$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft File: KHuwzWb71-W3qIumZ4kSTAsExXg.mft (raw, json) Hash identifier: FkVYgNQ6brOf76dx+kt7OgR9L+/+mejC3FfqFTBDh2s= Subject key identifier: 46:7B:A6:B6:1F:3E:EF:CA:78:01:22:F7:AA:A0:11:DA:D3:3A:7C:80 Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78 Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft Manifest number: 0C73 Signing time: Tue 06 Oct 2026 18:47:43 +0000 Manifest this update: Tue 06 Oct 2026 18:47:42 +0000 Manifest next update: Tue 13 Oct 2026 18:47:42 +0000 Files and hashes: 1: KHuwzWb71-W3qIumZ4kSTAsExXg.crl (hash: b5diKL2mUjhHc243+L9SDhsy3BpNHh2KjQADFq6JuEM=) 2: 2BA212DC306D11EA81D19B38C4F9AE02.roa (hash: sXLJ43OFaVCL1SbiTyWS+wdz+d0djH0QqeNKRGNj+Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE25, serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578 Validity Not Before: Oct 6 18:47:42 2026 GMT Not After : Oct 13 18:47:42 2026 GMT Subject: CN=6ac5424f-c720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:a2:33:57:56:ce:8f:f6:77:f9:99:fa:6e: bf:ee:73:4d:e7:5a:ac:15:18:6a:2e:c3:aa:58:f9: f3:73:a2:91:f3:85:d1:13:89:08:bb:ad:55:74:9a: 84:d2:1e:4f:2a:44:7d:06:39:32:07:43:30:a4:35: 53:43:f1:bf:61:5c:d4:00:b4:5c:6b:99:16:17:6c: 7a:c1:86:6f:fd:31:50:cf:d1:8e:b7:1f:05:ad:68: 9b:96:29:a1:88:8b:f4:43:15:d8:ca:2d:a4:7d:63: af:66:17:33:bd:c4:c9:84:0b:35:a0:c4:71:c4:bd: 6f:2f:43:a8:ce:0e:31:d5:0d:41:61:8c:da:0c:e7: ed:bf:cd:ee:87:cc:2e:e3:f7:51:03:c8:cf:8a:7b: ea:a9:8d:54:2c:4a:e5:6d:7e:56:d8:3b:8a:26:5f: 8a:93:6c:1b:58:ce:6d:6c:cc:6e:6f:28:f5:c3:73: 20:8b:ae:91:01:bf:9d:fd:85:6c:e9:0e:41:a6:37: 5f:f3:d7:25:a2:60:61:1c:58:28:ec:97:c4:9c:a0: a3:65:df:de:94:4f:bd:02:42:0e:dc:3f:b2:7d:e3: 56:99:0d:22:ed:36:fb:dd:1f:ad:aa:b2:e4:05:29: 92:ca:b8:13:21:a2:24:f1:3b:be:bf:08:e4:aa:72: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7B:A6:B6:1F:3E:EF:CA:78:01:22:F7:AA:A0:11:DA:D3:3A:7C:80 X509v3 Authority Key Identifier: keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d3:b8:fb:18:f1:71:db:17:cd:02:0b:33:35:2b:a6:3c:1a: e4:da:50:af:f1:2d:a7:52:a1:5f:73:e4:4c:35:d2:64:23:27: cd:12:72:85:81:c0:a6:eb:ee:11:3f:e1:45:e0:dd:3d:f1:fc: 0a:e3:93:e7:a4:38:46:e3:86:42:30:a4:e1:ae:4b:41:03:90: c4:2f:95:5b:b9:18:7c:53:5f:bd:db:3d:5d:98:69:89:90:c4: 55:56:38:95:1d:21:db:4d:51:2a:92:85:3b:fd:23:bc:93:93: 69:af:b4:15:4e:1e:49:63:4a:80:0d:fb:ae:f8:13:3a:6a:b0: d6:d7:36:dd:99:b6:6f:23:28:e2:4a:34:ad:5b:9c:bc:18:24: 71:97:7f:85:0e:70:57:63:80:e4:fe:91:07:7e:f0:f0:40:8f: dd:e3:a7:ad:26:31:6e:1b:f6:15:3e:98:6a:49:4d:a4:5b:84: 23:73:a5:20:0d:09:0f:31:dd:fa:7f:fe:58:81:02:d2:35:59: d1:f8:05:92:c7:aa:f8:27:c8:56:59:8e:18:58:4d:e6:d5:ad: 78:fa:92:ac:93:db:92:3c:a2:94:00:b8:67:e5:ba:db:9e:9b: 92:e0:b5:fb:84:0c:7c:68:c1:e3:51:01:5e:3e:39:51:0a:e8: a2:ae:b0:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMjUxMTAvBgNVBAUTKDI4N0JCMENENjZGQkQ3RTVCN0E4OEJBNjY3ODkxMjRD MEIwNEM1NzgwHhcNMjYxMDA2MTg0NzQyWhcNMjYxMDEzMTg0NzQyWjAYMRYwFAYD VQQDEw02YWM1NDI0Zi1jNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVuiM1dWzo/2d/mZ+m6/7nNN51qsFRhqLsOqWPnzc6KR84XRE4kIu61VdJqE 0h5PKkR9BjkyB0MwpDVTQ/G/YVzUALRca5kWF2x6wYZv/TFQz9GOtx8FrWiblimh iIv0QxXYyi2kfWOvZhczvcTJhAs1oMRxxL1vL0Oozg4x1Q1BYYzaDOftv83uh8wu 4/dRA8jPinvqqY1ULErlbX5W2DuKJl+Kk2wbWM5tbMxubyj1w3Mgi66RAb+d/YVs 6Q5Bpjdf89clomBhHFgo7JfEnKCjZd/elE+9AkIO3D+yfeNWmQ0i7Tb73R+tqrLk BSmSyrgTIaIk8Tu+vwjkqnIZfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZ7prYf Pu/KeAEi96qgEdrTOnyAMB8GA1UdIwQYMBaAFCh7sM1m+9flt6iLpmeJEkwLBMV4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyNS82OEU1N0FFRTMw NjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEtVzNxSXVtWjRrU1RBc0V4 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIdXd6V2I3MS1XM3FJdW1aNGtTVEFzRXhYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUyNS82OEU1N0FFRTMwNjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEt VzNxSXVtWjRrU1RBc0V4WGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNO4+xjxcdsXzQILMzUrpjwa5NpQr/Etp1KhX3PkTDXSZCMnzRJyhYHApuvu ET/hReDdPfH8CuOT56Q4RuOGQjCk4a5LQQOQxC+VW7kYfFNfvds9XZhpiZDEVVY4 lR0h201RKpKFO/0jvJOTaa+0FU4eSWNKgA37rvgTOmqw1tc23Zm2byMo4ko0rVuc vBgkcZd/hQ5wV2OA5P6RB37w8ECP3eOnrSYxbhv2FT6YaklNpFuEI3OlIA0JDzHd +n/+WIEC0jVZ0fgFkseq+CfIVlmOGFhN5tWtePqSrJPbkjyilAC4Z+W6256bkuC1 +4QMfGjB41EBXj45UQrooq6wdQ== -----END CERTIFICATE-----Generated at Thu Oct 8 15:41:04 2026 by rpki-client