$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: wiYKch+HxbjTbl3IehyoyRGm85dTuaAxAWSP18LHuxY= Subject key identifier: D8:17:3C:8B:B5:08:91:5D:47:F1:D0:FF:10:12:EA:92:F0:2D:5F:D0 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: 01CA Signing time: Sat 19 Sep 2026 03:51:06 +0000 Manifest this update: Sat 19 Sep 2026 03:51:05 +0000 Manifest next update: Sat 26 Sep 2026 03:51:05 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: dNz/ux45DH53Wntqp0IY8tuo54NDxmEWZi9ic1kzZco=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: qQKLwedn/C2ikUUx4cT43tzL687XdUpFednnBntiEcQ=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: ynRpXZGmVceBMQx25RkW+LRXIrRmRVCK0pAGR+60GBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Sep 19 03:51:05 2026 GMT Not After : Sep 26 03:51:05 2026 GMT Subject: CN=6aae06aa-168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:d6:35:91:f5:a8:95:78:8a:74:bf:30:b7: 67:5e:a5:f8:b7:75:30:a7:5a:46:f4:c0:09:b2:8f: b1:3d:38:4f:f1:4e:94:af:03:8b:95:e8:e0:5f:a8: c4:41:5a:a9:6e:9b:12:8c:22:95:8d:bc:91:24:a7: 0b:55:e1:20:89:6a:43:40:b5:0a:d9:23:d9:a9:2c: 38:88:d1:04:e9:19:4a:2f:a3:3c:17:25:01:51:4f: b0:d4:02:53:74:dd:dc:bc:eb:a8:b0:4e:29:0c:d8: 03:7b:7c:a9:ea:20:55:be:e1:a8:6f:41:e8:92:da: 7b:0c:2e:3d:00:5a:90:ca:ce:40:31:1c:15:8c:c5: 8e:45:d3:47:6c:c0:93:9c:de:40:be:72:5a:98:05: 71:50:0d:6c:fe:e0:db:fa:89:b1:81:ee:b6:d9:d3: a9:31:d5:6a:74:50:f9:13:7f:f1:3a:3d:30:36:b2: 18:84:c8:04:da:bd:8a:ac:13:60:8a:22:a7:a0:43: 0f:b8:ce:a3:7d:53:b2:f9:77:c5:59:a5:5b:bd:e4: 0c:82:82:ab:3e:2e:ce:e7:45:3b:19:4d:e8:64:dd: 8b:e3:2f:ca:e4:5a:e6:6c:40:f5:96:5f:7e:b9:fd: 41:0f:e4:c8:7c:b1:7b:46:93:ae:18:cf:ad:ea:d8: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:3C:8B:B5:08:91:5D:47:F1:D0:FF:10:12:EA:92:F0:2D:5F:D0 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d3:c6:d8:c3:06:34:c0:86:07:49:05:ec:0b:bd:b6:67:27: b6:77:fe:ec:c6:76:e5:2d:b1:32:53:73:92:7e:de:da:bb:28: 0c:66:b6:ae:a9:ed:24:2b:3f:a9:04:20:5c:81:3f:ae:17:5a: 64:05:eb:e2:7f:3e:65:d5:0b:44:2c:0d:5a:f0:79:9f:01:18: bb:00:92:a8:58:28:a8:b7:58:d5:e7:53:75:c6:a5:63:5e:11: 35:ee:01:a2:1f:c6:2a:8c:1b:10:3a:ec:dd:55:9f:38:3b:86: 47:24:56:5f:f5:be:7d:38:86:53:53:63:20:83:82:5c:d7:9d: 24:5e:cb:22:98:70:b1:96:55:85:38:c3:2e:36:ed:37:e9:de: e6:43:8e:12:ec:ab:41:15:46:26:4f:91:88:1e:45:5e:88:3e: f9:96:9b:f2:93:8e:2e:0d:af:cc:4f:56:86:1e:0d:3a:8c:e1: 68:c5:ce:d1:44:39:c7:a3:c6:9b:d1:0e:18:93:c1:d3:a4:da: ee:b1:51:16:fa:93:4f:8c:8e:28:a2:7d:22:47:8e:7d:27:db: 70:3e:e0:6b:54:cc:62:bc:86:11:89:4e:29:2b:ba:ac:27:68: ba:64:18:78:42:ea:f5:94:c5:1d:4c:c7:47:ff:df:b8:43:38: c0:9d:b6:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjYwOTE5MDM1MTA1WhcNMjYwOTI2MDM1MTA1WjAYMRYwFAYD VQQDEw02YWFlMDZhYS0xNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRbWNZH1qJV4inS/MLdnXqX4t3Uwp1pG9MAJso+xPThP8U6UrwOLlejgX6jE QVqpbpsSjCKVjbyRJKcLVeEgiWpDQLUK2SPZqSw4iNEE6RlKL6M8FyUBUU+w1AJT dN3cvOuosE4pDNgDe3yp6iBVvuGob0Hoktp7DC49AFqQys5AMRwVjMWORdNHbMCT nN5AvnJamAVxUA1s/uDb+omxge622dOpMdVqdFD5E3/xOj0wNrIYhMgE2r2KrBNg iiKnoEMPuM6jfVOy+XfFWaVbveQMgoKrPi7O50U7GU3oZN2L4y/K5FrmbED1ll9+ uf1BD+TIfLF7RpOuGM+t6thO5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgXPIu1 CJFdR/HQ/xAS6pLwLV/QMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABtPG2MMGNMCGB0kF7Au9tmcntnf+7MZ25S2xMlNzkn7e2rsoDGa2rqntJCs/ qQQgXIE/rhdaZAXr4n8+ZdULRCwNWvB5nwEYuwCSqFgoqLdY1edTdcalY14RNe4B oh/GKowbEDrs3VWfODuGRyRWX/W+fTiGU1NjIIOCXNedJF7LIphwsZZVhTjDLjbt N+ne5kOOEuyrQRVGJk+RiB5FXog++Zab8pOOLg2vzE9Whh4NOozhaMXO0UQ5x6PG m9EOGJPB06Ta7rFRFvqTT4yOKKJ9IkeOfSfbcD7ga1TMYryGEYlOKSu6rCdoumQY eELq9ZTFHUzHR//fuEM4wJ22Sg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:22:27 2026 by rpki-client