$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: mVAmq0FbHZo+a38VDjBLG+cawA9Q6jgHtVcvzTtSKVw= Subject key identifier: A1:7B:7C:11:35:07:E1:AB:B7:1E:6D:CE:EB:AC:56:E6:FD:D6:B0:04 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 02EB Signing time: Mon 21 Sep 2026 01:03:30 +0000 Manifest this update: Mon 21 Sep 2026 01:03:30 +0000 Manifest next update: Mon 28 Sep 2026 01:03:30 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: GTCWEhi3z70ErlqrQDsR3sSTFUQsVwfWTo+rzsTzMpU=) 2: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=) 3: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Sep 21 01:03:30 2026 GMT Not After : Sep 28 01:03:30 2026 GMT Subject: CN=6ab08262-7046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:69:66:29:3d:5b:62:c0:c4:cc:c6:84:42: df:c0:e8:2a:40:e5:37:f5:d0:d8:e2:b5:7b:71:8c: f8:8f:3d:d9:20:8d:c5:cf:ef:21:0d:46:91:d0:85: 0f:2f:48:7e:e0:9f:0f:0c:1c:96:d6:b0:db:1c:b2: 36:d0:6d:54:c0:97:8e:7a:48:67:1d:91:5c:3c:6f: 5b:ce:26:8e:f3:a0:da:f1:9c:f9:3b:18:03:3e:e8: 4c:ea:b1:47:91:89:e8:89:4c:74:dd:4f:94:59:bb: ad:fc:1b:10:f5:4c:8b:71:d3:5d:e0:3b:c1:69:27: fa:29:dd:5d:ab:f2:4a:44:56:1d:39:57:08:1e:9a: e3:5a:91:7b:0e:de:ae:86:df:e2:00:5a:ad:4a:b4: 0d:4c:cc:ab:0e:fb:1f:61:72:03:fc:f6:89:d4:9c: 98:51:6a:7f:9d:4b:e4:27:c3:d2:9c:a2:55:24:3c: 65:6d:68:27:80:95:af:2d:51:73:28:65:b6:03:7c: 3f:80:43:0f:71:28:dc:6e:c8:43:08:7d:5c:3f:d2: 4f:58:a2:15:e7:09:6f:61:af:8c:14:dc:2f:23:4a: f0:92:87:c2:36:53:35:46:24:bc:b7:c4:5c:42:1e: 0d:9e:40:f0:03:18:f6:bf:99:a0:4a:c7:75:40:51: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:7C:11:35:07:E1:AB:B7:1E:6D:CE:EB:AC:56:E6:FD:D6:B0:04 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f1:7f:a5:d4:55:68:7f:8f:42:70:78:4b:4a:2a:e9:5c:25: 60:3b:74:c7:8a:2d:41:a8:05:92:04:8e:58:88:18:27:f6:0a: db:b8:1c:dc:80:dd:3b:48:a7:61:44:7a:70:b3:de:cf:a9:42: ed:08:f3:19:ac:1c:1b:dc:14:9a:3a:d1:4c:80:98:ef:b6:67: 5c:af:1c:7e:99:38:6b:8e:28:2d:1d:46:6c:e6:11:12:2f:d0: e1:21:f1:18:d4:b3:79:4b:88:ed:49:16:d6:c5:47:f3:ef:67: 95:7c:a0:8f:f0:e1:db:a8:4e:8c:78:e0:9b:67:85:92:d6:89: 1f:c6:bf:72:cc:e0:ae:1e:e7:a1:a3:88:3c:43:63:a4:00:68: 98:b7:67:5b:e5:d9:09:86:27:b9:fe:db:4a:80:9f:f4:1e:2c: c9:64:dd:a6:1d:6b:31:d0:60:3b:1e:c0:71:60:73:0d:15:a5: 57:0f:2f:55:a6:e6:f2:14:46:87:b1:d1:f6:cc:a4:92:32:07: 08:05:8d:72:63:d9:e7:83:92:08:64:b7:57:71:09:b5:81:d6: 72:6f:a8:d7:c7:5c:29:51:48:8d:7a:7a:5e:ef:58:cd:3a:3c: 12:71:82:71:e4:34:a3:4d:07:bd:9b:d4:82:4c:25:8d:cd:72: ea:2a:fc:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjYwOTIxMDEwMzMwWhcNMjYwOTI4MDEwMzMwWjAYMRYwFAYD VQQDEw02YWIwODI2Mi03MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtthpZik9W2LAxMzGhELfwOgqQOU39dDY4rV7cYz4jz3ZII3Fz+8hDUaR0IUP L0h+4J8PDByW1rDbHLI20G1UwJeOekhnHZFcPG9bziaO86Da8Zz5OxgDPuhM6rFH kYnoiUx03U+UWbut/BsQ9UyLcdNd4DvBaSf6Kd1dq/JKRFYdOVcIHprjWpF7Dt6u ht/iAFqtSrQNTMyrDvsfYXID/PaJ1JyYUWp/nUvkJ8PSnKJVJDxlbWgngJWvLVFz KGW2A3w/gEMPcSjcbshDCH1cP9JPWKIV5wlvYa+MFNwvI0rwkofCNlM1RiS8t8Rc Qh4NnkDwAxj2v5mgSsd1QFHSPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKF7fBE1 B+Grtx5tzuusVub91rAEMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvF/pdRVaH+PQnB4S0oq6VwlYDt0x4otQagFkgSOWIgYJ/YK27gc3IDdO0in YUR6cLPez6lC7QjzGawcG9wUmjrRTICY77ZnXK8cfpk4a44oLR1GbOYREi/Q4SHx GNSzeUuI7UkW1sVH8+9nlXygj/Dh26hOjHjgm2eFktaJH8a/cszgrh7noaOIPENj pABomLdnW+XZCYYnuf7bSoCf9B4syWTdph1rMdBgOx7AcWBzDRWlVw8vVabm8hRG h7HR9sykkjIHCAWNcmPZ54OSCGS3V3EJtYHWcm+o18dcKVFIjXp6Xu9YzTo8EnGC ceQ0o00HvZvUgkwljc1y6ir8Kg== -----END CERTIFICATE-----Generated at Tue Sep 22 11:09:17 2026 by rpki-client