$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: fbsjC5eCsgSzNqHw3C7cNyLD9sqtCSMLtFF+e08U4GM= Subject key identifier: 34:18:6D:40:39:49:34:E3:10:74:53:05:B1:45:E6:16:A7:E0:66:A0 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 06CE Signing time: Sat 26 Sep 2026 22:28:59 +0000 Manifest this update: Sat 26 Sep 2026 22:28:58 +0000 Manifest next update: Sat 03 Oct 2026 22:28:58 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: dtGN9wdQcb9vra9rrTt0AL6RfZ9oBftEJ0T9fGmtbfM=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=) 3: AFC035669D3111F1992D1A564911F970.roa (hash: te+/7chBtqWirQ3Sy8cdSUzT1iaVFXNRVp+AFNi5gt4=) 4: 319A6658973111F19629FCFF3211F970.roa (hash: ginLpbAUhhIDR7OXh5vCfxR5+ivMC1F/qzgijOsdkzg=) 5: DF8DD8A098C411F19E6AA2476D11F970.roa (hash: AHI17Y99lS0m1pu4f9i1rlfgUH330F3GganWYeEqayY=) 6: 55701668973111F1A86A43863311F970.roa (hash: 0fnwHD1e8+xguealFicHUassztcIDudaKbeSOw/qYWs=) 7: F8CA86BCB73A11F1B21647E33611F970.roa (hash: QFTLqks0CIzypcpH6FmwCsRWNAafQUN1ZftGJ6kDE2I=) 8: FB1416BA9C7611F1B1FB27074F11F970.roa (hash: fJHw3KHbw5JqhCL5X32Hu7gkVE/D7z03jBEZkid9WR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 22:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Sep 26 22:28:58 2026 GMT Not After : Oct 3 22:28:58 2026 GMT Subject: CN=6ab8472a-dcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:ac:51:ee:68:9f:77:9f:34:aa:33:15:a3: e9:e7:16:23:2b:d7:b0:90:95:a2:7b:74:12:0d:a4: 83:e9:73:51:9a:6c:94:46:99:21:e6:c7:12:c5:9f: d4:17:f7:c4:e8:a1:1c:43:33:ce:d3:40:00:84:a4: 31:a1:b8:d0:67:3e:fa:b6:dd:95:2c:1c:06:9f:80: a3:bc:6e:a4:e3:e3:dc:69:e5:ba:32:8c:60:d1:98: 79:5c:00:7b:c0:38:13:ee:56:ff:b4:61:4e:e4:10: c3:17:69:77:ff:57:7f:fa:a4:43:55:91:e5:e4:92: b1:05:ff:27:a1:a8:0c:83:a9:77:24:e6:32:cc:11: 1d:cd:dd:6a:8d:b9:c2:75:ec:43:5c:87:b0:d9:81: dd:b2:8f:9f:87:44:ec:3d:fa:cb:4d:17:64:fd:c0: 8b:60:b7:d7:b8:a9:5f:89:cd:37:10:7b:19:ed:53: 57:35:dd:1b:ae:eb:20:5e:65:5f:cc:33:be:92:17: 7f:3f:b1:6e:b8:9a:f1:21:60:e7:82:a5:2a:08:37: 32:5d:09:1d:b8:8a:23:4a:34:61:71:b4:c3:c2:2d: 79:a3:4a:1b:39:e0:93:f1:bb:5f:c7:2c:d0:a6:83: 37:2c:da:09:43:9f:6f:af:cc:67:f0:85:0f:4d:b3: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:18:6D:40:39:49:34:E3:10:74:53:05:B1:45:E6:16:A7:E0:66:A0 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:75:3d:7f:8b:dd:d0:bb:3d:e3:10:7a:1a:89:a4:fe:bc:18: 48:c1:ca:93:0c:5b:c2:72:62:a7:6a:9b:17:e5:29:be:52:3a: 67:39:98:a6:55:1d:ce:ab:ab:64:ef:c7:6a:bb:39:c6:37:c2: 91:e3:23:02:6e:e8:96:5c:5d:8a:3d:d1:c4:28:1c:4e:b3:a4: 9e:c1:d5:36:90:2b:ab:fb:1b:26:6f:2e:09:7c:1e:aa:af:cd: f5:6d:8a:37:e3:6a:a2:f4:05:7e:0d:bb:ce:4c:a0:c7:e9:67: f2:f1:0f:45:71:c0:a0:55:36:7a:b6:98:eb:53:8c:09:29:af: f5:a4:b7:64:69:e0:f5:0d:e5:c3:1f:b5:42:5d:21:f9:7c:eb: 9b:0c:f2:2b:7e:10:1e:9a:87:88:df:79:78:df:ed:4f:e6:a9: 5d:3a:14:37:17:3b:e8:92:91:14:38:cb:2f:e4:d4:35:68:73: c2:f2:c3:ce:1e:73:8d:6a:04:37:6a:1b:62:86:46:96:1e:9b: 2a:4a:dc:6f:54:60:d1:94:a5:a4:05:13:8d:a7:34:52:f7:90: 66:04:c8:39:11:b5:8c:fa:45:8b:2a:4d:c4:56:a4:22:37:d4: b9:f8:e3:cb:bf:f2:c3:3f:97:b0:de:2f:71:c4:b9:15:81:75: e8:12:b7:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjYwOTI2MjIyODU4WhcNMjYxMDAzMjIyODU4WjAYMRYwFAYD VQQDEw02YWI4NDcyYS1kY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdysUe5on3efNKozFaPp5xYjK9ewkJWie3QSDaSD6XNRmmyURpkh5scSxZ/U F/fE6KEcQzPO00AAhKQxobjQZz76tt2VLBwGn4CjvG6k4+PcaeW6Moxg0Zh5XAB7 wDgT7lb/tGFO5BDDF2l3/1d/+qRDVZHl5JKxBf8noagMg6l3JOYyzBEdzd1qjbnC dexDXIew2YHdso+fh0TsPfrLTRdk/cCLYLfXuKlfic03EHsZ7VNXNd0brusgXmVf zDO+khd/P7FuuJrxIWDngqUqCDcyXQkduIojSjRhcbTDwi15o0obOeCT8btfxyzQ poM3LNoJQ59vr8xn8IUPTbMoSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQYbUA5 STTjEHRTBbFF5han4GagMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz3U9f4vd0Ls94xB6Gomk/rwYSMHKkwxbwnJip2qbF+UpvlI6ZzmYplUdzqur ZO/Hars5xjfCkeMjAm7ollxdij3RxCgcTrOknsHVNpArq/sbJm8uCXweqq/N9W2K N+NqovQFfg27zkygx+ln8vEPRXHAoFU2eraY61OMCSmv9aS3ZGng9Q3lwx+1Ql0h +XzrmwzyK34QHpqHiN95eN/tT+apXToUNxc76JKRFDjLL+TUNWhzwvLDzh5zjWoE N2obYoZGlh6bKkrcb1Rg0ZSlpAUTjac0UveQZgTIORG1jPpFiypNxFakIjfUufjj y7/ywz+XsN4vccS5FYF16BK3Cw== -----END CERTIFICATE-----Generated at Mon Sep 28 10:54:10 2026 by rpki-client