$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: hN6bWSlcFksBVR5UeMpBMnkrf0bnZeYHbVlOZ5kTrmY= Subject key identifier: D8:43:7B:ED:E5:45:0F:70:4B:61:F3:F4:00:18:35:FE:36:20:E4:8A Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0D6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0D5D Signing time: Sun 20 Sep 2026 17:59:01 +0000 Manifest this update: Sun 20 Sep 2026 17:59:01 +0000 Manifest next update: Sun 27 Sep 2026 17:59:01 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: ihfpFYJ90QgKxEEPwYiR8i7rVE7FbBGzZ5B+++hj4fw=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: M8VzcHzGGFzODlt0s8FMTbdg4bvEqOp4tLkXsR05vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Sep 20 17:59:01 2026 GMT Not After : Sep 27 17:59:01 2026 GMT Subject: CN=6ab01ee5-7782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:7c:72:67:67:a2:d2:86:0f:61:24:6e:e9: 64:18:15:2f:93:4c:4c:da:1c:e3:b4:f5:bd:0a:89: ec:98:f9:18:d8:0c:8f:e9:4c:95:a2:52:f4:cf:9b: 97:a8:7c:8a:28:f7:2e:67:a2:1e:28:71:15:fd:e2: 62:68:06:f4:53:33:40:2c:e9:d8:a8:06:f5:94:ed: 2b:5e:39:a0:a4:be:f0:ed:99:57:bf:0e:b1:b8:72: 15:41:62:55:20:4d:97:fc:a9:32:2d:60:bf:49:6b: ad:f0:7e:77:44:90:3a:a6:eb:72:da:99:7a:6e:b8: d0:86:48:6a:83:2b:0e:ff:55:c3:66:b8:a6:12:56: b4:48:e0:bc:94:07:76:12:bc:17:2f:91:0d:09:86: 39:3d:52:33:b2:c6:30:cb:d9:97:a6:74:99:4e:34: d5:5e:ff:d3:57:bc:49:eb:56:d0:05:95:dc:73:a1: 99:53:50:26:17:46:c7:89:ad:63:46:87:dd:e4:38: 9a:85:7f:6a:54:11:69:61:4e:61:ad:7c:78:73:9d: e3:2c:94:30:de:b3:18:57:db:2a:35:d5:16:f5:91: e0:db:6b:7f:d8:41:a8:79:ca:f4:e2:01:0e:0f:31: 46:18:9d:33:80:5b:ab:4a:54:e4:ce:94:f0:22:10: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:7B:ED:E5:45:0F:70:4B:61:F3:F4:00:18:35:FE:36:20:E4:8A X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:12:31:38:e4:e4:9a:1b:29:d7:eb:30:11:43:05:cf:d2:68: 18:90:85:e9:bb:d0:5c:10:ab:88:6e:53:89:bc:ca:3c:17:e5: b9:2a:1c:75:c2:1d:e5:b7:e1:5d:5a:63:0c:22:94:b5:72:fb: c6:82:05:f6:fc:04:3d:44:2a:b1:5d:7e:2c:3b:d1:80:12:e3: 9c:15:f5:93:84:e4:98:7c:99:6a:b4:2c:0b:56:55:00:03:b0: 09:39:b2:04:10:08:de:b4:4a:24:66:b0:15:d4:40:ba:b5:10: e3:80:74:82:42:34:26:a6:99:2f:a1:c8:1f:de:5a:a7:0b:53: 38:3a:4e:ef:1f:49:ab:27:77:bd:a1:a6:f8:d0:24:7a:c3:97: c9:7b:b0:dc:f9:d3:2a:d3:2c:7b:b3:b2:92:cc:71:6b:2b:de: 63:d2:f6:0d:e1:1a:1a:28:dd:b0:f9:6f:d0:a8:23:85:d1:ac: ce:e9:5b:4b:24:27:18:97:a5:37:bd:26:78:06:c4:fc:ce:6d: 85:96:58:66:d2:29:22:5f:f8:75:4c:a6:17:b5:c8:42:92:50: d9:de:7a:4c:9e:92:7a:d7:80:0d:a6:5e:00:0a:f5:48:03:c9: 55:76:da:37:16:1c:18:f4:13:5c:22:21:ca:b0:87:1d:a8:fc: cd:8d:35:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjYwOTIwMTc1OTAxWhcNMjYwOTI3MTc1OTAxWjAYMRYwFAYD VQQDEw02YWIwMWVlNS03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZV8cmdnotKGD2EkbulkGBUvk0xM2hzjtPW9ConsmPkY2AyP6UyVolL0z5uX qHyKKPcuZ6IeKHEV/eJiaAb0UzNALOnYqAb1lO0rXjmgpL7w7ZlXvw6xuHIVQWJV IE2X/KkyLWC/SWut8H53RJA6puty2pl6brjQhkhqgysO/1XDZrimEla0SOC8lAd2 ErwXL5ENCYY5PVIzssYwy9mXpnSZTjTVXv/TV7xJ61bQBZXcc6GZU1AmF0bHia1j Rofd5DiahX9qVBFpYU5hrXx4c53jLJQw3rMYV9sqNdUW9ZHg22t/2EGoecr04gEO DzFGGJ0zgFurSlTkzpTwIhDsnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhDe+3l RQ9wS2Hz9AAYNf42IOSKMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRIxOOTkmhsp1+swEUMFz9JoGJCF6bvQXBCriG5TibzKPBfluSocdcId5bfh XVpjDCKUtXL7xoIF9vwEPUQqsV1+LDvRgBLjnBX1k4TkmHyZarQsC1ZVAAOwCTmy BBAI3rRKJGawFdRAurUQ44B0gkI0JqaZL6HIH95apwtTODpO7x9Jqyd3vaGm+NAk esOXyXuw3PnTKtMse7OyksxxayveY9L2DeEaGijdsPlv0KgjhdGszulbSyQnGJel N70meAbE/M5thZZYZtIpIl/4dUymF7XIQpJQ2d56TJ6SeteADaZeAAr1SAPJVXba NxYcGPQTXCIhyrCHHaj8zY01LA== -----END CERTIFICATE-----Generated at Mon Sep 21 07:21:55 2026 by rpki-client