$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft File: KUHHFh7UouCbuRyrxEPIzLwDLtg.mft (raw, json) Hash identifier: 8kQRxlz1MB8sjTbhwkEGDtLElV0VpYvwMQD97vnKVC0= Subject key identifier: A0:C5:25:F1:FE:0E:C3:CF:6E:3B:D7:92:EB:7F:E6:0E:E2:09:48:29 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 3593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft Manifest number: 3583 Signing time: Fri 04 Sep 2026 14:50:27 +0000 Manifest this update: Fri 04 Sep 2026 14:50:27 +0000 Manifest next update: Fri 11 Sep 2026 14:50:27 +0000 Files and hashes: 1: KUHHFh7UouCbuRyrxEPIzLwDLtg.crl (hash: ZG+2miLNbBoNdtiPXz5eg3jBm0Wi3kuCRdbVMJEAh7Q=) 2: F5223048791711F195779BF068A30FBC.roa (hash: xe2EZMVbnxYIb+bVcKPMMf7o2pQWJ5gKMVCawEBa/98=) 3: 62D956E4706B11F1BCF9211474A30FBC.roa (hash: qIR0Cnf/Tw3jmEWlP5g5lhVl5hdbItrkQSAnuy1RWvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13715 (0x3593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Sep 4 14:50:27 2026 GMT Not After : Sep 11 14:50:27 2026 GMT Subject: CN=6a9adab3-0888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:e3:68:3f:39:be:27:a2:68:ed:15:7b:5b: db:2a:de:62:74:33:9e:29:e1:9d:a1:40:e9:d0:3d: 64:cf:3c:95:30:f2:77:e7:33:8d:04:0a:98:47:d8: fc:cf:b3:81:10:43:20:1e:b2:c3:46:e4:fc:d1:a6: 35:9b:f1:30:f9:24:b7:87:42:17:20:57:ca:51:02: 6a:d1:60:39:98:9f:8c:e3:0b:3f:54:c0:05:b0:14: 38:85:c9:c5:b6:48:85:a8:48:6c:8a:74:a6:55:7a: e7:15:5e:fd:53:90:c6:a7:30:fc:2d:f0:dc:ed:75: 68:d8:eb:7e:37:e6:b1:48:49:2f:10:e5:ec:27:31: 78:25:52:7f:5f:7b:19:e8:7e:56:27:25:10:eb:7b: 62:a4:41:b5:b1:a7:cf:5e:e8:f7:2c:b2:80:56:c9: 72:8f:67:2a:f3:f7:ef:98:b1:bf:db:80:45:76:69: 50:fe:20:a3:1b:ed:db:0c:b7:c7:e2:88:9d:7b:15: f4:17:77:8e:c2:cb:92:0b:5e:e2:c8:19:1e:7c:97: de:b7:00:45:b6:48:d2:9b:51:45:58:0d:f0:3c:41: 97:8d:7a:0d:64:ab:50:09:2f:dc:ec:41:64:3e:5b: 85:a1:b1:e8:dd:d3:99:e3:81:37:f8:de:20:28:a8: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:25:F1:FE:0E:C3:CF:6E:3B:D7:92:EB:7F:E6:0E:E2:09:48:29 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:94:3b:ec:d4:04:dc:a7:10:a1:4d:f1:8a:68:a8:cf:8b:8f: ae:ac:20:17:13:f1:15:c0:74:a6:11:7f:2a:c0:a1:26:93:fd: 5c:5d:d6:bf:7b:07:52:40:e2:d2:50:46:eb:1f:bc:cc:38:cf: a3:81:f3:cc:a0:0f:01:91:5e:f3:66:d7:87:77:88:2d:5d:23: 50:15:e2:10:15:a5:1d:5a:42:94:5a:13:28:4f:a3:46:68:fa: 6b:79:ed:c3:34:c6:e2:4c:b8:15:71:c9:0e:88:0f:8a:b2:07: 7c:6e:b5:b2:a1:f6:e5:b2:14:4a:1f:36:6e:78:e9:14:19:a2: 41:96:a1:d3:58:48:93:fa:c4:7f:4c:cb:2a:9d:81:03:b8:b6: b7:b4:d6:2e:6a:09:16:97:97:2e:0e:ca:a3:56:f4:9b:c1:f7: 7c:cb:6d:3b:bc:54:32:dd:e2:b4:e3:f5:1e:85:32:cc:71:b9: 94:eb:67:7a:b7:93:a4:02:dd:88:c9:7e:91:f9:f3:e4:32:86: c9:70:d9:19:9f:95:b9:7a:6d:fc:34:95:7e:bc:5c:58:eb:bf: 52:82:38:9e:64:c9:f0:31:27:85:d1:76:cc:ef:c1:ec:35:ac: e9:7b:80:06:5d:41:61:b3:8f:4f:56:64:50:4f:73:f4:59:cb: 35:e5:d4:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYwOTA0MTQ1MDI3WhcNMjYwOTExMTQ1MDI3WjAYMRYwFAYD VQQDEw02YTlhZGFiMy0wODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1XjaD85vieiaO0Ve1vbKt5idDOeKeGdoUDp0D1kzzyVMPJ35zONBAqYR9j8 z7OBEEMgHrLDRuT80aY1m/Ew+SS3h0IXIFfKUQJq0WA5mJ+M4ws/VMAFsBQ4hcnF tkiFqEhsinSmVXrnFV79U5DGpzD8LfDc7XVo2Ot+N+axSEkvEOXsJzF4JVJ/X3sZ 6H5WJyUQ63tipEG1safPXuj3LLKAVslyj2cq8/fvmLG/24BFdmlQ/iCjG+3bDLfH 4oidexX0F3eOwsuSC17iyBkefJfetwBFtkjSm1FFWA3wPEGXjXoNZKtQCS/c7EFk PluFobHo3dOZ44E3+N4gKKih+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDFJfH+ DsPPbjvXkut/5g7iCUgpMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUVBOS9DRUQwQTlFNjFEOTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91 Q2J1UnlyeEVQSXpMd0RMdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvZQ77NQE3KcQoU3ximioz4uPrqwgFxPxFcB0phF/KsChJpP9XF3Wv3sHUkDi 0lBG6x+8zDjPo4HzzKAPAZFe82bXh3eILV0jUBXiEBWlHVpClFoTKE+jRmj6a3nt wzTG4ky4FXHJDogPirIHfG61sqH25bIUSh82bnjpFBmiQZah01hIk/rEf0zLKp2B A7i2t7TWLmoJFpeXLg7Ko1b0m8H3fMttO7xUMt3itOP1HoUyzHG5lOtnereTpALd iMl+kfnz5DKGyXDZGZ+VuXpt/DSVfrxcWOu/UoI4nmTJ8DEnhdF2zO/B7DWs6XuA Bl1BYbOPT1ZkUE9z9FnLNeXUNA== -----END CERTIFICATE-----Generated at Sat Sep 5 05:19:14 2026 by rpki-client