$ rpki-client -vvvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft File: szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json) Hash identifier: x7/ETqK9ge/R95pas4ryK5silTpDnYcEs3bcEaGysdg= Subject key identifier: E2:FC:3A:65:88:E5:B2:ED:D2:FE:5D:D3:BF:8F:56:CA:63:22:DE:DA Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 Certificate issuer: /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft Manifest number: 89 Signing time: Mon 21 Sep 2026 07:35:35 +0000 Manifest this update: Mon 21 Sep 2026 07:35:35 +0000 Manifest next update: Mon 28 Sep 2026 07:35:35 +0000 Files and hashes: 1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: Ggzyo7mZPfX2KL/5xfuE+TUzTojEYUCGWv98qM6fqpU=) 2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Validity Not Before: Sep 21 07:35:35 2026 GMT Not After : Sep 28 07:35:35 2026 GMT Subject: CN=6ab0de47-056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:9b:95:63:17:26:34:2a:62:01:09:85:c0: f9:14:10:ab:b1:65:b9:ac:d8:17:e3:36:07:3c:86: 2f:15:86:1d:92:64:25:26:8f:4e:c7:a6:56:54:ba: b8:49:73:62:41:68:e8:5f:16:12:77:d2:0f:b3:17: 1a:83:91:3b:dd:06:0c:27:83:ec:12:3c:ee:e7:a6: 8b:6a:bf:89:b6:b9:de:6b:c4:16:d7:e8:99:a7:f4: 1d:46:2d:17:ee:30:54:49:11:14:1f:56:36:d3:1e: 7a:d8:04:e3:0f:fd:df:d4:98:0c:dc:e1:8a:fb:54: 26:98:8f:9f:a9:fc:c1:69:a5:fe:96:54:79:5a:95: 1a:39:da:4f:41:a2:5a:36:02:2a:d7:a7:07:79:20: 45:0c:d2:50:4b:6d:f1:f8:02:6b:19:a5:d7:04:0f: 0d:22:7e:d2:d7:cf:b7:6e:2e:76:91:c5:95:47:d4: e8:aa:95:34:a5:53:1f:84:e3:40:9e:ad:bb:78:8e: 74:bd:64:01:25:79:61:37:17:3b:ca:41:c7:ac:f8: 34:66:7a:4a:56:14:73:f1:f6:3b:7b:18:67:cb:20: 9e:4e:6f:13:94:5d:3c:87:27:34:99:66:35:0a:e1: 1c:0f:da:02:0c:5a:f7:13:d3:67:f2:bf:4d:9e:b1: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FC:3A:65:88:E5:B2:ED:D2:FE:5D:D3:BF:8F:56:CA:63:22:DE:DA X509v3 Authority Key Identifier: keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:43:3e:e3:b1:f6:99:6a:37:a8:6b:cc:f9:af:40:4d:d3:b4: 11:ec:10:76:26:06:a5:92:83:e1:c0:b4:a4:7e:0c:c1:ac:ea: 92:1e:d9:14:9d:98:fc:03:58:f4:c8:82:4f:37:a2:34:de:3a: d7:16:3e:53:26:b8:aa:9c:d0:a4:1c:5f:60:ed:8e:75:02:51: a7:3a:90:cc:30:6d:6b:b8:db:09:cf:fb:cd:49:18:96:50:41: 02:9b:bb:3b:34:2d:90:47:61:05:0e:bd:91:f5:dc:14:70:cd: 05:ad:0f:e7:9d:e9:ca:9f:5d:9c:ae:9f:07:42:16:5a:fa:b5: 5a:c7:5e:17:56:78:8e:b4:b6:df:9a:78:94:e5:8c:6d:16:1f: a3:d9:ee:c2:ca:5f:3b:a8:f8:db:d9:8f:47:96:ed:c2:b7:e4: aa:46:84:fc:5b:67:77:48:a8:58:12:a2:31:ef:bd:8b:5a:25: 13:c1:2b:2b:af:36:69:67:84:1d:e3:82:37:6f:5d:50:c6:d8: eb:70:2e:f0:b7:47:8c:ac:02:bb:f7:53:04:ca:4c:b9:b5:5b: d1:0c:b8:c1:7b:34:6d:44:7c:2b:b4:d3:83:38:83:66:54:ff: 9b:b1:b5:7a:f3:a1:c3:bd:e5:2a:95:76:fe:65:c3:c7:30:9f: 0a:fa:ad:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM2RjUxMTAvBgNVBAUTKEIzMzE3QzY3REQxNUIyOEFGQTM5ODAwNEMxOUQxRDc4 QjFCRkRFODYwHhcNMjYwOTIxMDczNTM1WhcNMjYwOTI4MDczNTM1WjAYMRYwFAYD VQQDEw02YWIwZGU0Ny0wNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR2blWMXJjQqYgEJhcD5FBCrsWW5rNgX4zYHPIYvFYYdkmQlJo9Ox6ZWVLq4 SXNiQWjoXxYSd9IPsxcag5E73QYMJ4PsEjzu56aLar+Jtrnea8QW1+iZp/QdRi0X 7jBUSREUH1Y20x562ATjD/3f1JgM3OGK+1QmmI+fqfzBaaX+llR5WpUaOdpPQaJa NgIq16cHeSBFDNJQS23x+AJrGaXXBA8NIn7S18+3bi52kcWVR9ToqpU0pVMfhONA nq27eI50vWQBJXlhNxc7ykHHrPg0ZnpKVhRz8fY7exhnyyCeTm8TlF08hyc0mWY1 CuEcD9oCDFr3E9Nn8r9NnrEoWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOL8OmWI 5bLt0v5d07+PVspjIt7aMB8GA1UdIwQYMBaAFLMxfGfdFbKK+jmABMGdHXixv96G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzZGNS8yQTUwQjY0OEU2 RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9zekY4WjkwVnNvcjZPWUFFd1owZGVMR18z b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N6RjhaOTBWc29yNk9ZQUV3WjBkZUxHXzNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzZGNS8yQTUwQjY0OEU2RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9zekY4WjkwVnNv cjZPWUFFd1owZGVMR18zb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdkM+47H2mWo3qGvM+a9ATdO0EewQdiYGpZKD4cC0pH4Mwazqkh7ZFJ2Y/ANY 9MiCTzeiNN461xY+Uya4qpzQpBxfYO2OdQJRpzqQzDBta7jbCc/7zUkYllBBApu7 OzQtkEdhBQ69kfXcFHDNBa0P553pyp9dnK6fB0IWWvq1WsdeF1Z4jrS235p4lOWM bRYfo9nuwspfO6j429mPR5btwrfkqkaE/Ftnd0ioWBKiMe+9i1olE8ErK682aWeE HeOCN29dUMbY63Au8LdHjKwCu/dTBMpMubVb0Qy4wXs0bUR8K7TTgziDZlT/m7G1 evOhw73lKpV2/mXDxzCfCvqtGA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:41:50 2026 by rpki-client