$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json) Hash identifier: BhJ07Eugj/ndvlU+PlGzOVE/m/efFdwfngMvczWpeks= Subject key identifier: C2:8F:1F:67:F6:AE:69:A7:98:0A:AE:D1:5D:FE:FC:CE:42:43:8F:55 Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 35FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft Manifest number: 35B9 Signing time: Sun 20 Sep 2026 14:42:46 +0000 Manifest this update: Sun 20 Sep 2026 14:42:45 +0000 Manifest next update: Sun 27 Sep 2026 14:42:45 +0000 Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: sjoYLYj/qF7poJeq2oEJqYeYg/ucQIqFPib8NGzTq8c=) 2: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: RvDR+CwV5r8nXBYVtiJ4seGZbUdvtwvjuoEWjfxE9n4=) 3: LorfDG7HkTieLpomVUqpyUsTD-w.asa (hash: KalywPiG5nOw7aGOXUh/Ul3kueH7iE7ZzzLS/P/1r5c=) 4: A90BA98C74D011F19600C7755BA30FBC.roa (hash: 5g7W5ahRCXrfAoDmqnCGQYfrzLhobtl8/QoaS07b9B4=) 5: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: DG9csTjYXt2owT4jULXXaVRko/sw17eGl0Moy3hQJ9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13822 (0x35fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Sep 20 14:42:45 2026 GMT Not After : Sep 27 14:42:45 2026 GMT Subject: CN=6aaff0e6-ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:22:29:43:c9:f6:88:57:e1:c6:87:4c:9a: 90:19:ea:ce:c0:85:da:3c:12:d7:07:e3:87:22:79: 27:f7:34:60:23:18:43:1b:6e:e9:29:a4:19:cd:3e: 2e:fc:b8:81:56:87:5f:2b:b3:55:a6:3b:be:bc:26: 78:1a:93:5f:37:c3:0d:83:eb:1c:f5:8f:11:f8:32: 1d:c5:64:a9:9d:19:1b:7e:36:32:18:69:4b:50:be: b5:32:c1:68:e7:d9:9c:f7:75:ac:b5:b6:ed:f3:c9: cb:36:dc:5e:ce:1b:1b:a3:ff:a8:96:3b:76:0b:e1: 26:2c:a4:5e:da:fa:8f:9f:99:b7:15:f4:a9:93:83: 13:9f:10:22:e0:c0:e9:64:65:1c:2f:de:ca:20:0e: d2:60:47:8a:e5:fa:38:aa:ac:fc:78:dc:41:8e:c1: 69:3d:55:a5:89:9d:ae:a0:08:5e:76:d9:27:14:4e: 56:bb:84:0a:d4:cc:ef:bc:e8:59:67:79:5e:4c:c3: d2:ce:fc:f3:75:8b:c2:e2:c8:ac:3b:ce:64:64:1d: 36:6d:5d:02:b9:9b:e8:c6:3f:d9:cd:92:0e:c3:4b: de:de:5d:97:8b:6d:fb:7f:4c:e0:c5:ef:04:f7:d0: 0d:7d:fc:6d:45:1d:98:58:ef:cc:20:d3:1f:e5:c4: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8F:1F:67:F6:AE:69:A7:98:0A:AE:D1:5D:FE:FC:CE:42:43:8F:55 X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:74:2c:13:ea:4c:45:4a:72:d2:c3:5f:3f:95:d6:e5:fc:eb: cc:db:dc:1a:cd:92:d6:91:38:03:1d:00:0f:b2:85:a9:5e:99: 17:b5:7a:96:10:25:c8:40:1c:b5:6e:15:fe:b8:ad:37:b9:b4: 79:36:80:d1:62:09:4c:16:54:9a:06:04:ab:eb:be:90:ec:d7: fb:81:64:01:0d:fa:a6:e1:72:b8:bd:d9:be:89:eb:55:a5:87: c4:4b:66:ec:ee:3d:ba:a9:86:a2:20:f9:53:39:99:04:df:de: c8:5f:e8:55:e1:d5:1d:18:54:51:b7:77:78:df:98:ef:49:bf: cc:1c:e0:77:4a:7d:85:0d:9c:99:9c:75:12:f8:25:29:fc:08: 6a:57:6b:ee:da:8b:fc:95:08:e5:68:36:50:74:3f:90:aa:27: c0:4d:02:13:87:8f:ef:f1:46:fe:37:09:25:f4:14:45:e2:7f: 55:df:24:88:98:bf:46:98:da:24:04:5c:f9:18:2e:86:5d:de: 91:00:41:c4:15:f0:87:a5:5d:15:5f:23:f1:ba:70:fb:56:37: 7d:0a:14:cd:94:12:3f:7a:7a:e5:93:9e:5d:38:b8:ff:e2:2f: 14:c7:d1:cd:e1:3b:9a:8b:4d:a4:d4:92:ac:56:74:29:62:b9: 91:bf:01:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjYwOTIwMTQ0MjQ1WhcNMjYwOTI3MTQ0MjQ1WjAYMRYwFAYD VQQDEw02YWFmZjBlNi1hZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsksiKUPJ9ohX4caHTJqQGerOwIXaPBLXB+OHInkn9zRgIxhDG27pKaQZzT4u /LiBVodfK7NVpju+vCZ4GpNfN8MNg+sc9Y8R+DIdxWSpnRkbfjYyGGlLUL61MsFo 59mc93Wstbbt88nLNtxezhsbo/+oljt2C+EmLKRe2vqPn5m3FfSpk4MTnxAi4MDp ZGUcL97KIA7SYEeK5fo4qqz8eNxBjsFpPVWliZ2uoAhedtknFE5Wu4QK1MzvvOhZ Z3leTMPSzvzzdYvC4sisO85kZB02bV0CuZvoxj/ZzZIOw0ve3l2Xi237f0zgxe8E 99ANffxtRR2YWO/MINMf5cQTfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKPH2f2 rmmnmAqu0V3+/M5CQ49VMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEQyMi8yNTI2OTc5ODFEOTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29U OHRPYzh2SVZBTDRBT0EzZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3QsE+pMRUpy0sNfP5XW5fzrzNvcGs2S1pE4Ax0AD7KFqV6ZF7V6lhAlyEAc tW4V/ritN7m0eTaA0WIJTBZUmgYEq+u+kOzX+4FkAQ36puFyuL3ZvonrVaWHxEtm 7O49uqmGoiD5UzmZBN/eyF/oVeHVHRhUUbd3eN+Y70m/zBzgd0p9hQ2cmZx1Evgl KfwIaldr7tqL/JUI5Wg2UHQ/kKonwE0CE4eP7/FG/jcJJfQUReJ/Vd8kiJi/Rpja JARc+Rguhl3ekQBBxBXwh6VdFV8j8bpw+1Y3fQoUzZQSP3p65ZOeXTi4/+IvFMfR zeE7motNpNSSrFZ0KWK5kb8BYA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:10:54 2026 by rpki-client