$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: rRsu13bhDK1NqCbAPmx35n6ZJ9M6Zuo2zZb5pxx5hEM= Subject key identifier: 72:DB:7A:58:30:8B:2F:96:86:6D:29:2D:BF:BE:31:74:DD:0D:FB:80 Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: 0172 Signing time: Wed 23 Sep 2026 04:34:58 +0000 Manifest this update: Wed 23 Sep 2026 04:34:58 +0000 Manifest next update: Wed 30 Sep 2026 04:34:58 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: oZIaA8+Kxic9uZDX1lD12bDaZyRzddJDmhd7bDQi19Q=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Sep 23 04:34:58 2026 GMT Not After : Sep 30 04:34:58 2026 GMT Subject: CN=6ab356f2-0a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:18:86:6d:0f:06:b3:76:0d:2f:07:2d:61: 17:66:0d:fd:2a:13:f4:d1:1a:f6:34:4a:7a:56:ae: 25:84:84:85:b5:b5:5e:7d:e1:e4:a4:e7:e3:b8:4c: 2c:87:38:67:54:48:c1:c4:81:01:86:09:6c:33:84: 63:d3:38:d6:bf:39:69:87:1b:19:e4:50:cd:a8:c9: 07:05:5f:13:63:55:cc:98:74:93:88:35:59:a2:db: 31:f1:c5:d1:ad:0c:2b:33:f0:fb:04:28:88:88:97: c0:a7:fb:dc:9d:13:8f:58:fe:8a:76:b2:78:4d:80: 78:f4:48:3d:94:85:ca:12:a6:06:75:62:ff:5c:a6: 39:20:01:8f:70:a4:bb:9b:26:a6:16:18:1e:aa:1a: 07:27:96:7e:72:00:47:97:5d:f0:db:13:8d:02:a9: a2:85:69:3b:75:86:a6:4a:81:40:68:fe:42:6a:ff: b3:66:5a:db:7f:1e:fc:79:ba:5f:85:0d:7f:b3:56: e8:7d:6a:82:78:f8:bf:51:b4:5c:96:3c:65:d9:88: ef:98:54:14:a0:4f:31:fc:3c:9d:3a:4c:6a:81:c2: 13:38:b6:04:1e:63:dc:08:f6:75:87:fb:b9:a5:a5: be:bd:4f:41:30:9e:bf:b9:0b:73:2b:1e:5f:26:6d: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:7A:58:30:8B:2F:96:86:6D:29:2D:BF:BE:31:74:DD:0D:FB:80 X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:bb:dd:f1:ff:68:73:c5:4e:60:b5:9c:08:5f:2a:2d:fa: a3:d4:50:9a:d7:4a:6e:98:bf:f7:f6:51:f2:6b:fb:ea:d0:ae: c2:94:9c:ef:2c:29:e9:f5:3c:f5:18:81:07:58:cc:2b:da:10: cb:ce:b6:d5:74:8c:8d:df:d6:cf:ee:79:6b:84:6a:cb:ed:89: ba:57:ec:07:08:64:55:9b:ab:c4:cd:11:8f:4a:b4:aa:3c:84: cf:4d:75:bf:af:a7:d5:b3:c7:82:55:3b:15:34:60:84:12:0e: 41:d5:70:48:7a:7c:8f:39:91:85:58:b1:72:96:52:1e:0f:4f: ec:cf:6e:dd:1c:63:3b:29:10:2a:fd:8c:06:70:c8:c7:84:fe: 60:7f:85:56:c2:1a:e8:3b:08:15:6d:8b:7c:3d:67:b2:3c:b5: e3:a0:64:98:2f:a7:3b:ef:eb:80:b6:32:89:7a:0f:45:cf:8c: 23:6b:7c:36:c2:eb:c3:3d:98:fa:9a:71:8c:32:fc:10:a7:93: 4d:51:0a:26:7b:bb:9f:0c:56:95:de:66:7e:3f:2b:f2:79:96: a7:09:71:21:a3:a3:e1:37:63:8d:82:05:48:c0:a0:e5:a9:73: 8b:c6:d2:72:32:20:cb:f2:56:1e:dc:73:aa:5e:14:d4:33:42: eb:60:d3:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1 QkVENTY2RTUwHhcNMjYwOTIzMDQzNDU4WhcNMjYwOTMwMDQzNDU4WjAYMRYwFAYD VQQDEw02YWIzNTZmMi0wYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2MYhm0PBrN2DS8HLWEXZg39KhP00Rr2NEp6Vq4lhISFtbVefeHkpOfjuEws hzhnVEjBxIEBhglsM4Rj0zjWvzlphxsZ5FDNqMkHBV8TY1XMmHSTiDVZotsx8cXR rQwrM/D7BCiIiJfAp/vcnROPWP6KdrJ4TYB49Eg9lIXKEqYGdWL/XKY5IAGPcKS7 myamFhgeqhoHJ5Z+cgBHl13w2xONAqmihWk7dYamSoFAaP5Cav+zZlrbfx78ebpf hQ1/s1bofWqCePi/UbRcljxl2YjvmFQUoE8x/DydOkxqgcITOLYEHmPcCPZ1h/u5 paW+vU9BMJ6/uQtzKx5fJm2dHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLbelgw iy+Whm0pLb++MXTdDfuAMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1 WXczQjhXclVpWjFiN1ZadVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkei73fH/aHPFTmC1nAhfKi36o9RQmtdKbpi/9/ZR8mv76tCuwpSc7ywp6fU8 9RiBB1jMK9oQy8621XSMjd/Wz+55a4Rqy+2JulfsBwhkVZurxM0Rj0q0qjyEz011 v6+n1bPHglU7FTRghBIOQdVwSHp8jzmRhVixcpZSHg9P7M9u3RxjOykQKv2MBnDI x4T+YH+FVsIa6DsIFW2LfD1nsjy146BkmC+nO+/rgLYyiXoPRc+MI2t8NsLrwz2Y +ppxjDL8EKeTTVEKJnu7nwxWld5mfj8r8nmWpwlxIaOj4TdjjYIFSMCg5alzi8bS cjIgy/JWHtxzql4U1DNC62DTwg== -----END CERTIFICATE-----Generated at Fri Sep 25 03:40:01 2026 by rpki-client