$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: 2gHufcnw1XOZM1JMyuBS/lZ6LVQcA56tSkCs4Wf3YsI= Subject key identifier: C7:F4:FE:C3:C3:C2:7D:BA:EF:B6:2F:83:06:E4:6D:16:A7:4A:83:90 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 0459 Signing time: Sat 03 Oct 2026 00:27:21 +0000 Manifest this update: Sat 03 Oct 2026 00:27:21 +0000 Manifest next update: Sat 10 Oct 2026 00:27:21 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: UQ/DUHlcT+4afWG9zj8s/3Fx8I+JnlRVKULocrxjjgg=) 2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=) 3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 00:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Oct 3 00:27:21 2026 GMT Not After : Oct 10 00:27:21 2026 GMT Subject: CN=6ac04be9-b161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:1d:ba:ce:59:30:83:3b:be:b2:c8:3b:72: fb:45:6e:26:3e:64:95:56:18:95:38:1f:5d:91:26: 3c:79:2e:15:9f:d8:71:9d:2f:52:e4:3c:d5:b2:a3: 46:93:c1:5f:ce:6a:ff:ba:29:71:a7:03:7c:28:0e: a7:db:d0:dc:e8:36:98:13:30:0a:5e:95:98:81:0b: a2:ef:0f:08:d2:28:0b:6b:0c:a0:4d:0b:83:e0:25: 03:b5:66:be:11:29:06:00:cf:a9:9c:10:af:ba:ad: e7:c1:7e:13:76:d7:49:75:e9:fb:ef:96:d0:d3:3e: 9c:fe:ad:dc:42:21:42:b1:66:6e:82:59:01:87:86: 45:a5:2a:4b:67:2d:c7:ed:02:f8:a6:88:c3:e2:b4: e9:63:db:cc:2d:a3:fb:ef:74:ef:66:88:bd:e8:f9: 85:5d:1e:58:82:14:32:0b:63:82:f6:ab:1e:e6:f1: 63:51:1c:23:c1:09:69:bd:dc:dc:93:aa:83:a5:5a: 50:17:59:70:1c:7e:d6:77:6c:ce:f0:c4:19:84:62: a5:84:30:0c:9d:d6:cc:b7:69:3b:de:f1:fd:f9:e8: 6e:fc:3f:10:63:e3:f4:1c:f0:fd:4f:b9:2e:c9:eb: 66:29:c4:6e:ad:64:74:0c:f1:c2:20:df:56:63:53: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F4:FE:C3:C3:C2:7D:BA:EF:B6:2F:83:06:E4:6D:16:A7:4A:83:90 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:94:9b:0f:c7:99:b4:9b:10:c1:92:dd:2b:da:be:f5:ed: b7:45:15:85:65:20:03:05:7a:ba:19:7d:f6:21:b0:98:99:d6: 9e:20:6d:ba:cd:36:e9:f0:60:88:5f:46:4d:e8:cf:cf:79:16: 70:4a:be:b4:21:ff:42:5d:0c:33:90:cc:f0:2e:a3:d9:43:70: f7:c1:43:af:33:35:2b:80:01:a8:e0:4b:99:d8:9b:d7:65:31: 19:07:48:95:76:10:0b:20:7f:39:93:a8:8c:17:86:b2:55:0e: 28:f0:1d:c5:16:e4:3f:1c:d5:92:c9:34:f9:06:8c:0f:b0:ae: 7a:83:25:b6:b5:66:51:63:3a:35:88:33:8e:4e:f7:37:5f:da: cd:5e:6b:c6:89:31:02:52:ae:a1:f2:e6:b1:c3:85:cc:5a:37: 4f:3b:4d:4b:fc:9c:a1:1a:b7:4e:89:f7:29:29:99:96:4d:72: fc:cd:c1:1f:9c:14:35:c1:51:cf:90:e7:bd:17:71:2c:4d:75: 8b:b4:82:07:e4:88:0e:3a:dd:c0:26:fa:e5:a7:e7:37:36:7e: f2:e9:fb:45:89:33:2d:ab:d9:17:84:e1:43:7a:af:a8:ee:61: 00:54:40:9d:6b:de:d6:9e:09:6f:90:ab:79:9c:17:a5:34:f3: c4:c6:49:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYxMDAzMDAyNzIxWhcNMjYxMDEwMDAyNzIxWjAYMRYwFAYD VQQDEw02YWMwNGJlOS1iMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H4dus5ZMIM7vrLIO3L7RW4mPmSVVhiVOB9dkSY8eS4Vn9hxnS9S5DzVsqNG k8Ffzmr/uilxpwN8KA6n29Dc6DaYEzAKXpWYgQui7w8I0igLawygTQuD4CUDtWa+ ESkGAM+pnBCvuq3nwX4TdtdJden775bQ0z6c/q3cQiFCsWZuglkBh4ZFpSpLZy3H 7QL4pojD4rTpY9vMLaP773TvZoi96PmFXR5YghQyC2OC9qse5vFjURwjwQlpvdzc k6qDpVpQF1lwHH7Wd2zO8MQZhGKlhDAMndbMt2k73vH9+ehu/D8QY+P0HPD9T7ku yetmKcRurWR0DPHCIN9WY1O/pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMf0/sPD wn2677YvgwbkbRanSoOQMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOK+Umw/HmbSbEMGS3SvavvXtt0UVhWUgAwV6uhl99iGwmJnWniBtus026fBg iF9GTejPz3kWcEq+tCH/Ql0MM5DM8C6j2UNw98FDrzM1K4ABqOBLmdib12UxGQdI lXYQCyB/OZOojBeGslUOKPAdxRbkPxzVksk0+QaMD7CueoMltrVmUWM6NYgzjk73 N1/azV5rxokxAlKuofLmscOFzFo3TztNS/ycoRq3Ton3KSmZlk1y/M3BH5wUNcFR z5DnvRdxLE11i7SCB+SIDjrdwCb65afnNzZ+8un7RYkzLavZF4ThQ3qvqO5hAFRA nWve1p4Jb5CreZwXpTTzxMZJmw== -----END CERTIFICATE-----Generated at Sun Oct 4 20:34:08 2026 by rpki-client