$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json) Hash identifier: 4xH2WZYOCuExEA/Bc3859oADZsV1Gymha3nMATgCwOg= Subject key identifier: 69:B5:02:0E:84:CB:F1:CF:C8:04:62:7A:B4:68:8A:DE:DC:F2:11:9F Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 10B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft Manifest number: 1087 Signing time: Fri 18 Sep 2026 17:21:27 +0000 Manifest this update: Fri 18 Sep 2026 17:21:27 +0000 Manifest next update: Fri 25 Sep 2026 17:21:27 +0000 Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: 9B2H++XjweT0mwkqgtzYPaP1j8DkVSMo+XlaEJR5nHc=) 2: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: sWIaQsRig/VPK+jbVKOZ7b0CcY18nT76qL7QJZBmK1M=) 3: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: Cj4OYm14pPKAq2MPYlPoOUpdF12Cuo+hs3NS/ALB7Mk=) 4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: X9qQAMuSIANj5rZ69KeyXyhB5xhdMqRkN0M45pqUe9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4277 (0x10b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 18 17:21:27 2026 GMT Not After : Sep 25 17:21:27 2026 GMT Subject: CN=6aad7317-3f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:99:d3:08:99:55:f0:2d:d0:3f:a5:db:9a: 39:48:67:d2:12:25:fb:10:4b:8f:fb:91:54:28:47: 8b:cb:d5:f5:9b:11:17:b2:2c:3c:7e:54:7a:ec:90: dd:11:80:ef:11:9c:1d:18:37:ab:54:18:3b:1a:71: 41:09:1f:b0:52:94:b1:13:cd:81:39:e4:bf:35:a1: 9d:41:83:34:e1:81:a1:21:2f:e2:c4:78:ae:62:28: 38:82:14:cd:47:15:25:b3:82:d4:31:81:06:19:88: 11:3b:3c:08:fd:57:83:d2:1b:45:d0:b7:39:2d:cd: 08:70:ca:1e:80:03:da:d5:ae:35:04:33:6c:df:a9: eb:be:bc:f8:9a:1f:d8:92:c3:3c:63:37:6d:a6:87: 97:ca:5f:6a:b9:9a:b5:b1:0d:81:68:13:14:f0:92: c9:b1:e1:d7:fb:5b:53:7a:ba:e1:a2:51:e0:f5:38: 1e:07:53:62:9c:9f:57:4e:ff:54:e3:fd:3e:d0:ef: 11:45:06:60:1a:62:25:10:c4:b8:5b:2f:02:04:82: e1:34:ae:82:84:bc:c4:5b:be:b5:3d:a0:1d:50:42: 95:24:0c:19:23:b0:f7:b3:2f:c3:0e:44:65:a2:cc: 2e:bb:fc:ab:b9:fe:11:8a:4c:cd:d8:a4:a6:36:5f: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:02:0E:84:CB:F1:CF:C8:04:62:7A:B4:68:8A:DE:DC:F2:11:9F X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9c:e1:0f:a2:35:94:e8:a2:7c:bb:de:e9:00:f2:1e:c7:b6: cf:c6:43:05:a8:83:b6:e4:2f:2b:16:93:23:fd:c7:22:80:a7: 15:aa:1e:7a:99:56:b8:59:90:a2:f7:08:80:6b:a6:6b:c2:98: 2b:4d:21:e7:04:06:a7:a1:f1:67:9a:37:42:ad:fe:94:bc:73: 1f:f8:70:40:18:2a:14:7e:62:25:74:f6:16:d2:d6:a2:a2:a4: 5c:20:8e:f5:eb:36:15:01:2a:e0:d5:f2:6c:54:21:2e:cf:30: f9:24:d2:14:25:5e:1c:42:07:6b:a9:f0:f8:03:4f:54:71:c6: c9:ab:0f:65:30:e2:22:a8:19:17:6a:b0:92:39:1d:b6:18:16: d7:40:cc:f9:f2:ff:2d:be:0a:83:89:b2:41:3f:a1:b9:c5:45: d6:79:8d:dd:05:ca:b8:a7:3e:23:0d:b6:0d:9a:a1:47:89:45: ed:9b:2b:c9:d2:f2:33:3b:98:d4:23:5e:cf:68:d1:dd:0a:71: a1:0a:9a:21:4b:eb:ba:4d:6f:01:16:0b:88:d6:be:92:77:8a: 02:bb:70:a8:84:36:85:fa:db:17:ff:3f:25:59:c4:a8:d1:d2: 47:45:c4:1d:a8:19:e1:40:04:18:d2:d1:49:14:31:ba:a9:88: 14:1e:97:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwOTE4MTcyMTI3WhcNMjYwOTI1MTcyMTI3WjAYMRYwFAYD VQQDEw02YWFkNzMxNy0zZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DyZ0wiZVfAt0D+l25o5SGfSEiX7EEuP+5FUKEeLy9X1mxEXsiw8flR67JDd EYDvEZwdGDerVBg7GnFBCR+wUpSxE82BOeS/NaGdQYM04YGhIS/ixHiuYig4ghTN RxUls4LUMYEGGYgROzwI/VeD0htF0Lc5Lc0IcMoegAPa1a41BDNs36nrvrz4mh/Y ksM8YzdtpoeXyl9quZq1sQ2BaBMU8JLJseHX+1tTerrholHg9TgeB1NinJ9XTv9U 4/0+0O8RRQZgGmIlEMS4Wy8CBILhNK6ChLzEW761PaAdUEKVJAwZI7D3sy/DDkRl oswuu/yruf4RikzN2KSmNl+9FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGm1Ag6E y/HPyARierRoit7c8hGfMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt cGtsZGdTYWhPZnhBU1RnQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN5zhD6I1lOiifLve6QDyHse2z8ZDBaiDtuQvKxaTI/3HIoCnFaoeeplWuFmQ ovcIgGuma8KYK00h5wQGp6HxZ5o3Qq3+lLxzH/hwQBgqFH5iJXT2FtLWoqKkXCCO 9es2FQEq4NXybFQhLs8w+STSFCVeHEIHa6nw+ANPVHHGyasPZTDiIqgZF2qwkjkd thgW10DM+fL/Lb4Kg4myQT+hucVF1nmN3QXKuKc+Iw22DZqhR4lF7ZsrydLyMzuY 1CNez2jR3QpxoQqaIUvruk1vARYLiNa+kneKArtwqIQ2hfrbF/8/JVnEqNHSR0XE HagZ4UAEGNLRSRQxuqmIFB6XUg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:32:12 2026 by rpki-client