$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: 8UQ4aA4vh1XKPJSkWxzm1rZqF99/Adqce+Ypd5mYmzo= Subject key identifier: C5:0E:14:F5:53:4B:A5:AC:EC:E2:C6:E9:CB:67:4E:48:DB:5C:CF:F5 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0273 Signing time: Sun 27 Sep 2026 02:19:39 +0000 Manifest this update: Sun 27 Sep 2026 02:19:38 +0000 Manifest next update: Sun 04 Oct 2026 02:19:38 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: V7oubckej4jADpjec7WNkwWFLgxQseyCeRHfrm0NeAA=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Sep 27 02:19:38 2026 GMT Not After : Oct 4 02:19:38 2026 GMT Subject: CN=6ab87d3a-bd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:e6:61:17:e1:84:7f:4e:10:a6:95:17:d5: 6f:b3:94:32:51:92:3f:62:57:af:ac:64:98:5f:c2: 12:13:31:ff:98:df:32:eb:77:8e:71:7d:4b:4f:de: 53:2c:b4:e1:ab:1c:9f:4b:15:15:eb:14:11:d3:46: b3:3f:74:74:93:38:9d:43:42:9a:fe:46:3d:4a:66: 79:b3:62:33:15:28:2c:88:6b:93:6e:ee:ea:cc:c9: c9:66:78:98:e7:19:69:cc:65:9f:62:9d:8a:c6:24: 9a:ee:6b:0f:56:2c:b1:7c:eb:2a:a3:fa:08:42:5f: 40:e2:b7:26:e9:22:72:a2:45:cc:1d:61:83:7b:6f: dd:42:d4:f3:1a:76:be:51:f5:80:e7:9f:78:ee:87: 6e:a8:56:df:a3:19:53:49:df:18:f5:56:a3:74:1e: 8f:44:89:bb:82:6a:e7:8f:3c:90:fe:1e:85:7d:d0: 3c:47:9b:a1:c9:08:d4:50:b0:28:4c:c9:46:e6:30: 60:0e:9e:c4:3d:0b:08:42:bf:75:ff:98:d7:38:a6: a5:85:2a:d5:ea:39:55:f1:3c:80:d6:4e:46:ba:e3: 75:2d:f2:e5:60:4d:11:64:ed:74:24:ce:e6:15:69: 08:42:30:ba:c5:08:76:cf:d6:04:15:76:03:06:18: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:14:F5:53:4B:A5:AC:EC:E2:C6:E9:CB:67:4E:48:DB:5C:CF:F5 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:48:72:d7:ae:ea:14:27:59:58:65:a7:12:90:aa:59:be:f7: a3:b6:32:30:72:cd:c0:3f:37:29:b4:a9:38:71:ab:d3:60:6a: ea:d2:45:91:26:74:29:a5:87:3d:82:0e:01:e0:0b:71:b6:cc: bd:3b:1f:c5:56:75:26:37:8d:ed:60:7f:32:0d:c3:94:fa:58: 1e:79:29:c5:e0:6d:12:9d:94:29:e2:0c:82:ad:8b:45:72:cc: 88:f4:9d:24:f8:49:e2:b3:dd:f6:04:3f:85:bc:6b:04:08:de: f8:a5:57:2b:1b:83:d9:72:4f:ab:f7:5c:52:ae:57:1a:af:81: a1:80:bc:d3:c8:15:49:68:b0:8b:e3:50:ee:d1:fc:1b:72:86: a1:6a:64:e9:43:f4:6f:14:69:ca:31:5c:99:c2:89:dd:7d:3f: 44:9a:03:f6:57:03:d7:d0:c1:9b:0b:68:47:53:e5:3e:57:f2: 2e:65:c4:da:51:1a:3d:ce:06:68:4a:ee:91:55:29:e3:7f:5f: 68:be:5d:57:7f:b5:72:f8:ed:f9:be:61:1d:b9:75:4a:d3:50: 6c:10:93:30:94:d7:99:5d:47:cf:45:c7:33:39:ab:d2:ca:cf: 8b:34:62:30:de:27:ce:b2:db:61:f5:a4:93:cf:c7:14:99:29: b0:32:b3:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwOTI3MDIxOTM4WhcNMjYxMDA0MDIxOTM4WjAYMRYwFAYD VQQDEw02YWI4N2QzYS1iZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskTmYRfhhH9OEKaVF9Vvs5QyUZI/YlevrGSYX8ISEzH/mN8y63eOcX1LT95T LLThqxyfSxUV6xQR00azP3R0kzidQ0Ka/kY9SmZ5s2IzFSgsiGuTbu7qzMnJZniY 5xlpzGWfYp2KxiSa7msPViyxfOsqo/oIQl9A4rcm6SJyokXMHWGDe2/dQtTzGna+ UfWA55947oduqFbfoxlTSd8Y9VajdB6PRIm7gmrnjzyQ/h6FfdA8R5uhyQjUULAo TMlG5jBgDp7EPQsIQr91/5jXOKalhSrV6jlV8TyA1k5GuuN1LfLlYE0RZO10JM7m FWkIQjC6xQh2z9YEFXYDBhi77wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUOFPVT S6Ws7OLG6ctnTkjbXM/1MB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq0hy167qFCdZWGWnEpCqWb73o7YyMHLNwD83KbSpOHGr02Bq6tJFkSZ0KaWH PYIOAeALcbbMvTsfxVZ1JjeN7WB/Mg3DlPpYHnkpxeBtEp2UKeIMgq2LRXLMiPSd JPhJ4rPd9gQ/hbxrBAje+KVXKxuD2XJPq/dcUq5XGq+BoYC808gVSWiwi+NQ7tH8 G3KGoWpk6UP0bxRpyjFcmcKJ3X0/RJoD9lcD19DBmwtoR1PlPlfyLmXE2lEaPc4G aErukVUp439faL5dV3+1cvjt+b5hHbl1StNQbBCTMJTXmV1Hz0XHMzmr0srPizRi MN4nzrLbYfWkk8/HFJkpsDKzxQ== -----END CERTIFICATE-----Generated at Mon Sep 28 20:12:53 2026 by rpki-client