$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json) Hash identifier: /7hp/xZICiutHwlbmOYp9WhimB38EZsJShrncSQmb+A= Subject key identifier: DE:EA:47:90:2C:96:88:F7:08:8D:A5:80:80:2B:89:E1:7A:C2:5A:7A Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft Manifest number: D2 Signing time: Sat 03 Oct 2026 07:24:02 +0000 Manifest this update: Sat 03 Oct 2026 07:24:01 +0000 Manifest next update: Sat 10 Oct 2026 07:24:01 +0000 Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: JL6PEPEhl8dIWXeazKExPsgsUNtYzNKVrUF7/Y8SW7Q=) 2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Oct 3 07:24:01 2026 GMT Not After : Oct 10 07:24:01 2026 GMT Subject: CN=6ac0ad92-9650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:15:86:1e:ac:07:60:07:2b:f4:e2:73:a3: bc:b6:b8:37:3c:19:22:33:70:ae:dd:60:a1:a4:f1: e5:4f:42:1e:51:7a:49:9f:2c:e3:ef:ee:f2:b6:f0: 94:54:2f:f9:7e:6e:8a:7f:78:5a:c3:df:d3:6a:54: e7:e4:60:27:cb:c6:d3:7c:ea:05:7f:dc:33:a6:ea: b6:be:96:fb:01:f0:35:17:9a:a3:06:c5:7c:f4:eb: 44:6f:d5:87:2c:d8:d0:75:3c:25:48:db:a7:6f:74: 5d:a4:d4:a5:60:58:85:c3:8d:87:16:58:64:01:be: e7:a4:bf:16:45:5f:23:59:fe:87:47:42:dd:cd:2a: 9a:cb:56:fb:37:ff:ca:e9:8f:f8:a1:5f:69:fb:79: f5:0f:a8:af:f1:de:dd:6a:fd:27:9b:9d:38:33:38: 93:a9:02:81:19:2b:ef:6d:a0:6a:db:d0:88:f4:24: 13:b5:30:a4:58:4e:16:df:cd:c2:de:2c:06:b3:c9: 21:d7:52:cd:78:9a:a2:f9:2d:62:f2:e1:89:e8:27: 80:6f:54:43:e5:a8:8f:4a:72:c9:fc:29:c9:da:d0: df:c0:a9:7b:55:28:b9:14:d8:92:c8:7f:a9:1e:b3: 53:84:39:ac:d5:7e:49:c3:61:33:ae:6a:44:ed:65: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:47:90:2C:96:88:F7:08:8D:A5:80:80:2B:89:E1:7A:C2:5A:7A X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:b5:a0:03:61:2d:00:96:d4:43:46:3f:e3:21:fa:28:a1: 9a:a2:82:4b:cc:97:d2:93:82:06:3a:28:ce:43:45:e3:2b:46: dc:08:9b:36:9d:0f:70:f2:09:03:24:88:05:b3:1d:0b:5a:92: bf:0c:3b:9e:d8:0e:ae:fe:7a:89:35:48:14:f0:4f:c4:98:11: 54:2c:18:4b:29:25:c4:f6:bf:d9:5c:81:06:22:64:c2:35:b3: a9:a3:88:ef:4c:f1:22:fb:fe:a4:53:82:74:75:f5:a4:c6:cd: f4:49:2c:7e:6e:a1:22:46:fc:39:f5:62:fe:92:2e:9a:2c:0f: 0e:3b:81:51:74:99:23:67:34:99:1d:2d:6e:42:d8:75:e3:b8: 1f:33:f1:c9:6a:1e:8c:77:10:88:eb:e8:b2:bf:a1:54:99:21: 99:f2:14:bd:8d:20:88:10:55:78:0b:e8:18:a5:85:6d:1d:a6: d3:7f:05:a7:50:d4:3a:a9:0e:1e:1e:fc:ef:31:5c:69:43:7f: 0c:65:2b:0f:4b:b7:02:16:a2:4c:37:5b:7b:90:f2:5f:27:90: 9f:92:fe:b4:da:5b:54:a7:8d:6b:2a:a1:18:57:92:58:86:cb: 80:4a:49:c9:6c:de:5d:81:b7:61:cb:6d:36:35:46:5a:8b:7a: ed:ae:08:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RDkxMTAvBgNVBAUTKDJCQjdFNkY2NEU4OTNEOTEzMDRBOEIyNTg4NjAzNTBE Njc1MDU0QUQwHhcNMjYxMDAzMDcyNDAxWhcNMjYxMDEwMDcyNDAxWjAYMRYwFAYD VQQDEw02YWMwYWQ5Mi05NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6sVhh6sB2AHK/Tic6O8trg3PBkiM3Cu3WChpPHlT0IeUXpJnyzj7+7ytvCU VC/5fm6Kf3haw9/TalTn5GAny8bTfOoFf9wzpuq2vpb7AfA1F5qjBsV89OtEb9WH LNjQdTwlSNunb3RdpNSlYFiFw42HFlhkAb7npL8WRV8jWf6HR0LdzSqay1b7N//K 6Y/4oV9p+3n1D6iv8d7dav0nm504MziTqQKBGSvvbaBq29CI9CQTtTCkWE4W383C 3iwGs8kh11LNeJqi+S1i8uGJ6CeAb1RD5aiPSnLJ/CnJ2tDfwKl7VSi5FNiSyH+p HrNThDms1X5Jw2EzrmpE7WUxmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7qR5As loj3CI2lgIArieF6wlp6MB8GA1UdIwQYMBaAFCu35vZOiT2RMEqLJYhgNQ1nUFSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhEOS8wRkQ2QUI1Mjgx NzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBaRXdTb3NsaUdBMURXZFFW SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhEOS8wRkQ2QUI1MjgxNzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBa RXdTb3NsaUdBMURXZFFWSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjSm1oANhLQCW1ENGP+Mh+iihmqKCS8yX0pOCBjoozkNF4ytG3AibNp0PcPIJ AySIBbMdC1qSvww7ntgOrv56iTVIFPBPxJgRVCwYSyklxPa/2VyBBiJkwjWzqaOI 70zxIvv+pFOCdHX1pMbN9Eksfm6hIkb8OfVi/pIumiwPDjuBUXSZI2c0mR0tbkLY deO4HzPxyWoejHcQiOvosr+hVJkhmfIUvY0giBBVeAvoGKWFbR2m038Fp1DUOqkO Hh787zFcaUN/DGUrD0u3AhaiTDdbe5DyXyeQn5L+tNpbVKeNayqhGFeSWIbLgEpJ yWzeXYG3YcttNjVGWot67a4I9Q== -----END CERTIFICATE-----Generated at Sun Oct 4 21:20:40 2026 by rpki-client