$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: qXaWOeTIDfpojUII5G2tCeSy2NZ2clRXFIu3XbnLo1s= Subject key identifier: C6:64:7D:C2:A8:E9:28:CF:FF:EA:61:A3:D1:75:64:9D:BD:17:11:B6 Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 0342 Signing time: Thu 27 Aug 2026 00:47:43 +0000 Manifest this update: Thu 27 Aug 2026 00:47:42 +0000 Manifest next update: Thu 03 Sep 2026 00:47:42 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: Jdvww/7zkUhJWRuumd+bRM7k62kwpHdPLQnJB6CDEHA=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 00:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Aug 27 00:47:42 2026 GMT Not After : Sep 3 00:47:42 2026 GMT Subject: CN=6a8f892e-39f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:53:d3:85:81:ca:0b:e4:ba:b8:c0:1d:6d: 83:0a:32:4b:c0:29:79:e2:43:a1:a0:34:25:a9:c4: 7d:39:2d:82:ac:5f:75:11:94:7f:a7:13:d6:78:2f: 62:96:86:40:b8:09:2f:3c:8d:88:66:bb:86:5c:d2: 61:c5:ac:a2:9a:12:c3:dc:2b:64:d7:2b:79:04:4c: 14:1f:aa:29:66:8f:e1:40:e9:c2:36:60:5b:6e:a9: 01:d1:7f:c6:d6:35:43:b4:2a:02:80:87:5d:57:3a: b0:e9:a1:fa:cf:8e:42:bb:54:5d:89:07:17:4d:33: 76:53:c4:8b:71:7e:5f:39:a9:f8:47:65:17:a6:74: 5a:03:20:4c:d4:9e:13:4c:17:ef:80:b0:b2:f0:84: 2a:42:00:9c:42:71:0c:ec:93:26:d8:76:9b:7b:1d: e9:91:1b:d0:55:90:ec:24:fb:da:34:97:38:0d:e2: 89:37:d9:e6:b5:a0:0d:37:e1:ce:a3:14:ee:cd:63: 1a:34:2a:98:8e:9e:4e:8a:a6:67:9a:6a:39:81:d8: fc:f2:d5:86:3a:93:2e:16:4e:d0:32:d4:ce:d1:93: c7:29:9b:02:69:65:9e:64:ff:00:3b:1d:86:ac:93: ad:3a:64:39:9e:00:3c:07:38:6c:ec:29:67:cc:97: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:64:7D:C2:A8:E9:28:CF:FF:EA:61:A3:D1:75:64:9D:BD:17:11:B6 X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d4:dd:15:ec:6e:d9:45:24:92:c0:03:83:8d:54:eb:63:50: 3e:1e:d4:07:6b:a2:72:4e:b4:a7:7b:e1:4e:89:7e:70:a6:75: 79:b5:6e:e8:91:fe:53:46:95:48:f9:ec:50:84:9e:0d:cc:3a: 4a:e5:f7:b1:d9:e7:6c:b4:bc:61:6b:9c:54:f1:e4:e8:bd:74: 81:d2:94:3d:28:f2:cc:89:83:73:e9:d3:ee:27:cd:75:21:82: 30:d2:68:dd:02:4d:f7:aa:7a:88:6a:4f:56:f6:e5:a8:20:e9: 8d:7a:64:29:c4:f0:34:af:38:eb:c8:ab:8e:cf:21:ff:c5:d2: 5e:41:e0:c9:cf:2c:c6:9a:14:18:00:15:f1:7c:09:24:49:72: c9:ec:f6:ca:8f:ff:55:bb:77:c9:64:56:09:72:5e:3e:f0:63: 39:17:f3:9d:bb:e4:6c:87:b4:d2:a7:99:30:4f:81:52:a6:93: 83:88:55:53:82:a3:ee:78:99:63:25:ad:a3:40:5e:4c:19:93: e7:2f:59:29:b5:0d:fa:0f:b3:81:b3:70:38:91:6e:ad:d8:cd: 06:34:b6:f6:15:af:ca:8e:53:38:f1:9f:94:13:88:a3:78:9c: 9a:b1:32:e7:f3:4f:d8:8e:f2:f4:65:43:d1:10:39:27:dd:74: ab:4b:99:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjYwODI3MDA0NzQyWhcNMjYwOTAzMDA0NzQyWjAYMRYwFAYD VQQDEw02YThmODkyZS0zOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv91T04WBygvkurjAHW2DCjJLwCl54kOhoDQlqcR9OS2CrF91EZR/pxPWeC9i loZAuAkvPI2IZruGXNJhxayimhLD3Ctk1yt5BEwUH6opZo/hQOnCNmBbbqkB0X/G 1jVDtCoCgIddVzqw6aH6z45Cu1RdiQcXTTN2U8SLcX5fOan4R2UXpnRaAyBM1J4T TBfvgLCy8IQqQgCcQnEM7JMm2Habex3pkRvQVZDsJPvaNJc4DeKJN9nmtaANN+HO oxTuzWMaNCqYjp5OiqZnmmo5gdj88tWGOpMuFk7QMtTO0ZPHKZsCaWWeZP8AOx2G rJOtOmQ5ngA8Bzhs7ClnzJf3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZkfcKo 6SjP/+pho9F1ZJ29FxG2MB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdTdFexu2UUkksADg41U62NQPh7UB2uick60p3vhTol+cKZ1ebVu6JH+U0aV SPnsUISeDcw6SuX3sdnnbLS8YWucVPHk6L10gdKUPSjyzImDc+nT7ifNdSGCMNJo 3QJN96p6iGpPVvblqCDpjXpkKcTwNK8468irjs8h/8XSXkHgyc8sxpoUGAAV8XwJ JElyyez2yo//Vbt3yWRWCXJePvBjORfznbvkbIe00qeZME+BUqaTg4hVU4Kj7niZ YyWto0BeTBmT5y9ZKbUN+g+zgbNwOJFurdjNBjS29hWvyo5TOPGflBOIo3icmrEy 5/NP2I7y9GVD0RA5J910q0uZtA== -----END CERTIFICATE-----Generated at Thu Aug 27 16:01:01 2026 by rpki-client