$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft File: kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json) Hash identifier: RnsLDUiGQ+ETLUxLIw74tD3NVKSN+74wGyJr7qLlCoA= Subject key identifier: 02:F5:8D:B6:36:FE:D1:FA:09:14:6D:56:46:70:E7:58:55:57:E1:E9 Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft Manifest number: 06E8 Signing time: Fri 04 Sep 2026 15:57:11 +0000 Manifest this update: Fri 04 Sep 2026 15:57:11 +0000 Manifest next update: Fri 11 Sep 2026 15:57:11 +0000 Files and hashes: 1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: itxS2jTF8TNK+yjruiBI5PeytfUAmSg7uj/NzikZJuE=) 2: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: IXVHf+2WBfW6oS9Q18tT00qCn3zKH5TAOtknryxx7jA=) 3: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: 8b4jo2m0Ngh7TWy3IkuEiD0GJam3IZH9UOeev3O9qQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Sep 4 15:57:11 2026 GMT Not After : Sep 11 15:57:11 2026 GMT Subject: CN=6a9aea57-ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:e2:5a:3d:90:04:fb:e0:cf:50:62:02:4e: db:4a:0a:19:ac:23:c6:9c:31:91:65:fd:f3:6e:70: 58:c4:ce:80:6e:b9:84:90:b5:44:9a:3e:43:4b:d3: b7:30:4e:3e:d4:bb:cc:de:cd:15:0d:5e:94:b0:c8: 5d:6e:e7:e0:69:7a:30:e3:19:0d:1f:0c:f6:5f:0f: 64:dd:31:f6:ae:bc:42:a1:60:92:64:8b:91:b4:e6: 31:5f:0a:3e:a9:cc:93:68:2c:5f:ae:c7:f6:a9:6f: 75:0b:7c:11:78:56:c5:31:82:2a:5c:83:da:8f:c0: 0c:2a:4d:8f:f4:95:2a:4c:f0:1b:61:29:09:f9:de: 81:23:e4:82:1d:56:5b:55:90:12:d5:18:ac:a0:3a: 03:a0:53:bf:de:0b:3e:e1:f6:bd:13:4d:5f:db:97: 4a:a0:0a:ae:e4:77:66:fa:81:80:fd:0c:ee:a8:16: 29:df:6b:71:b1:a0:1e:77:86:19:bc:fb:1b:24:f6: ce:56:80:0b:47:2b:e0:9a:4e:00:e7:19:63:ec:c9: 49:ca:5c:45:da:f5:c2:cd:5e:31:68:9f:c1:19:b7: 67:1b:ac:b6:bf:04:dc:13:2f:9b:e9:c2:fa:ff:13: 96:04:38:6e:25:c9:fd:f3:3b:47:f1:78:c2:bb:84: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:8D:B6:36:FE:D1:FA:09:14:6D:56:46:70:E7:58:55:57:E1:E9 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d3:aa:03:4e:d7:9e:f5:bb:8a:70:b2:78:dd:22:bc:7b:c8: e4:87:53:ca:96:b8:92:c7:49:61:34:60:92:60:b3:07:dc:e4: 85:e9:3b:9b:63:4d:b0:e3:9f:9d:dc:77:11:05:be:3e:8c:ea: e1:24:1b:e1:e0:b0:d6:dc:b9:a9:7a:a4:e3:b3:dd:8f:ff:ea: 86:d5:be:b6:e9:e6:4e:fb:89:46:d7:fa:40:c6:a1:c5:9a:c0: a8:ac:00:aa:29:73:e0:85:05:f9:a3:04:6e:bb:1e:a2:20:0c: 75:50:3b:e4:f8:76:7c:7c:95:87:47:93:89:1c:4a:6b:1e:65: f3:4d:fc:b2:a3:27:5e:8c:ea:9d:dd:a1:52:59:37:97:89:ad: 84:f2:d5:a2:ff:c2:9c:fc:84:de:6d:2f:9d:04:b2:ed:6b:f6: 5a:74:6a:0b:ac:15:69:52:8e:0a:35:5a:13:8b:75:eb:46:e6: 06:2e:dc:22:ec:45:56:be:4d:fd:f6:f1:ba:72:ae:88:2e:a1: 8e:b4:90:a2:c9:53:42:28:8a:bb:02:72:3f:2e:91:87:bc:cb: e2:02:62:51:08:8d:fa:45:24:da:cf:8f:70:78:4d:9c:25:70: 42:64:c2:9f:e7:93:34:a8:3b:b1:4d:84:6a:c8:18:f0:b3:37: 4f:9a:44:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwOTA0MTU1NzExWhcNMjYwOTExMTU1NzExWjAYMRYwFAYD VQQDEw02YTlhZWE1Ny1lY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz7iWj2QBPvgz1BiAk7bSgoZrCPGnDGRZf3zbnBYxM6AbrmEkLVEmj5DS9O3 ME4+1LvM3s0VDV6UsMhdbufgaXow4xkNHwz2Xw9k3TH2rrxCoWCSZIuRtOYxXwo+ qcyTaCxfrsf2qW91C3wReFbFMYIqXIPaj8AMKk2P9JUqTPAbYSkJ+d6BI+SCHVZb VZAS1RisoDoDoFO/3gs+4fa9E01f25dKoAqu5Hdm+oGA/QzuqBYp32txsaAed4YZ vPsbJPbOVoALRyvgmk4A5xlj7MlJylxF2vXCzV4xaJ/BGbdnG6y2vwTcEy+b6cL6 /xOWBDhuJcn98ztH8XjCu4SSVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL1jbY2 /tH6CRRtVkZw51hVV+HpMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9FQUExOUNCNEIyREMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFM UEtRcEFPY0RBUjU1WmlpUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9OqA07XnvW7inCyeN0ivHvI5IdTypa4ksdJYTRgkmCzB9zkhek7m2NNsOOf ndx3EQW+Pozq4SQb4eCw1ty5qXqk47Pdj//qhtW+tunmTvuJRtf6QMahxZrAqKwA qilz4IUF+aMEbrseoiAMdVA75Ph2fHyVh0eTiRxKax5l8038sqMnXozqnd2hUlk3 l4mthPLVov/CnPyE3m0vnQSy7Wv2WnRqC6wVaVKOCjVaE4t160bmBi7cIuxFVr5N /fbxunKuiC6hjrSQoslTQiiKuwJyPy6Rh7zL4gJiUQiN+kUk2s+PcHhNnCVwQmTC n+eTNKg7sU2EasgY8LM3T5pETA== -----END CERTIFICATE-----Generated at Sat Sep 5 05:28:51 2026 by rpki-client