$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: X3HDra6sVmtiuSaMsXWFfhaHKAsVfyPoPC6/ywgX+lA= Subject key identifier: 1F:BE:B4:8F:9B:CB:59:6C:0D:D1:D9:D1:3A:BA:C7:74:6B:8A:6D:C3 Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: F8 Signing time: Mon 21 Sep 2026 06:15:49 +0000 Manifest this update: Mon 21 Sep 2026 06:15:49 +0000 Manifest next update: Mon 28 Sep 2026 06:15:49 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: wzZYzC2Wymyx1VR1YWFQOHePcbJ5fADOqm1J4u4X+G0=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Sep 21 06:15:49 2026 GMT Not After : Sep 28 06:15:49 2026 GMT Subject: CN=6ab0cb95-4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:30:57:af:bf:a8:a9:2d:b0:19:c4:a1:e1: bc:23:5b:df:86:79:c7:1b:05:3f:b5:ce:66:1a:44: a3:17:dc:2c:42:f0:cc:bb:5f:b3:f7:96:22:2c:07: 68:4b:94:02:47:ad:e9:d6:90:ac:cd:94:86:4e:75: 4e:6e:ba:51:9d:be:a3:f8:9f:ab:4d:17:c6:81:1d: 5d:e2:15:07:72:8f:47:9b:e2:ed:4b:12:2f:2e:fb: b3:c6:0c:e1:58:0f:93:e2:fd:9f:e0:d0:58:1b:51: b9:7e:a4:53:55:62:39:b7:1d:b1:e8:e2:26:d6:9b: b8:75:80:e5:1c:dc:cc:89:85:35:1b:a4:a1:2d:9f: 28:a3:12:47:76:aa:7d:41:89:1e:02:33:b4:2f:45: 88:cc:74:f0:db:b9:86:bc:da:bc:e3:06:9f:67:b2: 52:19:a1:38:ec:a0:7b:c2:f7:cd:5a:eb:31:70:30: 1d:81:4d:d3:48:28:e5:d8:9b:d5:07:97:8e:14:7b: 3e:f6:14:19:48:41:8a:9c:83:40:d0:f7:48:15:9f: 25:cf:07:07:84:2c:e7:6a:eb:2e:35:00:e4:38:9b: 75:5e:b0:e4:8e:e8:a9:34:50:a5:9c:fa:24:75:9b: 04:5d:d0:e9:9f:59:ea:e4:fc:b1:bb:c7:93:14:db: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:B4:8F:9B:CB:59:6C:0D:D1:D9:D1:3A:BA:C7:74:6B:8A:6D:C3 X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d7:70:36:56:a4:64:a7:60:53:86:f3:b5:de:bf:7e:66:e1: 91:ed:fe:23:24:5a:a3:ab:b8:9a:81:66:b6:f2:34:37:6b:1f: ef:b2:e3:58:3e:cb:6e:b7:0e:f6:f8:c5:f9:8e:1a:48:d2:de: 6d:0f:1c:03:d7:7c:ce:d2:d7:4e:36:d3:b2:bc:90:17:75:32: fc:24:e6:e2:6a:e5:db:50:19:91:e3:26:ad:b6:f8:79:be:ac: a9:4b:a4:32:14:79:0f:cb:03:66:c0:2f:d3:79:b6:ae:b9:72: 28:f5:5f:20:91:ef:87:b2:31:92:5a:a9:bc:63:fb:67:55:d8: b8:00:22:d7:bc:da:8f:c1:57:64:b3:64:71:d6:7a:fd:07:b9: 5d:12:eb:4e:8f:f6:71:c9:cb:89:67:ff:1f:93:1c:0d:1b:7f: fe:bf:0d:e3:89:65:06:3c:92:db:42:0d:d3:b5:3b:77:89:f0: aa:11:9b:2f:d0:4a:54:6c:7c:d2:54:20:eb:c6:f6:fa:28:25: 50:c1:4d:6e:93:4f:3f:7d:f1:c8:19:7e:71:99:b8:4e:be:66: 12:ae:f6:62:7e:6d:1a:24:02:80:b3:36:2d:df:d3:92:5e:65: b2:64:ef:2b:0b:96:9b:60:13:c7:dc:89:dc:2a:6a:55:f7:af: 64:8a:de:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0 NUU4MENCQjYwHhcNMjYwOTIxMDYxNTQ5WhcNMjYwOTI4MDYxNTQ5WjAYMRYwFAYD VQQDEw02YWIwY2I5NS00ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAQwV6+/qKktsBnEoeG8I1vfhnnHGwU/tc5mGkSjF9wsQvDMu1+z95YiLAdo S5QCR63p1pCszZSGTnVObrpRnb6j+J+rTRfGgR1d4hUHco9Hm+LtSxIvLvuzxgzh WA+T4v2f4NBYG1G5fqRTVWI5tx2x6OIm1pu4dYDlHNzMiYU1G6ShLZ8ooxJHdqp9 QYkeAjO0L0WIzHTw27mGvNq84wafZ7JSGaE47KB7wvfNWusxcDAdgU3TSCjl2JvV B5eOFHs+9hQZSEGKnINA0PdIFZ8lzwcHhCznausuNQDkOJt1XrDkjuipNFClnPok dZsEXdDpn1nq5Pyxu8eTFNs+YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB++tI+b y1lsDdHZ0Tq6x3Rrim3DMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6 UHRUOHFvMGlnRjFGNkF5N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtdwNlakZKdgU4bztd6/fmbhke3+IyRao6u4moFmtvI0N2sf77LjWD7LbrcO 9vjF+Y4aSNLebQ8cA9d8ztLXTjbTsryQF3Uy/CTm4mrl21AZkeMmrbb4eb6sqUuk MhR5D8sDZsAv03m2rrlyKPVfIJHvh7IxklqpvGP7Z1XYuAAi17zaj8FXZLNkcdZ6 /Qe5XRLrTo/2ccnLiWf/H5McDRt//r8N44llBjyS20IN07U7d4nwqhGbL9BKVGx8 0lQg68b2+iglUMFNbpNPP33xyBl+cZm4Tr5mEq72Yn5tGiQCgLM2Ld/Tkl5lsmTv KwuWm2ATx9yJ3CpqVfevZIre1w== -----END CERTIFICATE-----Generated at Tue Sep 22 17:09:21 2026 by rpki-client