$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json) Hash identifier: W+a5pHrAGAojc3impd0GKO8IHAh064VVUNDEvarm6Uk= Subject key identifier: 1D:B3:C5:CC:9B:1D:F9:FB:05:25:0D:0B:23:8F:58:D3:9E:05:42:4A Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 Certificate issuer: /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft Manifest number: 4B Signing time: Mon 21 Sep 2026 08:23:52 +0000 Manifest this update: Mon 21 Sep 2026 08:23:52 +0000 Manifest next update: Mon 28 Sep 2026 08:23:52 +0000 Files and hashes: 1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: McqW9Jj29ZHJgZS56rQirJDy3FOadlES2zdbT/K3i4o=) 2: 63B4BE609F8611F1A5D39EA03E11F970.roa (hash: zTI2xjB+gANhRfGLJLeHP5dpBREsQqUAEA7gE6452u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790 Validity Not Before: Sep 21 08:23:52 2026 GMT Not After : Sep 28 08:23:52 2026 GMT Subject: CN=6ab0e998-c27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:d4:51:eb:53:59:99:58:d2:c3:58:83:bd: 19:1a:e6:f4:6d:33:56:c8:e3:cc:cd:3d:29:5c:79: 40:a9:1c:04:70:ea:8d:d5:fd:5d:c4:eb:bd:3a:6c: ac:de:a0:ee:bb:cc:d6:0b:cb:dc:1d:c3:4c:77:b8: de:91:97:4d:b3:aa:3d:b5:68:e4:c1:b4:63:32:b0: cf:a0:b9:d8:40:95:bf:67:0c:27:21:8f:f6:10:a6: 00:7b:61:08:c5:dc:75:a6:c0:2d:99:3c:56:19:87: fb:52:04:7e:41:a4:36:8a:47:02:3f:2f:4c:6c:a0: 1b:76:e8:5c:55:a4:a3:f5:1d:d9:dc:53:f1:89:48: 1e:ae:3f:db:c7:1f:7f:f6:d5:f8:e5:9d:f0:26:65: 67:a5:81:03:6a:6a:c8:27:f5:63:1e:13:18:01:f1: bb:5b:9f:ad:37:75:d8:a3:80:07:c4:82:08:9f:ba: e6:7b:50:4a:59:18:5a:03:91:3b:53:4e:96:ee:97: 58:78:bf:6a:f4:79:67:fc:69:3e:21:80:6f:a8:e7: b8:7c:17:b4:76:d5:77:df:60:c2:b9:54:32:42:fe: be:58:a6:7c:e9:3a:6e:71:9e:cc:ab:1e:5d:51:68: 88:c2:ce:76:66:10:20:0d:67:74:9d:5e:a7:87:62: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B3:C5:CC:9B:1D:F9:FB:05:25:0D:0B:23:8F:58:D3:9E:05:42:4A X509v3 Authority Key Identifier: keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c5:d1:f3:79:1d:90:e0:e4:56:38:ab:c7:06:cb:b7:bf:12: 8b:c3:37:d5:af:b1:66:17:e6:62:a4:66:4c:9b:70:61:c9:91: 5f:de:3a:c8:b7:d5:3c:26:98:97:04:5d:0a:87:69:7e:6f:3a: 1c:7d:74:fe:38:28:94:8d:9e:ff:3c:07:7a:3a:50:4b:ef:30: fe:07:65:ee:30:f8:89:ba:5c:3f:89:28:48:85:1c:f8:d1:58: 45:aa:68:a8:68:9f:d4:d7:50:e5:b5:24:04:7b:2a:8f:49:d0: b1:89:73:c7:f2:02:c1:e8:dd:1f:92:f5:a6:32:f5:da:83:ad: 14:55:02:89:f6:21:86:b6:49:c4:8e:d7:c7:4c:17:5a:f3:65: 32:06:85:f9:db:a0:2e:41:cc:12:dd:42:e7:c5:93:a2:25:6a: d9:6b:14:a7:98:79:62:f1:01:8b:81:21:54:71:24:77:66:eb: 8a:50:d5:20:c3:09:18:9e:17:5e:c9:99:ac:9f:17:61:58:25: b0:bd:b8:6f:e5:cb:d3:47:98:ad:5d:5a:f7:7e:7c:64:37:95: 18:9f:1f:85:0f:ad:0b:62:97:e4:6b:1d:6f:7a:c2:60:7e:d2: 4f:4f:18:c8:79:16:3c:d7:d0:c6:f1:3b:0d:a1:1b:27:22:a7: 84:01:fc:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEI4OTExMC8GA1UEBRMoOTg2MTIwRTE5NDMxRTJDM0ZFOTk2NTAzQkU3MDA3MjIx MzU0OTc5MDAeFw0yNjA5MjEwODIzNTJaFw0yNjA5MjgwODIzNTJaMBgxFjAUBgNV BAMTDTZhYjBlOTk4LWMyN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmk9RR61NZmVjSw1iDvRka5vRtM1bI48zNPSlceUCpHARw6o3V/V3E6706bKze oO67zNYLy9wdw0x3uN6Rl02zqj21aOTBtGMysM+gudhAlb9nDCchj/YQpgB7YQjF 3HWmwC2ZPFYZh/tSBH5BpDaKRwI/L0xsoBt26FxVpKP1HdncU/GJSB6uP9vHH3/2 1fjlnfAmZWelgQNqasgn9WMeExgB8btbn603ddijgAfEggifuuZ7UEpZGFoDkTtT Tpbul1h4v2r0eWf8aT4hgG+o57h8F7R21XffYMK5VDJC/r5YpnzpOm5xnsyrHl1R aIjCznZmECANZ3SdXqeHYuMZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHbPFzJsd +fsFJQ0LI49Y054FQkowHwYDVR0jBBgwFoAUmGEg4ZQx4sP+mWUDvnAHIhNUl5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQjg5L0YyQjA5N0JBNDky ODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQLW1XVUR2bkFISWhOVWw1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbUdFZzRaUXg0c1AtbVdVRHZuQUhJaE5VbDVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw Qjg5L0YyQjA5N0JBNDkyODExRjE4NDc0NThGNkE1ODMzNzczL21HRWc0WlF4NHNQ LW1XVUR2bkFISWhOVWw1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCWxdHzeR2Q4ORWOKvHBsu3vxKLwzfVr7FmF+ZipGZMm3BhyZFf3jrIt9U8JpiX BF0Kh2l+bzocfXT+OCiUjZ7/PAd6OlBL7zD+B2XuMPiJulw/iShIhRz40VhFqmio aJ/U11DltSQEeyqPSdCxiXPH8gLB6N0fkvWmMvXag60UVQKJ9iGGtknEjtfHTBda 82UyBoX526AuQcwS3ULnxZOiJWrZaxSnmHli8QGLgSFUcSR3ZuuKUNUgwwkYnhde yZmsnxdhWCWwvbhv5cvTR5itXVr3fnxkN5UYnx+FD60LYpfkax1vesJgftJPTxjI eRY819DG8TsNoRsnIqeEAfzU -----END CERTIFICATE-----Generated at Mon Sep 21 17:05:20 2026 by rpki-client