$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: 5NFrulA3mOrfxvAjfrC5SRAKZH/ZlYUX64h4WK6XXVk= Subject key identifier: C1:C6:FD:4E:0B:1A:D4:2E:84:B1:DD:32:DE:F9:AE:F0:84:41:D4:BA Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 0118 Signing time: Mon 21 Sep 2026 05:57:30 +0000 Manifest this update: Mon 21 Sep 2026 05:57:29 +0000 Manifest next update: Mon 28 Sep 2026 05:57:29 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: Q6AN3tq1bGt7sjOelKeq5e0J38MmqFtq3N0C6Q66ezg=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Sep 21 05:57:29 2026 GMT Not After : Sep 28 05:57:29 2026 GMT Subject: CN=6ab0c74a-a10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7e:44:6a:3b:75:f8:f7:c5:50:c0:a8:e9:36: 9e:be:3b:46:dc:ef:5a:e4:87:29:fd:35:67:74:0b: 94:e5:80:28:22:c8:b9:80:80:c6:94:3d:e2:07:08: f2:e1:f7:2a:02:42:a3:fb:c2:fa:41:e3:9f:53:95: cc:02:53:21:16:32:1a:0b:9b:47:40:cb:62:14:b1: a7:1a:b4:6a:7e:df:64:e7:43:31:60:d4:d8:6a:4a: 7f:ba:2f:7b:b2:77:ad:d9:cb:1c:57:30:b6:f2:17: e7:6f:8d:9a:03:29:37:87:c5:c7:69:2e:ce:e2:c8: 1a:f7:36:62:93:88:60:98:fa:29:52:30:b6:85:7d: 61:16:fa:ab:24:19:7a:7f:2e:01:12:72:31:ff:ab: dd:97:42:28:78:4e:f2:fa:1a:11:1e:8d:57:35:1d: a2:75:63:e4:0b:ca:f6:b8:f4:e6:85:98:63:b7:af: 34:27:36:92:9f:f2:36:4a:67:56:c3:7c:97:0a:5f: fd:3e:20:a9:33:b0:fe:28:0a:57:11:b8:5b:c8:30: 04:a1:67:1b:b4:79:8b:8e:a1:76:16:f0:13:5c:b8: e3:67:c2:64:ce:cf:c1:21:19:14:01:bc:fe:f3:17: 22:38:43:3a:ed:e5:eb:dd:06:dc:07:89:44:66:78: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C6:FD:4E:0B:1A:D4:2E:84:B1:DD:32:DE:F9:AE:F0:84:41:D4:BA X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f8:01:44:b5:84:c0:d5:64:c7:14:85:8d:82:71:c8:66:13: 99:1b:8b:71:c8:36:59:2e:d6:68:ea:6d:2e:17:76:94:fb:6b: c3:b0:ab:7b:74:b9:b4:3f:84:07:58:0e:9f:53:42:10:b1:71: 1b:1f:98:3e:b0:98:ac:19:1a:57:d4:63:08:01:0e:db:1c:fa: a1:2e:1c:73:88:c0:1a:ce:84:b7:f7:47:26:d8:d7:ed:d9:9a: 52:db:f9:81:e5:6a:47:bf:60:8a:d8:ba:af:76:7d:65:e7:78: 0e:89:9a:3a:a6:6c:38:34:09:34:34:27:1a:96:ef:ed:b1:94: 25:fa:be:e6:15:9c:37:a1:5a:f5:c9:34:71:18:0d:6c:eb:ed: 94:fb:ae:49:ea:8c:d9:7f:be:17:0b:d1:98:e8:80:f3:8a:06: 34:cc:bc:63:9f:94:fd:12:8f:98:96:ac:f9:1a:c7:e2:96:cf: ce:58:76:9c:75:62:a1:99:e9:24:01:9d:9a:3a:e3:5f:ed:70: 4a:e6:1a:82:93:94:43:fe:f3:8a:e4:87:3a:d2:9f:06:ac:dd: b6:0a:a5:1c:1c:a7:ab:f0:bd:a0:fc:51:c5:87:1c:ea:9e:9f: 24:94:88:25:6b:ed:57:29:d0:70:c3:fe:93:ce:48:dc:22:21: cd:00:cd:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjYwOTIxMDU1NzI5WhcNMjYwOTI4MDU1NzI5WjAYMRYwFAYD VQQDEw02YWIwYzc0YS1hMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk35Eajt1+PfFUMCo6TaevjtG3O9a5Icp/TVndAuU5YAoIsi5gIDGlD3iBwjy 4fcqAkKj+8L6QeOfU5XMAlMhFjIaC5tHQMtiFLGnGrRqft9k50MxYNTYakp/ui97 snet2cscVzC28hfnb42aAyk3h8XHaS7O4sga9zZik4hgmPopUjC2hX1hFvqrJBl6 fy4BEnIx/6vdl0IoeE7y+hoRHo1XNR2idWPkC8r2uPTmhZhjt680JzaSn/I2SmdW w3yXCl/9PiCpM7D+KApXEbhbyDAEoWcbtHmLjqF2FvATXLjjZ8Jkzs/BIRkUAbz+ 8xciOEM67eXr3QbcB4lEZniMBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHG/U4L GtQuhLHdMt75rvCEQdS6MB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRDOS83QkEzRTcwQzBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlP eDFZSEVtcEo3MmNIdlc5SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF/gBRLWEwNVkxxSFjYJxyGYTmRuLccg2WS7WaOptLhd2lPtrw7Cre3S5tD+E B1gOn1NCELFxGx+YPrCYrBkaV9RjCAEO2xz6oS4cc4jAGs6Et/dHJtjX7dmaUtv5 geVqR79giti6r3Z9Zed4DomaOqZsODQJNDQnGpbv7bGUJfq+5hWcN6Fa9ck0cRgN bOvtlPuuSeqM2X++FwvRmOiA84oGNMy8Y5+U/RKPmJas+RrH4pbPzlh2nHVioZnp JAGdmjrjX+1wSuYagpOUQ/7ziuSHOtKfBqzdtgqlHBynq/C9oPxRxYcc6p6fJJSI JWvtVynQcMP+k85I3CIhzQDN4A== -----END CERTIFICATE-----Generated at Mon Sep 21 11:08:22 2026 by rpki-client