$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: zy0w/cDl49LlFY00d50HZx9tbs28Ef/IPiWCWhtzj0Q= Subject key identifier: 22:32:9C:4E:80:2D:72:8D:52:D6:FD:89:48:38:89:AC:87:4A:41:D4 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 05A8 Signing time: Sun 20 Sep 2026 23:02:11 +0000 Manifest this update: Sun 20 Sep 2026 23:02:11 +0000 Manifest next update: Sun 27 Sep 2026 23:02:11 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: HkZR+VX/xtwmkDoYxcxt2y78UDk6+TjDfy+qV4/wQJI=) 2: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: CtlN2Faru+xDk/jym7szi2Dss5+eT2ey7yUoE46ChWo=) 3: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: n4tuVdk3omfSB8XzyCrNJHNaBap0wt8tJ/fhHnIddvI=) 4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: nNfdgdLoLhr6Vy9d41UW1l+EsR1U5EgpKmeHjbrVZXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Sep 20 23:02:11 2026 GMT Not After : Sep 27 23:02:11 2026 GMT Subject: CN=6ab065f3-767b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:72:1a:0a:91:be:36:a8:30:22:8f:cc:54: de:aa:9f:e7:98:6c:8d:94:19:4c:18:a8:4d:79:33: 70:5c:9b:ea:f8:33:16:86:47:3e:e8:e5:2a:3a:0e: e7:60:a8:0b:f8:47:62:36:97:ac:df:7b:f7:1f:7e: b1:92:6a:44:a1:c2:71:fb:b3:98:b9:9a:ed:eb:1a: 0f:0b:5e:1e:85:be:27:2e:c7:2a:cc:42:ca:19:33: ba:a6:b3:a6:80:91:c4:1a:7d:f0:0a:4a:5f:97:2f: b9:af:af:5a:c9:fa:81:1c:1e:bf:90:54:6d:ce:2e: 3d:f9:3a:79:d5:54:49:50:f2:8b:57:10:08:4a:8d: 33:b8:f2:f9:0e:3b:5b:5a:56:b8:32:a8:1f:9f:58: 55:b0:34:e2:04:89:04:a4:af:87:48:15:6b:ee:08: f5:ef:66:ec:ec:1e:13:2e:f0:7f:91:7b:f6:6e:44: 43:5f:65:79:64:06:14:4d:95:f4:c2:fc:32:8f:26: ca:13:1d:8c:c8:a8:c4:6f:ce:ed:ff:22:1f:6c:be: ed:20:73:ce:ca:29:31:3c:49:04:ee:f4:cf:99:64: f5:37:4c:4a:b3:33:27:11:f4:cc:b8:12:51:d8:99: bb:21:74:55:9f:ab:aa:c0:80:33:bd:40:e4:b4:83: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:9C:4E:80:2D:72:8D:52:D6:FD:89:48:38:89:AC:87:4A:41:D4 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:55:93:be:7a:a7:7d:da:d2:4b:0e:32:4d:98:ce:3e:b9:3c: d4:a4:6d:eb:0f:39:0e:85:99:2f:5b:de:b9:06:60:b0:3e:62: 9d:2a:e9:2c:40:54:53:80:5f:13:84:c9:3d:36:fc:64:86:c5: 41:51:67:bf:d2:66:40:0f:19:9e:67:d0:96:87:0c:77:e9:7e: 0e:ba:26:10:57:87:81:dd:ff:3d:ec:7c:54:d2:d2:81:cf:c5: fd:c1:cb:f6:1e:c0:16:ff:b9:bc:d0:fe:8b:25:95:6a:14:6d: 26:37:b3:59:fc:6b:49:37:1b:93:78:59:b8:7d:1f:87:1d:f4: 78:b7:99:ed:c6:bb:4c:d8:98:21:a5:df:95:96:23:ac:21:cf: ef:30:07:69:eb:68:14:d0:76:05:77:4b:68:aa:f4:0f:41:1f: c9:ad:ac:93:04:07:85:19:98:09:7b:20:56:e4:7b:b6:dc:ec: be:20:74:fe:af:e7:40:18:24:f1:e1:58:80:64:14:45:22:23: 7c:ec:27:76:2d:bd:19:ca:d0:e5:08:1c:4a:7f:2c:f2:b4:c7: 77:e6:c9:9d:56:a2:c8:90:07:f8:e1:6e:0c:18:de:e5:c2:b5: 1e:bb:74:56:3c:ae:2f:7e:29:5e:77:7d:46:f3:cf:d2:c5:de: ee:37:83:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjYwOTIwMjMwMjExWhcNMjYwOTI3MjMwMjExWjAYMRYwFAYD VQQDEw02YWIwNjVmMy03NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXNyGgqRvjaoMCKPzFTeqp/nmGyNlBlMGKhNeTNwXJvq+DMWhkc+6OUqOg7n YKgL+EdiNpes33v3H36xkmpEocJx+7OYuZrt6xoPC14ehb4nLscqzELKGTO6prOm gJHEGn3wCkpfly+5r69ayfqBHB6/kFRtzi49+Tp51VRJUPKLVxAISo0zuPL5Djtb Wla4Mqgfn1hVsDTiBIkEpK+HSBVr7gj172bs7B4TLvB/kXv2bkRDX2V5ZAYUTZX0 wvwyjybKEx2MyKjEb87t/yIfbL7tIHPOyikxPEkE7vTPmWT1N0xKszMnEfTMuBJR 2Jm7IXRVn6uqwIAzvUDktIMTIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIynE6A LXKNUtb9iUg4iayHSkHUMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx1WTvnqnfdrSSw4yTZjOPrk81KRt6w85DoWZL1veuQZgsD5inSrpLEBUU4Bf E4TJPTb8ZIbFQVFnv9JmQA8ZnmfQlocMd+l+DromEFeHgd3/Pex8VNLSgc/F/cHL 9h7AFv+5vND+iyWVahRtJjezWfxrSTcbk3hZuH0fhx30eLeZ7ca7TNiYIaXflZYj rCHP7zAHaetoFNB2BXdLaKr0D0Efya2skwQHhRmYCXsgVuR7ttzsviB0/q/nQBgk 8eFYgGQURSIjfOwndi29GcrQ5QgcSn8s8rTHd+bJnVaiyJAH+OFuDBje5cK1Hrt0 VjyuL34pXnd9RvPP0sXe7jeDGw== -----END CERTIFICATE-----Generated at Mon Sep 21 22:20:31 2026 by rpki-client