$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: lOpcSYriFbpK/s4l1PAJwMSXd3DS7QB3D8hrM6VSIko= Subject key identifier: E6:3F:53:9F:87:66:EB:58:38:38:B7:56:6F:6D:F7:5E:3B:C2:0F:7F Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0620 Signing time: Sun 20 Sep 2026 22:45:44 +0000 Manifest this update: Sun 20 Sep 2026 22:45:43 +0000 Manifest next update: Sun 27 Sep 2026 22:45:43 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: l02UU6qLmT1ZwVj8E/e1EsVFFw/Eb3WOduV705sHD4w=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 3: 6DD2A340714011F191B402BC77A30FBC.roa (hash: a48AG/pGOmK4TOseQPCOrM/Wg8LOw5p4urOR/siiycQ=) 4: A486779E6FED11F1B401E8288CA30FBC.roa (hash: ZNuiSSyrHubK4AwyZlfjhIr65U0V5dbY5FcmNw+d+MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Sep 20 22:45:43 2026 GMT Not After : Sep 27 22:45:43 2026 GMT Subject: CN=6ab06218-a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:7a:0a:2e:d0:63:a4:6a:d5:2c:59:ee:8d: 43:42:f5:69:98:f8:ff:a7:5e:8f:74:2a:1f:3a:a9: 87:78:57:04:10:44:b4:18:46:1f:68:33:ed:6a:ba: e8:d4:a1:ce:1a:87:3c:4b:01:b4:ca:ee:c3:a6:66: 14:95:c2:d5:9b:a5:c4:d3:02:eb:f6:9f:d5:4b:f7: 6a:c9:b5:5b:f7:bf:c7:e7:a1:07:50:c3:75:3a:7e: 6a:f0:7e:64:02:42:62:fb:0c:0a:ef:c4:84:bf:f3: 10:46:d9:c6:07:1a:de:53:ac:c5:2a:4f:cf:a8:83: 50:bb:46:35:c0:28:2a:fb:27:9e:92:49:fe:7c:26: 0d:1c:62:07:9a:70:41:77:08:58:96:39:94:4c:a8: a6:2d:3d:47:ab:2c:35:91:89:68:26:32:98:d0:d1: 22:69:26:56:71:fb:ff:5e:98:28:54:af:c7:fd:63: dc:00:5d:1a:e7:bf:67:5b:fd:6d:2d:04:e5:a4:bf: cc:a4:15:67:a0:70:9d:e4:c7:6e:61:80:fd:35:99: 0b:3f:51:3b:14:ef:02:ec:f0:a8:93:9d:d4:a7:a5: b7:e4:59:37:c3:8c:08:ae:f3:1c:7b:09:91:ce:75: 3c:70:4b:ec:5c:0b:a2:82:23:50:23:1f:72:5f:e5: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:53:9F:87:66:EB:58:38:38:B7:56:6F:6D:F7:5E:3B:C2:0F:7F X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a6:11:b2:6d:d2:3d:98:5f:ac:e7:ae:79:3f:35:a8:77:3f: a3:67:1c:18:0a:67:12:51:d0:92:49:59:a7:f8:14:e2:0c:00: df:eb:94:1f:a9:97:bf:c6:58:bf:10:3a:3d:d1:95:48:17:1a: 52:a1:82:d2:c7:75:aa:e7:11:ce:39:8b:cf:1d:0c:bf:fa:53: 53:f6:e0:d6:43:82:4b:dc:0f:be:b4:47:35:05:dc:74:74:e9: 44:27:ad:fa:06:79:f3:3f:37:a1:a2:eb:de:20:4c:32:18:20: f2:05:8f:a9:4b:c0:d1:b8:b2:99:a2:c1:9e:4a:85:d6:63:05: a6:9b:da:13:ad:c6:06:5b:b2:c3:7f:5d:22:66:4c:1c:ee:46: 5b:47:1d:e3:2e:ad:d4:7a:3b:27:80:55:10:18:c5:a0:05:cc: 17:7c:9c:5f:34:20:7f:5a:07:17:42:99:06:54:f6:f6:b9:c3: a8:fe:48:16:a3:e5:3c:97:bd:4f:e5:44:33:f9:a5:8d:2a:ac: bb:1e:a2:2d:c7:71:9c:26:de:2f:a0:3a:94:f0:15:1d:10:70: 7a:52:76:e1:a6:e7:b2:30:6b:4d:11:d2:88:ff:b0:3c:e6:44: e1:49:ca:7d:40:60:06:60:f9:37:78:a3:0c:59:da:c6:82:f8: 51:67:2f:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwOTIwMjI0NTQzWhcNMjYwOTI3MjI0NTQzWjAYMRYwFAYD VQQDEw02YWIwNjIxOC1hNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq96Ci7QY6Rq1SxZ7o1DQvVpmPj/p16PdCofOqmHeFcEEES0GEYfaDPtarro 1KHOGoc8SwG0yu7DpmYUlcLVm6XE0wLr9p/VS/dqybVb97/H56EHUMN1On5q8H5k AkJi+wwK78SEv/MQRtnGBxreU6zFKk/PqINQu0Y1wCgq+yeekkn+fCYNHGIHmnBB dwhYljmUTKimLT1Hqyw1kYloJjKY0NEiaSZWcfv/XpgoVK/H/WPcAF0a579nW/1t LQTlpL/MpBVnoHCd5MduYYD9NZkLP1E7FO8C7PCok53Up6W35Fk3w4wIrvMcewmR znU8cEvsXAuigiNQIx9yX+XepwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOY/U5+H ZutYODi3Vm9t9147wg9/MB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzaYRsm3SPZhfrOeueT81qHc/o2ccGApnElHQkklZp/gU4gwA3+uUH6mXv8ZY vxA6PdGVSBcaUqGC0sd1qucRzjmLzx0Mv/pTU/bg1kOCS9wPvrRHNQXcdHTpRCet +gZ58z83oaLr3iBMMhgg8gWPqUvA0biymaLBnkqF1mMFppvaE63GBluyw39dImZM HO5GW0cd4y6t1Ho7J4BVEBjFoAXMF3ycXzQgf1oHF0KZBlT29rnDqP5IFqPlPJe9 T+VEM/mljSqsux6iLcdxnCbeL6A6lPAVHRBwelJ24abnsjBrTRHSiP+wPOZE4UnK fUBgBmD5N3ijDFnaxoL4UWcv3Q== -----END CERTIFICATE-----Generated at Mon Sep 21 16:05:56 2026 by rpki-client