$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: eMRbh7vfezYm9CzKZPmqztPaalgjXXK2iXw3mhiSjNY= Subject key identifier: 77:09:0B:07:AA:0C:D0:62:C4:26:15:32:9F:F2:CD:0A:15:E5:B1:87 Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 35B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 358E Signing time: Sun 20 Sep 2026 14:24:02 +0000 Manifest this update: Sun 20 Sep 2026 14:24:02 +0000 Manifest next update: Sun 27 Sep 2026 14:24:02 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: kLWEqnHwYM96KjgMELsBCE5Jg5Jg06N/JQP33vyexFg=) 2: 8CF6539E86FC11F194514C90ABEE528E.roa (hash: 4EONKVRgRQ2Go5fxovVPn9tWmBAdwnNdr7oDHnDjYAc=) 3: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=) 4: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Sep 20 14:24:02 2026 GMT Not After : Sep 27 14:24:02 2026 GMT Subject: CN=6aafec82-4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:69:f5:4f:ca:b4:ac:3b:0d:e8:f7:2e:33: e7:09:05:10:ed:33:13:99:16:7a:fa:20:08:39:1d: 75:c8:8b:01:9e:5a:c0:db:a3:85:5e:c9:06:db:c5: a0:89:ea:1a:10:b9:6b:a0:65:78:5d:08:59:41:a4: 65:20:bd:cd:1e:d2:15:20:8d:ad:4d:53:e0:36:4c: 50:a8:8f:11:e0:89:b9:5f:7f:cb:34:17:a0:8a:90: 69:42:d0:20:5a:e5:5b:81:03:ca:41:7f:74:f7:57: 6c:fe:36:56:12:54:97:a0:2c:90:49:1c:e3:6f:53: 5d:3b:74:b5:3e:26:00:f0:09:f8:ae:53:d0:3a:c1: 2d:b7:98:8e:e5:6e:ae:d5:c2:78:00:58:1c:be:87: 78:47:6d:6a:80:7c:93:d3:20:d4:f9:69:de:a3:b5: f2:d8:d5:ce:63:9a:84:88:b9:07:1a:6d:c9:8f:57: 2e:4a:6c:3e:e2:88:3e:03:ea:84:25:7c:9c:6d:27: c1:f8:4c:67:f1:ad:5c:7f:b2:78:20:37:6e:2d:ac: 7b:66:bf:db:89:74:25:0f:6d:10:82:4a:da:77:34: 39:25:f3:f1:d1:33:62:f9:0c:b1:93:e9:40:6b:58: 5d:1d:36:e6:a4:bc:a7:50:e5:1c:c2:a0:b1:44:1d: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:09:0B:07:AA:0C:D0:62:C4:26:15:32:9F:F2:CD:0A:15:E5:B1:87 X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:86:dc:7d:ce:41:21:21:99:de:40:cc:7f:b5:7f:8b:d7:45: 38:df:29:6d:e9:99:fd:eb:14:dd:22:7d:6c:0c:1b:6d:3f:a7: e8:6c:21:27:45:06:d3:b6:a0:89:fa:73:c8:79:d8:7e:7c:89: c8:b4:c4:6f:c4:df:9e:a0:aa:5d:04:2a:28:e0:e1:cc:d7:cc: 6c:36:be:52:f5:28:69:a8:24:f7:86:2f:ce:c0:c3:df:26:92: 41:f1:3b:e9:29:ea:21:76:ba:4a:9d:dc:db:66:7b:2a:84:58: 6a:c1:c7:57:24:4f:d8:a2:0a:e7:9c:72:32:3c:16:99:ad:ff: 43:90:a4:cd:3f:9c:82:8f:06:4a:c2:ef:4a:1a:db:f4:13:fa: bf:60:1c:63:0b:26:55:80:88:38:b9:e5:fe:28:bf:b3:3d:0b: 2c:14:55:c4:88:99:8b:d3:03:b0:f5:60:c2:61:2a:5e:4c:d5: 53:c3:76:b9:d3:21:a9:a4:14:16:da:93:fe:a1:a3:8e:c6:45: 52:a6:2b:13:db:72:ae:df:18:10:97:30:22:8a:38:19:44:b1: fd:67:ce:0c:fa:89:1d:0a:ab:97:a6:0d:d2:04:9a:55:e8:f2: 2c:18:c9:16:13:03:f4:da:e5:d2:00:d0:da:00:13:2b:4f:87: 1d:b7:1c:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjYwOTIwMTQyNDAyWhcNMjYwOTI3MTQyNDAyWjAYMRYwFAYD VQQDEw02YWFmZWM4Mi00OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTVp9U/KtKw7Dej3LjPnCQUQ7TMTmRZ6+iAIOR11yIsBnlrA26OFXskG28Wg ieoaELlroGV4XQhZQaRlIL3NHtIVII2tTVPgNkxQqI8R4Im5X3/LNBegipBpQtAg WuVbgQPKQX9091ds/jZWElSXoCyQSRzjb1NdO3S1PiYA8An4rlPQOsEtt5iO5W6u 1cJ4AFgcvod4R21qgHyT0yDU+Wneo7Xy2NXOY5qEiLkHGm3Jj1cuSmw+4og+A+qE JXycbSfB+Exn8a1cf7J4IDduLax7Zr/biXQlD20QgkradzQ5JfPx0TNi+Qyxk+lA a1hdHTbmpLynUOUcwqCxRB2ZlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcJCweq DNBixCYVMp/yzQoV5bGHMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo4bcfc5BISGZ3kDMf7V/i9dFON8pbemZ/esU3SJ9bAwbbT+n6GwhJ0UG07ag ifpzyHnYfnyJyLTEb8TfnqCqXQQqKODhzNfMbDa+UvUoaagk94YvzsDD3yaSQfE7 6SnqIXa6Sp3c22Z7KoRYasHHVyRP2KIK55xyMjwWma3/Q5CkzT+cgo8GSsLvShrb 9BP6v2AcYwsmVYCIOLnl/ii/sz0LLBRVxIiZi9MDsPVgwmEqXkzVU8N2udMhqaQU FtqT/qGjjsZFUqYrE9tyrt8YEJcwIoo4GUSx/WfODPqJHQqrl6YN0gSaVejyLBjJ FhMD9Nrl0gDQ2gATK0+HHbccNg== -----END CERTIFICATE-----Generated at Tue Sep 22 07:47:43 2026 by rpki-client