$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: b3Q3YS9hQpKkzbe1bHes3RWYmAB3alOYv3fX8d0uYfo= Subject key identifier: 0F:13:CF:F4:10:E5:8A:73:67:57:8E:9F:6D:BB:DD:6D:1C:EA:7C:8D Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 0115 Signing time: Tue 25 Aug 2026 06:03:52 +0000 Manifest this update: Tue 25 Aug 2026 06:03:51 +0000 Manifest next update: Tue 01 Sep 2026 06:03:51 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: 85wiCkwdtYauAOxFTGEBHO/Pqub+qZ2NgqCtH1G4bTo=) 2: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 3: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 4: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) 5: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) 6: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 7: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Aug 25 06:03:51 2026 GMT Not After : Sep 1 06:03:51 2026 GMT Subject: CN=6a8d3048-9e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:0f:4e:e2:fc:7c:43:99:a3:01:9b:8d:01: c3:0f:2e:a1:81:7e:bd:59:39:8a:14:8a:9f:17:42: 7e:ac:92:81:7f:b0:cf:d1:9d:e0:92:31:a5:8b:be: a7:fc:d5:f7:82:a2:b3:74:7c:27:f0:bd:c3:8e:b4: 95:2d:4e:e3:0b:bd:76:a1:99:9e:03:91:19:16:33: 0c:53:ea:62:b0:ea:ee:c0:d5:98:93:24:98:2c:2a: a2:9a:69:96:0a:f5:52:2e:c8:e1:7b:d5:83:34:17: 6f:e4:68:c5:56:b0:33:a2:bd:df:26:e2:db:96:ae: 1d:cf:3c:ec:f4:e7:0d:2a:95:86:00:83:cc:eb:94: 4a:4a:b6:d4:09:1e:4d:d7:16:87:13:2e:53:ba:e3: 99:64:5d:f9:81:b4:ae:a2:7b:5c:d6:30:c0:fd:bd: cc:a3:6b:b2:19:c1:14:c2:a4:b4:79:24:b3:92:89: df:4b:9a:6f:af:14:11:88:b4:08:15:c1:28:78:b1: 97:42:cf:7e:07:5a:aa:3e:38:1b:23:11:88:51:a1: 59:1c:43:2e:67:6b:f9:2a:88:bf:c3:53:2e:32:6b: 1b:ef:f6:bf:46:80:24:2a:63:d0:2b:e4:d2:3d:64: f6:ae:bf:de:63:65:55:91:e9:04:f1:56:e7:df:16: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:13:CF:F4:10:E5:8A:73:67:57:8E:9F:6D:BB:DD:6D:1C:EA:7C:8D X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:81:74:05:42:a9:56:32:b3:66:46:3d:ad:c1:2c:8f:cc:be: b1:a7:77:09:f5:96:f9:45:3e:f7:19:0a:26:7c:64:2f:9f:73: 78:40:2b:42:73:cb:8e:c3:0d:d6:a0:6b:a1:04:02:15:fa:e7: 6f:0e:07:a0:2d:5b:07:24:b1:94:27:da:b4:30:90:8a:5d:47: d2:7a:f3:da:61:44:d3:aa:1e:12:d8:6b:88:a0:6d:9c:5b:fb: d2:81:a9:bc:26:8c:3d:1e:05:37:ac:dc:ee:64:f6:d0:3d:ed: 6f:bd:b1:66:17:ea:9f:d8:57:39:6b:9c:c6:25:1e:d1:fc:fb: 69:52:4c:5d:cc:11:c7:21:5d:35:5c:c6:32:81:5c:2b:d1:3c: 5a:1a:c1:2f:5e:1d:6d:6a:ad:0d:ff:bf:aa:c3:48:cd:7a:3f: 46:1a:be:90:aa:ff:f8:d5:4e:51:e9:fd:30:91:7d:9a:e9:75: eb:3d:db:88:d5:5b:51:c6:fe:a3:c1:1c:c3:af:1b:d2:92:bc: 68:b2:a6:08:10:da:70:a2:68:52:56:94:57:53:64:f3:96:ee: 09:87:56:9a:3e:d2:d3:6c:2c:03:7e:f9:56:11:0e:8e:7b:a6: b0:a0:6b:3b:ae:ea:ba:2a:c1:4a:66:e4:2b:8a:ba:03:47:e7: 2f:88:de:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwODI1MDYwMzUxWhcNMjYwOTAxMDYwMzUxWjAYMRYwFAYD VQQDEw02YThkMzA0OC05ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8sPTuL8fEOZowGbjQHDDy6hgX69WTmKFIqfF0J+rJKBf7DP0Z3gkjGli76n /NX3gqKzdHwn8L3DjrSVLU7jC712oZmeA5EZFjMMU+pisOruwNWYkySYLCqimmmW CvVSLsjhe9WDNBdv5GjFVrAzor3fJuLblq4dzzzs9OcNKpWGAIPM65RKSrbUCR5N 1xaHEy5TuuOZZF35gbSuontc1jDA/b3Mo2uyGcEUwqS0eSSzkonfS5pvrxQRiLQI FcEoeLGXQs9+B1qqPjgbIxGIUaFZHEMuZ2v5Koi/w1MuMmsb7/a/RoAkKmPQK+TS PWT2rr/eY2VVkekE8Vbn3xZ5rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8Tz/QQ 5YpzZ1eOn2273W0c6nyNMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHYF0BUKpVjKzZkY9rcEsj8y+sad3CfWW+UU+9xkKJnxkL59zeEArQnPLjsMN 1qBroQQCFfrnbw4HoC1bBySxlCfatDCQil1H0nrz2mFE06oeEthriKBtnFv70oGp vCaMPR4FN6zc7mT20D3tb72xZhfqn9hXOWucxiUe0fz7aVJMXcwRxyFdNVzGMoFc K9E8WhrBL14dbWqtDf+/qsNIzXo/Rhq+kKr/+NVOUen9MJF9mul16z3biNVbUcb+ o8Ecw68b0pK8aLKmCBDacKJoUlaUV1Nk85buCYdWmj7S02wsA375VhEOjnumsKBr O67quirBSmbkK4q6A0fnL4jeAQ== -----END CERTIFICATE-----Generated at Tue Aug 25 15:57:03 2026 by rpki-client