$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: ZaWlrlPoZY6bairMscgTEwNZqbSxivvDglCV3bihsIo= Subject key identifier: 1D:DD:3A:04:48:86:D5:02:FC:CB:61:EA:B4:DD:AD:75:C9:21:07:CE Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 08CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 08C0 Signing time: Tue 06 Oct 2026 20:40:08 +0000 Manifest this update: Tue 06 Oct 2026 20:40:07 +0000 Manifest next update: Tue 13 Oct 2026 20:40:07 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: JiIKFI5qQFr0v+PWVrGVr1aAiUhq5NxcS2KL0sbyKqE=) 2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: 97u/YrRNefotVRZSa9KAABuhDSPTGXEHuGuM3h22rFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2255 (0x8cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Oct 6 20:40:07 2026 GMT Not After : Oct 13 20:40:07 2026 GMT Subject: CN=6ac55ca7-4d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:08:1f:57:45:15:3e:cc:5d:ea:fe:34:c1: ef:f9:79:cd:ca:14:25:34:29:cd:51:3b:9d:f9:fc: b6:b7:bc:d0:9e:a4:14:d9:b8:a2:74:30:6a:0a:d4: 76:4b:35:93:7f:ff:4c:21:59:64:df:a3:e5:44:a9: a4:5c:d8:77:8b:cc:5c:99:ee:63:ac:fa:98:cf:0e: 08:b2:a0:ec:1b:e4:32:37:44:5f:98:01:6f:21:ce: d7:72:d2:dd:7a:24:02:6d:d3:b7:e8:f5:43:51:5f: c5:88:d6:e1:e4:a5:d3:11:2a:5d:b7:61:c8:b2:7b: e9:3e:3d:68:fd:05:b5:3f:2e:9f:b6:8f:e2:5c:bf: 64:48:9a:3f:99:b8:e5:48:05:dc:9f:7e:7d:90:1f: 64:02:3e:5f:42:5c:5c:14:85:d5:aa:01:94:47:7e: c3:50:71:0f:a7:70:1f:a1:26:40:fd:54:98:6b:0e: cd:6f:29:f8:5f:d0:c5:f3:10:13:f8:3e:70:25:86: f0:7b:bf:e1:09:72:9c:aa:7b:cc:24:0d:14:1f:3e: b3:bc:17:b8:88:03:6b:61:f4:f0:96:3d:c9:58:bd: 17:49:98:7e:51:77:ca:a1:38:4a:47:46:24:d5:ee: 08:02:79:a5:87:66:38:e5:19:20:02:16:4b:80:e7: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:3A:04:48:86:D5:02:FC:CB:61:EA:B4:DD:AD:75:C9:21:07:CE X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7c:9d:ef:d3:02:ba:86:c9:78:7c:2a:e1:81:44:1f:27:e7: c0:d6:55:f3:b2:96:d2:2e:a4:96:87:ec:1d:dc:c6:69:71:46: 0e:31:82:4f:13:70:5d:96:1d:90:0a:b3:5e:81:82:74:f7:73: cc:ee:f9:66:69:ec:ba:b8:55:8b:af:d6:0e:2e:a6:9f:bd:cf: ad:c9:b7:74:7d:05:77:0b:8c:dd:da:52:d5:fe:6f:17:ce:c1: ab:8a:01:66:f4:ee:ee:ee:3a:d3:dd:fa:b8:f3:70:ca:76:a2: 48:43:9d:92:70:bb:79:f6:48:06:c2:70:bb:18:d7:45:04:59: e4:cc:3f:55:9c:9d:7e:4b:ae:08:47:18:03:7c:1f:d4:e0:32: b6:10:7b:52:21:6e:9e:9a:ba:76:8c:05:59:b9:ea:c7:7b:aa: 0c:eb:b1:4b:cb:bc:31:ba:d4:0e:e4:46:e5:81:12:c4:dd:a4: 07:8c:9d:84:72:5c:ee:43:08:19:af:20:76:90:ce:0a:53:b4: eb:20:5e:c5:ed:e5:ed:51:c9:cb:9b:ae:98:0d:2d:dd:0f:61: bd:b4:29:a2:cf:ba:a8:ff:1d:81:65:9b:ff:a7:a0:ab:09:85: 3e:91:e4:c0:43:b8:45:14:ee:9d:99:46:fc:c1:54:1c:86:85: 02:85:56:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjYxMDA2MjA0MDA3WhcNMjYxMDEzMjA0MDA3WjAYMRYwFAYD VQQDEw02YWM1NWNhNy00ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNwIH1dFFT7MXer+NMHv+XnNyhQlNCnNUTud+fy2t7zQnqQU2biidDBqCtR2 SzWTf/9MIVlk36PlRKmkXNh3i8xcme5jrPqYzw4IsqDsG+QyN0RfmAFvIc7XctLd eiQCbdO36PVDUV/FiNbh5KXTESpdt2HIsnvpPj1o/QW1Py6fto/iXL9kSJo/mbjl SAXcn359kB9kAj5fQlxcFIXVqgGUR37DUHEPp3AfoSZA/VSYaw7Nbyn4X9DF8xAT +D5wJYbwe7/hCXKcqnvMJA0UHz6zvBe4iANrYfTwlj3JWL0XSZh+UXfKoThKR0Yk 1e4IAnmlh2Y45RkgAhZLgOfVmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3dOgRI htUC/Mth6rTdrXXJIQfOMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm3yd79MCuobJeHwq4YFEHyfnwNZV87KW0i6klofsHdzGaXFGDjGCTxNwXZYd kAqzXoGCdPdzzO75ZmnsurhVi6/WDi6mn73Prcm3dH0FdwuM3dpS1f5vF87Bq4oB ZvTu7u460936uPNwynaiSEOdknC7efZIBsJwuxjXRQRZ5Mw/VZydfkuuCEcYA3wf 1OAythB7UiFunpq6dowFWbnqx3uqDOuxS8u8MbrUDuRG5YESxN2kB4ydhHJc7kMI Ga8gdpDOClO06yBexe3l7VHJy5uumA0t3Q9hvbQpos+6qP8dgWWb/6egqwmFPpHk wEO4RRTunZlG/MFUHIaFAoVWiA== -----END CERTIFICATE-----Generated at Tue Oct 6 23:18:37 2026 by rpki-client