$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: BR1VynCKqSNQY5z/Ijv7dfoCilQRf3/ox+1hG3nWCaU= Subject key identifier: CC:CA:1E:C2:8A:53:E5:77:9E:13:45:FB:95:E0:06:AD:D6:CD:F0:90 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: A7 Signing time: Thu 24 Sep 2026 18:06:01 +0000 Manifest this update: Thu 24 Sep 2026 18:06:01 +0000 Manifest next update: Thu 01 Oct 2026 18:06:01 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: b9cS5MxEAQG1M+ksWibgpAPZx+L1yj9VHvU7SpufYs8=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Sep 24 18:06:01 2026 GMT Not After : Oct 1 18:06:01 2026 GMT Subject: CN=6ab56689-bce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:17:d4:f6:bc:79:42:99:44:3f:80:f1:75: 88:a3:11:ef:50:63:be:4f:be:07:c0:e5:2c:1c:fd: a5:f8:81:ab:4c:4b:93:c9:46:44:66:25:31:8c:b6: 6a:85:13:13:00:6f:7d:64:70:60:f7:6e:07:82:4c: 40:12:61:4a:74:5e:ce:15:62:c3:ba:42:bd:2a:f1: f2:73:de:f3:04:6e:39:b8:52:3a:46:5f:2b:4f:c2: e6:f1:66:02:76:35:c3:1f:53:53:dc:fb:6e:03:d4: a6:51:fa:b6:93:a2:b2:90:a6:84:e0:63:59:51:f5: ec:4f:27:d9:a5:a5:bc:b6:ec:f9:99:54:d8:33:c7: b2:ca:b3:66:ce:97:f3:e4:e3:9e:6b:ee:ca:a7:0a: 82:4b:e9:b8:f2:3d:6a:8d:12:6b:04:a8:9e:1f:51: fd:64:3a:b3:32:27:37:b7:14:31:41:50:66:4a:db: 5f:b3:a9:08:3d:ee:cc:a0:66:6a:7a:bd:a1:38:17: 10:46:3a:46:7a:19:ac:bc:5c:57:c3:c3:f7:c5:3e: b6:72:7c:3e:40:9a:d5:18:44:db:42:f8:25:e1:6f: 23:20:ff:40:64:50:7c:b0:e8:f0:f8:b8:ca:20:74: cd:ec:24:be:9a:fa:66:09:ae:10:3e:90:15:3d:18: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:1E:C2:8A:53:E5:77:9E:13:45:FB:95:E0:06:AD:D6:CD:F0:90 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:56:4c:b3:f6:ba:5d:79:3b:66:99:a2:df:cb:03:98:8a:93: d2:de:b6:15:1a:ad:80:17:5e:86:f2:12:af:68:16:0f:5d:f3: 1d:61:ad:d7:4f:77:da:59:75:8e:9f:aa:31:29:3b:1b:43:43: e5:c4:32:38:97:09:f6:0a:43:10:67:49:ad:c1:3a:15:46:0e: af:63:1a:aa:88:10:9d:8e:66:13:cd:5a:5c:d2:35:5a:c8:2d: df:5d:0d:a1:96:3d:23:92:b4:d6:17:0b:96:36:48:55:fa:03: aa:82:82:dd:f7:b4:09:cc:4e:e2:b3:72:a2:c6:a2:39:46:88: a3:cb:10:68:57:e8:7a:51:16:00:26:b5:4b:0e:80:4e:f0:34: 83:aa:54:11:87:60:d1:f3:93:c6:a4:f1:48:89:f3:32:24:17: 18:b8:6e:af:0e:b4:33:d0:6f:1c:84:0a:9d:d6:5e:ec:52:73: 7e:b8:dc:8e:eb:33:73:51:05:aa:cf:96:3b:bc:bb:5f:14:b4: 8b:fc:c7:3f:4b:e5:71:88:6b:25:ab:2e:b3:aa:fa:f4:f3:58: c8:98:a8:b9:43:e0:33:84:27:39:c1:e5:1e:be:87:02:0d:26: 32:81:6e:df:e8:49:72:bd:c0:21:4e:7a:40:8a:dc:d7:7b:68: 87:df:6c:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKEI2ODM0OEIxOTA3MDYzQzA0NDQ1NjlDRUIyMjhFQTUy NDZEMDJGMTkwHhcNMjYwOTI0MTgwNjAxWhcNMjYxMDAxMTgwNjAxWjAYMRYwFAYD VQQDEw02YWI1NjY4OS1iY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHEX1Pa8eUKZRD+A8XWIoxHvUGO+T74HwOUsHP2l+IGrTEuTyUZEZiUxjLZq hRMTAG99ZHBg924HgkxAEmFKdF7OFWLDukK9KvHyc97zBG45uFI6Rl8rT8Lm8WYC djXDH1NT3PtuA9SmUfq2k6KykKaE4GNZUfXsTyfZpaW8tuz5mVTYM8eyyrNmzpfz 5OOea+7KpwqCS+m48j1qjRJrBKieH1H9ZDqzMic3txQxQVBmSttfs6kIPe7MoGZq er2hOBcQRjpGehmsvFxXw8P3xT62cnw+QJrVGETbQvgl4W8jIP9AZFB8sOjw+LjK IHTN7CS+mvpmCa4QPpAVPRi5YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzKHsKK U+V3nhNF+5XgBq3WzfCQMB8GA1UdIwQYMBaAFLaDSLGQcGPAREVpzrIo6lJG0C8Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS9FRDIyNTUzMkM0 MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4QkVSV25Pc2lqcVVrYlFM eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4 QkVSV25Pc2lqcVVrYlFMeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlZMs/a6XXk7Zpmi38sDmIqT0t62FRqtgBdehvISr2gWD13zHWGt10932ll1 jp+qMSk7G0ND5cQyOJcJ9gpDEGdJrcE6FUYOr2MaqogQnY5mE81aXNI1Wsgt310N oZY9I5K01hcLljZIVfoDqoKC3fe0CcxO4rNyosaiOUaIo8sQaFfoelEWACa1Sw6A TvA0g6pUEYdg0fOTxqTxSInzMiQXGLhurw60M9BvHIQKndZe7FJzfrjcjuszc1EF qs+WO7y7XxS0i/zHP0vlcYhrJasus6r69PNYyJiouUPgM4QnOcHlHr6HAg0mMoFu 3+hJcr3AIU56QIrc13toh99sIw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:01:41 2026 by rpki-client