$ rpki-client -vvvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft File: 40OUNNCvshlJ60kGLwBsphEvOoQ.mft (raw, json) Hash identifier: IJjOOZ3ykTCOsBM47iXAzB/YZafIIuPneah/s+xpq/0= Subject key identifier: 8F:A8:28:8B:37:E4:88:CE:7F:C5:88:F2:F6:68:1A:45:05:CB:3D:D0 Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft Manifest number: 31 Signing time: Mon 21 Sep 2026 08:40:19 +0000 Manifest this update: Mon 21 Sep 2026 08:40:19 +0000 Manifest next update: Mon 28 Sep 2026 08:40:19 +0000 Files and hashes: 1: 40OUNNCvshlJ60kGLwBsphEvOoQ.crl (hash: 3qTqFFAg/LHoyKfZbwQdsZkzp5DvBgxVbV4l0kiDv2o=) 2: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (hash: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=) 3: 38504AE86F9111F19A5C332C6CA30FBC.roa (hash: ctFJMNlLmb24KK/hUvuG9PeuIx9ZmlcOLpD5Hrci6io=) 4: lE7_4HoZ7tf2LQA7qUu8FNcWCOY.asa (hash: 8IY1eCsxleP2Da/Kk/zuY7DssggWmOgbxdL5nuxKTmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Validity Not Before: Sep 21 08:40:19 2026 GMT Not After : Sep 28 08:40:19 2026 GMT Subject: CN=6ab0ed73-8aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:7e:ec:5e:f2:d3:19:b6:c4:23:e0:b1:6f: 63:bc:ef:6f:b2:b9:99:66:01:e4:8b:5e:87:6d:c3: 95:e8:2b:ea:af:a0:ae:da:0f:65:8e:1d:af:0c:e0: 6a:bc:27:6b:0f:f5:8e:8a:ae:b4:14:92:fc:b7:05: 11:c2:bd:18:e5:8d:48:e9:27:87:ed:38:5e:eb:0e: 37:d3:cf:69:02:ba:dc:e1:a4:8b:f2:79:a4:96:31: d3:4a:36:6a:1c:55:63:cf:58:c1:34:14:37:41:90: b6:a0:f2:44:fd:99:f8:06:48:bb:b8:93:9a:94:99: 35:92:6c:f8:6e:3b:06:f9:f0:25:dc:c5:4c:6e:ef: b3:7d:f1:1e:ce:7a:0c:70:ee:92:86:2e:1b:0e:7c: ab:6b:bc:4a:a7:d2:49:f5:9a:ce:0d:ae:d0:58:69: 69:54:ee:cd:60:09:a8:d8:1e:9c:f5:2a:4d:d5:b2: 52:88:c9:fe:f4:87:15:78:d5:e5:b6:60:fc:92:a4: 05:a2:2a:7d:15:64:09:92:bb:48:d6:10:13:99:bf: 4d:b0:55:0c:24:f3:dc:77:26:86:fc:5b:d3:08:8e: b8:bc:8c:bb:e1:7d:f0:02:80:80:d7:19:b4:a6:d4: ec:b3:f9:35:f2:e7:01:e4:6b:9b:13:04:28:ae:39: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:28:8B:37:E4:88:CE:7F:C5:88:F2:F6:68:1A:45:05:CB:3D:D0 X509v3 Authority Key Identifier: keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3e:58:48:e0:91:2c:2f:38:ed:2f:56:d9:af:ec:c1:f1:44: 16:a4:05:a9:e2:6b:e0:de:6a:67:e1:1f:53:c9:8e:15:d2:a9: db:bd:93:5f:dd:32:ec:0d:46:51:d9:9c:c1:f1:1e:95:b0:b7: c1:db:3b:78:b6:26:13:97:cd:ca:ec:f1:fa:29:e0:1e:e5:b7: a0:7f:63:87:37:d3:41:b1:d5:53:29:bf:0b:66:46:9d:c7:b0: 36:da:f5:b4:f2:31:7d:0d:7a:97:e5:bc:27:75:f5:98:f1:16: e9:58:29:23:16:1d:a2:ce:ea:94:c5:42:d5:71:4a:f7:ea:e3: 81:84:85:68:e8:61:5b:3c:95:b9:17:32:0d:10:58:a4:b8:45: a8:1b:11:3a:36:3c:9f:22:d6:3c:50:5f:38:ef:7a:4f:ee:9c: 61:d0:08:ef:b8:16:62:3a:46:17:12:5a:55:1b:ca:6c:e5:7d: 62:d2:d4:42:6f:b7:0e:ef:18:e7:48:78:10:82:72:d2:30:8f: fe:b8:ba:00:59:e5:9b:9d:52:59:8b:af:73:47:3f:4c:99:43: 2f:5f:c6:da:be:4d:79:a9:c6:d4:2b:3c:50:50:aa:e1:a5:70: 9a:48:9d:bc:e6:04:b0:93:8c:54:82:ae:e0:a5:55:a9:89:8a: dd:42:17:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODRDRDExMC8GA1UEBRMoRTM0Mzk0MzREMEFGQjIxOTQ5RUI0OTA2MkYwMDZDQTYx MTJGM0E4NDAeFw0yNjA5MjEwODQwMTlaFw0yNjA5MjgwODQwMTlaMBgxFjAUBgNV BAMTDTZhYjBlZDczLThhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTGX7sXvLTGbbEI+Cxb2O872+yuZlmAeSLXodtw5XoK+qvoK7aD2WOHa8M4Gq8 J2sP9Y6KrrQUkvy3BRHCvRjljUjpJ4ftOF7rDjfTz2kCutzhpIvyeaSWMdNKNmoc VWPPWME0FDdBkLag8kT9mfgGSLu4k5qUmTWSbPhuOwb58CXcxUxu77N98R7Oegxw 7pKGLhsOfKtrvEqn0kn1ms4NrtBYaWlU7s1gCajYHpz1Kk3VslKIyf70hxV41eW2 YPySpAWiKn0VZAmSu0jWEBOZv02wVQwk89x3Job8W9MIjri8jLvhffACgIDXGbSm 1Oyz+TXy5wHka5sTBCiuOaUvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj6goizfk iM5/xYjy9mgaRQXLPdAwHwYDVR0jBBgwFoAU40OUNNCvshlJ60kGLwBsphEvOoQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NENEL0NDRERBOTg2NkY5 MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hsSjYwa0dMd0JzcGhFdk9v US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDBPVU5OQ3ZzaGxKNjBrR0x3QnNwaEV2T29RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NENEL0NDRERBOTg2NkY5MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hs SjYwa0dMd0JzcGhFdk9vUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBAPlhI4JEsLzjtL1bZr+zB8UQWpAWp4mvg3mpn4R9TyY4V0qnbvZNf3TLsDUZR 2ZzB8R6VsLfB2zt4tiYTl83K7PH6KeAe5begf2OHN9NBsdVTKb8LZkadx7A22vW0 8jF9DXqX5bwndfWY8RbpWCkjFh2izuqUxULVcUr36uOBhIVo6GFbPJW5FzINEFik uEWoGxE6NjyfItY8UF8473pP7pxh0AjvuBZiOkYXElpVG8ps5X1i0tRCb7cO7xjn SHgQgnLSMI/+uLoAWeWbnVJZi69zRz9MmUMvX8bavk15qcbUKzxQUKrhpXCaSJ28 5gSwk4xUgq7gpVWpiYrdQhcD -----END CERTIFICATE-----Generated at Tue Sep 22 19:00:38 2026 by rpki-client