$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: UVMDTBTtPwU2Zo53sSi/hpRYFsBDIWLgSM6PghTASxU= Subject key identifier: E5:9B:09:B9:14:F6:AE:C8:CB:D5:D4:A3:39:4A:0C:89:07:EF:0C:08 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 0149 Signing time: Mon 21 Sep 2026 05:25:01 +0000 Manifest this update: Mon 21 Sep 2026 05:25:01 +0000 Manifest next update: Mon 28 Sep 2026 05:25:01 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: NfX5UEhLI6v+XaAu95gpVvQ3BZb8C2WjNZ7AOoT+PU4=) 2: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=) 3: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=) 4: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Sep 21 05:25:01 2026 GMT Not After : Sep 28 05:25:01 2026 GMT Subject: CN=6ab0bfad-e441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:96:ef:39:0c:00:6e:c3:fd:e6:d8:d0:6d: 93:37:0f:ba:e1:fe:4b:b6:14:fb:37:d2:4b:75:88: f1:b7:bb:31:7a:db:3e:96:e1:a5:e0:b0:47:20:69: 98:01:45:73:45:bc:af:4f:eb:d1:d6:8e:5b:9c:0a: 52:17:b0:25:9f:cf:d5:d5:e3:c9:07:b1:54:b9:2b: bd:a7:1b:35:f4:3e:9f:f1:c2:eb:0e:0c:57:3b:f0: f2:24:6d:c1:0a:f6:7c:d0:49:25:13:d3:58:62:ac: 03:a9:f4:1d:a5:d8:80:6d:45:a0:cf:a6:7c:ed:ff: c4:9e:81:6c:2b:10:65:31:85:ad:0a:7f:ea:ee:3c: 51:98:46:b5:36:92:07:ec:5e:d1:46:e8:25:da:19: 6f:c7:89:6e:2f:36:87:60:27:ce:45:75:14:ed:22: 93:fd:d1:e1:d4:76:f9:28:e9:3b:e3:92:1c:8e:28: 55:32:ed:ac:58:43:5e:0e:0f:56:c9:8a:ad:b0:80: cd:d8:10:25:1e:ac:b1:85:9a:59:9b:ba:da:40:a1: 79:21:36:1e:8b:da:93:fe:0c:2e:53:f5:93:9a:bd: aa:de:c2:c1:68:b7:db:7b:59:4e:07:d5:39:ae:29: de:89:8e:27:13:ef:3d:e3:b6:55:4f:39:22:28:58: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:09:B9:14:F6:AE:C8:CB:D5:D4:A3:39:4A:0C:89:07:EF:0C:08 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:1b:d3:95:7b:ba:8f:84:91:3b:7b:d9:3c:2a:bc:da:d3: 25:34:20:23:a3:aa:fd:72:c9:c5:e0:b7:a9:c1:dc:d4:20:d3: 88:78:90:d2:cd:be:a7:3b:e9:83:bf:17:1e:2a:55:f2:ef:4c: f6:35:32:70:9b:83:f8:4b:de:d1:43:a9:7b:ed:19:1f:06:aa: 51:c1:f8:6b:a9:7e:8c:6b:50:76:37:6a:9e:7a:68:fe:d7:ea: c9:30:6f:b0:a8:bf:34:2c:af:c8:fd:a5:8d:7c:be:8e:a7:50: 59:e9:c0:b2:6e:b9:32:bf:3e:9a:92:2e:9b:cf:b3:8c:e8:f5: f2:0f:ff:8d:6c:ea:bb:63:ef:5a:ee:1b:74:e1:aa:26:1f:8f: 40:8e:df:7f:f7:2e:3d:f4:d2:d4:1f:8e:25:37:a0:63:51:05: bd:1c:6c:39:c7:e5:a1:cd:dd:5f:cc:82:78:e6:31:63:c5:13: af:d6:aa:eb:05:c1:d1:30:1f:41:f8:11:0c:2e:a9:98:7a:8d: bd:5b:95:0f:03:4a:96:23:fa:45:31:e5:96:fd:14:89:81:a8: 2b:e0:fe:b4:af:ca:e0:7a:4c:e0:86:65:0d:bb:3d:3a:30:af: bf:8a:87:7d:0c:32:15:10:e4:a0:99:ea:15:2e:da:b2:db:1b: fd:3e:71:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjYwOTIxMDUyNTAxWhcNMjYwOTI4MDUyNTAxWjAYMRYwFAYD VQQDEw02YWIwYmZhZC1lNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOSW7zkMAG7D/ebY0G2TNw+64f5LthT7N9JLdYjxt7sxets+luGl4LBHIGmY AUVzRbyvT+vR1o5bnApSF7Aln8/V1ePJB7FUuSu9pxs19D6f8cLrDgxXO/DyJG3B CvZ80EklE9NYYqwDqfQdpdiAbUWgz6Z87f/EnoFsKxBlMYWtCn/q7jxRmEa1NpIH 7F7RRugl2hlvx4luLzaHYCfORXUU7SKT/dHh1Hb5KOk745IcjihVMu2sWENeDg9W yYqtsIDN2BAlHqyxhZpZm7raQKF5ITYei9qT/gwuU/WTmr2q3sLBaLfbe1lOB9U5 rineiY4nE+8947ZVTzkiKFiOHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWbCbkU 9q7Iy9XUozlKDIkH7wwIMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY+8b05V7uo+EkTt72TwqvNrTJTQgI6Oq/XLJxeC3qcHc1CDTiHiQ0s2+pzvp g78XHipV8u9M9jUycJuD+Eve0UOpe+0ZHwaqUcH4a6l+jGtQdjdqnnpo/tfqyTBv sKi/NCyvyP2ljXy+jqdQWenAsm65Mr8+mpIum8+zjOj18g//jWzqu2PvWu4bdOGq Jh+PQI7ff/cuPfTS1B+OJTegY1EFvRxsOcfloc3dX8yCeOYxY8UTr9aq6wXB0TAf QfgRDC6pmHqNvVuVDwNKliP6RTHllv0UiYGoK+D+tK/K4HpM4IZlDbs9OjCvv4qH fQwyFRDkoJnqFS7astsb/T5xew== -----END CERTIFICATE-----Generated at Mon Sep 21 16:10:15 2026 by rpki-client