$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json) Hash identifier: rzhT/j/dL0KG0oLcr5YjssYB1+bHZozueoXmtS+uCSA= Subject key identifier: 02:CB:91:3D:BF:2D:35:63:68:5B:04:B9:42:60:C2:7E:BA:A6:05:51 Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Certificate serial: 1863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft Manifest number: 1D60 Signing time: Sun 20 Sep 2026 16:27:58 +0000 Manifest this update: Sun 20 Sep 2026 16:27:58 +0000 Manifest next update: Sun 27 Sep 2026 16:27:58 +0000 Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: rXvamrcFnUvElGfaofhu0X+Qb/CmdziIF3W9An64YLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6243 (0x1863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Validity Not Before: Sep 20 16:27:58 2026 GMT Not After : Sep 27 16:27:58 2026 GMT Subject: CN=6ab0098e-3aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:27:2a:26:22:a6:1d:3f:ac:e5:48:be:4b: 46:23:7a:c8:25:d5:29:f5:81:d0:66:91:92:41:dc: e9:a9:3b:02:23:c6:4c:2c:ce:a5:5c:92:61:bb:18: dc:fd:ee:82:71:2d:c0:c8:a3:d7:ef:e4:5a:09:aa: ab:11:06:52:67:63:28:bf:17:88:b5:17:ec:d5:f0: 1d:47:d6:16:9d:16:f9:59:30:01:8f:f6:df:1f:02: c5:83:59:4e:43:f6:8b:86:2e:6c:1d:cb:7f:65:16: 8e:b8:76:03:58:64:a6:1d:6d:c5:48:dc:a7:1b:ab: 20:12:8e:b8:01:99:4d:15:ad:c9:b5:3c:d3:65:c8: 6a:d9:34:04:90:3e:9d:e1:a6:de:3b:97:3e:cf:88: c5:c6:a5:5b:34:c3:01:18:07:bc:9c:48:0a:7b:f1: d0:46:ba:56:12:2c:b0:57:4e:23:33:46:40:8a:e1: 1a:df:db:4c:f8:64:97:e0:dc:5a:fb:d5:c7:f9:e2: 85:5f:1b:c1:33:ee:44:8b:c8:47:f5:9b:e5:dc:b0: 29:06:a5:bd:06:05:98:85:3c:65:26:a2:58:c0:72: b9:77:57:34:f0:f8:85:9a:ba:29:16:37:ed:a1:80: 6c:ad:75:2a:fc:a0:02:91:a7:17:46:8d:57:7b:fc: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:91:3D:BF:2D:35:63:68:5B:04:B9:42:60:C2:7E:BA:A6:05:51 X509v3 Authority Key Identifier: keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2d:8a:fc:9a:18:b8:b0:95:2d:b7:b7:4e:e2:d7:39:3d:d5: 13:e0:40:87:89:dc:38:ff:95:d5:b8:eb:5e:67:c6:4b:a4:63: dc:03:99:13:04:19:b7:2e:29:1b:3b:a6:fe:cb:64:c1:bc:c9: 81:06:aa:23:d9:0e:8e:99:67:e0:cc:8e:ad:ba:e3:15:95:37: d0:2f:55:d9:a7:e1:71:33:35:75:c7:bd:7d:c5:0d:5e:bf:50: 9a:ec:9e:a6:43:40:10:64:80:2d:32:c3:b6:63:01:1f:62:df: 8d:a9:27:a6:55:f6:59:47:7b:47:ae:44:7b:47:ef:2f:a5:2c: 4a:4c:d7:f8:51:91:45:de:40:62:1b:73:5b:fd:3b:f3:28:cf: 32:c2:ce:ca:49:c5:1c:a2:29:c0:bd:64:27:8b:4a:3a:e7:23: 11:9f:71:c5:af:47:72:97:1f:22:b3:81:d4:30:58:40:fc:f1: 4b:d6:54:9d:53:2d:a3:32:37:13:98:b5:a0:97:24:bd:9a:1e: bf:fa:07:b0:4e:9e:a8:1b:77:33:82:02:de:1b:01:35:ef:0e: a3:44:56:07:85:89:7a:98:d4:0a:10:1d:8d:d9:ae:d8:6f:2e: f4:ce:89:ac:81:d9:8e:d7:35:83:63:b0:61:9f:e4:8c:d2:8c: 6d:11:a8:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKDk5REUyQzM3RDFBNjJCQThCOTdCNUExQ0ZEMkNEMjk0 MEIwRDREMEQwHhcNMjYwOTIwMTYyNzU4WhcNMjYwOTI3MTYyNzU4WjAYMRYwFAYD VQQDEw02YWIwMDk4ZS0zYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQEnKiYiph0/rOVIvktGI3rIJdUp9YHQZpGSQdzpqTsCI8ZMLM6lXJJhuxjc /e6CcS3AyKPX7+RaCaqrEQZSZ2MovxeItRfs1fAdR9YWnRb5WTABj/bfHwLFg1lO Q/aLhi5sHct/ZRaOuHYDWGSmHW3FSNynG6sgEo64AZlNFa3JtTzTZchq2TQEkD6d 4abeO5c+z4jFxqVbNMMBGAe8nEgKe/HQRrpWEiywV04jM0ZAiuEa39tM+GSX4Nxa +9XH+eKFXxvBM+5Ei8hH9Zvl3LApBqW9BgWYhTxlJqJYwHK5d1c08PiFmropFjft oYBsrXUq/KACkacXRo1Xe/x9qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALLkT2/ LTVjaFsEuUJgwn66pgVRMB8GA1UdIwQYMBaAFJneLDfRpiuouXtaHP0s0pQLDU0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2aTVlMW9jX1N6U2xBc05U UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kNHNOOUdtSzZpNWUxb2NfU3pTbEFzTlRRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2 aTVlMW9jX1N6U2xBc05UUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmi2K/JoYuLCVLbe3TuLXOT3VE+BAh4ncOP+V1bjrXmfGS6Rj3AOZEwQZty4p Gzum/stkwbzJgQaqI9kOjpln4MyOrbrjFZU30C9V2afhcTM1dce9fcUNXr9Qmuye pkNAEGSALTLDtmMBH2LfjaknplX2WUd7R65Ee0fvL6UsSkzX+FGRRd5AYhtzW/07 8yjPMsLOyknFHKIpwL1kJ4tKOucjEZ9xxa9HcpcfIrOB1DBYQPzxS9ZUnVMtozI3 E5i1oJckvZoev/oHsE6eqBt3M4IC3hsBNe8Oo0RWB4WJepjUChAdjdmu2G8u9M6J rIHZjtc1g2OwYZ/kjNKMbRGo7Q== -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:12 2026 by rpki-client