$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: e5pDEthIi+qo9VnTYELKYQpBSGsdmYr0LL7VsLmzl+U= Subject key identifier: 0D:9E:FD:67:89:FA:BE:E7:00:DC:8E:1D:D1:DB:89:F3:80:4C:41:25 Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 0437 Signing time: Mon 26 Oct 2026 23:50:27 +0000 Manifest this update: Mon 26 Oct 2026 23:50:26 +0000 Manifest next update: Mon 02 Nov 2026 23:50:26 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: WY4N2Dm3Y6wYsINbznx3lQYdcPMjEv+M5B4u+4Ubtmc=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Oct 26 23:50:26 2026 GMT Not After : Nov 2 23:50:26 2026 GMT Subject: CN=6adfe742-5c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:d0:1c:4f:08:d5:e3:b0:5d:4b:55:f2:a4: 8b:2d:08:88:95:4d:99:dc:40:bb:03:23:27:85:15: ae:50:db:f9:e6:39:e2:04:85:8c:16:3a:c4:a7:80: 97:3d:2f:0a:e0:96:03:4a:16:c3:73:b9:15:c9:fb: b9:02:b2:5b:5d:e8:3f:5a:c4:b3:b4:40:68:3d:36: c3:a6:f6:4c:36:b1:b2:e5:cb:7d:32:70:72:6c:5c: fa:c0:b8:ff:66:05:dc:05:83:dc:75:28:37:43:be: 7d:18:6f:58:67:ac:b8:f3:bd:51:1c:71:7f:54:ac: b2:76:68:e4:66:3d:0a:93:ef:aa:68:15:29:c7:a8: 46:3d:bc:fc:a6:1f:af:33:ce:c2:71:f4:0b:ae:7e: 5e:fb:ee:c1:26:c1:dc:36:fa:04:3a:13:64:3e:92: 15:cf:ab:af:78:1a:63:55:f6:52:fd:7a:18:f6:50: aa:3f:05:14:12:67:0e:3d:f6:e2:77:91:a4:d7:5c: 59:1e:28:1f:24:d9:06:5f:89:fc:61:62:f3:0e:11: d2:df:07:3e:4f:9a:44:88:51:37:20:24:4b:a8:72: 5d:ca:27:c2:e0:75:d8:2f:a7:0b:82:48:76:09:2a: 25:46:b0:38:8e:c8:50:db:7a:ac:68:09:ff:a9:32: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9E:FD:67:89:FA:BE:E7:00:DC:8E:1D:D1:DB:89:F3:80:4C:41:25 X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c3:3c:fb:53:ee:dd:6a:8d:d4:69:b9:62:47:8f:3c:74:ce: 04:99:29:d9:8a:b4:c3:3c:2e:c0:f2:cb:94:8e:04:06:e6:89: be:60:e0:0c:22:7b:28:e3:13:8d:22:ba:d5:6f:42:58:0d:4d: 9e:22:17:30:1d:d6:10:a4:78:3c:be:25:c3:a9:51:59:01:4d: 1a:83:75:7a:71:28:d7:ec:3c:4a:cd:f0:14:c9:f7:04:6e:b7: 18:c8:10:ea:46:6f:ce:66:ba:30:07:d1:fd:90:23:9d:1d:bf: df:d7:9a:a7:b3:f4:58:cf:7e:2a:cb:ef:96:5d:2a:16:fa:84: ea:9e:73:49:24:cc:d3:cb:16:89:66:c0:31:65:cf:ec:02:5e: 8f:4e:37:a1:fd:ff:be:af:66:e3:90:dc:c8:23:98:14:80:df: 1f:ad:11:3b:77:0b:74:d1:6e:15:bd:73:02:1e:28:1e:56:4b: e8:4d:66:46:60:c9:4a:01:a9:47:eb:a9:6e:9e:cd:1f:47:45: f1:83:6d:9a:da:01:72:3e:f8:18:cf:50:4d:2c:29:4e:22:93: b3:17:71:81:ad:2d:8a:ce:8a:03:76:3f:01:bc:2b:dd:36:6f: 0b:88:cb:76:24:9a:4e:3a:c4:c9:2a:8b:51:93:2a:fe:c5:cd: 78:f5:ba:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYxMDI2MjM1MDI2WhcNMjYxMTAyMjM1MDI2WjAYMRYwFAYD VQQDEw02YWRmZTc0Mi01Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuvQHE8I1eOwXUtV8qSLLQiIlU2Z3EC7AyMnhRWuUNv55jniBIWMFjrEp4CX PS8K4JYDShbDc7kVyfu5ArJbXeg/WsSztEBoPTbDpvZMNrGy5ct9MnBybFz6wLj/ ZgXcBYPcdSg3Q759GG9YZ6y4871RHHF/VKyydmjkZj0Kk++qaBUpx6hGPbz8ph+v M87CcfQLrn5e++7BJsHcNvoEOhNkPpIVz6uveBpjVfZS/XoY9lCqPwUUEmcOPfbi d5Gk11xZHigfJNkGX4n8YWLzDhHS3wc+T5pEiFE3ICRLqHJdyifC4HXYL6cLgkh2 CSolRrA4jshQ23qsaAn/qTL2FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2e/WeJ +r7nANyOHdHbifOATEElMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMM8+1Pu3WqN1Gm5YkePPHTOBJkp2Yq0wzwuwPLLlI4EBuaJvmDgDCJ7KOMT jSK61W9CWA1NniIXMB3WEKR4PL4lw6lRWQFNGoN1enEo1+w8Ss3wFMn3BG63GMgQ 6kZvzma6MAfR/ZAjnR2/39eap7P0WM9+Ksvvll0qFvqE6p5zSSTM08sWiWbAMWXP 7AJej043of3/vq9m45DcyCOYFIDfH60RO3cLdNFuFb1zAh4oHlZL6E1mRmDJSgGp R+upbp7NH0dF8YNtmtoBcj74GM9QTSwpTiKTsxdxga0tis6KA3Y/Abwr3TZvC4jL diSaTjrEySqLUZMq/sXNePW6Ug== -----END CERTIFICATE-----Generated at Tue Oct 27 22:24:18 2026 by rpki-client