$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json) Hash identifier: 20EiJcg0o9KF3tR/cCah4Ncvlb3x5n/mjJqwdHT0Rjw= Subject key identifier: F0:7B:BC:B1:15:ED:6D:80:66:B8:69:B4:65:57:D8:64:FE:26:1C:DE Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Certificate serial: 0AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft Manifest number: 0AA7 Signing time: Tue 06 Oct 2026 19:38:20 +0000 Manifest this update: Tue 06 Oct 2026 19:38:20 +0000 Manifest next update: Tue 13 Oct 2026 19:38:20 +0000 Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: ZRlD0hyjXsAPATLFUioJqiU/h7Y7b7WmrBGiCPrxZFg=) 2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Validity Not Before: Oct 6 19:38:20 2026 GMT Not After : Oct 13 19:38:20 2026 GMT Subject: CN=6ac54e2c-eb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:62:19:4e:89:26:3f:36:87:53:2d:72:6e: da:2c:3a:0e:84:c2:15:f3:0e:11:72:ec:85:67:65: ca:2b:6f:53:e7:74:01:f5:0d:c8:24:7d:08:a9:6d: a9:1b:ad:4b:a6:81:7e:19:28:a3:9a:9d:98:4b:db: 06:65:4d:bc:85:a9:e8:ea:84:6a:7a:63:b6:49:37: 52:e1:14:30:73:56:8e:4e:25:c0:ad:f8:eb:10:28: f4:e6:7b:2c:40:89:2c:33:a7:31:93:ff:17:01:5d: 0b:c5:2a:17:75:4d:10:e9:95:23:f2:fc:66:68:27: 42:bf:ed:db:dd:09:67:eb:8c:bd:f8:6a:34:ec:17: 37:8c:1e:18:b0:61:76:29:b3:17:40:89:76:ec:57: 6c:24:f1:a9:73:21:8d:22:e6:4e:8b:28:31:62:a8: 4c:bb:b2:19:ed:f8:fc:ed:6d:d0:20:32:c8:da:2d: e7:b0:d8:d1:2c:7c:ef:73:31:3a:9c:73:ab:58:b3: 09:05:c2:3d:af:78:1e:4f:41:8b:6a:48:d9:8e:1e: 7f:f7:fd:e5:4a:80:2d:ff:d3:22:03:fc:24:59:b0: d1:65:d3:06:47:6f:a9:b1:3c:d6:11:5b:ed:fc:ce: 64:6a:4d:a0:63:28:4a:db:76:c7:3e:53:5f:68:b0: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:BC:B1:15:ED:6D:80:66:B8:69:B4:65:57:D8:64:FE:26:1C:DE X509v3 Authority Key Identifier: keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:37:e1:33:91:a2:1a:1b:51:74:75:1f:77:66:fc:1f:86: 20:71:f5:46:46:2d:17:9c:68:04:77:20:2f:53:1c:bf:7a:b7: 89:58:59:c3:5b:d5:50:aa:15:db:bb:e4:72:dc:66:f7:c5:6e: f8:0b:f5:ee:ce:a0:55:87:da:5b:74:a8:e7:a7:16:5c:54:49: 84:01:b4:00:ca:9f:30:40:aa:44:e4:10:0e:43:f4:78:74:7f: bf:6c:7d:b0:a5:aa:90:98:77:a7:1f:26:9f:36:9c:5b:0e:cf: c5:ca:0a:31:a6:87:c0:2d:a8:8b:44:24:8e:06:ef:92:ed:3e: 2a:99:25:86:b9:91:1d:71:d9:b4:85:36:3e:c2:7d:e4:08:fa: e7:2e:72:f1:40:aa:9a:0b:49:86:3d:e5:16:6a:e8:60:2d:c3: ff:83:bc:57:26:0d:20:ce:20:be:64:c0:4e:d2:81:66:39:b3: c2:cb:e8:d4:14:46:ed:70:c7:e8:c3:47:3c:4e:4b:76:d8:aa: 89:45:e2:a4:ad:a3:17:95:b0:aa:0b:c8:fd:ab:88:bc:d5:2d: 74:6c:cb:64:17:b2:89:67:e5:12:05:e3:d7:cd:4a:3e:77:e6: d8:4d:89:0a:79:08:79:d3:e3:bb:73:fa:35:f3:93:6a:69:cb: e0:2e:24:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4 OEExMEM2OTEwHhcNMjYxMDA2MTkzODIwWhcNMjYxMDEzMTkzODIwWjAYMRYwFAYD VQQDEw02YWM1NGUyYy1lYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkBiGU6JJj82h1Mtcm7aLDoOhMIV8w4RcuyFZ2XKK29T53QB9Q3IJH0IqW2p G61LpoF+GSijmp2YS9sGZU28hano6oRqemO2STdS4RQwc1aOTiXArfjrECj05nss QIksM6cxk/8XAV0LxSoXdU0Q6ZUj8vxmaCdCv+3b3Qln64y9+Go07Bc3jB4YsGF2 KbMXQIl27FdsJPGpcyGNIuZOiygxYqhMu7IZ7fj87W3QIDLI2i3nsNjRLHzvczE6 nHOrWLMJBcI9r3geT0GLakjZjh5/9/3lSoAt/9MiA/wkWbDRZdMGR2+psTzWEVvt /M5kak2gYyhK23bHPlNfaLD0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPB7vLEV 7W2AZrhptGVX2GT+JhzeMB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2 REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTI1Mi9GMDgxNzE2ODg2REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWti V2pLWmRKOHF2aWVJb1F4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAetw34TORohobUXR1H3dm/B+GIHH1RkYtF5xoBHcgL1Mcv3q3iVhZw1vVUKoV 27vkctxm98Vu+Av17s6gVYfaW3So56cWXFRJhAG0AMqfMECqROQQDkP0eHR/v2x9 sKWqkJh3px8mnzacWw7PxcoKMaaHwC2oi0Qkjgbvku0+KpklhrmRHXHZtIU2PsJ9 5Aj65y5y8UCqmgtJhj3lFmroYC3D/4O8VyYNIM4gvmTATtKBZjmzwsvo1BRG7XDH 6MNHPE5LdtiqiUXipK2jF5WwqgvI/auIvNUtdGzLZBeyiWflEgXj181KPnfm2E2J CnkIedPju3P6NfOTamnL4C4kFA== -----END CERTIFICATE-----Generated at Thu Oct 8 09:00:10 2026 by rpki-client