$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft File: 089k1dsXYfy2pVLwaAkTMMW19Ts.mft (raw, json) Hash identifier: s3Y1ZjCVJUf+9qiSsLFDtHaHXqCJBGBR6yQQhfDB540= Subject key identifier: 0C:77:86:C9:63:4F:01:27:63:61:59:00:C7:0A:AE:AC:16:5D:CE:41 Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft Manifest number: E3 Signing time: Mon 21 Sep 2026 06:31:37 +0000 Manifest this update: Mon 21 Sep 2026 06:31:37 +0000 Manifest next update: Mon 28 Sep 2026 06:31:37 +0000 Files and hashes: 1: 089k1dsXYfy2pVLwaAkTMMW19Ts.crl (hash: q+AYdUXeIYla1w+FvvwTgk0nH2RGpHHG51q7d/AepGc=) 2: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (hash: FqZP/xwpLEICrivpR+MiIySP/UWB1Pr1kwt+h035Nxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Validity Not Before: Sep 21 06:31:37 2026 GMT Not After : Sep 28 06:31:37 2026 GMT Subject: CN=6ab0cf49-a864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:c1:32:11:d6:f0:b8:e9:f8:e5:61:a3:60: 8f:c3:ab:72:a2:0f:58:2f:28:ac:7b:33:32:2d:e5: ab:06:32:ac:14:97:90:45:c0:8a:35:f3:8a:b1:7c: 9e:07:fe:e2:7b:3e:b4:8e:3d:db:a9:a1:ea:a5:1b: 9f:2c:e8:df:29:7e:d8:80:0c:92:fa:44:18:2c:ce: 01:46:a2:46:2c:4f:ea:d4:f2:4d:05:10:fe:85:34: 7b:9e:04:4e:b0:5b:a0:45:7e:12:e3:5f:d4:ae:ad: b0:f7:83:11:4d:c8:62:b5:d1:06:04:fd:7e:6a:3d: 94:c5:19:0b:59:40:fa:5e:2e:1d:ef:47:cb:1d:af: 1c:e2:13:04:d4:aa:4d:d9:9e:72:50:20:0f:e9:a1: 47:9f:57:e2:6f:24:27:cc:14:84:04:e8:10:42:26: c4:b5:9c:80:06:c9:64:67:8e:46:cc:12:1f:d8:04: 7a:c5:b7:68:1d:65:8c:df:aa:b6:35:fc:7b:95:65: 4a:c5:3c:79:0f:81:7e:d0:1a:a7:28:c9:0b:87:3c: 68:d7:1c:6a:48:fe:dd:50:a1:52:de:b4:08:d9:dd: 73:f2:d9:a7:fa:e1:7e:e7:09:4f:cf:bb:f7:af:9f: ed:bf:bd:5e:6e:11:5f:08:7e:34:ec:52:b4:16:98: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:77:86:C9:63:4F:01:27:63:61:59:00:C7:0A:AE:AC:16:5D:CE:41 X509v3 Authority Key Identifier: keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d0:54:66:a0:b5:35:fc:c7:8f:4c:c8:bc:81:71:35:91:31: 74:e8:9b:56:17:48:8d:60:ad:5f:74:1e:bc:33:a1:88:ef:0d: c3:73:b0:5c:c3:f2:af:d9:28:1e:b4:6d:c3:a3:32:4e:34:34: 2b:fa:71:2a:89:44:d5:be:ba:15:e7:ed:ad:0b:b2:62:a0:75: 09:c7:55:d5:10:a4:3b:9e:78:61:50:16:79:e4:c8:cd:c9:40: 33:ff:67:8f:e3:95:b8:e1:50:c8:1c:08:d9:7b:f9:51:b9:f7: 0b:0f:f9:84:f9:73:03:8c:92:a0:ff:c2:b4:d5:ac:ce:15:fd: d5:fa:16:db:5d:4b:97:05:b2:48:96:79:8c:31:f9:b8:e6:09: 14:61:a2:37:ac:f7:5b:7f:53:aa:63:e2:92:38:24:a3:c8:ee: 78:5d:26:7e:6e:47:ad:1f:17:58:a0:86:b0:ea:9a:92:09:10: 93:2d:20:a3:bd:86:46:74:94:d5:fb:cb:78:93:32:8b:12:e1: 1b:c0:ba:23:31:8c:da:79:e4:31:c0:16:ea:31:95:d8:67:95: 33:8a:b9:f8:b7:06:80:06:8d:be:cb:01:3e:58:95:82:c1:78: 57:64:fe:06:47:ff:aa:05:07:5c:bc:97:97:b3:a6:1a:fd:17: de:5b:4e:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI1REYxMTAvBgNVBAUTKEQzQ0Y2NEQ1REIxNzYxRkNCNkE1NTJGMDY4MDkxMzMw QzVCNUY1M0IwHhcNMjYwOTIxMDYzMTM3WhcNMjYwOTI4MDYzMTM3WjAYMRYwFAYD VQQDEw02YWIwY2Y0OS1hODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdXBMhHW8Ljp+OVho2CPw6tyog9YLyisezMyLeWrBjKsFJeQRcCKNfOKsXye B/7iez60jj3bqaHqpRufLOjfKX7YgAyS+kQYLM4BRqJGLE/q1PJNBRD+hTR7ngRO sFugRX4S41/Urq2w94MRTchitdEGBP1+aj2UxRkLWUD6Xi4d70fLHa8c4hME1KpN 2Z5yUCAP6aFHn1fibyQnzBSEBOgQQibEtZyABslkZ45GzBIf2AR6xbdoHWWM36q2 Nfx7lWVKxTx5D4F+0BqnKMkLhzxo1xxqSP7dUKFS3rQI2d1z8tmn+uF+5wlPz7v3 r5/tv71ebhFfCH407FK0Fpg1DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAx3hslj TwEnY2FZAMcKrqwWXc5BMB8GA1UdIwQYMBaAFNPPZNXbF2H8tqVS8GgJEzDFtfU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjVERi9FNjEyNDA4MjVF RDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlmeTJwVkx3YUFrVE1NVzE5 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA4OWsxZHNYWWZ5MnBWTHdhQWtUTU1XMTlUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjVERi9FNjEyNDA4MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi8wODlrMWRzWFlm eTJwVkx3YUFrVE1NVzE5VHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASNBUZqC1NfzHj0zIvIFxNZExdOibVhdIjWCtX3QevDOhiO8Nw3OwXMPyr9ko HrRtw6MyTjQ0K/pxKolE1b66FeftrQuyYqB1CcdV1RCkO554YVAWeeTIzclAM/9n j+OVuOFQyBwI2Xv5Ubn3Cw/5hPlzA4ySoP/CtNWszhX91foW211LlwWySJZ5jDH5 uOYJFGGiN6z3W39TqmPikjgko8jueF0mfm5HrR8XWKCGsOqakgkQky0go72GRnSU 1fvLeJMyixLhG8C6IzGM2nnkMcAW6jGV2GeVM4q5+LcGgAaNvssBPliVgsF4V2T+ Bkf/qgUHXLyXl7OmGv0X3ltOcQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:53 2026 by rpki-client