$ rpki-client -vvvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: wOXNr0pEXswKBAtYojCrKweRePA/IRbrwT5u0BbQuK8= Subject key identifier: 20:DD:00:22:D9:B7:AE:38:BB:E9:2C:B3:3B:19:11:DD:9F:08:84:09 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0CAC Signing time: Sun 20 Sep 2026 18:33:36 +0000 Manifest this update: Sun 20 Sep 2026 18:33:35 +0000 Manifest next update: Sun 27 Sep 2026 18:33:35 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: ieDAoDvHBJzO63Z5Ab5NA9hRbbbcZ/hJk+9Bo1i4Bfg=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Sep 20 18:33:35 2026 GMT Not After : Sep 27 18:33:35 2026 GMT Subject: CN=6ab02700-8f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:c2:f2:b3:60:35:38:08:8c:10:39:11:99: 7e:0d:4c:39:09:1f:5b:c7:0b:18:c4:ae:b1:07:6a: 7d:12:6a:95:77:e3:96:71:a8:4c:66:75:92:df:88: 3f:5b:99:c7:fe:d9:9c:58:30:fb:2f:71:c8:09:98: 07:60:f0:69:7b:d5:23:d6:eb:f3:97:64:f8:2f:b6: 2e:ee:bc:48:1a:b7:4c:3a:35:ca:fc:11:21:8b:5a: b8:2a:be:99:64:d0:94:8d:21:6e:75:25:ce:ac:c2: e5:d1:54:15:0c:5f:4e:1b:64:e2:e2:ac:27:39:42: e9:53:ac:1f:73:3b:a2:04:92:5a:f5:e3:d4:a7:ef: ad:1a:4a:70:54:1c:99:b8:f7:92:34:e3:23:e6:5d: b0:7c:54:f0:af:76:bd:1c:de:97:55:1a:a8:3f:27: 66:da:27:d5:84:a1:83:b0:f3:c2:8c:fc:e6:8a:8f: b7:5e:9b:8f:a8:49:42:31:df:f2:f8:5b:e9:0b:1b: df:21:e5:f0:e5:b4:c6:7e:9f:a9:f6:e0:2c:23:c6: 77:a0:ff:eb:b4:1c:a3:4c:98:03:27:14:09:52:58: c6:33:dc:91:c9:cc:d8:33:c0:36:13:0d:dd:2f:4b: 02:09:e8:6e:81:3d:ba:35:7d:38:86:0f:33:0a:1e: 35:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:00:22:D9:B7:AE:38:BB:E9:2C:B3:3B:19:11:DD:9F:08:84:09 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:86:e2:5f:7b:b4:a5:c7:c5:94:14:6a:b5:0a:4d:42:6a:c1: 08:3c:c0:72:c0:19:ed:05:1b:79:05:bf:11:ab:9d:75:2d:f3: ea:8c:f6:c9:94:83:a6:26:05:a3:d6:70:3d:e9:1d:8c:e4:e8: a6:30:50:93:64:20:c7:a9:52:3b:e8:b5:d0:9a:e8:ac:42:04: 62:34:1d:66:b8:06:98:fa:62:1d:e4:34:68:86:de:16:70:9a: d9:22:f0:fc:63:21:df:7d:15:3f:21:d3:e4:1a:2f:90:f9:ec: 72:d6:ee:31:5b:44:9c:10:a1:a2:a5:de:6a:47:19:a7:07:c3: 52:be:bb:c8:71:9e:24:6a:ad:87:88:a2:56:32:a3:6a:4f:3f: 29:27:67:86:d6:64:cc:b5:8c:b6:5b:5c:33:d8:a2:d8:2d:a2: 00:89:3c:92:b1:4c:e4:39:02:d7:09:c3:5a:73:96:ad:13:63: a3:d2:2d:de:86:f3:aa:49:51:fe:3e:43:ec:e5:fa:08:4f:36: be:69:96:62:25:6e:4a:09:ca:3d:00:88:8e:7e:f4:9f:53:bf: ca:d6:26:d2:c8:15:2a:df:b0:7a:ea:73:f6:77:5f:c9:0c:6e: 99:cd:fe:37:6e:f8:d6:75:6e:2e:68:16:0c:e8:bc:49:e7:fa: f7:5d:02:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYwOTIwMTgzMzM1WhcNMjYwOTI3MTgzMzM1WjAYMRYwFAYD VQQDEw02YWIwMjcwMC04ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuPC8rNgNTgIjBA5EZl+DUw5CR9bxwsYxK6xB2p9EmqVd+OWcahMZnWS34g/ W5nH/tmcWDD7L3HICZgHYPBpe9Uj1uvzl2T4L7Yu7rxIGrdMOjXK/BEhi1q4Kr6Z ZNCUjSFudSXOrMLl0VQVDF9OG2Ti4qwnOULpU6wfczuiBJJa9ePUp++tGkpwVByZ uPeSNOMj5l2wfFTwr3a9HN6XVRqoPydm2ifVhKGDsPPCjPzmio+3XpuPqElCMd/y +FvpCxvfIeXw5bTGfp+p9uAsI8Z3oP/rtByjTJgDJxQJUljGM9yRyczYM8A2Ew3d L0sCCehugT26NX04hg8zCh41zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDdACLZ t644u+ksszsZEd2fCIQJMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVobiX3u0pcfFlBRqtQpNQmrBCDzAcsAZ7QUbeQW/EauddS3z6oz2yZSDpiYF o9ZwPekdjOTopjBQk2Qgx6lSO+i10JrorEIEYjQdZrgGmPpiHeQ0aIbeFnCa2SLw /GMh330VPyHT5BovkPnsctbuMVtEnBChoqXeakcZpwfDUr67yHGeJGqth4iiVjKj ak8/KSdnhtZkzLWMtltcM9ii2C2iAIk8krFM5DkC1wnDWnOWrRNjo9It3obzqklR /j5D7OX6CE82vmmWYiVuSgnKPQCIjn70n1O/ytYm0sgVKt+weupz9ndfyQxumc3+ N2741nVuLmgWDOi8Sef6910CKg== -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:13 2026 by rpki-client