$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: mPgZ/woBzYHj/A0VpBl9Zj8taBHeoyWm7UiUEyCQWvs= Subject key identifier: 03:14:44:6A:D2:C5:3A:D9:6C:C6:5C:62:72:45:C1:F1:DB:CA:30:86 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0998 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 098E Signing time: Sun 20 Sep 2026 19:56:43 +0000 Manifest this update: Sun 20 Sep 2026 19:56:43 +0000 Manifest next update: Sun 27 Sep 2026 19:56:43 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: w5SJYGezA/P0n2WjKqtiJc6R+FUNyPZkC2gJi/9mqxA=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: /BHXZw097Vnx6svspg9H0QFXzJ+pPqoQmyYjSxe8qDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Sep 20 19:56:43 2026 GMT Not After : Sep 27 19:56:43 2026 GMT Subject: CN=6ab03a7b-57ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:86:c1:ea:33:ec:44:c0:c6:10:1b:5b:93: 00:46:82:bd:a8:04:55:8b:f9:58:e8:c3:2c:d4:e5: 34:c7:66:2a:c1:70:ad:cc:33:5f:9a:f1:bd:ad:bc: 1c:79:bd:d2:95:69:7c:4e:f1:a9:97:11:cc:f1:8e: 48:7d:a9:3e:e9:b6:63:51:e9:c0:91:a9:a9:6d:f8: 2a:51:2e:39:21:e6:01:a8:b5:1b:30:47:01:c8:a4: 63:2c:13:69:09:0f:6a:a8:36:7a:32:ff:e6:8b:bd: 47:3f:79:c0:8b:cf:a4:8a:15:12:e6:5e:af:b5:05: 25:74:33:a5:53:1f:ef:93:21:94:d7:28:ad:c5:7a: fd:74:2b:04:91:fe:15:fb:a9:73:ee:42:05:66:7a: bf:53:a3:41:75:1c:27:bf:e9:98:a0:ea:08:53:c5: 1a:2b:6f:37:a2:e5:a7:86:f1:90:69:9a:c5:69:46: be:5f:55:ee:65:56:a9:b2:6b:6c:54:88:39:d2:de: 78:9f:33:df:8e:30:dc:dc:e6:60:29:40:35:15:9a: f4:6e:27:ac:fb:6a:c1:65:17:d9:3a:99:ef:6b:64: 88:fc:db:1a:54:b5:50:0e:40:ec:45:be:62:4c:77: 22:37:31:82:67:7f:9c:62:bc:bb:f7:33:d1:ae:a6: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:44:6A:D2:C5:3A:D9:6C:C6:5C:62:72:45:C1:F1:DB:CA:30:86 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d4:61:e9:0c:89:84:56:f2:ef:57:f5:50:d0:06:81:50:64: 9d:ab:ab:c6:96:1c:85:f6:7a:67:1a:df:a7:9a:ee:25:08:97: 08:36:c9:23:20:87:59:74:74:f5:47:d0:89:f5:ae:22:34:f8: 67:8a:9b:25:77:17:a6:fa:66:f8:1f:20:ca:53:09:13:de:f0: 83:4a:92:20:f1:d4:c1:ee:aa:c2:76:7e:3d:2b:d6:17:d1:0a: cd:89:16:3e:05:38:a8:8b:24:22:3b:92:0b:19:b3:8a:86:57: 14:7f:b2:16:46:94:40:a2:42:d0:ab:45:ba:cf:55:75:f9:17: 5e:0b:12:57:cd:d0:e3:c7:9b:d5:ee:4d:c1:4c:3a:fb:bf:60: 1d:8b:c6:9f:34:90:b2:df:bd:ed:93:de:fb:48:46:bd:a5:8b: e0:e9:b8:b3:c2:76:08:4b:02:b5:73:44:06:b8:14:ef:31:aa: 2a:42:42:0c:f1:fa:b0:50:35:6c:c0:43:cc:67:5c:b9:4b:33: cd:93:fc:14:d5:06:e3:8d:51:9d:12:eb:80:a7:7a:d8:7d:5d: ad:cb:c5:94:1e:05:c9:63:ea:c5:c7:32:2e:0b:89:c9:9b:ae: d5:86:49:8d:e5:81:90:45:20:77:4c:4a:91:c4:b2:99:cc:80: e4:78:fd:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwOTIwMTk1NjQzWhcNMjYwOTI3MTk1NjQzWjAYMRYwFAYD VQQDEw02YWIwM2E3Yi01N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2baGweoz7ETAxhAbW5MARoK9qARVi/lY6MMs1OU0x2YqwXCtzDNfmvG9rbwc eb3SlWl8TvGplxHM8Y5Ifak+6bZjUenAkampbfgqUS45IeYBqLUbMEcByKRjLBNp CQ9qqDZ6Mv/mi71HP3nAi8+kihUS5l6vtQUldDOlUx/vkyGU1yitxXr9dCsEkf4V +6lz7kIFZnq/U6NBdRwnv+mYoOoIU8UaK283ouWnhvGQaZrFaUa+X1XuZVapsmts VIg50t54nzPfjjDc3OZgKUA1FZr0bies+2rBZRfZOpnva2SI/NsaVLVQDkDsRb5i THciNzGCZ3+cYry79zPRrqavRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMURGrS xTrZbMZcYnJFwfHbyjCGMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNRh6QyJhFby71f1UNAGgVBknaurxpYchfZ6Zxrfp5ruJQiXCDbJIyCHWXR0 9UfQifWuIjT4Z4qbJXcXpvpm+B8gylMJE97wg0qSIPHUwe6qwnZ+PSvWF9EKzYkW PgU4qIskIjuSCxmzioZXFH+yFkaUQKJC0KtFus9VdfkXXgsSV83Q48eb1e5NwUw6 +79gHYvGnzSQst+97ZPe+0hGvaWL4Om4s8J2CEsCtXNEBrgU7zGqKkJCDPH6sFA1 bMBDzGdcuUszzZP8FNUG441RnRLrgKd62H1drcvFlB4FyWPqxccyLguJyZuu1YZJ jeWBkEUgd0xKkcSymcyA5Hj9iQ== -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:46 2026 by rpki-client