$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: EX9RAiMusMF11Rn7mixALShmrTbOwQ9ltOO5al+QRZw= Subject key identifier: D1:67:50:F2:28:A4:79:F6:B7:24:B2:BB:4C:B7:96:7C:22:9A:24:3E Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 0112 Signing time: Fri 09 Oct 2026 06:40:25 +0000 Manifest this update: Fri 09 Oct 2026 06:40:24 +0000 Manifest next update: Fri 16 Oct 2026 06:40:24 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: mgfXA9CoLr+3Jje2M4UqeT72wmbbYsoxWI3j2Cfnxc0=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 06:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Oct 9 06:40:24 2026 GMT Not After : Oct 16 06:40:24 2026 GMT Subject: CN=6ac88c59-e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:bf:18:1f:42:7f:4e:d9:ec:db:cf:52:4a: 1f:5d:ed:f0:bd:92:19:98:7e:83:ad:bb:6e:12:8e: d5:7b:ff:a7:09:18:45:ae:81:26:83:7b:85:54:0b: ce:65:77:28:06:88:01:a9:1e:75:6f:aa:25:31:e8: 28:ef:19:c3:54:c5:8a:6f:2f:21:f0:da:18:b4:d9: 3a:6c:34:2a:cd:ee:b6:28:61:ad:50:96:a3:01:ae: 19:b1:12:ae:fd:80:87:ca:cb:59:1e:a7:23:40:75: 56:88:31:d5:9e:a9:2a:ed:2f:8c:23:18:6b:3c:14: e9:eb:68:9f:89:83:6d:af:3e:70:03:f4:50:61:b4: a8:89:71:68:29:a1:aa:df:43:98:f7:9d:dd:e8:42: 6b:ca:3b:42:ca:81:f4:ef:00:a6:1d:9a:6f:f1:ba: 69:90:65:e5:75:30:66:33:bd:16:5a:4f:6f:85:cd: 2a:e6:ba:7e:02:c6:0d:51:06:1a:26:07:31:a7:2c: 34:62:4a:3e:73:c1:9c:8c:99:c3:c1:7a:7f:ed:9c: 44:fd:66:22:57:1c:ed:f3:f9:8d:80:b5:4b:4b:8d: f2:01:ab:fc:2d:e2:71:33:bf:3e:62:71:d6:3a:d3: 02:ad:c0:fd:21:bb:67:aa:8d:a3:24:5b:1c:31:74: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:67:50:F2:28:A4:79:F6:B7:24:B2:BB:4C:B7:96:7C:22:9A:24:3E X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1c:80:7b:94:67:6b:fb:26:75:4d:0c:15:e4:30:b5:66:45: 32:d0:be:63:a8:9d:4c:db:cc:c0:c6:db:5c:d2:56:98:27:b3: 2b:e6:9e:28:a9:5d:33:2c:a4:12:40:f8:11:b9:fe:97:99:c2: 94:be:ac:ee:d0:e7:c2:b9:8f:a7:80:8a:a2:e2:12:b5:9f:0a: 64:5a:a6:70:3b:0c:0a:67:c8:2d:9f:92:62:44:8d:cd:e3:14: 7f:f6:81:c5:f7:f2:4e:96:ab:5c:a7:7f:5d:b3:d5:83:1d:c1: 12:00:3c:b4:c9:98:b5:27:b9:77:b3:0f:12:c6:a5:63:c0:8f: 9e:34:2e:d6:1e:99:f1:34:c7:d2:62:92:b0:17:e8:7c:38:fd: d4:e2:88:f0:04:74:35:33:25:c3:44:ce:a3:03:b2:9a:34:71: f7:f1:43:3b:8e:c1:6c:69:2d:0c:21:c2:7e:32:00:5b:19:18: 85:83:f7:5d:de:7a:9e:73:35:67:ec:72:3e:47:65:f0:b0:4f: 7a:cf:0f:30:d1:46:6e:48:8f:84:8e:80:ff:5c:1b:92:fa:f0: 69:ed:0e:0b:37:b4:f7:37:09:9d:c6:67:53:04:e4:6f:0f:7a: 4b:9a:b6:17:33:46:8a:26:79:27:27:58:6b:7c:a0:08:4d:96: 65:32:ab:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZCNEIxMTAvBgNVBAUTKDJBMDBGRDVENUVBRUY4MUYzMkIwMEIyRTVDODJDNUVD REFDMTI2OTMwHhcNMjYxMDA5MDY0MDI0WhcNMjYxMDE2MDY0MDI0WjAYMRYwFAYD VQQDEw02YWM4OGM1OS1lM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5i/GB9Cf07Z7NvPUkofXe3wvZIZmH6DrbtuEo7Ve/+nCRhFroEmg3uFVAvO ZXcoBogBqR51b6olMego7xnDVMWKby8h8NoYtNk6bDQqze62KGGtUJajAa4ZsRKu /YCHystZHqcjQHVWiDHVnqkq7S+MIxhrPBTp62ifiYNtrz5wA/RQYbSoiXFoKaGq 30OY953d6EJryjtCyoH07wCmHZpv8bppkGXldTBmM70WWk9vhc0q5rp+AsYNUQYa Jgcxpyw0Yko+c8GcjJnDwXp/7ZxE/WYiVxzt8/mNgLVLS43yAav8LeJxM78+YnHW OtMCrcD9Ibtnqo2jJFscMXSFnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFnUPIo pHn2tySyu0y3lnwimiQ+MB8GA1UdIwQYMBaAFCoA/V1ervgfMrALLlyCxezawSaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9CQjQyQzFERTI0 QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1COHlzQXN1WElMRjdOckJK cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkI0Qi9CQjQyQzFERTI0QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1C OHlzQXN1WElMRjdOckJKcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhyAe5Rna/smdU0MFeQwtWZFMtC+Y6idTNvMwMbbXNJWmCezK+aeKKldMyyk EkD4Ebn+l5nClL6s7tDnwrmPp4CKouIStZ8KZFqmcDsMCmfILZ+SYkSNzeMUf/aB xffyTparXKd/XbPVgx3BEgA8tMmYtSe5d7MPEsalY8CPnjQu1h6Z8TTH0mKSsBfo fDj91OKI8AR0NTMlw0TOowOymjRx9/FDO47BbGktDCHCfjIAWxkYhYP3Xd56nnM1 Z+xyPkdl8LBPes8PMNFGbkiPhI6A/1wbkvrwae0OCze09zcJncZnUwTkbw96S5q2 FzNGiiZ5JydYa3ygCE2WZTKruA== -----END CERTIFICATE-----Generated at Sun Oct 11 07:21:48 2026 by rpki-client