$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: 1GtQisENp0ShXRpjpElMDvTYvY6/jcP5CHQYRfCJXQ8= Subject key identifier: 87:AF:AC:BE:AE:8B:E7:31:FC:5F:38:5B:5A:BE:56:A0:8E:30:80:0A Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 045A Signing time: Mon 05 Oct 2026 00:09:58 +0000 Manifest this update: Mon 05 Oct 2026 00:09:58 +0000 Manifest next update: Mon 12 Oct 2026 00:09:58 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: zwUC8sxrcAJo+Ig3WH5wde+a4B/mTX08F9XxFDBoYvo=) 2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=) 3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Oct 5 00:09:58 2026 GMT Not After : Oct 12 00:09:58 2026 GMT Subject: CN=6ac2ead6-8195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5d:b1:36:f9:7d:cd:c7:0b:39:bb:f5:eb:1a: 86:ba:37:28:48:dc:8a:1e:da:26:09:cf:19:be:07: 50:5c:08:68:e9:ba:f8:f1:52:35:5f:ff:95:51:de: f3:e4:d4:fa:9a:b9:bb:04:29:98:b6:be:17:d9:c4: 48:76:e9:89:00:1e:2b:24:46:2c:a9:92:6b:02:7e: 7a:f8:79:fc:ae:53:34:14:0e:01:ca:07:a3:3b:30: 50:15:4e:ac:ce:03:1b:28:b9:d3:7b:55:57:ff:6c: 9d:0c:56:d0:01:4d:12:e8:74:6e:92:5e:ee:1a:d1: 16:45:a9:49:59:03:c9:f4:c2:4a:fc:85:6f:4b:ca: 82:97:59:cd:fc:03:26:f6:8a:22:55:f7:05:e3:58: 69:0b:12:aa:18:59:55:de:db:5a:c7:87:2a:fb:0a: c6:0f:d9:7a:f8:27:51:06:35:41:a0:37:3a:85:98: 00:b9:25:e4:cd:54:14:86:ba:43:f6:ff:d6:bd:83: 81:63:93:17:2b:3a:e8:50:17:6b:8f:62:ad:54:47: 79:cf:0c:77:8a:36:9f:e3:45:d7:bc:53:2d:56:c4: 9e:37:d2:0d:12:98:95:f7:91:a3:86:71:25:7f:6a: 8d:8f:76:4a:93:f1:eb:bb:46:c7:b5:6e:24:e3:07: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:AC:BE:AE:8B:E7:31:FC:5F:38:5B:5A:BE:56:A0:8E:30:80:0A X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:87:fb:27:02:08:d5:31:87:2f:dc:2e:dc:c0:97:6b:15:63: 70:e2:cc:dc:69:24:b8:e9:cd:ea:7f:26:cc:8b:bf:bf:14:f7: 8d:b6:f0:4e:d7:61:d3:a0:88:1f:96:9d:33:67:7a:19:03:f5: 03:61:f2:e1:6d:a3:f4:7c:f8:3b:67:0c:85:ef:87:02:c1:c3: 64:50:f0:ea:7c:cf:06:93:ce:30:9f:7d:9b:6b:bb:c5:b6:42: 67:9a:ad:1f:46:43:06:e1:c8:ab:83:1c:22:69:88:3e:ac:17: 34:aa:ac:3a:0d:ea:cc:01:0e:5f:56:f9:1a:d4:59:10:4d:da: 08:0f:31:14:3f:ee:54:b0:79:45:72:a7:e8:89:8a:0c:69:8c: 5e:e1:b1:68:ef:92:fc:d1:31:5f:b7:7f:9f:e1:4f:48:2c:c8: 52:02:a0:5a:2c:6d:60:ec:ca:d3:d5:62:00:d8:84:3f:35:25: 9b:5f:08:45:ab:59:e1:ff:7a:3c:35:5e:df:b7:31:ef:d6:94: 86:5b:b6:f4:8c:c5:5d:89:ff:32:fe:e0:8b:f0:ce:61:8c:9f: 69:e8:c9:da:0b:46:d3:78:5b:a4:4c:28:a3:87:ac:71:63:70: 73:cc:6a:aa:ae:7c:73:30:a9:a3:e9:da:ab:ae:51:c7:6d:59: 07:d5:de:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYxMDA1MDAwOTU4WhcNMjYxMDEyMDAwOTU4WjAYMRYwFAYD VQQDEw02YWMyZWFkNi04MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA612xNvl9zccLObv16xqGujcoSNyKHtomCc8ZvgdQXAho6br48VI1X/+VUd7z 5NT6mrm7BCmYtr4X2cRIdumJAB4rJEYsqZJrAn56+Hn8rlM0FA4BygejOzBQFU6s zgMbKLnTe1VX/2ydDFbQAU0S6HRukl7uGtEWRalJWQPJ9MJK/IVvS8qCl1nN/AMm 9ooiVfcF41hpCxKqGFlV3ttax4cq+wrGD9l6+CdRBjVBoDc6hZgAuSXkzVQUhrpD 9v/WvYOBY5MXKzroUBdrj2KtVEd5zwx3ijaf40XXvFMtVsSeN9INEpiV95GjhnEl f2qNj3ZKk/Hru0bHtW4k4wcn/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIevrL6u i+cx/F84W1q+VqCOMIAKMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYYf7JwII1TGHL9wu3MCXaxVjcOLM3GkkuOnN6n8mzIu/vxT3jbbwTtdh06CI H5adM2d6GQP1A2Hy4W2j9Hz4O2cMhe+HAsHDZFDw6nzPBpPOMJ99m2u7xbZCZ5qt H0ZDBuHIq4McImmIPqwXNKqsOg3qzAEOX1b5GtRZEE3aCA8xFD/uVLB5RXKn6ImK DGmMXuGxaO+S/NExX7d/n+FPSCzIUgKgWixtYOzK09ViANiEPzUlm18IRatZ4f96 PDVe37cx79aUhlu29IzFXYn/Mv7gi/DOYYyfaejJ2gtG03hbpEwoo4escWNwc8xq qq58czCpo+naq65Rx21ZB9XeHg== -----END CERTIFICATE-----Generated at Tue Oct 6 13:11:04 2026 by rpki-client