$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: u1gnF7lyDxyqsJHhkPz9u3Qge14DOWysgC7HGSceQyg= Subject key identifier: EC:41:2C:1D:3C:B2:E4:7F:76:43:8B:E6:F3:3C:88:62:8A:76:0C:28 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 0299 Signing time: Mon 21 Sep 2026 01:40:19 +0000 Manifest this update: Mon 21 Sep 2026 01:40:18 +0000 Manifest next update: Mon 28 Sep 2026 01:40:18 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: fTpIk/XDYLHkLJy1IFB/uybrO21fTxHeWUx1/UgkwNI=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: Sep 21 01:40:18 2026 GMT Not After : Sep 28 01:40:18 2026 GMT Subject: CN=6ab08b03-972b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:05:19:e8:64:96:8b:9c:7d:29:53:ea:df: 8c:a3:cd:3f:14:eb:95:62:3a:88:70:94:f8:34:a6: 6b:17:c0:3f:9c:32:31:c5:32:ac:9f:0f:a0:ba:63: 9e:8e:5e:c5:84:5f:6e:a4:de:e9:e8:4f:43:e5:9f: 24:62:96:0e:41:d0:4c:94:22:be:24:10:f0:45:2f: 70:9d:9c:b8:d0:f3:76:d0:44:81:95:df:19:33:67: 64:cc:27:67:30:5a:6e:f8:35:af:97:79:e1:61:3a: 99:78:5c:c0:02:3f:38:32:67:86:12:85:25:e5:51: 1e:df:20:7b:3a:68:39:f2:17:30:0f:12:5c:39:a0: 7e:1f:d7:af:05:2f:4a:76:cc:04:d3:a8:2b:e3:07: 57:48:dc:ed:dc:cd:b5:91:55:3b:63:f1:9d:24:91: 6c:40:01:48:f7:37:9d:0f:98:c2:b3:ef:2c:8e:c3: 3c:6e:db:5d:a7:d5:be:d8:3c:66:2e:1b:82:5b:db: c6:85:67:d0:cf:d7:7a:6a:9f:3c:83:b4:a6:de:fa: 28:b5:49:a9:6a:17:da:34:0d:41:b0:4d:a8:49:7c: ce:2b:eb:2a:97:c0:f0:b3:fa:3c:26:8b:b0:81:b8: 57:0d:f1:a2:05:f2:9f:3d:73:d7:29:b7:e9:c3:16: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:41:2C:1D:3C:B2:E4:7F:76:43:8B:E6:F3:3C:88:62:8A:76:0C:28 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e2:9b:d9:96:30:ae:e4:f8:c3:7d:1d:f9:da:b3:f6:53:48: 8e:6c:a4:8e:7a:0e:32:b3:05:44:e0:e0:8f:d7:4a:b4:08:19: 49:b3:9f:1a:6a:22:51:f0:e0:ac:6a:2a:e7:12:4a:90:8a:78: 07:44:2e:d3:05:22:60:39:dd:1e:db:3d:62:61:50:6f:7d:80: f5:f5:00:eb:2b:5b:9a:37:05:a9:8a:86:b2:fc:73:d2:d8:8a: 9f:0d:a2:40:ed:97:4b:0b:c3:9e:11:18:ea:42:23:2f:3a:02: 46:2b:bb:94:22:10:e9:d4:fa:65:b3:ae:11:4b:26:4f:a1:4b: 36:01:a3:3d:94:ba:75:78:5b:ec:2a:13:af:35:a9:5c:50:c6: a0:4a:1e:fd:87:1f:e6:8c:fd:94:a5:15:4f:2b:57:92:62:2c: b6:87:53:27:41:1f:cd:23:2f:93:76:8c:6b:df:6a:a6:47:0c: 85:b9:80:cb:63:3b:80:31:d3:7e:cd:1b:9d:1a:85:5e:bf:d6: 99:16:ec:98:b5:59:af:47:5c:48:65:fd:9f:6f:ab:17:e3:f4: a6:58:1d:1c:37:f8:47:bc:d6:d7:ec:21:e4:70:c1:b6:d0:53: e1:c6:a2:91:f6:9a:4b:3a:6c:35:73:42:bb:58:94:6f:23:e8: 5e:e9:0d:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjYwOTIxMDE0MDE4WhcNMjYwOTI4MDE0MDE4WjAYMRYwFAYD VQQDEw02YWIwOGIwMy05NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh4FGehkloucfSlT6t+Mo80/FOuVYjqIcJT4NKZrF8A/nDIxxTKsnw+gumOe jl7FhF9upN7p6E9D5Z8kYpYOQdBMlCK+JBDwRS9wnZy40PN20ESBld8ZM2dkzCdn MFpu+DWvl3nhYTqZeFzAAj84MmeGEoUl5VEe3yB7Omg58hcwDxJcOaB+H9evBS9K dswE06gr4wdXSNzt3M21kVU7Y/GdJJFsQAFI9zedD5jCs+8sjsM8bttdp9W+2Dxm LhuCW9vGhWfQz9d6ap88g7Sm3vootUmpahfaNA1BsE2oSXzOK+sql8Dws/o8Jouw gbhXDfGiBfKfPXPXKbfpwxaXzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxBLB08 suR/dkOL5vM8iGKKdgwoMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUuKb2ZYwruT4w30d+dqz9lNIjmykjnoOMrMFRODgj9dKtAgZSbOfGmoiUfDg rGoq5xJKkIp4B0Qu0wUiYDndHts9YmFQb32A9fUA6ytbmjcFqYqGsvxz0tiKnw2i QO2XSwvDnhEY6kIjLzoCRiu7lCIQ6dT6ZbOuEUsmT6FLNgGjPZS6dXhb7CoTrzWp XFDGoEoe/Ycf5oz9lKUVTytXkmIstodTJ0EfzSMvk3aMa99qpkcMhbmAy2M7gDHT fs0bnRqFXr/WmRbsmLVZr0dcSGX9n2+rF+P0plgdHDf4R7zW1+wh5HDBttBT4cai kfaaSzpsNXNCu1iUbyPoXukNMw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:16 2026 by rpki-client