$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json) Hash identifier: dIaSJnaY8wzFzxytHmcKY6VVHGvP90gTnNY2LUMrSFc= Subject key identifier: 4E:D3:DD:B2:D6:76:75:8C:FD:C6:6E:C1:FE:2C:7E:36:62:F0:37:A9 Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft Manifest number: 0195 Signing time: Mon 05 Oct 2026 04:42:00 +0000 Manifest this update: Mon 05 Oct 2026 04:42:00 +0000 Manifest next update: Mon 12 Oct 2026 04:42:00 +0000 Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: F3eL1hBt/sJN8tc3HgLPmI7IYudUZaaJ5LvaPqjwjpY=) 2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: jP6TZWwRFPY1LK/E2kOV63Xfi0StNXGzAgbQFJN0A6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Validity Not Before: Oct 5 04:42:00 2026 GMT Not After : Oct 12 04:42:00 2026 GMT Subject: CN=6ac32a98-c21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:28:28:bb:79:6a:c3:6a:29:77:48:a8:1a: 71:9c:fd:fb:ac:97:3d:59:a1:78:35:f9:1e:82:59: 2f:31:bc:3c:91:0f:0c:59:f2:30:20:ab:e0:c6:43: 6b:e7:d4:cc:e2:5c:bc:ab:81:ae:c4:dc:3d:0e:e6: 42:d9:1c:d3:f1:87:8a:f4:9b:e1:50:0d:02:0b:8b: 83:82:2d:6b:9c:60:39:1d:09:58:7f:29:89:3a:c4: ca:2f:25:38:ae:14:25:de:e1:cc:65:63:0c:74:90: 99:d6:ef:66:f5:b8:e3:20:63:a8:21:c4:ea:dc:da: 1e:c9:fd:94:bd:74:5f:ab:5b:09:8f:e5:88:b1:93: 72:67:d7:5d:c1:37:74:b0:77:c0:84:ea:e5:0e:07: 29:33:74:d0:28:72:08:57:39:b7:e8:5e:23:f3:eb: 61:29:da:2d:f9:3d:7f:18:74:4f:86:98:10:0e:8c: 62:8c:07:02:26:d7:33:f5:42:c4:6e:37:b5:88:da: be:0d:a7:d1:e8:7f:34:a9:d7:3b:7a:8e:07:27:75: d0:46:79:f3:ce:d9:ce:77:3d:be:2d:66:49:5a:f5: 70:34:4b:ab:2f:55:2e:b2:48:18:92:e9:ac:df:9e: e7:63:b3:e2:1e:3c:4b:85:87:0e:c4:8d:54:7b:b3: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D3:DD:B2:D6:76:75:8C:FD:C6:6E:C1:FE:2C:7E:36:62:F0:37:A9 X509v3 Authority Key Identifier: keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6a:fe:74:b7:17:1d:9f:63:bf:0c:4d:b1:9e:16:3f:f7:fb: ae:bd:a2:85:6a:80:96:63:30:94:82:d2:7a:bf:45:f1:40:42: 0b:db:81:3c:5a:1f:fa:c5:67:79:c0:78:b5:e7:6c:99:1d:1d: 77:0b:f9:e7:6c:98:87:10:a9:3a:e0:f4:b4:27:dc:a0:14:99: a5:f3:8f:bf:70:f5:6a:f1:fc:b1:81:6e:ce:f9:22:17:36:96: eb:e1:5e:4f:65:42:ab:37:e5:90:b8:25:79:92:bd:d6:10:46: be:ed:b0:d4:74:8a:01:03:4e:1e:bb:e5:10:34:34:9b:a9:7c: 1b:01:7c:f8:f4:4b:b4:c8:59:48:b2:06:3d:76:21:04:6e:e0: e9:da:8c:a7:0e:29:42:2a:7c:6c:5f:c3:86:a8:02:03:17:51: 98:0f:cf:52:a6:de:18:ad:62:4a:b7:bc:60:c3:f9:42:cc:8b: 29:84:b2:c8:86:e7:63:a9:9a:09:4f:32:22:57:a9:5d:b6:6f: 6a:51:21:cc:a9:02:38:e8:ba:2a:a8:d4:76:7d:70:9a:9d:e8: 77:42:80:6a:7f:fc:34:d7:24:78:2b:0e:9b:6d:00:e5:84:3a: ab:30:67:03:cf:37:00:c9:73:13:5f:c9:c7:2c:37:75:d7:6f: a3:fc:fa:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2NTJEOEU5RkVF N0VDNUFFMzMwHhcNMjYxMDA1MDQ0MjAwWhcNMjYxMDEyMDQ0MjAwWjAYMRYwFAYD VQQDEw02YWMzMmE5OC1jMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcAoKLt5asNqKXdIqBpxnP37rJc9WaF4NfkeglkvMbw8kQ8MWfIwIKvgxkNr 59TM4ly8q4GuxNw9DuZC2RzT8YeK9JvhUA0CC4uDgi1rnGA5HQlYfymJOsTKLyU4 rhQl3uHMZWMMdJCZ1u9m9bjjIGOoIcTq3Noeyf2UvXRfq1sJj+WIsZNyZ9ddwTd0 sHfAhOrlDgcpM3TQKHIIVzm36F4j8+thKdot+T1/GHRPhpgQDoxijAcCJtcz9ULE bje1iNq+DafR6H80qdc7eo4HJ3XQRnnzztnOdz2+LWZJWvVwNEurL1UuskgYkums 357nY7PiHjxLhYcOxI1Ue7OuOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7T3bLW dnWM/cZuwf4sfjZi8DepMB8GA1UdIwQYMBaAFJAan56K5AYuUhm3ZS2On+5+xa4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNFNy83MkY3NUI5ODVB REQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0JpNVNHYmRsTFk2ZjduN0Zy ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCcWZub3JrQmk1U0diZGxMWTZmN243RnJqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9ya0Jp NVNHYmRsTFk2ZjduN0Zyak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVmr+dLcXHZ9jvwxNsZ4WP/f7rr2ihWqAlmMwlILSer9F8UBCC9uBPFof+sVn ecB4tedsmR0ddwv552yYhxCpOuD0tCfcoBSZpfOPv3D1avH8sYFuzvkiFzaW6+Fe T2VCqzflkLgleZK91hBGvu2w1HSKAQNOHrvlEDQ0m6l8GwF8+PRLtMhZSLIGPXYh BG7g6dqMpw4pQip8bF/DhqgCAxdRmA/PUqbeGK1iSre8YMP5QsyLKYSyyIbnY6ma CU8yIlepXbZvalEhzKkCOOi6KqjUdn1wmp3od0KAan/8NNckeCsOm20A5YQ6qzBn A883AMlzE1/Jxyw3dddvo/z6Fg== -----END CERTIFICATE-----Generated at Tue Oct 6 18:10:49 2026 by rpki-client