$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft File: MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json) Hash identifier: +bQi/xxXhamdqMNUVx05rQqpN+U5thT210whIrJTdIQ= Subject key identifier: 99:D2:CD:1F:B0:BD:84:6D:8B:54:7D:B1:0E:35:56:0D:68:47:7B:47 Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 Certificate issuer: /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft Manifest number: 67 Signing time: Mon 21 Sep 2026 08:01:22 +0000 Manifest this update: Mon 21 Sep 2026 08:01:21 +0000 Manifest next update: Mon 28 Sep 2026 08:01:21 +0000 Files and hashes: 1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: JrD2pt/6yFMaLCutF/zj5XgNHigesjEiaHrM/VH+m4g=) 2: MSgPYXsTLLCNJ6EWrR52vRPV740.asa (hash: Io7FqaU0XDC1J5O4kesgyms5u4BoCEYmGGQdIL6Fo6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Validity Not Before: Sep 21 08:01:21 2026 GMT Not After : Sep 28 08:01:21 2026 GMT Subject: CN=6ab0e452-d363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:a1:c0:c3:ce:3d:b0:e5:f0:33:bb:4d:f0: 12:b0:bf:57:65:f2:4b:62:49:85:3c:a7:75:b7:69: b1:9a:a6:71:6c:4f:35:8c:bb:ff:47:0d:2c:bb:9c: a7:a6:c7:cb:c1:88:f4:ba:9b:9d:c0:5f:83:5b:06: aa:e4:0d:59:a1:ef:06:9f:4b:28:6c:d4:bd:dd:0c: d8:ea:36:8c:33:74:3d:36:ac:b2:3a:a0:35:dd:14: bd:3b:0e:74:68:35:e1:a0:9a:60:4c:88:9e:88:93: 64:0f:c3:5e:13:00:5a:b2:78:23:5b:dd:1b:bc:e5: d9:d4:1e:2d:76:92:ea:31:a3:43:54:e2:d3:ff:7f: 17:5f:e8:c7:99:5c:86:db:fd:93:8f:af:10:72:98: 1c:03:a0:8e:6d:d4:98:e7:91:32:2b:a6:e3:33:3a: 1a:29:56:31:3a:1a:0c:86:03:50:0e:56:a9:2d:43: dc:ca:07:82:c4:0e:18:3b:f1:7b:ab:5d:c1:be:07: 79:de:f6:f8:7a:42:23:22:69:1f:26:81:d6:55:4f: 9e:a5:bc:a1:b5:b2:87:7f:28:0b:21:62:95:0c:c8: 68:0f:fa:e7:c5:b3:77:c5:8f:8b:71:7d:d2:a0:ab: 07:af:50:1a:01:f3:d1:fe:8c:51:4b:23:53:6b:e9: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D2:CD:1F:B0:BD:84:6D:8B:54:7D:B1:0E:35:56:0D:68:47:7B:47 X509v3 Authority Key Identifier: keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a5:c8:10:8f:73:41:6d:e2:72:85:1c:7c:8d:1f:92:4c:6b: df:a5:2e:c7:5e:19:af:da:b7:84:51:05:48:aa:e6:74:62:cf: 24:65:98:40:8d:95:21:05:f9:dc:0f:89:7e:15:ec:7e:ef:a2: a3:07:45:bc:80:7b:2e:cf:7c:2f:15:b2:18:26:59:ae:01:73: 64:9f:c8:5b:53:6c:89:f8:4d:0d:12:41:b3:92:e1:e4:9c:b5: de:e5:24:e0:56:ad:eb:b6:b2:ad:20:a9:2f:03:cc:04:1f:f5: 27:8e:52:b9:bc:9d:f9:f0:09:7f:a8:c3:26:91:ba:02:86:cf: e5:c6:68:2a:9c:05:a1:52:73:b2:85:08:09:9c:59:7f:d9:be: 5b:69:77:c8:fa:b9:f6:d5:13:57:51:b7:30:d3:ef:25:bc:ec: 2d:26:8b:3e:3f:a9:ba:76:ff:ea:ac:0e:a1:80:e2:8f:86:4a: dd:83:62:8e:e8:c8:1b:95:19:a8:16:19:eb:c2:62:b8:9c:b6: 97:ce:85:b4:9c:30:c7:84:b6:b0:03:95:1e:07:1f:c1:f3:61: 75:38:29:17:ff:04:8d:e7:96:b1:a1:4a:b2:b6:f0:54:f9:0c: 19:d9:41:ca:1b:3f:85:ed:e0:84:97:8e:a4:5e:f4:c0:33:ed: 24:7c:bd:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODgzMzExMC8GA1UEBRMoMzEzMEUwRkIyQUUzMDg3MUYxQjQ0Qzc3QzU0MkZGRkNG RTFEOTc0MDAeFw0yNjA5MjEwODAxMjFaFw0yNjA5MjgwODAxMjFaMBgxFjAUBgNV BAMTDTZhYjBlNDUyLWQzNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG5aHAw849sOXwM7tN8BKwv1dl8ktiSYU8p3W3abGapnFsTzWMu/9HDSy7nKem x8vBiPS6m53AX4NbBqrkDVmh7wafSyhs1L3dDNjqNowzdD02rLI6oDXdFL07DnRo NeGgmmBMiJ6Ik2QPw14TAFqyeCNb3Ru85dnUHi12kuoxo0NU4tP/fxdf6MeZXIbb /ZOPrxBymBwDoI5t1JjnkTIrpuMzOhopVjE6GgyGA1AOVqktQ9zKB4LEDhg78Xur XcG+B3ne9vh6QiMiaR8mgdZVT56lvKG1sod/KAshYpUMyGgP+ufFs3fFj4txfdKg qwevUBoB89H+jFFLI1Nr6boNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmdLNH7C9 hG2LVH2xDjVWDWhHe0cwHwYDVR0jBBgwFoAUMTDg+yrjCHHxtEx3xUL//P4dl0Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0UyMjEwQ0M0MUFC RTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hIeHRFeDN4VUxfX1A0ZGww QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVREZy15cmpDSEh4dEV4M3hVTF9fUDRkbDBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODMzL0UyMjEwQ0M0MUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hI eHRFeDN4VUxfX1A0ZGwwQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAopcgQj3NBbeJyhRx8jR+STGvfpS7HXhmv2reEUQVIquZ0Ys8kZZhAjZUhBfnc D4l+Fex+76KjB0W8gHsuz3wvFbIYJlmuAXNkn8hbU2yJ+E0NEkGzkuHknLXe5STg Vq3rtrKtIKkvA8wEH/UnjlK5vJ358Al/qMMmkboChs/lxmgqnAWhUnOyhQgJnFl/ 2b5baXfI+rn21RNXUbcw0+8lvOwtJos+P6m6dv/qrA6hgOKPhkrdg2KO6MgblRmo FhnrwmK4nLaXzoW0nDDHhLawA5UeBx/B82F1OCkX/wSN55axoUqytvBU+QwZ2UHK Gz+F7eCEl46kXvTAM+0kfL0M -----END CERTIFICATE-----Generated at Tue Sep 22 03:11:45 2026 by rpki-client