$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json) Hash identifier: pQiD37wIAMMTjlqhcXmoQgJYSjD11AOxOKW2nEv4ixU= Subject key identifier: B6:10:99:30:20:9C:87:7D:B1:1E:74:15:D5:A4:62:2B:54:30:7B:38 Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft Manifest number: 01A3 Signing time: Mon 05 Oct 2026 04:37:31 +0000 Manifest this update: Mon 05 Oct 2026 04:37:31 +0000 Manifest next update: Mon 12 Oct 2026 04:37:31 +0000 Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: kOTtsy8HgVYU21Z68a85VIpwFRHdJvLkbDNGdBM/eN8=) 2: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: TDlLh34Bo1Qa+MNIEkMopEk/3BJaO3P1cNy38YBcx/A=) 3: AAF88862D51811F0B469126CC4F9AE02.roa (hash: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg=) 4: AB61CD86D51811F09422126CC4F9AE02.roa (hash: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Oct 5 04:37:31 2026 GMT Not After : Oct 12 04:37:31 2026 GMT Subject: CN=6ac3298b-168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:14:d1:87:a4:89:30:a4:13:b5:10:24:78: d0:75:f7:0d:cd:93:f6:a9:f7:e5:7b:dc:53:ca:1b: d0:40:41:ac:6d:e7:c8:7e:b9:a4:ed:2c:c6:77:ae: 72:7e:00:51:01:45:40:0b:5a:f9:e4:34:11:b3:07: d7:05:ef:fc:8a:03:7d:a7:e1:f7:df:de:39:7a:50: 40:7b:2a:8a:c9:1f:a9:11:e4:f2:d7:62:d3:bb:74: b8:85:04:52:71:90:b3:64:ac:3e:1c:83:ee:e9:20: 45:c3:8f:c1:26:cb:74:a4:97:a5:68:c7:92:dc:5f: 7d:0e:b3:bc:35:68:2b:e7:71:f3:bc:f3:49:77:c0: 1d:22:48:d8:4d:f1:6f:9f:ef:e5:1d:d2:14:ce:3f: 45:39:1f:4d:75:de:ac:5e:93:50:a4:6a:d7:a2:36: f3:93:04:30:36:4e:a0:27:3a:bb:15:6f:f1:2a:c3: 82:4f:28:7c:a7:be:ef:4d:7a:fe:1c:5f:cc:28:7b: a0:08:fc:21:a8:79:05:86:d4:95:a6:b0:50:a2:9f: d2:d1:af:fd:60:58:9f:51:3c:a1:a2:e4:de:35:c1: b5:62:89:5e:8f:91:8d:ba:18:1e:21:b0:79:84:d8: 85:99:4b:fc:36:1d:b6:f3:12:86:b3:b2:8a:63:19: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:99:30:20:9C:87:7D:B1:1E:74:15:D5:A4:62:2B:54:30:7B:38 X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3a:b6:af:07:77:c3:f3:63:c5:84:db:99:f5:85:d0:ce:29: 95:60:c1:71:c2:47:e8:18:da:f3:61:9f:2f:30:3f:b3:2e:4a: da:94:c0:50:c0:d2:7d:47:3e:ca:18:0e:b0:f4:f8:5b:0e:8a: a1:38:d8:8c:03:28:fb:63:ee:82:f8:4e:06:8b:4a:97:44:99: 4f:73:00:47:19:d7:79:8d:9e:19:d0:af:5e:c5:15:b1:af:6a: a4:d2:d7:01:0d:ed:e6:32:30:62:6e:87:0e:2a:63:df:0e:e0: cb:cc:ed:66:f5:db:59:22:ee:df:28:60:58:3d:da:d9:c4:c5: 3b:ed:d7:24:07:0d:0a:ec:cb:b7:a6:9e:99:32:05:ac:9b:16: b0:50:5c:d8:9d:95:4e:1b:e7:fb:f0:fd:58:40:e0:63:2e:9d: b8:d0:54:d7:85:ca:c1:2a:37:8e:3a:ad:0a:e9:b3:f7:bd:b6: ab:01:0f:44:3b:fc:4d:2d:71:8e:a3:65:80:2a:63:73:e4:a8: 74:32:49:aa:4b:99:ee:91:a6:d6:67:f4:96:da:41:f6:0c:1a: 2d:11:d2:29:65:7e:1c:f2:fd:47:f2:27:b2:36:60:cb:e9:c6: 4c:21:bf:3e:01:b9:12:81:59:0f:b7:c2:f6:25:15:bd:15:11: 8b:f6:6b:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjYxMDA1MDQzNzMxWhcNMjYxMDEyMDQzNzMxWjAYMRYwFAYD VQQDEw02YWMzMjk4Yi0xNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5kU0YekiTCkE7UQJHjQdfcNzZP2qffle9xTyhvQQEGsbefIfrmk7SzGd65y fgBRAUVAC1r55DQRswfXBe/8igN9p+H33945elBAeyqKyR+pEeTy12LTu3S4hQRS cZCzZKw+HIPu6SBFw4/BJst0pJelaMeS3F99DrO8NWgr53HzvPNJd8AdIkjYTfFv n+/lHdIUzj9FOR9Ndd6sXpNQpGrXojbzkwQwNk6gJzq7FW/xKsOCTyh8p77vTXr+ HF/MKHugCPwhqHkFhtSVprBQop/S0a/9YFifUTyhouTeNcG1Yolej5GNuhgeIbB5 hNiFmUv8Nh228xKGs7KKYxlb1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYQmTAg nId9sR50FdWkYitUMHs4MB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDq2rwd3w/NjxYTbmfWF0M4plWDBccJH6Bja82GfLzA/sy5K2pTAUMDSfUc+ yhgOsPT4Ww6KoTjYjAMo+2PugvhOBotKl0SZT3MARxnXeY2eGdCvXsUVsa9qpNLX AQ3t5jIwYm6HDipj3w7gy8ztZvXbWSLu3yhgWD3a2cTFO+3XJAcNCuzLt6aemTIF rJsWsFBc2J2VThvn+/D9WEDgYy6duNBU14XKwSo3jjqtCumz9722qwEPRDv8TS1x jqNlgCpjc+SodDJJqkuZ7pGm1mf0ltpB9gwaLRHSKWV+HPL9R/InsjZgy+nGTCG/ PgG5EoFZD7fC9iUVvRURi/Zr/w== -----END CERTIFICATE-----Generated at Tue Oct 6 03:56:22 2026 by rpki-client