$ rpki-client -vvvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: ixlfrj5FrZaSRQArmHWU2Icugkqb87s77+1mMYhzoKs= Subject key identifier: B3:12:35:55:E8:58:81:22:05:87:D1:15:D5:3F:CA:FF:CD:35:5F:ED Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 0878 Signing time: Sun 20 Sep 2026 20:45:18 +0000 Manifest this update: Sun 20 Sep 2026 20:45:18 +0000 Manifest next update: Sun 27 Sep 2026 20:45:18 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: kGx8ygyNc0X22uSF0RNYZHGCEXiQbT1QG4xL0Mce3NE=) 2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: Sep 20 20:45:18 2026 GMT Not After : Sep 27 20:45:18 2026 GMT Subject: CN=6ab045de-1339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:39:60:c8:22:29:f7:14:d3:b3:3c:bb:2e: 23:83:dd:43:57:dc:f3:f1:21:d7:9d:d5:37:d0:39: ff:d9:07:da:17:93:84:88:8b:e0:dd:56:97:6e:d7: f8:69:cc:2b:b1:30:35:79:2b:cb:d2:cc:c0:84:db: 06:55:29:e9:e3:78:72:b7:53:76:cb:ad:d7:d2:75: d7:11:57:3f:8d:0a:99:15:f2:69:a4:97:58:eb:2a: 41:17:8c:63:ba:a7:f5:69:8e:93:46:eb:3c:78:81: 41:a0:43:99:88:0c:47:56:35:d2:25:b3:4e:81:36: 67:d2:de:9f:82:09:cb:e5:03:dd:81:50:9a:a6:57: d9:4a:eb:5d:16:9a:39:6e:88:bc:a5:9d:6b:c4:17: 54:e5:77:a3:1a:c6:98:0a:aa:1b:e6:ea:8a:ce:a3: ba:20:c7:85:af:c6:96:a0:ee:34:d5:e7:6f:04:d8: 97:ba:40:3a:49:f3:f0:ab:cc:f8:af:ee:34:b3:99: f5:50:48:de:e7:af:82:4f:bf:42:a9:86:2b:d1:ed: 50:67:0c:92:ce:71:f5:13:9b:5d:cd:70:19:91:a5: d3:0c:fd:49:4e:60:72:08:22:b2:61:2f:28:10:68: 34:cc:72:ce:93:c1:d0:98:2c:81:ab:1f:7b:fa:a4: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:35:55:E8:58:81:22:05:87:D1:15:D5:3F:CA:FF:CD:35:5F:ED X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:12:74:25:7f:31:4c:d3:c6:02:1b:d2:14:25:05:28:42:85: 15:fb:91:ba:c2:a8:02:7b:c4:4b:fa:d9:1e:46:22:19:6e:e0: a7:d4:51:81:b4:f0:bf:2a:23:ff:0b:46:e7:12:dd:0d:a2:eb: ff:e9:95:c1:cc:a9:d8:9a:bb:5f:dd:e3:2b:31:96:98:4e:6a: 86:8d:ce:8b:5c:0c:62:dc:01:c3:1b:2d:b7:6d:9e:59:a7:38: ec:4a:e8:18:da:cf:96:a7:9b:6d:f5:04:03:f9:be:6b:e9:5d: e3:6a:d3:3d:8b:1c:32:d4:68:d5:16:43:17:59:f0:7f:79:08: 1e:f3:b7:7e:47:33:48:47:61:c4:cd:58:d9:a6:8d:05:4d:88: 3f:e3:0e:9c:b3:a8:29:8c:52:72:75:75:cb:0b:d4:e9:08:78: 97:15:40:91:87:5e:54:c4:c8:cb:24:47:b2:f7:02:f0:6c:f6: ee:6e:e7:4d:1d:17:66:fd:ba:17:bb:20:f0:9f:dc:29:4c:a9: 91:9f:d9:c2:1f:69:17:98:25:6c:f9:35:b1:f4:5e:44:f5:78: 9d:59:96:34:65:48:1d:7a:a1:67:03:71:67:ef:fa:29:62:8e: 0b:a1:b5:d9:82:78:73:92:b4:c7:c8:81:27:33:d6:c3:f6:70: 28:a1:fc:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjYwOTIwMjA0NTE4WhcNMjYwOTI3MjA0NTE4WjAYMRYwFAYD VQQDEw02YWIwNDVkZS0xMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzk5YMgiKfcU07M8uy4jg91DV9zz8SHXndU30Dn/2QfaF5OEiIvg3VaXbtf4 acwrsTA1eSvL0szAhNsGVSnp43hyt1N2y63X0nXXEVc/jQqZFfJppJdY6ypBF4xj uqf1aY6TRus8eIFBoEOZiAxHVjXSJbNOgTZn0t6fggnL5QPdgVCaplfZSutdFpo5 boi8pZ1rxBdU5XejGsaYCqob5uqKzqO6IMeFr8aWoO401edvBNiXukA6SfPwq8z4 r+40s5n1UEje56+CT79CqYYr0e1QZwySznH1E5tdzXAZkaXTDP1JTmByCCKyYS8o EGg0zHLOk8HQmCyBqx97+qSIVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMSNVXo WIEiBYfRFdU/yv/NNV/tMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxJ0JX8xTNPGAhvSFCUFKEKFFfuRusKoAnvES/rZHkYiGW7gp9RRgbTwvyoj /wtG5xLdDaLr/+mVwcyp2Jq7X93jKzGWmE5qho3Oi1wMYtwBwxstt22eWac47Ero GNrPlqebbfUEA/m+a+ld42rTPYscMtRo1RZDF1nwf3kIHvO3fkczSEdhxM1Y2aaN BU2IP+MOnLOoKYxScnV1ywvU6Qh4lxVAkYdeVMTIyyRHsvcC8Gz27m7nTR0XZv26 F7sg8J/cKUypkZ/Zwh9pF5glbPk1sfReRPV4nVmWNGVIHXqhZwNxZ+/6KWKOC6G1 2YJ4c5K0x8iBJzPWw/ZwKKH8Fg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:46:07 2026 by rpki-client