$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: F+ZnnesXyBVelQlQ/+kY27oynDZtBYnc+vbAgnx8m6E= Subject key identifier: F3:4D:DE:C1:53:6B:73:B2:1C:FD:93:B8:22:74:D3:9A:FF:3E:DC:24 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: BB Signing time: Sat 19 Sep 2026 07:01:37 +0000 Manifest this update: Sat 19 Sep 2026 07:01:36 +0000 Manifest next update: Sat 26 Sep 2026 07:01:36 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: uHnqSPmbcY0R3kCahK2GJ+/z/0zyrTrUeXofPoUZgpY=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: tljjskEzluOLyfM+jOhLD+OSuutF6Ym7Br+LWf9TkKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Sep 19 07:01:36 2026 GMT Not After : Sep 26 07:01:36 2026 GMT Subject: CN=6aae3350-a96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:0f:12:53:f1:a2:24:02:ee:e5:ec:7a:14: e2:8d:8d:69:f1:bd:e9:6d:1c:1b:01:15:0f:80:74: 3e:a9:d4:58:f8:7d:a5:1c:62:f6:cd:87:97:42:b0: 6e:4a:e2:c0:36:a3:a6:24:84:1e:16:9f:90:a0:75: c2:bb:9f:52:ec:cb:21:f0:d5:d2:b5:4c:f4:32:3f: 6c:ab:84:ce:14:db:2c:c2:5c:d6:fb:47:8a:a3:d8: 9d:02:40:26:a9:5b:db:f6:04:ea:20:ef:e6:5f:18: b4:ca:be:d0:bc:96:40:5b:bd:3a:c5:c2:4f:45:e9: 4f:3b:cf:7a:ce:bd:a1:35:a8:97:fc:9d:1a:0d:8e: 83:aa:b8:43:38:4c:1c:bc:fe:ea:aa:53:d9:cf:8a: 34:1f:57:74:58:c6:d4:0c:91:7b:12:92:9a:b9:93: 1c:71:1b:a2:8c:e0:2a:9a:30:74:eb:d7:67:e0:d6: 7a:d2:dc:4c:8f:0d:58:cc:7e:c0:88:94:78:0a:82: f1:6f:49:b3:00:d7:5e:80:cd:ba:92:3b:da:d7:7f: c7:22:3d:ee:d7:84:cb:c4:bb:ad:6f:60:58:bb:d6: 6b:5b:c5:fd:54:cf:3e:09:68:f4:b5:c9:b0:02:37: 88:65:10:82:23:38:cc:c6:1a:d8:cf:56:6d:1b:62: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4D:DE:C1:53:6B:73:B2:1C:FD:93:B8:22:74:D3:9A:FF:3E:DC:24 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4b:58:1f:3f:2d:ce:ed:60:14:00:a5:5f:e5:d4:cf:9e:ff: 60:e2:06:e2:88:39:51:2c:0c:8d:90:f0:3f:00:45:e3:98:61: 34:b7:f5:82:47:bc:30:fc:22:51:be:53:5b:1e:c7:20:44:46: 93:05:6a:bd:aa:c1:d0:49:c2:9a:86:a7:a3:35:9d:94:ca:17: 56:fe:8f:14:c7:2e:0f:7f:d3:b1:98:7c:31:78:6c:f7:de:a1: 44:1d:76:22:d2:1f:d3:22:0e:31:cd:61:de:70:a0:06:30:a1: d8:c7:e8:f6:08:c2:c1:cd:fe:54:83:a0:02:7a:db:c8:7b:dd: 0d:15:46:77:1f:42:be:1f:c9:74:c1:6a:e6:d0:22:3e:1e:6e: 67:44:6b:d0:dd:dd:56:17:51:c9:14:38:63:7c:d2:db:5b:64: 94:5b:11:a1:c6:ff:4a:28:72:b0:68:75:11:78:a2:52:1e:6e: 4e:b9:07:b5:33:aa:bb:05:21:eb:9c:ae:5a:94:9d:d8:ae:45: b9:5a:59:0a:b0:38:45:ae:e6:62:80:c4:fb:04:5f:92:cd:c6: 1d:17:36:8c:6d:cc:b6:f8:ca:13:2a:81:77:80:78:ac:45:78: 9a:41:91:62:67:16:3b:e9:01:e1:a0:e4:c3:24:22:4c:ba:f2: 94:00:51:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKDlDMUU0NUE4MDg0QzMxMURENTAwNDRBMTczNjA1RThF RTNDNENDOTUwHhcNMjYwOTE5MDcwMTM2WhcNMjYwOTI2MDcwMTM2WjAYMRYwFAYD VQQDEw02YWFlMzM1MC1hOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHMPElPxoiQC7uXsehTijY1p8b3pbRwbARUPgHQ+qdRY+H2lHGL2zYeXQrBu SuLANqOmJIQeFp+QoHXCu59S7Msh8NXStUz0Mj9sq4TOFNsswlzW+0eKo9idAkAm qVvb9gTqIO/mXxi0yr7QvJZAW706xcJPRelPO896zr2hNaiX/J0aDY6DqrhDOEwc vP7qqlPZz4o0H1d0WMbUDJF7EpKauZMccRuijOAqmjB069dn4NZ60txMjw1YzH7A iJR4CoLxb0mzANdegM26kjva13/HIj3u14TLxLutb2BYu9ZrW8X9VM8+CWj0tcmw AjeIZRCCIzjMxhrYz1ZtG2LuAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNN3sFT a3OyHP2TuCJ005r/PtwkMB8GA1UdIwQYMBaAFJweRagITDEd1QBEoXNgXo7jxMyV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy85REYwN0U0NDlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1SM1ZBRVNoYzJCZWp1UEV6 SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTFDQy85REYwN0U0NDlBMEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1S M1ZBRVNoYzJCZWp1UEV6SlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsUtYHz8tzu1gFAClX+XUz57/YOIG4og5USwMjZDwPwBF45hhNLf1gke8MPwi Ub5TWx7HIERGkwVqvarB0EnCmoanozWdlMoXVv6PFMcuD3/TsZh8MXhs996hRB12 ItIf0yIOMc1h3nCgBjCh2Mfo9gjCwc3+VIOgAnrbyHvdDRVGdx9Cvh/JdMFq5tAi Ph5uZ0Rr0N3dVhdRyRQ4Y3zS21tklFsRocb/SihysGh1EXiiUh5uTrkHtTOquwUh 65yuWpSd2K5FuVpZCrA4Ra7mYoDE+wRfks3GHRc2jG3MtvjKEyqBd4B4rEV4mkGR YmcWO+kB4aDkwyQiTLrylABRZg== -----END CERTIFICATE-----Generated at Mon Sep 21 07:57:16 2026 by rpki-client