$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: TWP0EBKCratba7lglmHBN7B9vUCbAtMQkC4G9+7X3YQ= Subject key identifier: 8A:8B:39:7A:7A:C5:18:6E:BB:BB:AA:F6:3E:99:DB:5A:BE:4F:40:42 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 0153 Signing time: Fri 25 Sep 2026 05:23:51 +0000 Manifest this update: Fri 25 Sep 2026 05:23:50 +0000 Manifest next update: Fri 02 Oct 2026 05:23:50 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: Uu+iz688XFORmJJUdfsjAUu7yZ5QxfqwP0yMw0JesAU=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Sep 25 05:23:50 2026 GMT Not After : Oct 2 05:23:50 2026 GMT Subject: CN=6ab60567-23b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:d5:aa:da:3a:15:5c:3d:e8:8f:4d:b9:4b: 76:c2:16:92:35:6e:e4:aa:f2:49:c4:8f:b8:45:29: da:df:2d:e7:52:79:10:6d:5c:e9:7e:25:76:1c:ba: 05:66:91:d1:c9:1e:e2:cc:a2:4a:36:cd:5c:81:f2: 52:75:a1:fb:59:19:59:e8:95:ff:4c:a6:d5:ea:7e: b9:3f:27:f3:1a:1b:49:78:92:8a:c0:d2:a7:b4:f3: f1:f2:55:12:fe:fc:f4:9d:7c:a4:4b:60:3c:80:ed: 4a:22:69:5b:17:6e:e3:5d:b7:5a:ac:f3:1c:4c:da: 68:99:fa:e3:e4:c5:76:39:44:35:4b:9f:cb:a5:c9: f1:04:2f:61:23:a6:68:86:f4:13:a4:2e:4c:15:36: 7d:e2:b0:48:43:61:7b:74:e9:b8:dc:22:d9:04:cf: bd:9c:04:9a:27:3f:12:a9:fe:f4:8d:32:6c:b4:ee: be:4f:15:c1:d5:a3:9e:87:91:78:88:31:ef:e0:8a: 6e:ba:e5:a5:cb:27:ca:51:6a:74:28:13:8c:6f:04: 91:70:7f:cb:90:c7:8f:76:3e:9c:cc:8c:ec:cd:0c: 32:fd:c5:22:ee:00:9f:a6:37:69:52:41:9d:c8:8d: 4c:22:2b:0f:8f:46:da:52:00:a6:18:4d:c2:91:67: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:39:7A:7A:C5:18:6E:BB:BB:AA:F6:3E:99:DB:5A:BE:4F:40:42 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:19:5d:e5:85:53:56:5f:bb:05:ae:2b:1a:b6:4d:7e:bc:d5: d2:df:5d:5f:fe:ac:f8:71:d6:d7:a9:ff:75:e3:5f:7c:05:d4: c6:04:ae:60:ac:ec:5d:c7:c8:b0:b8:0e:6d:3e:31:10:be:0c: 43:9f:f0:33:01:a0:5a:a8:af:8f:6e:48:ea:25:18:cc:de:46: 9d:1b:4c:01:3b:d2:a4:be:36:74:e1:dc:a0:b0:d6:77:13:d9: 4f:c8:e5:64:9e:23:84:e2:2a:28:3d:a1:ea:70:88:98:30:17: 54:64:89:2c:b6:e6:47:da:ec:a1:c0:62:ae:e5:05:ab:bb:81: 2d:d7:bc:59:cd:85:9c:a2:99:0c:a6:79:42:12:79:20:43:91: 5e:db:39:00:ec:b3:59:c8:53:c3:7a:20:34:f6:f4:95:70:78: b2:71:94:7c:03:e8:ac:5e:11:a7:f4:01:1a:28:ed:5f:91:f6: 01:06:85:ea:88:51:0e:54:ae:d6:b5:3f:9e:7f:09:12:7c:7a: 20:27:c7:84:1a:d8:2a:84:2d:dd:d0:4b:3b:93:b4:0c:dd:5e: ae:3e:47:fc:47:e4:d7:9c:d2:17:45:e3:9b:52:39:83:d0:a3: 85:ba:ff:c0:32:85:5c:31:65:de:46:33:70:fd:1a:ab:f0:2b: c7:46:bc:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwOTI1MDUyMzUwWhcNMjYxMDAyMDUyMzUwWjAYMRYwFAYD VQQDEw02YWI2MDU2Ny0yM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYzVqto6FVw96I9NuUt2whaSNW7kqvJJxI+4RSna3y3nUnkQbVzpfiV2HLoF ZpHRyR7izKJKNs1cgfJSdaH7WRlZ6JX/TKbV6n65PyfzGhtJeJKKwNKntPPx8lUS /vz0nXykS2A8gO1KImlbF27jXbdarPMcTNpomfrj5MV2OUQ1S5/LpcnxBC9hI6Zo hvQTpC5MFTZ94rBIQ2F7dOm43CLZBM+9nASaJz8Sqf70jTJstO6+TxXB1aOeh5F4 iDHv4IpuuuWlyyfKUWp0KBOMbwSRcH/LkMePdj6czIzszQwy/cUi7gCfpjdpUkGd yI1MIisPj0baUgCmGE3CkWc++wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqLOXp6 xRhuu7uq9j6Z21q+T0BCMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBld5YVTVl+7Ba4rGrZNfrzV0t9dX/6s+HHW16n/deNffAXUxgSuYKzsXcfI sLgObT4xEL4MQ5/wMwGgWqivj25I6iUYzN5GnRtMATvSpL42dOHcoLDWdxPZT8jl ZJ4jhOIqKD2h6nCImDAXVGSJLLbmR9rsocBiruUFq7uBLde8Wc2FnKKZDKZ5QhJ5 IEORXts5AOyzWchTw3ogNPb0lXB4snGUfAPorF4Rp/QBGijtX5H2AQaF6ohRDlSu 1rU/nn8JEnx6ICfHhBrYKoQt3dBLO5O0DN1erj5H/Efk15zSF0Xjm1I5g9Cjhbr/ wDKFXDFl3kYzcP0aq/Arx0a8Cw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:42:47 2026 by rpki-client