$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json) Hash identifier: gFuJBGDOz9SVerHjrOmVHd07IY18K88j1GzTGckDhLA= Subject key identifier: CD:20:9A:1D:A1:9E:D7:09:F6:AF:6D:0D:42:BD:59:95:4E:96:DD:84 Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft Manifest number: A3 Signing time: Sat 19 Sep 2026 07:25:35 +0000 Manifest this update: Sat 19 Sep 2026 07:25:34 +0000 Manifest next update: Sat 26 Sep 2026 07:25:34 +0000 Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: du6V2nAWP9IEa+8Uh20ZDbZ97zXCUyjzUUlSFT2BSos=) 2: F3D0F394A9E811F1B4B821653A11F970.roa (hash: Ke4nsI9PbT1sUSAw9ynvVPd9L5zGagRzSrYV1iiyUT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85 Validity Not Before: Sep 19 07:25:34 2026 GMT Not After : Sep 26 07:25:34 2026 GMT Subject: CN=6aae38ef-63a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:29:17:01:e9:3c:bc:27:ce:0e:67:7f:57: 96:d4:45:97:58:30:0a:8c:c7:38:29:b4:65:18:b1: 73:ba:e5:e8:f0:1c:e9:7f:e3:12:bf:6a:e2:29:69: e5:4b:49:2a:37:3b:0c:22:98:fb:5b:85:73:8e:73: 96:b1:56:30:35:ad:5a:9a:e7:49:b5:2b:a8:8b:2a: d3:24:14:b8:0e:8b:9f:31:70:3b:b5:6b:29:08:11: 9e:ce:e8:71:c6:c5:f3:14:39:2b:49:2b:1a:d5:ea: b5:8f:2e:d2:40:a0:01:77:98:34:63:18:c3:a1:3f: ec:dc:2c:27:94:16:53:31:16:36:1a:f4:87:ef:39: 9a:73:49:ea:43:4a:71:19:ff:8d:d2:b1:a0:0b:cc: 88:df:bc:fe:53:07:e5:51:32:74:03:4b:6a:10:0c: f8:d9:3b:2f:81:93:76:1b:19:54:be:0c:0c:48:5f: 8b:14:05:07:7b:5c:52:ec:76:d2:78:dc:03:d1:53: 6b:bc:69:fb:e9:ad:0e:84:fa:b8:fc:2e:59:22:4f: 8c:71:e3:67:41:af:d5:a9:8c:68:56:c4:ef:80:a9: 3b:37:03:a0:53:8e:ef:38:b0:f3:83:fa:12:39:ad: 5d:0a:f3:36:3a:80:1f:f8:5c:01:6a:2b:f0:9b:84: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:9A:1D:A1:9E:D7:09:F6:AF:6D:0D:42:BD:59:95:4E:96:DD:84 X509v3 Authority Key Identifier: keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:1d:9d:45:7c:b6:a9:8b:2f:3e:85:52:8c:6d:22:c2:48: c7:ac:c0:20:be:3b:46:ec:01:7c:6a:3b:25:2f:e3:13:92:eb: 0e:c4:13:0b:ba:cd:24:19:20:5e:35:22:c3:21:9f:08:ce:4b: a3:70:05:d6:75:87:72:57:86:7e:ea:b4:98:fc:dd:f3:59:29: 97:63:4f:0f:b8:a3:83:22:ff:f9:89:be:82:df:37:9c:a0:c0: cd:1a:80:63:7c:02:78:85:fe:af:e7:7d:be:89:a6:61:26:da: af:f3:b2:b3:87:b2:1c:2e:a2:e6:41:9c:e6:48:8d:1f:10:e4: fd:94:48:7e:25:d2:f1:63:3e:15:88:7e:44:e1:4d:25:15:cb: a7:a2:23:3d:62:75:3c:0c:4c:ab:85:09:8f:4c:09:65:2e:37: 4e:78:65:69:66:42:c6:bb:e6:7f:65:33:7b:35:64:ce:6b:ae: e2:21:39:e2:29:ac:8d:57:9e:0a:94:e8:6e:9a:de:39:52:68: d3:93:d9:e7:f3:b4:a0:fa:7c:4f:90:c7:bc:ea:a3:f3:b9:5e: 05:20:0a:f4:2b:a4:8e:5e:08:22:9f:c8:7d:57:5a:97:ee:ac: 88:00:13:da:d1:7c:d8:cc:8b:86:1f:b1:c8:96:6b:e9:2c:12: d1:6e:d6:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3RUQxMTAvBgNVBAUTKEQ1RDBEOEUxRjAzRDUxMDA4ODlGNDE4MEE2NUY1NTBB MEQ1ODBCODUwHhcNMjYwOTE5MDcyNTM0WhcNMjYwOTI2MDcyNTM0WjAYMRYwFAYD VQQDEw02YWFlMzhlZi02M2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAQpFwHpPLwnzg5nf1eW1EWXWDAKjMc4KbRlGLFzuuXo8Bzpf+MSv2riKWnl S0kqNzsMIpj7W4VzjnOWsVYwNa1amudJtSuoiyrTJBS4DoufMXA7tWspCBGezuhx xsXzFDkrSSsa1eq1jy7SQKABd5g0YxjDoT/s3CwnlBZTMRY2GvSH7zmac0nqQ0px Gf+N0rGgC8yI37z+UwflUTJ0A0tqEAz42TsvgZN2GxlUvgwMSF+LFAUHe1xS7HbS eNwD0VNrvGn76a0OhPq4/C5ZIk+MceNnQa/VqYxoVsTvgKk7NwOgU47vOLDzg/oS Oa1dCvM2OoAf+FwBaivwm4Qy3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0gmh2h ntcJ9q9tDUK9WZVOlt2EMB8GA1UdIwQYMBaAFNXQ2OHwPVEAiJ9BgKZfVQoNWAuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDdFRC9DOUM2MkRBNENC ODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8xZERZNGZBOVVRQ0luMEdBcGw5VkNnMVlD NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDdFRC9DOUM2MkRBNENCODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8xZERZNGZBOVVR Q0luMEdBcGw5VkNnMVlDNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEGsdnUV8tqmLLz6FUoxtIsJIx6zAIL47RuwBfGo7JS/jE5LrDsQTC7rNJBkg XjUiwyGfCM5Lo3AF1nWHcleGfuq0mPzd81kpl2NPD7ijgyL/+Ym+gt83nKDAzRqA Y3wCeIX+r+d9vommYSbar/Oys4eyHC6i5kGc5kiNHxDk/ZRIfiXS8WM+FYh+ROFN JRXLp6IjPWJ1PAxMq4UJj0wJZS43TnhlaWZCxrvmf2UzezVkzmuu4iE54imsjVee CpTobpreOVJo05PZ5/O0oPp8T5DHvOqj87leBSAK9Cukjl4IIp/IfVdal+6siAAT 2tF82MyLhh+xyJZr6SwS0W7WaQ== -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:25 2026 by rpki-client