$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft File: KjesOrJaN9-11OoQA5lo3jG-NMo.mft (raw, json) Hash identifier: SdKMbfSf1JO55edUsdTKUm9po9upFsMyY3nkmVdH4ys= Subject key identifier: 49:E9:CC:CD:AC:05:A9:BA:09:D0:3E:EE:00:D2:EE:83:7E:92:3A:00 Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA Certificate issuer: /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft Manifest number: 42 Signing time: Thu 03 Sep 2026 08:42:07 +0000 Manifest this update: Thu 03 Sep 2026 08:42:07 +0000 Manifest next update: Thu 10 Sep 2026 08:42:07 +0000 Files and hashes: 1: KjesOrJaN9-11OoQA5lo3jG-NMo.crl (hash: laXb0F9yFd5scBnHbENDuW2UYEwWrizCSMoy5SbJRQM=) 2: 666BB776450911F18B5E40D491833773.roa (hash: Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=) 3: F3932912564E11F19B7E269A92833773.roa (hash: vpokWY7VC0lN/QwXrFRth4crCd36REdtNnFL3WNKSEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA Validity Not Before: Sep 3 08:42:07 2026 GMT Not After : Sep 10 08:42:07 2026 GMT Subject: CN=6a9932df-ca68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:e2:e8:c7:b3:22:f7:20:37:7d:87:c2:e8: 08:39:96:d7:58:71:ad:6c:5a:57:61:fc:26:32:5a: 6f:3d:d8:b9:03:68:03:5c:da:2a:3a:aa:c9:11:e3: 7e:9c:23:bb:80:76:bb:10:97:00:f1:64:e7:0f:fa: a0:c9:40:02:d6:eb:83:45:3f:2e:16:ae:69:fb:03: 44:f3:dd:c6:70:5e:2f:47:01:bb:49:d8:e9:5e:43: 02:0f:55:8d:70:07:dd:7d:e4:a9:8e:6d:61:62:0d: d3:d5:c3:61:8c:59:15:dd:ce:a9:cd:89:5d:eb:75: 2e:f3:55:a4:cb:08:b8:d5:df:94:0a:c4:2d:57:64: 39:3f:d1:0a:02:7b:23:1b:73:e8:22:ec:65:24:a5: 26:c7:de:66:37:83:c7:78:57:66:bc:a8:89:da:73: 3f:1b:56:9c:0a:d0:ed:99:c9:5b:8e:c3:af:38:d2: 03:0c:cf:46:85:0f:96:e4:dc:53:f8:57:f9:6a:92: 1a:d1:42:10:ff:54:0a:eb:d8:94:ad:31:e8:45:f0: 7f:0c:21:0c:dc:d2:b2:36:fb:32:e1:e5:e6:76:6b: c8:c4:87:b2:8a:e4:74:f4:41:19:9f:8b:62:bb:37: d2:f9:87:15:08:e6:f4:96:c0:2d:e5:35:ec:4c:16: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:CC:CD:AC:05:A9:BA:09:D0:3E:EE:00:D2:EE:83:7E:92:3A:00 X509v3 Authority Key Identifier: keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1a:a8:7b:47:7f:46:2c:75:cf:58:c1:7e:45:4e:45:f7:35: cc:c1:3a:99:30:1b:04:61:31:36:2b:35:da:61:b7:8c:3f:3e: b8:86:96:fb:2a:65:95:56:aa:c0:d5:5a:2f:75:6e:0b:cb:72: dc:d2:ba:4b:e3:9d:30:36:bd:b5:ce:d1:8e:4d:d0:84:43:9d: 1a:70:12:84:8b:14:60:f9:4f:60:cc:2c:5a:b8:0a:d2:ea:ec: e4:40:98:9d:b1:d7:07:c5:01:95:6b:61:9c:be:7d:3f:b1:15: e6:41:79:e8:69:72:78:5f:7a:8c:13:e2:da:42:3b:2e:fd:00: 02:06:10:22:eb:41:0f:ba:e2:40:cf:f7:86:28:18:e3:bb:a8: b6:36:82:53:cf:be:87:ad:93:cf:14:4f:cb:56:fd:ce:fa:37: f6:f0:7c:f1:39:45:2f:94:4d:21:5e:06:18:59:8c:da:0a:89: e3:ae:af:48:28:c9:13:af:c4:8e:10:57:ab:1c:13:d2:9e:d0: 1c:86:b7:af:39:2c:8c:82:83:84:97:4c:58:8e:a9:83:69:62: 91:9a:64:c0:41:fb:4c:51:71:6e:39:d2:69:18:f9:20:67:40: 8a:10:c5:3f:3a:20:a7:e8:43:c8:ad:b1:b0:2b:08:27:a7:62: 3c:66:61:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTc0NTExMC8GA1UEBRMoMkEzN0FDM0FCMjVBMzdERkI1RDRFQTEwMDM5OTY4REUz MUJFMzRDQTAeFw0yNjA5MDMwODQyMDdaFw0yNjA5MTAwODQyMDdaMBgxFjAUBgNV BAMTDTZhOTkzMmRmLWNhNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLfuLox7Mi9yA3fYfC6Ag5ltdYca1sWldh/CYyWm892LkDaANc2io6qskR436c I7uAdrsQlwDxZOcP+qDJQALW64NFPy4Wrmn7A0Tz3cZwXi9HAbtJ2OleQwIPVY1w B9195KmObWFiDdPVw2GMWRXdzqnNiV3rdS7zVaTLCLjV35QKxC1XZDk/0QoCeyMb c+gi7GUkpSbH3mY3g8d4V2a8qInacz8bVpwK0O2ZyVuOw6840gMMz0aFD5bk3FP4 V/lqkhrRQhD/VArr2JStMehF8H8MIQzc0rI2+zLh5eZ2a8jEh7KK5HT0QRmfi2K7 N9L5hxUI5vSWwC3lNexMFqXTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSenMzawF qboJ0D7uANLug36SOgAwHwYDVR0jBBgwFoAUKjesOrJaN9+11OoQA5lo3jG+NMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNzQ1L0U4OTU4RUU0NDUw ODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjktMTFPb1FBNWxvM2pHLU5N by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2plc09ySmFOOS0xMU9vUUE1bG8zakctTk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NzQ1L0U4OTU4RUU0NDUwODExRjE4QjJFMjJDQzkxODMzNzczL0tqZXNPckphTjkt MTFPb1FBNWxvM2pHLU5Nby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPGqh7R39GLHXPWMF+RU5F9zXMwTqZMBsEYTE2KzXaYbeMPz64hpb7KmWVVqrA 1VovdW4Ly3Lc0rpL450wNr21ztGOTdCEQ50acBKEixRg+U9gzCxauArS6uzkQJid sdcHxQGVa2Gcvn0/sRXmQXnoaXJ4X3qME+LaQjsu/QACBhAi60EPuuJAz/eGKBjj u6i2NoJTz76HrZPPFE/LVv3O+jf28HzxOUUvlE0hXgYYWYzaConjrq9IKMkTr8SO EFerHBPSntAchrevOSyMgoOEl0xYjqmDaWKRmmTAQftMUXFuOdJpGPkgZ0CKEMU/ OiCn6EPIrbGwKwgnp2I8ZmFz -----END CERTIFICATE-----Generated at Sat Sep 5 07:39:24 2026 by rpki-client