$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: Ez6n7tkDESgXqNEMha73Dy48/UwkSqCy8+XruFEiK98= Subject key identifier: 76:46:F7:EA:06:41:3F:F0:29:C8:19:AA:47:80:30:E0:95:8F:79:94 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0553 Signing time: Sun 20 Sep 2026 23:19:22 +0000 Manifest this update: Sun 20 Sep 2026 23:19:22 +0000 Manifest next update: Sun 27 Sep 2026 23:19:22 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: QD/pDogznTRNDIzyu3E0HlLinlbdCgyQTvIocmy6KDA=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: THixLa/45ZK/Pkv9/quk4OO+SRxBsBhh9iA6Q9k83cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Sep 20 23:19:22 2026 GMT Not After : Sep 27 23:19:22 2026 GMT Subject: CN=6ab069fa-d2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:a3:71:a8:ee:8b:98:23:69:a7:34:ea:e8: 1c:5d:02:cb:bb:0b:e1:d6:99:04:68:35:44:77:48: 1a:94:25:9a:ad:d9:ca:81:6b:73:19:41:26:90:06: ce:e1:5c:df:03:b0:e3:9b:86:5c:6d:87:88:77:64: a3:10:d0:61:d4:e9:6c:78:43:15:df:56:29:01:b6: 11:30:e6:80:94:76:65:ac:20:98:a2:57:e7:4f:d4: 61:25:7d:0f:d5:86:f0:8a:41:b4:b3:81:1a:19:b4: 3c:4d:44:b6:5f:e9:12:3c:2b:57:01:3e:1a:fd:e7: 9c:64:d4:4f:38:1d:5d:24:c8:2d:a7:4c:42:79:8c: 4c:8a:b4:ea:27:34:db:1b:9c:4f:50:90:d2:ff:7f: 81:fd:a5:6e:1a:ee:77:69:06:26:7f:b6:90:74:ce: 10:f6:a2:4f:1c:da:1b:f9:f6:4d:b7:31:33:50:1e: e6:a1:61:5f:4e:4c:55:21:54:cd:94:af:f5:da:58: c5:4c:ea:c3:0d:2c:1d:48:9d:38:f2:bb:8d:6e:f0: 82:45:1e:22:8c:6f:09:c1:eb:e3:a4:ed:a9:46:aa: 9c:fd:62:14:e0:27:a4:47:32:79:9b:03:a8:2b:60: f4:94:5c:e4:23:ea:94:b0:ae:f9:86:52:05:c1:c7: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:F7:EA:06:41:3F:F0:29:C8:19:AA:47:80:30:E0:95:8F:79:94 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1d:b9:11:01:a4:dc:bc:cd:3e:28:a8:fb:f0:85:32:3a:5a: 7d:f1:d7:34:be:58:5b:c0:96:9f:ab:55:03:6f:66:2c:cb:b1: cd:87:77:63:57:eb:b1:35:62:c6:3b:14:64:33:79:5c:81:28: 92:c5:bf:e1:f6:4f:57:9b:4d:ae:3c:57:f4:ba:bc:e2:9a:c7: e8:19:a6:da:4e:eb:89:d3:a8:50:df:6a:1a:e7:40:ac:68:d7: 4f:a8:10:68:8f:79:94:99:fa:ce:7f:b0:1b:d1:79:85:c4:f6: 85:ef:4c:f4:87:ab:28:b3:b9:7e:43:20:7c:ae:ca:ed:63:ac: 86:33:7b:03:60:68:3c:26:cf:a2:07:19:c9:38:0f:ca:fb:79: 09:51:a8:bc:e8:41:a5:ff:02:ee:26:fc:56:6e:80:58:30:07: 9e:b9:f5:23:0f:57:c8:35:d7:95:04:f8:2b:eb:d9:c0:5c:41: 68:85:69:66:51:84:c2:cb:9a:23:a9:03:42:b2:35:f4:bb:af: 3a:14:f8:62:fc:88:75:b4:2b:e1:f7:0d:9c:57:5e:ca:0f:36: 9e:63:f1:d1:d0:42:ff:13:0a:36:8f:5a:12:d1:37:a1:7b:ee: 65:7b:e0:37:be:2d:54:a0:28:a5:6c:cb:50:36:eb:31:82:d6: f9:a6:85:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYwOTIwMjMxOTIyWhcNMjYwOTI3MjMxOTIyWjAYMRYwFAYD VQQDEw02YWIwNjlmYS1kMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bWjcajui5gjaac06ugcXQLLuwvh1pkEaDVEd0galCWardnKgWtzGUEmkAbO 4VzfA7Djm4ZcbYeId2SjENBh1OlseEMV31YpAbYRMOaAlHZlrCCYolfnT9RhJX0P 1YbwikG0s4EaGbQ8TUS2X+kSPCtXAT4a/eecZNRPOB1dJMgtp0xCeYxMirTqJzTb G5xPUJDS/3+B/aVuGu53aQYmf7aQdM4Q9qJPHNob+fZNtzEzUB7moWFfTkxVIVTN lK/12ljFTOrDDSwdSJ048ruNbvCCRR4ijG8JwevjpO2pRqqc/WIU4CekRzJ5mwOo K2D0lFzkI+qUsK75hlIFwccEMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZG9+oG QT/wKcgZqkeAMOCVj3mUMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQh25EQGk3LzNPiio+/CFMjpaffHXNL5YW8CWn6tVA29mLMuxzYd3Y1frsTVi xjsUZDN5XIEoksW/4fZPV5tNrjxX9Lq84prH6Bmm2k7ridOoUN9qGudArGjXT6gQ aI95lJn6zn+wG9F5hcT2he9M9IerKLO5fkMgfK7K7WOshjN7A2BoPCbPogcZyTgP yvt5CVGovOhBpf8C7ib8Vm6AWDAHnrn1Iw9XyDXXlQT4K+vZwFxBaIVpZlGEwsua I6kDQrI19LuvOhT4YvyIdbQr4fcNnFdeyg82nmPx0dBC/xMKNo9aEtE3oXvuZXvg N74tVKAopWzLUDbrMYLW+aaFkQ== -----END CERTIFICATE-----Generated at Tue Sep 22 17:23:31 2026 by rpki-client