$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: B/0O5r/ja36orSYHJNnsLoHFNg/I1LDd8Uw5DoHIomc= Subject key identifier: 61:53:DA:62:03:6F:65:76:C2:B7:84:C0:5D:5A:BC:53:93:7E:15:CB Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 0253 Signing time: Mon 21 Sep 2026 02:26:24 +0000 Manifest this update: Mon 21 Sep 2026 02:26:24 +0000 Manifest next update: Mon 28 Sep 2026 02:26:24 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: E0CKyCYRHBw2G8t4+SuQjIIQUWTkY7zW/mBC8TeJHc0=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Sep 21 02:26:24 2026 GMT Not After : Sep 28 02:26:24 2026 GMT Subject: CN=6ab095d0-7139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:19:e0:0e:a4:2d:16:0b:fc:1c:f7:f8:c5: 3c:11:9d:d6:e2:4d:95:6b:41:3c:da:29:be:28:6f: 74:3a:06:5d:01:38:a7:aa:45:a6:94:84:26:7d:96: f8:71:6e:d4:75:9c:18:f8:54:21:46:96:94:51:3d: 1f:56:87:be:f1:50:14:20:21:cb:a4:63:cf:8f:09: 45:cd:33:e2:67:76:65:44:ee:f4:ab:93:c2:8f:ae: c8:67:38:e6:34:de:18:a4:f1:59:78:56:7d:79:e3: d6:3f:25:a5:5b:6e:e8:0b:d5:ce:d2:10:82:a1:9e: 3b:a5:04:cb:a3:56:2d:87:ce:77:77:4d:45:32:63: 74:96:2b:33:4d:f5:18:37:03:5e:0d:ca:e9:0c:08: 17:58:37:0f:0d:76:48:fb:df:9f:21:1f:2a:dc:ee: d5:ef:f8:7a:3f:af:fc:8a:18:2f:2b:2f:31:8d:ce: 61:3a:d2:93:ef:22:a6:16:4d:12:3f:29:22:38:1f: b4:43:1c:54:1e:81:dc:63:11:17:dd:7c:16:2c:27: dc:26:b9:bb:c8:44:3d:8c:25:e9:bb:fc:bf:cd:60: d6:a2:b2:a9:6e:72:bc:21:cb:ec:56:9e:e9:2f:b8: 23:05:de:60:60:31:fd:35:26:4a:0a:f8:f8:a1:76: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:DA:62:03:6F:65:76:C2:B7:84:C0:5D:5A:BC:53:93:7E:15:CB X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:f8:3d:cb:05:f6:98:86:2a:b1:86:1c:8d:dd:d2:05:c5: 11:a0:8c:6d:f2:f3:5d:c6:7b:24:65:e6:44:1a:7c:9d:f9:fc: 44:80:22:f5:50:1b:43:6b:67:fc:39:bd:44:c1:2f:b2:c8:b5: 4c:1c:f7:9e:c2:f8:b1:8f:95:49:eb:14:e7:ae:88:fa:f4:bd: 9f:76:c0:34:68:4a:59:33:77:bf:5a:36:b6:a4:d0:74:0b:75: ce:e8:36:71:5e:8d:15:fa:77:f2:f6:38:f2:1d:b6:ba:dc:fe: e2:98:a5:af:3f:86:73:81:e0:cf:3e:0d:f4:96:0d:08:fc:f3: d4:67:b6:97:7c:60:8a:35:f6:bd:3b:04:e2:e6:c8:15:0c:ee: 59:2a:48:8d:3d:2b:e7:73:83:ec:52:c2:66:34:dc:56:5a:e0: 46:2a:97:64:8e:a7:13:cd:ce:6d:b0:3c:19:ee:20:fb:63:44: 80:ef:b6:77:b7:cf:46:6f:de:d1:f6:02:38:48:02:46:0e:45: 73:c3:a0:a6:3d:ed:0b:d3:cc:92:a1:e5:e9:94:da:33:95:5b: 30:d7:78:73:14:ec:aa:40:93:21:14:da:33:ec:96:11:98:b6: e1:62:22:02:86:88:9d:47:90:71:eb:ab:48:cb:f7:90:16:2e: c1:90:79:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwOTIxMDIyNjI0WhcNMjYwOTI4MDIyNjI0WjAYMRYwFAYD VQQDEw02YWIwOTVkMC03MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneEZ4A6kLRYL/Bz3+MU8EZ3W4k2Va0E82im+KG90OgZdATinqkWmlIQmfZb4 cW7UdZwY+FQhRpaUUT0fVoe+8VAUICHLpGPPjwlFzTPiZ3ZlRO70q5PCj67IZzjm NN4YpPFZeFZ9eePWPyWlW27oC9XO0hCCoZ47pQTLo1Yth853d01FMmN0liszTfUY NwNeDcrpDAgXWDcPDXZI+9+fIR8q3O7V7/h6P6/8ihgvKy8xjc5hOtKT7yKmFk0S PykiOB+0QxxUHoHcYxEX3XwWLCfcJrm7yEQ9jCXpu/y/zWDWorKpbnK8IcvsVp7p L7gjBd5gYDH9NSZKCvj4oXbXKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFT2mID b2V2wreEwF1avFOTfhXLMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3z4PcsF9piGKrGGHI3d0gXFEaCMbfLzXcZ7JGXmRBp8nfn8RIAi9VAbQ2tn /Dm9RMEvssi1TBz3nsL4sY+VSesU566I+vS9n3bANGhKWTN3v1o2tqTQdAt1zug2 cV6NFfp38vY48h22utz+4pilrz+Gc4Hgzz4N9JYNCPzz1Ge2l3xgijX2vTsE4ubI FQzuWSpIjT0r53OD7FLCZjTcVlrgRiqXZI6nE83ObbA8Ge4g+2NEgO+2d7fPRm/e 0fYCOEgCRg5Fc8Ogpj3tC9PMkqHl6ZTaM5VbMNd4cxTsqkCTIRTaM+yWEZi24WIi AoaInUeQceurSMv3kBYuwZB5zQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:16:33 2026 by rpki-client