$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: 5IT57WPuPQoDZPuHqCHozjFBASh3ku67B93t0U/Zf/M= Subject key identifier: 62:C1:FF:94:E7:0A:2A:A7:86:6A:8C:87:36:7D:6E:63:DB:D5:4D:E6 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: CD Signing time: Sat 03 Oct 2026 07:55:32 +0000 Manifest this update: Sat 03 Oct 2026 07:55:31 +0000 Manifest next update: Sat 10 Oct 2026 07:55:31 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: 2WvG+lIuVBynTMq1qeNwEGnzqwv/ADf+5DlAdWot5/k=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: fZLS7BTbHgwFyiQ62aGPt6/LG4QSbyVXY6J5NvFpJ1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Oct 3 07:55:31 2026 GMT Not After : Oct 10 07:55:31 2026 GMT Subject: CN=6ac0b4f3-ce05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:86:bf:94:91:b2:b5:5a:05:2f:93:e9:d4: 0f:27:7d:bc:15:ae:9f:f9:34:35:b2:eb:76:a7:6b: 40:ec:f6:cc:79:2d:18:b5:10:43:68:bb:93:9f:11: 78:7d:72:45:17:34:b5:d4:58:bd:74:7f:0f:1f:15: a9:39:32:94:9a:7c:8a:8a:9b:97:90:4e:da:60:bb: f3:c1:4d:6f:64:e8:be:14:a1:37:d2:de:0d:a7:73: b9:98:8a:9e:23:c5:cf:9c:9c:4c:d7:c2:61:19:38: 52:8d:2a:85:90:f9:a3:38:51:4b:c0:d3:21:4e:c8: 0c:5d:9e:35:96:92:0d:66:eb:10:f8:48:57:42:5d: d4:0e:e0:d8:b3:72:f7:1e:4f:66:7b:c8:88:c6:e9: 71:7c:62:8e:10:fa:00:15:41:b2:59:f5:d7:ec:3d: 79:30:0f:8c:3d:dd:20:a3:de:d1:d6:aa:03:02:be: 6b:a4:4c:73:67:1d:ea:9e:42:68:c3:c0:64:58:0d: 49:b2:c9:90:0b:9f:a0:aa:3a:49:2c:f5:17:e7:51: 40:ac:b4:6d:4c:b1:54:2b:b9:ff:80:2f:e7:a2:b6: d4:84:84:b4:72:3a:11:f4:f4:84:d4:87:7c:2d:83: 9d:a8:5a:6c:c7:d0:0c:13:1d:34:25:6c:7f:bb:c9: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C1:FF:94:E7:0A:2A:A7:86:6A:8C:87:36:7D:6E:63:DB:D5:4D:E6 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:61:7c:94:61:b1:b6:40:94:63:91:e7:f6:f7:42:00:e9:f2: 1c:53:5e:d1:84:04:01:71:d0:b2:40:e7:6f:33:90:2a:95:31: 17:0d:29:55:69:a5:d6:99:17:75:d4:5f:a0:98:d5:f6:d4:77: 14:0f:9c:a8:dc:9a:1a:cf:00:c1:34:16:57:3a:d9:56:73:fb: 87:72:ae:61:b7:7a:0e:95:d2:bc:ed:81:06:ec:bf:f4:ba:2a: d3:be:a4:ea:fd:62:06:b9:f9:22:c4:d2:09:da:51:b3:ab:2b: a1:bc:47:90:e4:a0:93:31:31:b9:b7:a2:2c:10:01:c2:aa:23: ff:f5:16:d7:b0:5d:3a:e0:a5:62:ef:7c:ad:ef:63:ec:3e:fb: 80:6f:a0:be:97:2f:be:25:f6:f2:14:96:e7:10:47:f5:d3:78: 29:03:a6:2d:49:f1:12:93:98:be:e3:d7:e3:56:c7:ae:b6:c6: 06:84:8a:1c:70:1c:f4:85:13:7f:51:cd:9c:3b:21:02:93:c3: d1:a8:7f:c5:0b:5f:8f:15:00:8f:33:18:49:a6:63:80:58:86: b2:fd:21:f3:e2:59:23:60:53:83:d1:b0:c8:a9:65:ce:90:57: 40:7c:e5:db:d7:db:d1:58:1a:a4:d5:2f:ce:65:b2:de:dd:d6: 0a:ca:0d:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZERDAxMTAvBgNVBAUTKDkyQjRDMkE2OTI5NDBCNTQ4RTYzNTA0NDMzNUE5ODVC RUUyMkJEQTEwHhcNMjYxMDAzMDc1NTMxWhcNMjYxMDEwMDc1NTMxWjAYMRYwFAYD VQQDEw02YWMwYjRmMy1jZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDGGv5SRsrVaBS+T6dQPJ328Fa6f+TQ1sut2p2tA7PbMeS0YtRBDaLuTnxF4 fXJFFzS11Fi9dH8PHxWpOTKUmnyKipuXkE7aYLvzwU1vZOi+FKE30t4Np3O5mIqe I8XPnJxM18JhGThSjSqFkPmjOFFLwNMhTsgMXZ41lpINZusQ+EhXQl3UDuDYs3L3 Hk9me8iIxulxfGKOEPoAFUGyWfXX7D15MA+MPd0go97R1qoDAr5rpExzZx3qnkJo w8BkWA1JssmQC5+gqjpJLPUX51FArLRtTLFUK7n/gC/norbUhIS0cjoR9PSE1Id8 LYOdqFpsx9AMEx00JWx/u8n/sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLB/5Tn CiqnhmqMhzZ9bmPb1U3mMB8GA1UdIwQYMBaAFJK0wqaSlAtUjmNQRDNamFvuIr2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkREMC85RTBFRTg0NDg4 NzQxMUYwOEJENzNCM0ZDNEY5QUUwMi9rclRDcHBLVUMxU09ZMUJFTTFxWVctNGl2 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkREMC85RTBFRTg0NDg4NzQxMUYwOEJENzNCM0ZDNEY5QUUwMi9rclRDcHBLVUMx U09ZMUJFTTFxWVctNGl2YUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS2F8lGGxtkCUY5Hn9vdCAOnyHFNe0YQEAXHQskDnbzOQKpUxFw0pVWml1pkX ddRfoJjV9tR3FA+cqNyaGs8AwTQWVzrZVnP7h3KuYbd6DpXSvO2BBuy/9Loq076k 6v1iBrn5IsTSCdpRs6srobxHkOSgkzExubeiLBABwqoj//UW17BdOuClYu98re9j 7D77gG+gvpcvviX28hSW5xBH9dN4KQOmLUnxEpOYvuPX41bHrrbGBoSKHHAc9IUT f1HNnDshApPD0ah/xQtfjxUAjzMYSaZjgFiGsv0h8+JZI2BTg9GwyKllzpBXQHzl 29fb0VgapNUvzmWy3t3WCsoNyA== -----END CERTIFICATE-----Generated at Sun Oct 4 19:49:52 2026 by rpki-client