$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: 1bAR22XWaaScUcuCiDSDPxyhI9Oik/6Gx4wPA63DWu4= Subject key identifier: 72:31:FA:A9:CC:41:5D:6F:B5:D1:2C:3B:B8:68:33:1D:79:5F:F4:64 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 090A Signing time: Tue 08 Sep 2026 20:21:31 +0000 Manifest this update: Tue 08 Sep 2026 20:21:31 +0000 Manifest next update: Tue 15 Sep 2026 20:21:31 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: 7Nq+rOKU87pTmnT20mVfAQ6j3zLcnabMqlkK5p5A9po=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Sep 8 20:21:31 2026 GMT Not After : Sep 15 20:21:31 2026 GMT Subject: CN=6aa06e4b-5f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:9d:f3:58:f7:8e:48:67:ec:df:0c:3c:7e: 09:3c:9a:dd:fb:91:fa:27:cf:5d:c0:51:b9:11:b9: 97:60:4a:71:29:da:7c:33:3f:0d:23:d2:b6:49:3e: d0:e9:69:fd:08:c2:23:24:fa:d7:5e:8e:71:4a:9d: 1b:31:a9:82:74:52:28:38:d5:7a:f7:84:11:db:08: dd:29:bf:fa:3f:ba:9d:57:11:be:64:0f:ab:fd:11: 64:64:30:55:51:e0:84:80:3d:b4:eb:e7:1f:c4:54: 84:fd:62:6a:46:92:86:ca:8f:c2:31:41:ca:10:55: e6:31:7c:ea:2c:49:5a:dc:bf:26:2f:58:84:1c:55: dd:be:9c:2d:57:35:06:2d:31:9b:8e:62:e2:77:8b: fa:45:fa:94:9e:a0:70:cb:c2:f5:67:32:be:ec:7f: 04:f0:15:8b:76:1c:3e:a1:76:07:14:43:8e:c7:65: 91:92:a4:89:07:b6:fe:6d:c6:c3:28:6a:09:af:6f: 51:bb:df:ec:70:4c:25:b5:0f:b9:60:d6:fb:9b:14: 14:2d:7f:39:5a:32:a1:8b:b3:1e:91:82:3c:0c:7f: 99:d4:8a:61:7d:8a:f9:54:df:a3:08:08:f4:8f:f4: 07:44:4d:9b:34:8e:0d:27:03:1c:c0:d8:e8:25:ac: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:31:FA:A9:CC:41:5D:6F:B5:D1:2C:3B:B8:68:33:1D:79:5F:F4:64 X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:0e:87:db:fc:9e:8e:1f:8f:7e:4d:94:ac:f9:83:d1:63: d6:87:ba:67:ac:c5:17:7e:c3:15:47:d6:7b:5d:14:a8:35:c4: 27:47:0f:5b:37:8c:f7:86:16:34:2a:43:5b:e2:fa:03:fa:55: ef:73:68:27:fc:ef:b9:c5:20:68:69:20:9f:70:8e:b7:e0:df: 8a:e1:46:06:1d:7d:a5:cc:be:39:09:b3:51:30:27:63:a7:88: 45:3b:49:e8:4c:03:2d:79:12:32:81:43:cb:bc:a9:fa:74:8d: 12:be:70:25:4a:cf:ed:41:10:59:9d:94:07:fb:23:45:c3:94: 14:cf:9e:ea:79:26:19:e1:5d:a0:2a:1c:9b:5f:aa:56:9b:4e: b0:53:b3:c4:ed:9b:4a:c3:a3:60:cf:12:3e:62:67:6a:d5:1f: e0:eb:8a:d7:22:3a:7c:69:92:de:20:a0:f4:4d:3b:12:c8:f8: b0:54:7e:05:ba:8f:23:6b:b1:5d:32:aa:fa:36:34:68:71:e1: 6b:77:90:58:49:b1:d3:17:45:48:23:4b:1e:92:b9:e7:46:ba: a7:6b:0b:b0:bb:12:92:ce:9b:ca:72:b5:57:e0:de:a4:6d:fd: 8a:d0:b4:bd:18:09:3d:95:ea:84:f6:5f:57:6d:49:22:49:be: 4a:19:01:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjYwOTA4MjAyMTMxWhcNMjYwOTE1MjAyMTMxWjAYMRYwFAYD VQQDEw02YWEwNmU0Yi01ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueSd81j3jkhn7N8MPH4JPJrd+5H6J89dwFG5EbmXYEpxKdp8Mz8NI9K2ST7Q 6Wn9CMIjJPrXXo5xSp0bMamCdFIoONV694QR2wjdKb/6P7qdVxG+ZA+r/RFkZDBV UeCEgD206+cfxFSE/WJqRpKGyo/CMUHKEFXmMXzqLEla3L8mL1iEHFXdvpwtVzUG LTGbjmLid4v6RfqUnqBwy8L1ZzK+7H8E8BWLdhw+oXYHFEOOx2WRkqSJB7b+bcbD KGoJr29Ru9/scEwltQ+5YNb7mxQULX85WjKhi7MekYI8DH+Z1IphfYr5VN+jCAj0 j/QHRE2bNI4NJwMcwNjoJaymcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIx+qnM QV1vtdEsO7hoMx15X/RkMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIR4Oh9v8no4fj35NlKz5g9Fj1oe6Z6zFF37DFUfWe10UqDXEJ0cPWzeM94YW NCpDW+L6A/pV73NoJ/zvucUgaGkgn3COt+DfiuFGBh19pcy+OQmzUTAnY6eIRTtJ 6EwDLXkSMoFDy7yp+nSNEr5wJUrP7UEQWZ2UB/sjRcOUFM+e6nkmGeFdoCocm1+q VptOsFOzxO2bSsOjYM8SPmJnatUf4OuK1yI6fGmS3iCg9E07Esj4sFR+BbqPI2ux XTKq+jY0aHHha3eQWEmx0xdFSCNLHpK550a6p2sLsLsSks6bynK1V+DepG39itC0 vRgJPZXqhPZfV21JIkm+ShkBug== -----END CERTIFICATE-----Generated at Thu Sep 10 11:27:36 2026 by rpki-client