$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json) Hash identifier: dlpOgYCbwzPU0kY/UawqzcZV+5RtuURao/9dxdPFadc= Subject key identifier: 1B:99:E1:19:9D:E9:4C:3A:1D:9F:A8:DA:F4:E2:AD:22:11:3F:2A:AE Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft Manifest number: 70 Signing time: Mon 21 Sep 2026 07:57:10 +0000 Manifest this update: Mon 21 Sep 2026 07:57:09 +0000 Manifest next update: Mon 28 Sep 2026 07:57:09 +0000 Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: hg0BH2f/gczjVAavIK0ewyKpZSMZcM4gYvHK3yvosaI=) 2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8 Validity Not Before: Sep 21 07:57:09 2026 GMT Not After : Sep 28 07:57:09 2026 GMT Subject: CN=6ab0e356-0961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:8b:0f:30:aa:5c:f3:3e:2f:fa:c8:5a:66: 1e:89:5d:94:3f:3d:14:ad:5c:a7:62:c2:da:2b:22: 7a:98:2d:5f:5e:77:e6:6c:f6:00:c2:32:8e:a0:e1: 0a:31:38:a9:e2:6f:47:50:a5:0d:42:50:7d:9c:49: 15:46:35:d5:0c:88:23:61:7b:94:c9:69:54:39:c9: 87:d9:d7:41:6e:07:7c:f6:52:fc:12:94:cc:14:60: 47:42:51:e0:b6:cc:08:95:ce:79:ed:a3:63:b8:f3: b9:e8:ac:58:2d:2e:9f:49:e4:52:81:79:4e:40:ee: 41:f2:60:c3:19:b9:9f:f7:ce:d8:ac:67:83:7c:5d: c8:65:b9:4b:b4:af:21:51:34:c9:18:71:5c:16:60: 20:27:c6:e7:b2:cc:47:e8:9d:c6:1a:21:83:59:f1: b1:4e:c3:d6:51:41:d4:eb:8d:ea:61:6c:c4:53:32: 70:bf:a5:9d:89:3c:f2:29:bd:c7:ca:06:0f:d4:4b: 89:3f:7d:5f:ae:e5:ee:61:f9:3f:b8:96:47:fa:c7: 4c:06:ad:af:ac:c1:ed:c2:18:e3:18:5b:ba:9f:32: 1e:48:e2:ee:cf:ba:ce:b4:bb:6a:89:25:f2:13:6b: 29:f9:5c:c8:8a:2e:77:5f:af:dc:2b:7d:31:e0:fb: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:E1:19:9D:E9:4C:3A:1D:9F:A8:DA:F4:E2:AD:22:11:3F:2A:AE X509v3 Authority Key Identifier: keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9a:f3:dd:d0:21:14:7b:22:3d:9d:8d:9f:6e:1f:b1:31:65: 93:ca:ed:2b:7c:47:21:fd:d4:1d:a3:cc:10:86:ce:e6:98:a8: d6:77:b7:a7:13:b7:8b:86:12:54:6b:54:b4:30:9b:ef:52:eb: 8a:68:10:af:f4:1a:b4:bf:b9:1b:cf:70:be:92:39:15:4b:7f: a7:3e:2a:9f:fa:27:d7:ad:2f:8d:90:cd:bc:a3:f7:9d:29:c1: d2:d0:e6:82:18:31:a2:1b:a0:c6:49:b3:08:7f:d8:3f:38:74: 21:95:d4:b3:19:23:09:ec:45:10:bc:25:64:75:43:5f:e7:4d: 86:a1:dc:59:f9:b3:e2:26:22:b4:f2:4e:8f:bf:13:3c:21:db: 40:eb:e7:3f:98:63:1a:4d:ea:cc:fb:be:50:df:cb:16:21:2f: 1e:bb:62:e6:62:ff:97:a3:f5:b7:95:b7:83:e1:25:a4:eb:cb: de:b0:af:33:ce:ab:68:a0:76:ba:27:8f:c5:04:c5:08:27:a5: 63:ff:33:f9:92:21:64:2a:a1:d1:4e:8d:08:60:15:36:50:34: 7d:5c:2f:b4:25:5a:b8:8c:18:d8:45:d8:51:fa:b5:23:7a:83: b1:51:2d:a2:96:79:7b:d0:6f:05:c8:e6:0b:0d:9c:c8:19:ce: fd:b4:71:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoOTdCNDQ2MjE2Mzc5ODU3NzAwQUQ2NUI5RkFGRUVDN0M5 MjJDMjJEODAeFw0yNjA5MjEwNzU3MDlaFw0yNjA5MjgwNzU3MDlaMBgxFjAUBgNV BAMTDTZhYjBlMzU2LTA5NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCikIsPMKpc8z4v+shaZh6JXZQ/PRStXKdiwtorInqYLV9ed+Zs9gDCMo6g4Qox OKnib0dQpQ1CUH2cSRVGNdUMiCNhe5TJaVQ5yYfZ10FuB3z2UvwSlMwUYEdCUeC2 zAiVznnto2O487norFgtLp9J5FKBeU5A7kHyYMMZuZ/3ztisZ4N8XchluUu0ryFR NMkYcVwWYCAnxueyzEfoncYaIYNZ8bFOw9ZRQdTrjephbMRTMnC/pZ2JPPIpvcfK Bg/US4k/fV+u5e5h+T+4lkf6x0wGra+swe3CGOMYW7qfMh5I4u7Pus60u2qJJfIT ayn5XMiKLndfr9wrfTHg+8FBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG5nhGZ3p TDodn6ja9OKtIhE/Kq4wHwYDVR0jBBgwFoAUl7RGIWN5hXcArWW5+v7sfJIsItgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzM5NjlCM0NBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhjQXJXVzUtdjdzZkpJc0l0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbDdSR0lXTjVoWGNBcldXNS12N3NmSklzSXRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzM5NjlCM0NBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L2w3UkdJV041aFhj QXJXVzUtdjdzZkpJc0l0Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADmvPd0CEUeyI9nY2fbh+xMWWTyu0rfEch/dQdo8wQhs7mmKjWd7enE7eLhhJU a1S0MJvvUuuKaBCv9Bq0v7kbz3C+kjkVS3+nPiqf+ifXrS+NkM28o/edKcHS0OaC GDGiG6DGSbMIf9g/OHQhldSzGSMJ7EUQvCVkdUNf502GodxZ+bPiJiK08k6PvxM8 IdtA6+c/mGMaTerM+75Q38sWIS8eu2LmYv+Xo/W3lbeD4SWk68vesK8zzqtooHa6 J4/FBMUIJ6Vj/zP5kiFkKqHRTo0IYBU2UDR9XC+0JVq4jBjYRdhR+rUjeoOxUS2i lnl70G8FyOYLDZzIGc79tHFH -----END CERTIFICATE-----Generated at Tue Sep 22 01:16:21 2026 by rpki-client