$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: GCYM+vN+FxL3GaHSI3dXy6f5CImfw6WaCGphbBMnuwI= Subject key identifier: F6:7B:13:6F:8A:85:9A:8A:36:47:08:27:7A:CB:FF:D6:49:F6:5B:BC Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02D6 Signing time: Mon 21 Sep 2026 01:10:06 +0000 Manifest this update: Mon 21 Sep 2026 01:10:05 +0000 Manifest next update: Mon 28 Sep 2026 01:10:05 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: MdKrUdA5lBHn7UakmIp2Lk012Tx0bV7KFdKbFkMZSyU=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Sep 21 01:10:05 2026 GMT Not After : Sep 28 01:10:05 2026 GMT Subject: CN=6ab083ee-b0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0a:eb:08:3f:b0:da:aa:93:83:77:1a:f8:9e: 55:d6:a1:c8:5a:ee:7a:23:53:f0:e7:a4:69:82:f8: a7:15:7f:23:d4:4d:da:2b:1a:d7:e1:d2:3b:e7:36: 46:bc:6c:97:71:2c:13:63:be:4a:3a:3e:8a:c3:19: 48:2a:5b:b1:19:23:c8:4b:a9:7b:eb:38:c8:ff:29: 9f:10:a9:66:48:01:c7:e2:4c:20:60:e4:c7:98:11: c7:22:73:c1:55:99:4e:3f:8f:89:6d:14:42:89:50: fe:21:25:70:5b:1a:88:29:ac:9a:76:5c:c0:55:37: 45:17:76:65:26:04:94:04:6f:a9:4d:2e:a1:95:9e: 4f:d1:f8:eb:ad:5a:7d:cd:26:45:c5:87:16:d2:db: 28:b2:df:aa:e3:9e:f8:b4:20:06:a8:8e:e6:bd:44: 7d:3e:00:14:67:13:1e:09:1e:d9:42:90:b1:f8:05: da:e9:8e:ae:41:e1:0d:b1:8b:06:b4:7c:a7:5a:e5: 28:2e:17:3e:9b:4e:c3:7c:6b:6c:ef:08:a2:83:e5: 34:58:a1:ee:56:51:6e:c2:00:56:62:ff:0a:b3:c5: d5:bb:be:7e:d5:95:dd:e3:64:68:14:6e:2d:f2:bb: b1:f1:5e:8d:64:9a:50:1f:bd:ee:ad:6b:cf:d5:8c: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7B:13:6F:8A:85:9A:8A:36:47:08:27:7A:CB:FF:D6:49:F6:5B:BC X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a7:34:24:ef:ed:a4:0e:48:08:55:31:cb:bb:22:3d:b1:47: e9:8a:f1:f2:0e:f8:28:91:d5:c2:c9:ec:f1:5b:01:ce:f7:87: 7f:65:3b:4a:ca:d4:6a:83:85:c2:75:e4:07:67:53:f8:55:6d: 6f:60:7f:c8:a8:68:1f:2a:e5:4b:1b:a0:8a:3d:7d:3d:45:43: 33:32:87:b0:2d:e3:cb:01:1a:a5:8a:e6:c7:8e:23:80:2f:dc: 4e:81:36:32:cf:2e:14:78:39:55:b8:85:89:79:c1:f4:40:1f: d7:e2:c0:f7:fa:38:99:63:43:72:c9:4d:33:45:d0:04:1b:6c: d0:b7:80:e1:63:1f:37:1d:9d:37:d8:a1:e4:e5:3a:3b:04:7f: 5d:3c:c4:f2:ff:be:17:c3:cb:ee:f1:ee:33:b1:be:89:6c:8c: b1:ff:d6:dc:a1:34:3f:8d:8f:0b:fa:bc:62:57:6e:c5:ae:d8: 2a:90:d9:bb:d9:80:a5:13:67:53:29:ab:f0:45:83:e4:c8:81: 2c:4f:5d:fc:41:b8:46:f7:c2:d0:40:5e:94:a5:a8:57:8b:39: a1:71:72:f1:21:d8:bc:30:80:d0:8d:75:61:24:17:64:8b:23: 85:cb:8e:49:1c:99:08:23:4b:f1:d8:c7:56:0a:84:54:b3:5b: 11:bb:57:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYwOTIxMDExMDA1WhcNMjYwOTI4MDExMDA1WjAYMRYwFAYD VQQDEw02YWIwODNlZS1iMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9wrrCD+w2qqTg3ca+J5V1qHIWu56I1Pw56RpgvinFX8j1E3aKxrX4dI75zZG vGyXcSwTY75KOj6KwxlIKluxGSPIS6l76zjI/ymfEKlmSAHH4kwgYOTHmBHHInPB VZlOP4+JbRRCiVD+ISVwWxqIKayadlzAVTdFF3ZlJgSUBG+pTS6hlZ5P0fjrrVp9 zSZFxYcW0tsost+q4574tCAGqI7mvUR9PgAUZxMeCR7ZQpCx+AXa6Y6uQeENsYsG tHynWuUoLhc+m07DfGts7wiig+U0WKHuVlFuwgBWYv8Ks8XVu75+1ZXd42RoFG4t 8rux8V6NZJpQH73urWvP1Ywv7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZ7E2+K hZqKNkcIJ3rL/9ZJ9lu8MB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaKc0JO/tpA5ICFUxy7siPbFH6Yrx8g74KJHVwsns8VsBzveHf2U7SsrUaoOF wnXkB2dT+FVtb2B/yKhoHyrlSxugij19PUVDMzKHsC3jywEapYrmx44jgC/cToE2 Ms8uFHg5VbiFiXnB9EAf1+LA9/o4mWNDcslNM0XQBBts0LeA4WMfNx2dN9ih5OU6 OwR/XTzE8v++F8PL7vHuM7G+iWyMsf/W3KE0P42PC/q8Ylduxa7YKpDZu9mApRNn Uymr8EWD5MiBLE9d/EG4RvfC0EBelKWoV4s5oXFy8SHYvDCA0I11YSQXZIsjhcuO SRyZCCNL8djHVgqEVLNbEbtXHg== -----END CERTIFICATE-----Generated at Mon Sep 21 06:54:49 2026 by rpki-client