$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: gbpNpxcM81T3tbR2G3QzkiLdEXYqhqXUonQGANHr750= Subject key identifier: E7:74:80:F9:FD:4F:3A:37:95:C8:6B:F5:35:4C:0B:E4:79:4F:62:CC Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 0147 Signing time: Mon 21 Sep 2026 05:24:24 +0000 Manifest this update: Mon 21 Sep 2026 05:24:24 +0000 Manifest next update: Mon 28 Sep 2026 05:24:24 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: Qa5nwsRJMoxXf0OLAS5ujXdBQ7f/GpOIPqmvi/L8Yp8=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Sep 21 05:24:24 2026 GMT Not After : Sep 28 05:24:24 2026 GMT Subject: CN=6ab0bf88-84df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:8d:30:19:be:c2:8e:dd:9f:ce:43:38:38: 73:bb:57:32:35:91:ad:5e:46:11:f5:40:a7:1f:64: 57:1d:e8:93:dd:9a:02:96:da:91:fc:ac:a0:5a:f0: 1c:ba:61:ad:e2:28:5e:51:14:f8:22:85:a5:a2:d3: 71:df:0a:93:4f:cc:6e:7e:ae:e3:14:a1:ab:1a:13: a7:86:9b:7a:3a:ae:49:af:f4:ff:0f:a0:00:6e:1f: 4d:26:fb:fa:6f:91:e0:5e:d0:cc:4f:92:de:81:27: 03:63:c0:23:92:2d:30:7f:ac:30:77:5e:07:54:ac: 11:d2:c3:3e:92:09:6c:b4:3c:82:0b:69:0b:ae:49: f7:94:81:65:33:0c:1f:15:90:b5:a3:b1:17:69:0d: 35:83:1d:68:ca:ae:30:e4:2a:dc:9c:65:73:a0:25: e0:0b:76:b5:df:97:d0:c7:1c:7c:9d:e2:aa:8e:ff: 6d:8e:30:de:89:06:a3:6a:fb:0d:b2:78:06:b3:32: 53:c2:fc:ae:ca:ef:a6:6d:31:6d:df:98:db:28:a5: b2:db:43:9e:94:1e:e9:c4:05:04:17:b9:fc:16:a5: f3:1e:8f:d9:6b:93:94:8f:34:a3:fa:3f:65:97:62: a3:7b:ae:9f:84:85:5f:14:d6:ef:5b:31:53:4c:69: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:74:80:F9:FD:4F:3A:37:95:C8:6B:F5:35:4C:0B:E4:79:4F:62:CC X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b2:71:03:74:b9:bc:c7:f9:35:27:eb:05:97:ef:6e:5e:2f: d1:4d:cf:f5:ab:81:88:83:13:7c:12:75:18:97:cc:3f:8b:32: 08:08:78:d8:27:23:cd:3d:cc:5a:40:17:74:04:b4:70:5c:4d: 07:52:41:76:bc:31:63:84:6a:d6:52:6d:32:0d:8b:8b:0d:7e: c1:e3:59:5e:4a:06:77:46:f2:f2:8b:cc:61:29:0b:a1:48:5d: 92:cb:b2:8e:84:58:3e:ec:33:e1:69:9d:e4:db:33:7d:b9:52: 0c:cb:31:13:2f:c9:45:40:7a:fe:39:20:74:43:ed:83:5e:08: 7d:3b:83:56:2b:ec:d9:f3:8f:50:5b:a9:47:57:60:b1:ee:3c: 5b:21:c1:a3:42:43:3d:38:43:c2:0a:c1:2f:31:84:97:c1:7e: cb:d4:a8:10:aa:ef:81:66:b1:53:5d:7f:85:3c:9a:3c:34:ff: 0b:ec:7a:77:8c:73:9c:b6:89:48:ae:9a:4a:ba:4b:aa:17:48: f9:e8:b1:50:65:cf:79:b2:c5:74:c5:b4:aa:d4:16:50:18:0a: 58:e4:6f:60:90:d2:3c:79:81:f8:fa:d6:57:3a:ba:cf:d4:95: 22:44:bd:26:5a:a8:af:56:41:77:06:01:d4:4b:2f:d6:0b:08: 40:93:d7:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4 MTI4RjI5MUYwHhcNMjYwOTIxMDUyNDI0WhcNMjYwOTI4MDUyNDI0WjAYMRYwFAYD VQQDEw02YWIwYmY4OC04NGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGCNMBm+wo7dn85DODhzu1cyNZGtXkYR9UCnH2RXHeiT3ZoCltqR/KygWvAc umGt4iheURT4IoWlotNx3wqTT8xufq7jFKGrGhOnhpt6Oq5Jr/T/D6AAbh9NJvv6 b5HgXtDMT5LegScDY8Ajki0wf6wwd14HVKwR0sM+kglstDyCC2kLrkn3lIFlMwwf FZC1o7EXaQ01gx1oyq4w5CrcnGVzoCXgC3a135fQxxx8neKqjv9tjjDeiQajavsN sngGszJTwvyuyu+mbTFt35jbKKWy20OelB7pxAUEF7n8FqXzHo/Za5OUjzSj+j9l l2Kje66fhIVfFNbvWzFTTGnyDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOd0gPn9 Tzo3lchr9TVMC+R5T2LMMB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzZFMi8zQjU0MUYyMENCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82 RWxDQ2xsMlA4enVCS1BLUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrJxA3S5vMf5NSfrBZfvbl4v0U3P9auBiIMTfBJ1GJfMP4syCAh42CcjzT3M WkAXdAS0cFxNB1JBdrwxY4Rq1lJtMg2Liw1+weNZXkoGd0by8ovMYSkLoUhdksuy joRYPuwz4Wmd5NszfblSDMsxEy/JRUB6/jkgdEPtg14IfTuDVivs2fOPUFupR1dg se48WyHBo0JDPThDwgrBLzGEl8F+y9SoEKrvgWaxU11/hTyaPDT/C+x6d4xznLaJ SK6aSrpLqhdI+eixUGXPebLFdMW0qtQWUBgKWORvYJDSPHmB+PrWVzq6z9SVIkS9 Jlqor1ZBdwYB1Esv1gsIQJPX1w== -----END CERTIFICATE-----Generated at Tue Sep 22 10:09:20 2026 by rpki-client