$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: J5kKICd9vAUaJImBze7YRP5WcwDQFlnavxeWEDd/J5k= Subject key identifier: 3C:50:B5:90:DC:36:7F:76:1F:D0:1E:31:A7:FA:F2:01:9A:F1:9B:96 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 01D1 Signing time: Mon 21 Sep 2026 03:44:12 +0000 Manifest this update: Mon 21 Sep 2026 03:44:11 +0000 Manifest next update: Mon 28 Sep 2026 03:44:11 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: qNh6dzOfLPSm65aMKWVLyv9hBZ5bkaXTWPLisj/hOvg=) 2: AC82414A392511EF88F70D39C4F9AE02.roa (hash: hKQ2h489zBdCdDYcUOKChPL8Ijm3M758tY3uGhwDTqA=) 3: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: FYJl6u4bIjvmb0ZcMvBiaR6Ed53PaPf6I85ZtXduzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Sep 21 03:44:11 2026 GMT Not After : Sep 28 03:44:11 2026 GMT Subject: CN=6ab0a80c-ba9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:de:3e:55:90:ab:a1:99:ce:d3:25:f9:b9: f1:bf:de:1f:7c:cb:4e:d4:0b:d6:ab:4c:69:ce:45: 26:64:6a:83:b6:22:6d:5e:2e:e3:3e:e3:c6:c1:d7: 87:12:f5:9e:8d:e6:03:8f:77:75:7a:36:2f:41:0f: 6a:aa:a5:77:be:b6:93:72:0b:89:0d:ce:86:f6:5c: fe:87:9b:2b:cd:bb:cd:33:24:66:3c:29:68:34:be: b5:37:72:5e:8c:61:18:0c:78:2f:1e:18:c6:73:8c: 46:c3:2a:3d:2e:87:50:7c:aa:f5:d9:ae:f1:4e:e2: 30:06:3e:1c:e6:aa:95:7d:19:f4:9e:bc:96:dc:3c: 4a:23:d6:6a:df:67:3f:88:d5:52:f3:30:7b:dd:87: 62:a1:eb:1d:68:3f:1b:11:dc:4e:e8:c1:4f:28:d5: 6b:aa:1a:19:4d:e2:b7:a7:89:d8:93:21:4d:30:64: 33:79:32:a2:60:56:32:84:6c:d0:f3:0e:42:29:09: b5:cb:de:2b:54:52:2f:70:4b:10:41:8e:ab:ed:ea: c8:f1:89:24:a6:20:1f:43:8a:c3:c2:ae:d8:98:a9: 3a:51:51:36:32:4c:11:2d:50:a0:c4:60:16:ab:70: 03:11:50:9e:62:0d:34:18:bb:fa:1e:2b:6e:d2:a4: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:50:B5:90:DC:36:7F:76:1F:D0:1E:31:A7:FA:F2:01:9A:F1:9B:96 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:70:ef:ea:4b:f5:48:66:61:54:a1:ce:8c:ce:c3:86:3b:f4: 94:5e:7f:93:93:32:f5:42:17:75:44:a6:3d:73:6d:e6:3a:40: d6:e8:50:98:d9:b7:d3:d6:d7:16:b9:d9:14:76:71:6a:93:5a: 7f:c5:cb:6c:30:41:2e:46:66:da:98:1a:f9:93:37:25:96:8b: f8:e0:4d:6c:c8:7f:f8:dc:44:9a:78:df:4c:4e:96:d3:74:15: 2b:90:8b:9b:ef:10:7a:78:45:93:48:3e:eb:89:0e:71:dd:05: 65:42:0c:b4:a6:7f:4e:f8:63:bc:29:96:d0:cc:53:78:9b:90: 25:95:67:a6:59:45:65:5a:6a:e4:72:28:15:e2:a7:b0:eb:ef: bc:c3:bc:32:5e:10:af:01:fd:d3:a5:ba:17:2b:bf:8d:fe:45: 88:34:cf:40:5d:13:b3:67:d7:76:72:e0:65:48:1a:ee:3a:74: 58:8f:53:23:18:0d:81:ed:07:00:6c:ef:61:83:83:28:ef:0b: cb:c2:40:43:b5:be:c2:00:c8:8a:a0:b4:52:94:c7:06:5a:67: 18:06:77:2d:4e:dd:de:12:1e:69:26:55:81:3d:36:da:c1:70: 3b:bc:47:9a:0b:8d:22:3e:13:b2:1a:18:57:29:62:c2:c5:5b: f2:d3:c5:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjYwOTIxMDM0NDExWhcNMjYwOTI4MDM0NDExWjAYMRYwFAYD VQQDEw02YWIwYTgwYy1iYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGfePlWQq6GZztMl+bnxv94ffMtO1AvWq0xpzkUmZGqDtiJtXi7jPuPGwdeH EvWejeYDj3d1ejYvQQ9qqqV3vraTcguJDc6G9lz+h5srzbvNMyRmPCloNL61N3Je jGEYDHgvHhjGc4xGwyo9LodQfKr12a7xTuIwBj4c5qqVfRn0nryW3DxKI9Zq32c/ iNVS8zB73YdioesdaD8bEdxO6MFPKNVrqhoZTeK3p4nYkyFNMGQzeTKiYFYyhGzQ 8w5CKQm1y94rVFIvcEsQQY6r7erI8YkkpiAfQ4rDwq7YmKk6UVE2MkwRLVCgxGAW q3ADEVCeYg00GLv6Hitu0qRT0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxQtZDc Nn92H9AeMaf68gGa8ZuWMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB3Dv6kv1SGZhVKHOjM7Dhjv0lF5/k5My9UIXdUSmPXNt5jpA1uhQmNm309bX FrnZFHZxapNaf8XLbDBBLkZm2pga+ZM3JZaL+OBNbMh/+NxEmnjfTE6W03QVK5CL m+8QenhFk0g+64kOcd0FZUIMtKZ/TvhjvCmW0MxTeJuQJZVnpllFZVpq5HIoFeKn sOvvvMO8Ml4QrwH906W6Fyu/jf5FiDTPQF0Ts2fXdnLgZUga7jp0WI9TIxgNge0H AGzvYYODKO8Ly8JAQ7W+wgDIiqC0UpTHBlpnGAZ3LU7d3hIeaSZVgT022sFwO7xH mguNIj4TshoYVyliwsVb8tPFhQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:16 2026 by rpki-client