$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: us1YLYzgdgsK9mdyYnzURmJ97WgqyxMepIg8AK1DjRM= Subject key identifier: E9:B3:05:82:EF:03:79:5E:41:96:54:AB:F2:2D:17:FB:FD:94:2C:A8 Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 012D Signing time: Sun 11 Oct 2026 06:26:19 +0000 Manifest this update: Sun 11 Oct 2026 06:26:19 +0000 Manifest next update: Sun 18 Oct 2026 06:26:19 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: fXivQBB2/dRzix44VyrXx6duChDnBOo96LoUTKaAriU=) 2: 8BC6C2AC9C2C11F1B92931A03611F970.roa (hash: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=) 3: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 4: C511A0AC8B1211F1A6305EFC3311F970.roa (hash: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=) 5: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) 6: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 7: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Oct 11 06:26:19 2026 GMT Not After : Oct 18 06:26:19 2026 GMT Subject: CN=6acb2c0b-6bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:d0:72:9e:ac:5e:ce:62:79:2a:0c:9b:e6: 51:20:0e:19:58:53:af:5f:3e:e9:d7:e6:0d:f1:8b: a8:79:49:14:4f:41:eb:73:bf:a4:19:b9:c3:a9:e9: 67:ff:5b:68:b3:07:ea:7b:76:3a:e2:66:67:63:79: 33:a4:dd:60:a1:46:a5:55:64:8e:67:e7:3c:03:de: fc:05:28:b5:b0:e7:90:cb:b6:5f:c1:6b:e7:89:18: 0b:22:3e:3c:d2:9d:eb:70:9c:b3:03:00:04:3d:49: 78:f5:01:bb:50:08:c8:a6:4a:d5:1c:b2:84:a3:c4: 44:f1:cc:c1:0e:19:df:16:cb:c5:1d:a3:4f:d1:20: 8e:d4:9c:d7:54:ce:c2:2f:b8:76:d6:86:be:f9:c1: 3e:ca:ed:a6:e9:c0:5b:a4:6b:41:74:a9:c0:55:66: 88:a3:db:d8:ed:10:8d:f4:d5:f5:66:46:09:00:d2: 07:b6:94:09:3f:5a:ea:b6:ca:d2:b8:35:b1:2b:e8: d6:29:95:09:fb:64:22:f7:b7:7c:4d:39:87:79:69: b2:28:b6:ca:f4:f3:a1:26:7b:59:c5:00:f1:22:16: 1e:1d:18:ac:22:72:15:e9:58:ae:9d:d0:64:21:bb: 2e:45:80:f0:30:d3:29:77:26:f7:58:e5:e1:a5:44: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B3:05:82:EF:03:79:5E:41:96:54:AB:F2:2D:17:FB:FD:94:2C:A8 X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c6:4b:88:0d:fd:c8:f2:a4:3b:0e:78:11:34:11:29:05:a0: 44:7c:0e:2f:87:7d:5f:40:3a:e9:49:55:2b:11:d9:46:56:52: 11:03:ff:0d:2c:1d:ef:d0:50:fe:ee:de:d6:b7:c3:21:8d:bb: cf:4a:68:c9:1f:47:e3:87:51:b4:e8:ba:cc:d9:e3:d8:44:b5: f8:09:16:83:cc:ab:06:6c:e4:bd:db:b7:72:2a:78:9f:de:01: da:08:d6:74:03:03:d4:4f:e3:43:a7:91:e4:3f:cc:21:2b:5a: ed:cb:5a:a0:61:c5:ba:ea:1a:78:ae:bf:cc:67:80:73:11:75: 20:f7:85:a3:d6:e3:13:a4:2f:df:83:69:df:47:bc:86:a4:61: f4:4a:4d:24:97:76:7c:72:50:25:44:db:79:40:71:6e:40:a6: 7f:22:73:4d:52:c8:dc:1a:3f:85:0a:4a:48:cd:5d:a8:42:3c: 29:b0:bb:5b:1e:50:2e:7d:1c:16:99:f0:f7:85:c2:db:12:2c: 72:39:74:77:89:02:6c:5c:ae:cd:06:ae:e8:31:bd:ef:7e:a1: a0:02:ea:53:af:67:7e:c5:28:2a:a7:0b:01:1a:18:27:ee:b6: bd:9b:9d:ca:5b:13:f8:b0:e0:2e:de:e3:17:4a:c4:33:15:bf: f7:8f:e9:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYxMDExMDYyNjE5WhcNMjYxMDE4MDYyNjE5WjAYMRYwFAYD VQQDEw02YWNiMmMwYi02YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2XQcp6sXs5ieSoMm+ZRIA4ZWFOvXz7p1+YN8YuoeUkUT0Hrc7+kGbnDqeln /1toswfqe3Y64mZnY3kzpN1goUalVWSOZ+c8A978BSi1sOeQy7ZfwWvniRgLIj48 0p3rcJyzAwAEPUl49QG7UAjIpkrVHLKEo8RE8czBDhnfFsvFHaNP0SCO1JzXVM7C L7h21oa++cE+yu2m6cBbpGtBdKnAVWaIo9vY7RCN9NX1ZkYJANIHtpQJP1rqtsrS uDWxK+jWKZUJ+2Qi97d8TTmHeWmyKLbK9POhJntZxQDxIhYeHRisInIV6ViundBk IbsuRYDwMNMpdyb3WOXhpUTxwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmzBYLv A3leQZZUq/ItF/v9lCyoMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG8ZLiA39yPKkOw54ETQRKQWgRHwOL4d9X0A66UlVKxHZRlZSEQP/DSwd79BQ /u7e1rfDIY27z0poyR9H44dRtOi6zNnj2ES1+AkWg8yrBmzkvdu3cip4n94B2gjW dAMD1E/jQ6eR5D/MISta7ctaoGHFuuoaeK6/zGeAcxF1IPeFo9bjE6Qv34Np30e8 hqRh9EpNJJd2fHJQJUTbeUBxbkCmfyJzTVLI3Bo/hQpKSM1dqEI8KbC7Wx5QLn0c Fpnw94XC2xIscjl0d4kCbFyuzQau6DG9736hoALqU69nfsUoKqcLARoYJ+62vZud ylsT+LDgLt7jF0rEMxW/94/pqA== -----END CERTIFICATE-----Generated at Tue Oct 13 06:16:51 2026 by rpki-client