$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: RmsY0vZuPJjUbA4IhXrfBCHu3mkW6+wddpFxuq2k1iM= Subject key identifier: 72:8D:14:3D:E1:49:42:4F:31:6B:92:EC:F6:C9:8B:5C:A9:EE:F9:76 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0231 Signing time: Mon 21 Sep 2026 02:40:00 +0000 Manifest this update: Mon 21 Sep 2026 02:40:00 +0000 Manifest next update: Mon 28 Sep 2026 02:40:00 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: HQJzscqNQ0tUcU6EO+Lob6aupvROFTIfcStQUnCGjlA=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: KT2tiHsvRY9LOJYw0HcT//nfw16eth/WSx/o0UIX/Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Sep 21 02:40:00 2026 GMT Not After : Sep 28 02:40:00 2026 GMT Subject: CN=6ab09900-4454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:b8:e8:2b:d2:44:2d:18:ee:0f:54:8d:54: 67:48:b9:96:1d:ca:e0:5f:37:25:4d:60:61:4f:2c: c0:e2:a3:43:45:0e:df:30:9e:01:60:ea:28:b2:8f: 0a:98:10:aa:de:46:d5:c1:4b:89:10:af:84:23:fa: 5c:dc:ec:5d:e4:45:11:2c:db:55:af:f1:bf:7f:ba: 7e:b0:de:73:55:da:58:e7:80:35:fc:1d:7b:14:c6: e6:06:f5:c5:21:e8:47:dd:6b:e7:f2:47:25:a5:39: bf:77:d2:36:4c:4d:f2:32:93:48:38:74:75:6f:9c: 6b:58:0f:ac:1b:e6:bd:2a:c9:3e:1c:ae:86:2f:78: 42:63:e4:1e:0f:f4:fd:2b:57:01:b3:21:62:7b:8e: 74:99:0a:54:f9:38:de:e1:0c:b1:5d:a4:cf:0d:a1: b0:d7:24:76:40:b8:6f:df:87:bb:29:be:68:a3:ea: 35:b5:ce:fc:40:6d:a0:89:77:01:f5:96:29:a8:27: 1f:0f:16:43:73:35:d3:f5:2a:80:60:81:c6:aa:9f: 82:14:05:ca:ec:b6:71:1b:c4:ca:79:b4:78:18:61: 65:02:78:c8:75:e5:87:98:c8:00:70:ff:49:d8:19: 65:38:06:bd:01:b2:f2:d1:d6:f7:5a:8c:52:16:c3: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:14:3D:E1:49:42:4F:31:6B:92:EC:F6:C9:8B:5C:A9:EE:F9:76 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3d:07:46:9a:60:0b:07:4b:a1:5b:50:a7:6a:ff:e6:02:7b: d1:94:e2:bb:07:cb:e5:3e:ed:f0:94:c6:a2:e6:a8:93:e6:9e: c4:cf:09:85:6d:aa:84:ff:31:f9:48:27:c1:1f:87:22:79:13: e5:60:48:da:e8:69:c7:eb:c8:ec:83:0e:e5:e9:3b:e0:76:db: 45:f2:d7:92:a9:dd:fb:33:9c:c3:4f:7c:64:79:7b:c2:7d:c9: 44:e2:ad:c6:f5:2c:67:f4:f4:1b:2e:27:75:6c:c9:a2:86:d6: 0b:22:43:02:83:53:31:a0:6c:d3:91:3b:98:2e:05:68:6a:cb: ac:4b:6f:d4:1c:ee:71:c5:44:90:ca:b7:c5:15:b2:35:f2:e4: 1b:b6:8b:8d:1d:83:92:f4:27:e7:ad:71:ea:88:65:b3:cf:e3: 47:67:a4:d9:8b:73:ae:88:4b:e6:2a:b4:3f:24:55:bd:1c:11: 3b:07:7f:2c:18:fe:71:3c:6d:08:2c:4b:06:da:13:68:e0:73: 26:5d:b6:6b:b5:6f:22:4f:83:a5:4a:ab:de:26:3a:d3:3b:cb: c8:af:c9:4f:5e:71:f0:2c:5a:d0:c7:e2:d9:30:42:3f:80:eb: ef:06:72:f5:a7:b4:df:c6:30:3b:cb:3b:24:8f:58:91:56:68: 69:10:27:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjYwOTIxMDI0MDAwWhcNMjYwOTI4MDI0MDAwWjAYMRYwFAYD VQQDEw02YWIwOTkwMC00NDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq+46CvSRC0Y7g9UjVRnSLmWHcrgXzclTWBhTyzA4qNDRQ7fMJ4BYOooso8K mBCq3kbVwUuJEK+EI/pc3Oxd5EURLNtVr/G/f7p+sN5zVdpY54A1/B17FMbmBvXF IehH3Wvn8kclpTm/d9I2TE3yMpNIOHR1b5xrWA+sG+a9Ksk+HK6GL3hCY+QeD/T9 K1cBsyFie450mQpU+Tje4QyxXaTPDaGw1yR2QLhv34e7Kb5oo+o1tc78QG2giXcB 9ZYpqCcfDxZDczXT9SqAYIHGqp+CFAXK7LZxG8TKebR4GGFlAnjIdeWHmMgAcP9J 2BllOAa9AbLy0db3WoxSFsPl1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKNFD3h SUJPMWuS7PbJi1yp7vl2MB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbz0HRppgCwdLoVtQp2r/5gJ70ZTiuwfL5T7t8JTGouaok+aexM8JhW2qhP8x +UgnwR+HInkT5WBI2uhpx+vI7IMO5ek74HbbRfLXkqnd+zOcw098ZHl7wn3JROKt xvUsZ/T0Gy4ndWzJoobWCyJDAoNTMaBs05E7mC4FaGrLrEtv1BzuccVEkMq3xRWy NfLkG7aLjR2DkvQn561x6ohls8/jR2ek2YtzrohL5iq0PyRVvRwROwd/LBj+cTxt CCxLBtoTaOBzJl22a7VvIk+DpUqr3iY60zvLyK/JT15x8Cxa0Mfi2TBCP4Dr7wZy 9ae038YwO8s7JI9YkVZoaRAnHA== -----END CERTIFICATE-----Generated at Tue Sep 22 19:04:25 2026 by rpki-client