$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: zUeWBxo1I7PAMHGhbwkibpW5aZc/HG6gUvcm/qFsTiA= Subject key identifier: 64:2E:9E:27:A9:2F:87:A8:50:83:88:57:63:AF:A9:35:45:55:C6:3A Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 325C Signing time: Tue 22 Sep 2026 15:22:30 +0000 Manifest this update: Tue 22 Sep 2026 15:22:29 +0000 Manifest next update: Tue 29 Sep 2026 15:22:29 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: ukkxc3MCngifU/2iV1eCrgP+OlJiXUZBRtyqTE73vvk=) 2: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=) 3: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=) 4: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: MdDzMLI4SVTxhDtydILyjc8VZa9vktRLqWXwp+LVEtE=) 5: 8952805A8D7811F1A80E34DA3311F970.roa (hash: jjgBEIUdIis7R6NqXuQTMTwt421DRMenCtuYpNqdCJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12935 (0x3287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Sep 22 15:22:29 2026 GMT Not After : Sep 29 15:22:29 2026 GMT Subject: CN=6ab29d35-8624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:89:0d:61:9e:e8:97:c6:14:72:23:5c:8a: 1f:5a:68:1a:8e:12:54:0a:e5:40:49:cd:f6:4a:a0: fd:ae:c4:cb:6f:92:51:59:88:8d:fc:2d:51:f4:fc: 6e:2e:1d:3d:27:88:e2:fb:e7:32:d1:b8:f3:ef:89: c8:d3:13:15:7a:03:0f:fe:4f:eb:4e:0c:e1:08:6c: 2e:58:a3:23:17:94:c0:89:3c:8a:6e:67:f3:8c:93: 77:0f:83:70:de:b3:2b:d5:d9:21:44:59:f9:ce:bd: 03:a5:d8:7a:31:0b:38:ac:af:e3:b2:02:ad:da:29: d6:cd:a1:18:67:ee:4d:1d:1f:68:78:f5:89:8e:d5: 79:7e:47:c2:ac:0b:1b:86:bd:0f:de:85:58:7d:16: 95:70:96:b0:15:6b:36:14:a9:5b:10:5d:d4:b0:ec: 28:da:85:b0:ea:6a:8f:39:98:72:2f:a5:97:3a:ac: f9:12:34:4a:48:c5:d2:de:99:86:6b:93:48:84:42: 55:a6:ea:97:aa:0d:23:68:c3:37:e3:ff:dc:94:53: 27:df:3f:3d:8d:f2:9c:4c:6c:9f:f9:63:ed:01:4d: bf:61:7d:36:b8:98:a4:81:50:bb:b0:c1:24:a1:44: 6c:18:12:8d:9b:c9:3b:85:9f:11:d9:27:65:37:6d: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:9E:27:A9:2F:87:A8:50:83:88:57:63:AF:A9:35:45:55:C6:3A X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:17:60:ff:3f:4a:3d:1b:6f:f3:51:0f:40:24:04:cd:2d:58: 40:e7:97:0f:d7:ff:97:6e:96:d8:07:74:f9:9e:8d:38:cd:11: c7:4d:2f:c4:a1:00:5f:13:29:b5:1b:ab:08:ed:b4:b5:4f:25: c8:87:91:8a:83:fa:41:a0:29:98:15:0c:5c:0f:b9:6b:6b:c3: d5:03:2a:56:48:7d:8d:da:11:bf:98:b2:c5:89:62:68:9a:ea: 09:fd:6c:ed:f1:7e:53:d9:17:d3:63:ba:b8:aa:fe:86:76:15: 04:99:a2:dc:5e:ba:ec:1e:c5:96:89:2d:60:dd:89:2a:b3:e8: 73:5c:e8:23:70:1f:a5:b8:3d:3d:7e:84:f1:91:1a:ac:8e:07: c0:a6:54:5d:ac:b7:d1:16:45:c1:7d:90:30:83:80:9a:e2:17: 16:29:f6:41:37:e9:eb:84:b8:5b:6d:8f:98:04:62:f1:41:80: 10:b8:a0:2d:88:d2:cb:31:39:18:5b:1c:4f:cf:96:e4:29:ad: 20:9d:a1:44:89:6a:9c:08:95:f4:f5:93:ff:58:34:e2:8f:97: 68:07:0f:ed:56:c5:1d:7f:11:d0:a8:a3:17:1a:a9:b6:83:e0: 80:ce:ae:4d:d2:bf:53:73:2e:9b:56:ec:c3:d8:3a:2c:9b:e6: a7:85:44:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwOTIyMTUyMjI5WhcNMjYwOTI5MTUyMjI5WjAYMRYwFAYD VQQDEw02YWIyOWQzNS04NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAmJDWGe6JfGFHIjXIofWmgajhJUCuVASc32SqD9rsTLb5JRWYiN/C1R9Pxu Lh09J4ji++cy0bjz74nI0xMVegMP/k/rTgzhCGwuWKMjF5TAiTyKbmfzjJN3D4Nw 3rMr1dkhRFn5zr0Dpdh6MQs4rK/jsgKt2inWzaEYZ+5NHR9oePWJjtV5fkfCrAsb hr0P3oVYfRaVcJawFWs2FKlbEF3UsOwo2oWw6mqPOZhyL6WXOqz5EjRKSMXS3pmG a5NIhEJVpuqXqg0jaMM34//clFMn3z89jfKcTGyf+WPtAU2/YX02uJikgVC7sMEk oURsGBKNm8k7hZ8R2SdlN23GFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQuniep L4eoUIOIV2OvqTVFVcY6MB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfxdg/z9KPRtv81EPQCQEzS1YQOeXD9f/l26W2Ad0+Z6NOM0Rx00vxKEAXxMp tRurCO20tU8lyIeRioP6QaApmBUMXA+5a2vD1QMqVkh9jdoRv5iyxYliaJrqCf1s 7fF+U9kX02O6uKr+hnYVBJmi3F667B7FloktYN2JKrPoc1zoI3Afpbg9PX6E8ZEa rI4HwKZUXay30RZFwX2QMIOAmuIXFin2QTfp64S4W22PmARi8UGAELigLYjSyzE5 GFscT8+W5CmtIJ2hRIlqnAiV9PWT/1g04o+XaAcP7VbFHX8R0KijFxqptoPggM6u TdK/U3Mum1bsw9g6LJvmp4VEAg== -----END CERTIFICATE-----Generated at Tue Sep 22 21:59:30 2026 by rpki-client