$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: fyJeysabeaSb3GFskfW7KbtDnwMVGWHe+JYq/70QOcs= Subject key identifier: 0A:8A:9E:63:C5:25:20:B9:BE:FB:6D:20:75:8D:4B:7E:23:22:2E:69 Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: F3 Signing time: Sat 03 Oct 2026 07:01:09 +0000 Manifest this update: Sat 03 Oct 2026 07:01:08 +0000 Manifest next update: Sat 10 Oct 2026 07:01:08 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: Tz9j1L+Nv4ClGJJyfm6W5Fh4jeE+wLOtmo/fC5yAHMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Oct 3 07:01:08 2026 GMT Not After : Oct 10 07:01:08 2026 GMT Subject: CN=6ac0a835-a354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:25:1b:ae:70:2f:16:24:be:01:97:1e:14: 86:ad:51:87:d7:19:c8:24:17:0d:0b:59:e1:64:1b: b6:c1:1b:1d:9f:2f:f9:eb:58:5e:8c:71:4e:3e:6a: 4f:61:c4:e4:93:8b:93:4d:7e:49:84:c2:4a:57:9a: 5b:df:ef:ea:92:97:61:46:b7:cf:cf:d0:f1:1e:b8: 3c:47:b6:bc:e1:b7:d7:42:82:80:c2:87:7f:a6:c1: 68:19:19:b5:2a:fc:3b:27:49:37:c2:66:ac:38:ba: c5:93:6a:7e:4a:50:9c:c4:8a:25:04:8a:32:c5:f3: b1:d3:ab:8a:b9:50:ae:df:c1:44:17:87:86:5a:05: c9:fe:52:01:51:1b:81:68:4e:b9:fe:f6:cc:f9:8a: c6:79:dc:0f:f7:dc:fa:fb:b2:ca:7b:8a:40:4a:95: 2c:47:e8:68:e4:86:51:a4:07:12:a4:7a:0c:d5:e4: 5b:a6:20:dd:79:9f:ba:80:bd:27:f9:d9:d3:ef:3d: 7a:79:b5:c5:37:e2:67:ad:6d:75:17:94:76:9a:e1: 8e:a0:d0:1b:0e:8d:a7:f0:1d:3b:92:80:5c:0c:ae: b1:be:2a:01:03:79:ee:ce:fe:2e:79:73:ac:73:ff: 46:4f:58:a2:ff:bb:20:3c:d3:c8:be:21:25:f5:20: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:9E:63:C5:25:20:B9:BE:FB:6D:20:75:8D:4B:7E:23:22:2E:69 X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:81:ad:3a:b9:a9:7f:23:36:fd:ce:5a:45:f2:76:3e:33:5a: 86:ab:8d:d0:8e:ea:2f:b4:2a:9c:d3:5c:3b:48:38:e7:39:7e: 8d:fc:b2:5d:7a:71:31:cd:5f:74:45:09:e1:5e:8d:a5:09:b4: 76:e2:16:89:bf:21:fa:da:35:8b:85:eb:0b:dd:aa:d5:b4:a6: 68:a9:3b:ac:a0:34:b7:ae:41:65:4e:8a:5b:c0:f8:cb:0d:a0: 31:27:f3:42:ea:a7:a5:1c:f5:4d:c9:44:3a:58:31:98:09:84: db:c5:2f:2a:10:32:22:27:55:f6:b4:34:56:cc:e4:36:02:df: d3:8b:ac:14:6c:51:2a:00:0a:85:fc:ac:f4:4f:63:4d:37:09: 17:a5:ce:82:17:50:67:45:e7:cd:09:83:97:51:11:2f:dd:6c: d2:ba:ac:c6:2a:6a:ff:33:d0:83:ed:29:fe:43:a0:3a:6f:b0: d3:30:5b:ba:9c:44:ec:77:5f:54:1e:e2:7e:cd:49:0f:98:e2: f0:95:5b:d6:e1:88:53:f3:1a:c8:7d:2a:8b:cd:1d:d2:b9:98: a3:4f:f6:e1:ac:9a:97:98:98:6a:8c:5d:0e:37:45:58:f7:96: 1a:9a:4e:42:05:06:58:7b:f9:fd:94:4d:1f:36:be:bd:07:ed: 49:ac:6f:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFODAxMTAvBgNVBAUTKDJCNjgzMEFCMzdDQjM0RUYyNzNBMjBBMkYyRTgyNjQy OTk2MDEzREEwHhcNMjYxMDAzMDcwMTA4WhcNMjYxMDEwMDcwMTA4WjAYMRYwFAYD VQQDEw02YWMwYTgzNS1hMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5AlG65wLxYkvgGXHhSGrVGH1xnIJBcNC1nhZBu2wRsdny/561hejHFOPmpP YcTkk4uTTX5JhMJKV5pb3+/qkpdhRrfPz9DxHrg8R7a84bfXQoKAwod/psFoGRm1 Kvw7J0k3wmasOLrFk2p+SlCcxIolBIoyxfOx06uKuVCu38FEF4eGWgXJ/lIBURuB aE65/vbM+YrGedwP99z6+7LKe4pASpUsR+ho5IZRpAcSpHoM1eRbpiDdeZ+6gL0n +dnT7z16ebXFN+JnrW11F5R2muGOoNAbDo2n8B07koBcDK6xvioBA3nuzv4ueXOs c/9GT1ii/7sgPNPIviEl9SAE3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqKnmPF JSC5vvttIHWNS34jIi5pMB8GA1UdIwQYMBaAFCtoMKs3yzTvJzogovLoJkKZYBPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zRTQwMkFFQTRC NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5POG5PaUNpOHVnbVFwbGdF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4MC8zRTQwMkFFQTRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5P OG5PaUNpOHVnbVFwbGdFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmYGtOrmpfyM2/c5aRfJ2PjNahquN0I7qL7QqnNNcO0g45zl+jfyyXXpxMc1f dEUJ4V6NpQm0duIWib8h+to1i4XrC92q1bSmaKk7rKA0t65BZU6KW8D4yw2gMSfz QuqnpRz1TclEOlgxmAmE28UvKhAyIidV9rQ0VszkNgLf04usFGxRKgAKhfys9E9j TTcJF6XOghdQZ0XnzQmDl1ERL91s0rqsxipq/zPQg+0p/kOgOm+w0zBbupxE7Hdf VB7ifs1JD5ji8JVb1uGIU/MayH0qi80d0rmYo0/24ayal5iYaoxdDjdFWPeWGppO QgUGWHv5/ZRNHza+vQftSaxvvQ== -----END CERTIFICATE-----Generated at Sun Oct 4 12:09:08 2026 by rpki-client