$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: AahwaTj+jtdZB0DRMVwvQoDUSwdZjIeR56pdRj+aVG0= Subject key identifier: B1:A8:F8:D9:EB:E9:53:FF:B9:CC:E9:56:F6:01:B2:5B:94:CE:0F:9B Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0633 Signing time: Tue 22 Sep 2026 22:25:26 +0000 Manifest this update: Tue 22 Sep 2026 22:25:25 +0000 Manifest next update: Tue 29 Sep 2026 22:25:25 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: EbpzVT+Uv+AnA3Z5F48xvzTrrgDM6MxrJXNTHCzzwr4=) 2: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: zYCoiToL+tyHYrArPulDS1EFhOBSHqWiPD13BOonOMk=) 3: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: D1zfHUB1LWQ341UcdC/TPCPRcXgSjIBADJbdxAB0gsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Sep 22 22:25:25 2026 GMT Not After : Sep 29 22:25:25 2026 GMT Subject: CN=6ab30056-1e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:d4:65:a3:7d:95:ff:71:92:81:ee:94:cd: c5:7e:5a:75:ec:f8:23:78:08:0f:14:46:f4:82:d6: 06:b9:97:12:5e:a6:eb:3f:47:37:bc:56:1d:99:7f: 44:97:87:df:74:83:c8:c6:94:24:7f:b4:75:60:79: 99:92:61:33:14:18:e3:17:cc:3b:96:8a:77:b7:29: 8e:53:1a:bb:47:1f:7b:e0:bf:8a:0b:ee:49:2d:44: 33:89:f4:ae:5a:08:75:51:61:71:e3:bc:9d:ad:b4: 2f:f1:ba:ac:08:7a:40:94:3a:f4:91:01:60:38:ca: be:55:e7:e7:dd:cb:96:8e:99:cf:03:1e:80:f3:9e: 96:d9:80:e3:9a:37:f6:09:fe:c8:c2:3c:06:7e:2b: fb:26:52:ca:aa:5e:96:fc:59:67:c4:f7:fb:ff:5f: 02:a0:46:24:fd:07:72:11:fd:f2:ec:6d:7f:ea:90: fb:7e:19:1c:d7:f7:d4:8a:a1:6f:4d:3f:46:1e:f8: 4a:46:55:70:98:47:f9:f5:8d:92:8f:1c:46:14:65: 20:24:b0:6f:72:c8:65:e2:0b:4e:98:03:ef:ab:fc: 22:80:9c:0f:0a:67:dc:0e:2d:69:56:bf:e4:34:57: b4:93:a5:87:de:ec:7c:f0:01:bf:38:eb:94:df:04: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:F8:D9:EB:E9:53:FF:B9:CC:E9:56:F6:01:B2:5B:94:CE:0F:9B X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:f7:a4:48:3e:6b:f1:25:3f:89:9c:73:86:41:e1:43:fd: e5:bb:93:21:7f:89:2e:e9:6d:da:7a:cb:2c:ec:45:bf:25:8a: 53:2a:9c:c6:43:08:bc:a7:b2:6d:e8:c5:e6:d7:d8:5b:f2:34: 63:f5:87:ce:ef:67:67:39:f9:61:4a:e1:7f:24:c5:68:68:80: 5c:90:96:75:39:f9:b7:f6:51:c0:44:56:49:14:f1:3c:06:e5: 7b:7d:20:df:8b:9f:78:d2:09:8b:10:16:d4:eb:da:f9:6e:55: 38:1b:dc:21:24:0d:48:85:9b:70:91:c1:ce:96:a4:52:0a:c2: e0:1e:af:b3:e5:10:03:c4:c1:59:68:03:f1:d5:93:54:b8:39: c4:9f:3f:54:c1:a5:3a:5c:c9:4e:a0:3d:57:6c:66:c8:9f:bc: 8a:fc:ef:b7:63:81:19:a8:70:dd:c8:05:81:4a:d3:99:a5:4d: 67:f7:9a:29:92:2b:dd:a7:c0:9d:bc:f5:7b:53:cb:b3:55:90: 36:83:86:8f:63:30:0a:35:63:56:61:48:e3:54:ea:f5:6c:9f: f8:be:8a:60:fb:33:10:0b:d5:4b:50:16:9c:e4:d4:14:c9:69: b5:fe:03:d6:41:1f:7f:1e:05:f3:ef:cf:91:8c:29:9f:f4:71: 9b:56:9b:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjYwOTIyMjIyNTI1WhcNMjYwOTI5MjIyNTI1WjAYMRYwFAYD VQQDEw02YWIzMDA1Ni0xZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AvUZaN9lf9xkoHulM3Fflp17PgjeAgPFEb0gtYGuZcSXqbrP0c3vFYdmX9E l4ffdIPIxpQkf7R1YHmZkmEzFBjjF8w7lop3tymOUxq7Rx974L+KC+5JLUQzifSu Wgh1UWFx47ydrbQv8bqsCHpAlDr0kQFgOMq+Vefn3cuWjpnPAx6A856W2YDjmjf2 Cf7IwjwGfiv7JlLKql6W/FlnxPf7/18CoEYk/QdyEf3y7G1/6pD7fhkc1/fUiqFv TT9GHvhKRlVwmEf59Y2SjxxGFGUgJLBvcshl4gtOmAPvq/wigJwPCmfcDi1pVr/k NFe0k6WH3ux88AG/OOuU3wSOhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGo+Nnr 6VP/uczpVvYBsluUzg+bMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApYT3pEg+a/ElP4mcc4ZB4UP95buTIX+JLult2nrLLOxFvyWKUyqcxkMIvKey bejF5tfYW/I0Y/WHzu9nZzn5YUrhfyTFaGiAXJCWdTn5t/ZRwERWSRTxPAble30g 34ufeNIJixAW1Ova+W5VOBvcISQNSIWbcJHBzpakUgrC4B6vs+UQA8TBWWgD8dWT VLg5xJ8/VMGlOlzJTqA9V2xmyJ+8ivzvt2OBGahw3cgFgUrTmaVNZ/eaKZIr3afA nbz1e1PLs1WQNoOGj2MwCjVjVmFI41Tq9Wyf+L6KYPszEAvVS1AWnOTUFMlptf4D 1kEffx4F8+/PkYwpn/Rxm1abbg== -----END CERTIFICATE-----Generated at Wed Sep 23 13:34:49 2026 by rpki-client