$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: WhdU9BQA29W0EDP24n4hc6rQ7lu2iA9nqzC/FtfnZA4= Subject key identifier: 2A:7E:78:77:BE:AB:98:E4:35:32:0D:90:B6:E2:37:92:C2:25:9B:7B Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0259 Signing time: Mon 21 Sep 2026 02:26:37 +0000 Manifest this update: Mon 21 Sep 2026 02:26:36 +0000 Manifest next update: Mon 28 Sep 2026 02:26:36 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: jHSgk4Z5W7w1RM39dRsoLCsysGqOOZUDtdje6cyRs3w=) 2: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: 170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=) 3: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: P3O7u+qRGn1bwR58h4CF4ybrJlg7WXxzi0HEWNF1wU8=) 4: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: iXBfomCkV4xNH1cYbzZuww9SUUgCW5qk20yC43URNok=) 5: E9874B2A16D011EF90793868C4F9AE02.roa (hash: StFMy3NKhkaFCNdoWKE6eyzBLd+skcdMmjgC62pSh+8=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=) 7: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: /RmusU5UC3h4mIZxyyVvzpFaDdQyB/V1AfNpSxG2USc=) 8: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=) 9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: U9Cn0ELdUyS5NVvWmDLivz50FWKKV0p0b8inagt4fog=) 10: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: OsNJpFKmHPyfNeh8koHIfP2TRZRKEPMZ5UDUwZ4ntLI=) 11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: V/7VSGMl5ikCm95Tbf+xqFXER+QUdiwbSFx6fNdYM2Y=) 12: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Sep 21 02:26:36 2026 GMT Not After : Sep 28 02:26:36 2026 GMT Subject: CN=6ab095dc-04f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:7f:13:4c:4a:03:b8:c8:8d:8e:12:df:e3: d2:f8:ac:7e:b1:e1:d6:f2:95:9f:7d:f6:5f:08:53: ba:49:f1:f9:1a:eb:0b:b3:7a:b1:21:68:33:9b:07: 2a:2d:68:3a:d9:86:8a:af:75:16:a5:2d:c1:3f:60: 3e:f0:f9:6c:da:ad:51:25:6c:b6:89:12:43:83:35: d9:81:90:43:96:01:04:71:56:30:35:66:d0:4c:00: a8:79:29:8b:31:80:ef:af:7b:7b:bb:06:9e:93:36: 12:30:7e:d5:78:f0:d8:03:14:51:3c:99:46:d4:6d: 13:be:5c:92:e1:d8:53:1f:5b:3c:c6:47:35:f9:af: d2:f8:e7:f5:9f:21:3c:49:4f:ed:8a:fb:25:4d:4b: f6:70:f2:a6:69:41:d8:ff:20:51:f1:3d:fb:97:e7: 64:e7:3a:43:5e:ff:77:26:77:bc:cd:b4:ac:bf:5d: 99:d0:bb:aa:45:17:9f:93:b7:62:28:5f:48:8b:29: 15:b5:08:a6:12:dc:92:96:0e:ba:18:d0:57:94:a5: 78:3a:d3:21:e4:d3:7c:f3:1a:d1:be:22:d3:3c:7c: 05:93:44:a7:60:af:1b:5e:66:68:ea:91:cd:d5:92: e2:7d:3c:0d:dd:98:8f:3a:bd:47:1d:71:a2:64:fe: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:78:77:BE:AB:98:E4:35:32:0D:90:B6:E2:37:92:C2:25:9B:7B X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:c3:83:38:94:9d:6d:da:b3:09:0c:0d:9a:00:02:de:25: 68:09:cc:e7:0b:e4:39:d2:ae:8d:39:3f:b5:85:df:eb:76:cc: aa:58:5b:25:0e:fb:af:6c:48:ce:a6:b7:de:f3:84:c7:d1:e3: f1:a6:22:3b:76:0a:f2:cc:b2:34:0c:76:ee:a6:83:2a:58:b6: 22:7c:91:60:42:65:09:c1:98:83:b5:63:f3:c4:45:57:4c:12: 96:0b:b7:7a:c7:17:4c:68:ab:3d:bf:74:b9:fb:da:81:7b:97: 46:07:81:96:89:84:bf:86:b1:ee:15:4d:d6:95:17:ee:92:95: 05:1e:79:2f:9f:f3:6c:b1:2f:a2:f2:90:6a:e9:b1:50:0f:39: f9:fe:cb:f8:9c:58:3d:9f:c5:fb:23:9b:08:c8:b3:10:1b:98: c9:bb:b9:ae:8d:04:24:db:03:67:37:f4:2d:24:99:68:74:17: b0:de:00:63:34:a2:9f:86:8f:7e:38:1f:1a:0e:f7:15:2b:05: 3a:1a:0b:fe:49:05:72:81:44:36:1c:e2:bf:9f:78:f1:7c:37: b3:2c:df:2a:d5:34:d3:e3:b2:68:ab:f5:d4:e3:49:03:c5:53: 25:f5:af:a5:74:bb:b6:ae:74:90:c9:16:5e:9c:e9:d3:3a:5a: 32:1e:a8:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjYwOTIxMDIyNjM2WhcNMjYwOTI4MDIyNjM2WjAYMRYwFAYD VQQDEw02YWIwOTVkYy0wNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTR/E0xKA7jIjY4S3+PS+Kx+seHW8pWfffZfCFO6SfH5GusLs3qxIWgzmwcq LWg62YaKr3UWpS3BP2A+8Pls2q1RJWy2iRJDgzXZgZBDlgEEcVYwNWbQTACoeSmL MYDvr3t7uwaekzYSMH7VePDYAxRRPJlG1G0TvlyS4dhTH1s8xkc1+a/S+Of1nyE8 SU/tivslTUv2cPKmaUHY/yBR8T37l+dk5zpDXv93Jne8zbSsv12Z0LuqRRefk7di KF9IiykVtQimEtySlg66GNBXlKV4OtMh5NN88xrRviLTPHwFk0SnYK8bXmZo6pHN 1ZLifTwN3ZiPOr1HHXGiZP5O7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCp+eHe+ q5jkNTINkLbiN5LCJZt7MB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmB7DgziUnW3aswkMDZoAAt4laAnM5wvkOdKujTk/tYXf63bMqlhbJQ77r2xI zqa33vOEx9Hj8aYiO3YK8syyNAx27qaDKli2InyRYEJlCcGYg7Vj88RFV0wSlgu3 escXTGirPb90ufvagXuXRgeBlomEv4ax7hVN1pUX7pKVBR55L5/zbLEvovKQaumx UA85+f7L+JxYPZ/F+yObCMizEBuYybu5ro0EJNsDZzf0LSSZaHQXsN4AYzSin4aP fjgfGg73FSsFOhoL/kkFcoFENhziv5948Xw3syzfKtU00+OyaKv11ONJA8VTJfWv pXS7tq50kMkWXpzp0zpaMh6oLw== -----END CERTIFICATE-----Generated at Tue Sep 22 17:43:35 2026 by rpki-client