$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft File: M23U8UX716kQau8fBtkXB9JQt3o.mft (raw, json) Hash identifier: KBQ3cLAfY3yq5Q/GUfMGxOTgpku1Nom6PgWJDgGat4w= Subject key identifier: 27:0D:3D:E6:19:EA:D2:E4:A3:61:0E:68:8A:F7:D6:64:38:FF:67:E8 Authority key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A Certificate issuer: /CN=A91A9E90/serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft Manifest number: 29 Signing time: Sat 19 Sep 2026 08:48:07 +0000 Manifest this update: Sat 19 Sep 2026 08:48:06 +0000 Manifest next update: Sat 26 Sep 2026 08:48:06 +0000 Files and hashes: 1: M23U8UX716kQau8fBtkXB9JQt3o.crl (hash: QpCA+8nMjk3DJfLKmRwueTDxqww+h+Y5mBK8WF2bel4=) 2: 16261DCC85D411F1B888CCFF69A30FBC.roa (hash: KhZuvpiH1QtAzasVJFC3Nq++oQgjiVWH6Qo6hINf7iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A Validity Not Before: Sep 19 08:48:06 2026 GMT Not After : Sep 26 08:48:06 2026 GMT Subject: CN=6aae4c47-061c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:49:fc:85:ad:72:72:a9:80:b4:56:ca:21: 8e:f7:65:09:4b:e3:10:f0:66:cb:f2:e5:b6:23:aa: 78:30:1a:82:12:05:68:c6:8f:d4:c1:d7:65:b7:b3: a0:fd:69:03:f7:aa:66:27:1a:57:19:3c:b6:9a:30: b8:e1:dc:94:cc:b0:e2:e6:00:59:8b:0e:f7:2f:42: 0c:8f:b4:45:ba:36:83:e2:4e:d6:24:a8:a3:20:8b: 5a:85:31:ba:e1:ba:3b:7f:14:04:97:6f:17:b6:32: da:3e:fd:7b:1d:77:7d:5a:97:fc:ec:57:bc:e2:24: 7a:dd:38:83:f3:e0:72:dd:a6:96:5c:74:fe:3b:9f: 1d:df:42:ca:93:71:53:fd:d4:26:8b:a2:df:d6:d6: ff:c4:45:a7:fa:9f:af:d4:1f:e1:4e:e8:13:f4:85: ff:44:87:78:14:8e:a3:7a:3a:dc:00:4c:c7:13:df: 44:69:4d:b8:0f:eb:97:25:1c:71:fe:ae:c3:aa:bc: 9b:85:47:bc:04:49:a1:bc:aa:96:90:6b:8a:96:53: 18:8d:ac:29:a7:a9:d4:33:f6:66:4b:30:3e:90:02: ab:5e:28:55:d8:ba:82:ec:64:3c:62:bc:12:5a:12: e6:9d:b3:91:d0:db:bc:12:54:11:a1:3d:b0:d7:c4: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0D:3D:E6:19:EA:D2:E4:A3:61:0E:68:8A:F7:D6:64:38:FF:67:E8 X509v3 Authority Key Identifier: keyid:33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:40:16:59:28:89:8c:25:89:2d:3d:a1:81:48:fb:2e:5c:ca: 7e:3a:84:10:00:b7:09:95:b0:f4:c0:8c:fa:93:69:2d:fb:e8: 52:dd:b1:11:a7:6c:a8:cb:7f:de:04:64:49:f5:cd:a7:4a:c0: 46:20:82:72:e5:ff:26:e0:bf:9b:9c:3e:0d:44:68:bb:63:90: 6d:8f:e0:34:b0:70:72:c2:01:be:ad:49:fa:85:e2:98:92:86: 8e:08:b0:3f:84:c8:85:bc:71:fc:18:65:ed:75:01:d2:25:a3: ea:4d:0d:f1:87:b3:0a:1e:ed:0f:d9:40:ba:ca:33:d4:d0:f2: cc:68:28:d5:29:31:0b:50:0e:73:55:58:14:fc:8f:6b:86:41: 13:22:60:73:da:a2:a6:a2:b2:ac:01:46:18:1b:b4:89:07:28: 63:1b:77:8a:5a:c1:c4:ab:75:a1:16:8e:11:7b:c5:da:fe:33: dd:3a:3f:2e:d4:c7:53:5d:3c:90:7a:50:9c:10:a7:60:ab:fb: 7a:ee:72:53:ab:46:44:68:0e:d8:73:04:9e:9d:46:ba:6b:90: 48:6c:61:18:20:9c:b4:cb:39:0c:69:2e:23:19:9e:4b:d6:d9: 80:8f:ae:86:0e:31:f0:1a:4d:c5:99:01:76:6a:06:f7:a8:9e: 41:7d:4b:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU5MDExMC8GA1UEBRMoMzM2REQ0RjE0NUZCRDdBOTEwNkFFRjFGMDZEOTE3MDdE MjUwQjc3QTAeFw0yNjA5MTkwODQ4MDZaFw0yNjA5MjYwODQ4MDZaMBgxFjAUBgNV BAMTDTZhYWU0YzQ3LTA2MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6QUn8ha1ycqmAtFbKIY73ZQlL4xDwZsvy5bYjqngwGoISBWjGj9TB12W3s6D9 aQP3qmYnGlcZPLaaMLjh3JTMsOLmAFmLDvcvQgyPtEW6NoPiTtYkqKMgi1qFMbrh ujt/FASXbxe2Mto+/Xsdd31al/zsV7ziJHrdOIPz4HLdppZcdP47nx3fQsqTcVP9 1CaLot/W1v/ERaf6n6/UH+FO6BP0hf9Eh3gUjqN6OtwATMcT30RpTbgP65clHHH+ rsOqvJuFR7wESaG8qpaQa4qWUxiNrCmnqdQz9mZLMD6QAqteKFXYuoLsZDxivBJa Euads5HQ27wSVBGhPbDXxHQpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJw095hnq 0uSjYQ5oivfWZDj/Z+gwHwYDVR0jBBgwFoAUM23U8UX716kQau8fBtkXB9JQt3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTkwLzVFRTYzMDdDNzlB QjExRjE4MTQzQURCMjk0QTMwRkJDL00yM1U4VVg3MTZrUWF1OGZCdGtYQjlKUXQz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTIzVThVWDcxNmtRYXU4ZkJ0a1hCOUpRdDNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTkwLzVFRTYzMDdDNzlBQjExRjE4MTQzQURCMjk0QTMwRkJDL00yM1U4VVg3MTZr UWF1OGZCdGtYQjlKUXQzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0QBZZKImMJYktPaGBSPsuXMp+OoQQALcJlbD0wIz6k2kt++hS3bERp2yoy3/e BGRJ9c2nSsBGIIJy5f8m4L+bnD4NRGi7Y5Btj+A0sHBywgG+rUn6heKYkoaOCLA/ hMiFvHH8GGXtdQHSJaPqTQ3xh7MKHu0P2UC6yjPU0PLMaCjVKTELUA5zVVgU/I9r hkETImBz2qKmorKsAUYYG7SJByhjG3eKWsHEq3WhFo4Re8Xa/jPdOj8u1MdTXTyQ elCcEKdgq/t67nJTq0ZEaA7YcwSenUa6a5BIbGEYIJy0yzkMaS4jGZ5L1tmAj66G DjHwGk3FmQF2agb3qJ5BfUtC -----END CERTIFICATE-----Generated at Mon Sep 21 10:44:07 2026 by rpki-client