:60:a5:5f:3d:44:81:6b:d4:73:a7:5d:72:ca:9f:1f:17:3e: ff:1a:19:b7:e6:8b:f5:73:cc:45:7d:b2:39:9f:29:39:48:f7: 00:75:7c:7a:eb:30:55:af:66:05:24:db:60:62:c4:1e:f4:b3: 02:c7:1b:6e:80:33:c0:a6:10:3d:61:45:4d:5d:a6:97:d3:9f: 10:4b:82:af:1d:29:d7:0b:46:89:95:8f:0b:25:27:b9:80:02: 9e:61:7b:61:fb:8a:62:42:f7:f1:fa:cb:4b:2c:d9:56:82:b8: e9:a6:29:71:16:fb:17:9e:3a:52:41:da:a8:8b:0f:29:13:6b: a1:a0:91:32:c2:dc:73:49:71:b7:7e:5d:11:50:cc:b3:d8:f5: e6:7e:04:00:92:9c:bb:2c:28:3e:2f:9e:10:36:e8:d6:54:21: 0d:3a:e9:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENTYxMTAvBgNVBAUTKDkxQjI4OTkxNkI1RUY3QjM2ODY5QjNCQTgxMEMyNDVC MzY0RTQzQzAwHhcNMjYxMDI5MDc0NjU5WhcNMjYxMTA1MDc0NjU5WjAYMRYwFAYD VQQDEw02YWUyZjlmMy1iZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhXbh+53Bm9inU96WUnad+TAixoDLsxm+T+KWxDXi3OyVZw4VyaXkvBWwosL LpLaGEYIS97uSa9CqfPFHapV5YT0tK87jjc/WgMwIWZrwlP8aGTsd1xEEZzZzTpI QJEmXRq6Mb92PTzu5EeU2GhPB3Qbyt08ZhlLvfrSyi7KIRrXLFs66tCEeo0E9avL xsP//uTZMtQNvY51OYsoaqvwQRb4NuoQDGxRLqSi5BGAHAn7xW/g4/GO+heWmeyF NF1RWvsy2/eKqfh0TlVit6HAbk8TMM8+S7lpsimPx3aQK1lyKNUaDCYHA4XHDAVy UaB1qBCDdd9hnjQbdOZ2povDnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsKzcEB RddY5BX7aMJgARE2uebSMB8GA1UdIwQYMBaAFJGyiZFrXvezaGmzuoEMJFs2TkPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ1Ni9FREJCREZEOEM1 MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3Tm9hYk82Z1F3a1d6Wk9R OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ1Ni9FREJCREZEOEM1MjIxMUYwODdDN0IyMTdDNEY5QUUwMi9rYktKa1d0ZTk3 Tm9hYk82Z1F3a1d6Wk9ROEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJyaRxPQezLHGBqi2JoHqcgtpw3OA01XKifwV+UolcMBTiR1wNdph8pj8ps8L K8oH0ogg+dcgVA0FFq+v6H99sH+TZBLqsDWmw/RH0g6xcNzzsDCEip4V+FsI0WCl Xz1EgWvUc6ddcsqfHxc+/xoZt+aL9XPMRX2yOZ8pOUj3AHV8euswVa9mBSTbYGLE HvSzAscbboAzwKYQPWFFTV2ml9OfEEuCrx0p1wtGiZWPCyUnuYACnmF7YfuKYkL3 8frLSyzZVoK46aYpcRb7F546UkHaqIsPKRNroaCRMsLcc0lxt35dEVDMs9j15n4E AJKcuywoPi+eEDbo1lQhDTrplw== -----END CERTIFICATE-----Generated at Thu Oct 29 13:56:48 2026 by rpki-client