$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: 4Gdmms4cwaYJoziXX8jDmUTsDzkAjfL6WIazBiU2pS4= Subject key identifier: CB:D5:A9:D7:11:01:27:2B:61:D2:40:A5:70:CF:4C:42:40:7D:C1:3A Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: 01CD Signing time: Tue 29 Sep 2026 04:12:24 +0000 Manifest this update: Tue 29 Sep 2026 04:12:24 +0000 Manifest next update: Tue 06 Oct 2026 04:12:24 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: Jw22zaeWTM+taAmHFxYqCEDUmKZjZzyrPOMJqpu2Tuk=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 04:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Sep 29 04:12:24 2026 GMT Not After : Oct 6 04:12:24 2026 GMT Subject: CN=6abb3aa8-f3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:dc:f9:91:fc:5c:34:43:b6:99:ee:50:51: 5d:7a:8b:d8:27:a3:39:0c:6c:e9:8e:62:8b:63:f7: 1c:e4:9e:b8:08:30:95:41:37:9c:46:47:fb:ad:a2: 11:63:97:d4:08:f5:2c:a0:a9:29:72:b3:75:af:95: b1:ed:9d:b2:96:73:5e:49:f1:59:61:b0:08:7a:21: 55:21:30:ed:9c:96:f2:c0:83:d1:6a:a6:97:35:ea: ad:d2:58:60:31:32:fb:90:d6:c6:46:9a:5e:e9:76: d9:60:b2:8a:55:33:25:0b:79:5e:c7:57:f5:5c:8e: 43:02:74:97:71:a1:38:68:51:76:ba:b5:7f:82:59: 16:3d:1b:c4:0e:97:5b:d4:49:85:65:7d:87:9e:91: 85:ce:c2:4d:5f:2e:51:b2:ec:56:55:a0:66:b4:75: 1c:2b:07:8f:69:e1:2f:b4:7e:76:f5:6c:41:d8:da: 7f:15:93:c3:9c:72:53:9a:67:91:85:12:d9:b0:75: a2:8a:32:8d:3e:51:65:b3:f8:6b:eb:e0:b7:61:99: 5a:d1:4a:bb:55:81:82:e5:83:a0:71:12:af:db:ed: 2d:6b:4b:f4:40:f6:d4:d7:b3:4f:41:89:e3:73:1b: 84:ca:56:99:eb:21:ff:50:6d:68:83:13:70:fd:a7: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:A9:D7:11:01:27:2B:61:D2:40:A5:70:CF:4C:42:40:7D:C1:3A X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b2:87:c8:57:25:a6:2f:fa:79:bd:06:4e:44:c4:36:04:9d: e8:a5:5a:09:35:9f:3d:b9:96:1b:3c:0b:8d:54:45:35:fe:f1: 83:ea:9b:66:be:ff:62:ee:5b:f0:03:b8:94:c7:0c:75:7d:b1: 14:dd:f2:2b:d0:72:c1:f0:f0:9b:05:36:70:5a:4d:74:b7:fe: d0:1d:db:ff:0e:9f:a0:b3:b1:1d:d7:a7:49:d3:1f:2d:ba:e7: 6b:96:96:20:15:7f:9f:6a:f4:06:58:2e:64:c2:49:9f:01:22: 2b:a4:14:66:25:ea:73:4a:98:92:22:06:19:6b:bd:b5:a7:c4: f9:e4:e8:48:cb:98:9f:93:fa:bc:63:eb:27:cd:22:48:cc:f7: df:1c:7d:c6:ca:94:13:78:11:f1:4c:db:72:5f:ee:c0:ed:1b: 4e:b3:0b:e3:6f:6c:e8:10:05:e0:23:52:da:cc:1d:df:db:e8: 7a:07:93:80:4c:fa:0b:15:23:21:17:1c:96:66:d1:80:c5:48: 5a:46:da:7a:8d:b3:1a:c2:f3:5e:d3:bf:5f:42:32:60:01:e9: fb:5c:64:3a:3a:3b:8a:12:6d:c0:5c:1a:1a:78:a2:21:5a:34: f4:14:5b:e4:1c:9f:dc:a8:76:21:f9:7b:e2:b8:cc:cf:d5:61: a5:a8:9a:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjYwOTI5MDQxMjI0WhcNMjYxMDA2MDQxMjI0WjAYMRYwFAYD VQQDEw02YWJiM2FhOC1mM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHDc+ZH8XDRDtpnuUFFdeovYJ6M5DGzpjmKLY/cc5J64CDCVQTecRkf7raIR Y5fUCPUsoKkpcrN1r5Wx7Z2ylnNeSfFZYbAIeiFVITDtnJbywIPRaqaXNeqt0lhg MTL7kNbGRppe6XbZYLKKVTMlC3lex1f1XI5DAnSXcaE4aFF2urV/glkWPRvEDpdb 1EmFZX2HnpGFzsJNXy5RsuxWVaBmtHUcKwePaeEvtH529WxB2Np/FZPDnHJTmmeR hRLZsHWiijKNPlFls/hr6+C3YZla0Uq7VYGC5YOgcRKv2+0ta0v0QPbU17NPQYnj cxuEylaZ6yH/UG1ogxNw/aeW0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvVqdcR AScrYdJApXDPTEJAfcE6MB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARrKHyFclpi/6eb0GTkTENgSd6KVaCTWfPbmWGzwLjVRFNf7xg+qbZr7/Yu5b 8AO4lMcMdX2xFN3yK9BywfDwmwU2cFpNdLf+0B3b/w6foLOxHdenSdMfLbrna5aW IBV/n2r0BlguZMJJnwEiK6QUZiXqc0qYkiIGGWu9tafE+eToSMuYn5P6vGPrJ80i SMz33xx9xsqUE3gR8Uzbcl/uwO0bTrML429s6BAF4CNS2swd39voegeTgEz6CxUj IRcclmbRgMVIWkbaeo2zGsLzXtO/X0IyYAHp+1xkOjo7ihJtwFwaGniiIVo09BRb 5Byf3Kh2Ifl74rjMz9VhpaiaLg== -----END CERTIFICATE-----Generated at Tue Sep 29 14:14:43 2026 by rpki-client