$ rpki-client -vvvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: gjjEn42p73o4ZEsfgLpe9oWGfVPQPcV7IHwq/tV/pGI= Subject key identifier: 52:10:2C:D3:A5:81:E2:27:F7:E5:32:E8:C2:1C:F8:8D:31:37:0D:EA Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 15CE Signing time: Tue 22 Sep 2026 16:42:02 +0000 Manifest this update: Tue 22 Sep 2026 16:42:02 +0000 Manifest next update: Tue 29 Sep 2026 16:42:02 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: 3prZ0PlQXqcx5ki7O1psEMKeBwaUq4K/g1yvpcvgARk=) 2: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: BQsuQrikdwhD5Mc0XBMqkQHD0Ua6D0EyN+F6ar++uGw=) 3: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: Aeg61XcuOkOdleV15Q4+Qk8RtuldUKElhU+Yjo/HRrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5672 (0x1628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Sep 22 16:42:02 2026 GMT Not After : Sep 29 16:42:02 2026 GMT Subject: CN=6ab2afda-142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:38:77:55:0a:ae:07:b1:37:3a:a4:29:fb: 32:4b:43:8e:98:bb:d2:e8:9e:89:66:4d:40:62:b0: f2:b5:e0:66:27:ce:29:fd:ba:01:b0:4a:5e:05:89: e4:e4:ed:a4:85:bc:31:12:25:71:a2:60:61:d4:5a: af:2f:4e:d6:49:3b:b5:6f:78:78:a5:35:c9:78:09: 67:0f:33:84:7f:12:ec:48:f8:a8:f4:d0:33:85:71: 3b:83:8e:7a:3b:0b:db:47:7b:12:09:18:2c:30:47: d4:3a:c5:67:6f:db:46:df:01:f1:8f:35:72:c2:ed: 0a:92:2e:f1:19:60:11:71:11:a3:da:05:78:73:35: ad:f9:ef:9f:cc:e6:bb:3a:0a:b4:9f:46:04:f3:2e: 3e:36:aa:9b:ab:16:58:36:d6:a3:29:15:43:fa:5c: 8b:81:d4:a1:4e:da:dc:7c:aa:35:a7:c3:dd:b2:a1: 8f:4b:f6:21:1d:b6:ef:79:ac:99:bd:8e:a6:27:a3: 8c:c7:2d:c1:c7:80:7a:3a:44:38:5e:5d:f4:ac:a9: 7b:7e:c3:86:5b:6c:f3:b5:f6:a0:41:e2:08:9a:aa: 1a:67:05:2c:da:c3:8e:11:fe:a8:9e:4e:46:27:fd: 50:e5:07:58:e7:0c:a1:14:07:60:5e:a4:14:e3:37: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:2C:D3:A5:81:E2:27:F7:E5:32:E8:C2:1C:F8:8D:31:37:0D:EA X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:b3:c0:4c:85:dc:73:67:89:d7:4d:64:3e:eb:df:27:02: 07:43:0b:19:30:e5:e9:e9:95:43:ff:47:01:6b:d7:bd:2f:04: b4:3c:27:cb:7a:0c:ba:f0:76:13:04:1c:86:37:a0:89:3f:29: 58:ca:e9:cc:cd:9f:8e:47:55:41:5c:cc:37:30:13:e2:23:4d: 65:8c:b9:7c:1a:c5:38:95:17:a9:8f:12:ca:a1:77:fc:6a:fc: c5:80:57:39:28:11:5c:ac:14:91:73:44:42:f8:dc:2a:b5:18: 06:a3:0b:26:bc:45:c6:b4:c7:a3:52:43:58:55:51:bd:46:f6: 7c:35:1d:ab:24:ce:78:b8:a5:a8:7f:70:14:b6:d0:a1:9b:c4: 28:5c:fd:81:2e:8d:27:6c:66:bf:25:d8:64:d2:1b:51:5a:48: e4:85:49:c8:54:a6:b5:a1:9a:e1:f8:3a:30:e9:e2:42:b4:55: 34:4a:3e:a0:0c:18:1d:fe:1a:54:ee:37:a1:18:85:e0:86:f4: ba:77:b5:33:11:48:38:72:1e:32:9a:bc:b2:74:bf:1c:40:b6: a7:57:06:b4:99:1e:6c:28:ed:af:ab:ee:8a:f1:4c:24:97:40: 7d:c6:54:31:20:36:7b:67:db:69:ae:f9:01:cf:c0:e8:be:e4: cf:4a:0f:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjYwOTIyMTY0MjAyWhcNMjYwOTI5MTY0MjAyWjAYMRYwFAYD VQQDEw02YWIyYWZkYS0xNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dU4d1UKrgexNzqkKfsyS0OOmLvS6J6JZk1AYrDyteBmJ84p/boBsEpeBYnk 5O2khbwxEiVxomBh1FqvL07WSTu1b3h4pTXJeAlnDzOEfxLsSPio9NAzhXE7g456 OwvbR3sSCRgsMEfUOsVnb9tG3wHxjzVywu0Kki7xGWARcRGj2gV4czWt+e+fzOa7 Ogq0n0YE8y4+NqqbqxZYNtajKRVD+lyLgdShTtrcfKo1p8PdsqGPS/YhHbbveayZ vY6mJ6OMxy3Bx4B6OkQ4Xl30rKl7fsOGW2zztfagQeIImqoaZwUs2sOOEf6onk5G J/1Q5QdY5wyhFAdgXqQU4zfTwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIQLNOl geIn9+Uy6MIc+I0xNw3qMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvM6zwEyF3HNniddNZD7r3ycCB0MLGTDl6emVQ/9HAWvXvS8EtDwny3oMuvB2 EwQchjegiT8pWMrpzM2fjkdVQVzMNzAT4iNNZYy5fBrFOJUXqY8SyqF3/Gr8xYBX OSgRXKwUkXNEQvjcKrUYBqMLJrxFxrTHo1JDWFVRvUb2fDUdqyTOeLilqH9wFLbQ oZvEKFz9gS6NJ2xmvyXYZNIbUVpI5IVJyFSmtaGa4fg6MOniQrRVNEo+oAwYHf4a VO43oRiF4Ib0une1MxFIOHIeMpq8snS/HEC2p1cGtJkebCjtr6vuivFMJJdAfcZU MSA2e2fbaa75Ac/A6L7kz0oP4A== -----END CERTIFICATE-----Generated at Wed Sep 23 10:21:54 2026 by rpki-client