$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: QZ2b7oCJXZcT2Zuu9Ijb5v+bDRFBPSavkrUSlabDZ7U= Subject key identifier: 4E:00:22:39:53:9B:38:C0:D0:94:E8:0E:7E:C3:FA:73:9D:70:25:86 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 35A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 358F Signing time: Thu 24 Sep 2026 15:13:56 +0000 Manifest this update: Thu 24 Sep 2026 15:13:56 +0000 Manifest next update: Thu 01 Oct 2026 15:13:56 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: XwsaGTGq69oBHRtfdG0rOaB7a8K2jL3sr1diW0HaEu4=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13736 (0x35a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Sep 24 15:13:56 2026 GMT Not After : Oct 1 15:13:56 2026 GMT Subject: CN=6ab53e34-868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:bf:e8:20:db:81:3d:3e:ec:17:65:08:2b: 5b:8c:cf:c7:b8:b1:8f:6f:f8:63:c4:9a:b2:d6:34: 3e:99:14:57:0f:c6:a5:54:a4:be:74:91:ed:32:65: b5:8b:5c:26:7b:f4:af:f8:77:93:c5:71:50:71:cf: a2:50:36:89:5e:92:70:57:5d:e6:cb:09:f2:79:ea: 91:3b:99:e3:a3:e9:ca:ce:5f:9b:74:fc:42:b3:52: aa:16:2e:f8:d5:53:bb:59:0a:8f:86:9f:d9:d2:81: 85:db:13:ba:c3:be:50:39:d5:b3:f1:be:c4:39:fb: c8:71:52:6b:5c:63:d7:68:a4:c6:b1:de:4c:90:7d: 9b:a3:65:dd:c0:ab:75:08:5e:4f:66:88:7a:01:17: dd:68:67:58:e9:fb:bb:ee:c5:93:f3:aa:bb:ad:3e: 35:63:98:90:a6:20:f7:48:8d:a4:42:3c:2f:5e:53: cb:2b:78:c6:36:af:4f:16:78:cf:96:97:36:3c:53: 3e:7d:dd:2a:6e:1f:7c:2d:37:65:bc:76:23:d9:2e: bb:ef:e9:d4:07:8b:e2:6c:1f:56:99:be:ee:37:6f: 4c:27:47:90:58:30:4e:eb:1e:6b:4d:34:2b:b0:9d: 82:6a:17:d8:b0:d6:49:53:94:cc:18:5b:22:88:32: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:22:39:53:9B:38:C0:D0:94:E8:0E:7E:C3:FA:73:9D:70:25:86 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2e:39:68:37:a4:ad:30:c0:36:e1:5d:da:4f:a8:48:86:94: 75:6b:db:e6:a9:f1:a8:a5:a1:03:76:48:38:33:fb:86:a5:28: 04:58:32:36:e6:e7:90:d8:5e:e0:9c:02:25:3a:65:a3:1b:f5: e2:3b:b5:e8:47:a1:89:b2:6d:14:5f:33:29:fc:69:42:d5:f8: a0:a6:6a:9a:8f:71:a7:03:89:cd:6f:b2:98:a6:29:73:21:17: 47:23:c7:28:cd:e6:d6:60:26:86:45:15:69:f8:d4:86:65:d8: 75:31:76:20:32:46:bc:c9:78:05:4e:9a:f6:53:30:db:30:ce: 42:9e:d8:ac:a5:c9:a9:3e:62:b9:c3:bf:65:53:17:da:d7:14: 1f:3e:1c:0d:25:5d:b2:8a:88:7f:74:a0:3a:1c:17:d2:79:f4: 10:10:02:98:61:f1:6c:13:95:15:d3:70:71:b3:32:d6:40:65: 5a:ab:f5:4f:00:4c:b1:34:e5:bf:dc:fa:78:0b:23:2e:04:7c: bf:10:43:da:a7:3e:20:da:86:97:58:3e:c7:14:4c:21:0b:48: 98:69:be:dd:0e:c5:09:22:15:95:6d:16:52:86:81:b1:fe:58: 34:6c:d7:02:97:ac:69:12:0b:0f:2c:bb:89:2e:58:0c:11:df: d4:68:f7:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwOTI0MTUxMzU2WhcNMjYxMDAxMTUxMzU2WjAYMRYwFAYD VQQDEw02YWI1M2UzNC04NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRq/6CDbgT0+7BdlCCtbjM/HuLGPb/hjxJqy1jQ+mRRXD8alVKS+dJHtMmW1 i1wme/Sv+HeTxXFQcc+iUDaJXpJwV13mywnyeeqRO5njo+nKzl+bdPxCs1KqFi74 1VO7WQqPhp/Z0oGF2xO6w75QOdWz8b7EOfvIcVJrXGPXaKTGsd5MkH2bo2XdwKt1 CF5PZoh6ARfdaGdY6fu77sWT86q7rT41Y5iQpiD3SI2kQjwvXlPLK3jGNq9PFnjP lpc2PFM+fd0qbh98LTdlvHYj2S677+nUB4vibB9Wmb7uN29MJ0eQWDBO6x5rTTQr sJ2CahfYsNZJU5TMGFsiiDJskwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4AIjlT mzjA0JToDn7D+nOdcCWGMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEi45aDekrTDANuFd2k+oSIaUdWvb5qnxqKWhA3ZIODP7hqUoBFgyNubnkNhe 4JwCJTploxv14ju16EehibJtFF8zKfxpQtX4oKZqmo9xpwOJzW+ymKYpcyEXRyPH KM3m1mAmhkUVafjUhmXYdTF2IDJGvMl4BU6a9lMw2zDOQp7YrKXJqT5iucO/ZVMX 2tcUHz4cDSVdsoqIf3SgOhwX0nn0EBACmGHxbBOVFdNwcbMy1kBlWqv1TwBMsTTl v9z6eAsjLgR8vxBD2qc+INqGl1g+xxRMIQtImGm+3Q7FCSIVlW0WUoaBsf5YNGzX ApesaRILDyy7iS5YDBHf1Gj3Vg== -----END CERTIFICATE-----Generated at Fri Sep 25 04:26:51 2026 by rpki-client