$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json) Hash identifier: XCd0McZZR3joYAZRdwbjiCxdEtOd5rEwlwf9hx8knL8= Subject key identifier: 19:83:59:07:55:AF:5F:6F:D2:68:7E:E0:9B:37:F8:25:08:9E:8F:C5 Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft Manifest number: AE Signing time: Mon 21 Sep 2026 07:11:14 +0000 Manifest this update: Mon 21 Sep 2026 07:11:14 +0000 Manifest next update: Mon 28 Sep 2026 07:11:14 +0000 Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: PkY4yQMND832awJXQhOqdAvdKBmudt06CVsM7ZuKaFA=) 2: 3B2923CEA59311F1BFA29E7E6111F970.roa (hash: zc/NW/dPGEzjO8NVANWmITjbMxQww0CXhaNhPAuHH4Q=) 3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: CYXzP8o6swk/peEjdB2z3uAC7jwSVj36GUM/F+voWoY=) 4: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: YFh8kkG+QLXCGW9AKwhLAh1lcjT3x4DocAw0SQLluL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Sep 21 07:11:14 2026 GMT Not After : Sep 28 07:11:14 2026 GMT Subject: CN=6ab0d892-cf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2c:b0:03:17:24:e9:c6:cd:7a:52:06:15:da: 55:81:b1:38:8e:8e:6e:d8:43:56:d9:b9:13:5a:1b: e5:81:b4:b8:7b:d8:22:d9:60:ca:91:36:9d:04:f9: 6e:5a:d4:d7:4a:a9:d3:21:34:d3:e9:6e:36:f2:f5: 97:9d:9e:24:69:2d:50:69:58:2c:c3:3d:33:91:e5: fa:cf:6e:72:55:a4:39:02:2f:dc:94:67:d2:bb:c6: 4a:75:78:a0:f9:91:e0:a5:57:74:0d:1d:9e:d1:52: 9e:33:58:c9:ad:41:be:d1:26:eb:be:db:01:0f:80: 35:c6:a9:2e:14:a9:38:5c:1f:37:fd:15:f2:2f:3b: 70:50:38:bf:35:4a:c7:ff:d9:5b:22:60:77:9e:b7: a8:37:c2:70:54:07:5d:c2:e0:da:93:49:4b:56:a6: 5d:12:f0:5e:d0:81:76:e7:df:3a:cd:03:c5:92:3f: e3:bd:35:df:8a:6e:54:52:85:54:24:f9:83:e5:12: ab:95:03:ef:e0:61:6a:9b:98:6d:77:b5:01:27:2c: 2e:5e:9c:c7:4d:65:48:e0:4e:66:5b:06:77:b8:d2: f2:54:42:0e:45:05:1b:17:cd:4c:d9:23:60:1a:9e: f1:1b:42:b4:09:88:eb:63:39:7e:19:98:af:b1:f2: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:59:07:55:AF:5F:6F:D2:68:7E:E0:9B:37:F8:25:08:9E:8F:C5 X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:dd:19:fe:17:0e:67:7d:0a:5f:81:e8:73:36:75:2a:b0:b5: db:69:d8:85:83:6a:96:ad:20:ae:eb:a7:9a:32:e5:59:88:17: 11:7f:23:1b:dd:fa:eb:73:af:de:ad:26:e5:19:b7:0d:bc:f7: db:85:c8:a4:71:e3:d6:91:8a:0b:81:8a:99:37:a5:5f:8c:f0: 2c:2a:11:b4:3b:4b:8d:b1:9d:a7:b9:be:2b:76:2e:4d:ec:44: 35:a0:a6:93:dd:12:ed:a8:bd:bd:b3:fd:e5:82:00:32:84:c7: 81:e2:a2:96:3e:99:03:b2:6d:e6:5a:6a:29:df:fd:7f:ee:f5: 69:5b:4c:63:1c:43:f2:1d:d0:5a:64:f6:51:78:cf:9c:30:bf: 2f:6c:56:09:b8:44:98:90:31:12:9d:48:95:f5:6d:de:0e:e2: 27:01:3f:26:fa:b9:d2:f2:a3:28:1f:2f:ad:a7:77:48:01:e5: 19:73:f2:7e:ab:27:2a:a7:00:d6:52:31:cf:89:46:13:8b:1e: 9e:58:25:08:b9:b9:e8:25:c0:fc:0c:73:a9:6b:f8:d8:be:e5: 88:5c:bd:c1:2e:9f:bb:b7:8d:04:40:7a:90:2e:25:3f:af:19: 32:4a:9b:40:f2:04:ed:ea:27:57:e6:72:90:4a:cd:ac:9e:19: d2:e2:f7:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNzYxMTAvBgNVBAUTKEJEOEUzQ0MyQTkzRDVEQkNEODQyNzUwOTczOEEzMTRC RjkwQzg4N0QwHhcNMjYwOTIxMDcxMTE0WhcNMjYwOTI4MDcxMTE0WjAYMRYwFAYD VQQDEw02YWIwZDg5Mi1jZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yywAxck6cbNelIGFdpVgbE4jo5u2ENW2bkTWhvlgbS4e9gi2WDKkTadBPlu WtTXSqnTITTT6W428vWXnZ4kaS1QaVgswz0zkeX6z25yVaQ5Ai/clGfSu8ZKdXig +ZHgpVd0DR2e0VKeM1jJrUG+0SbrvtsBD4A1xqkuFKk4XB83/RXyLztwUDi/NUrH /9lbImB3nreoN8JwVAddwuDak0lLVqZdEvBe0IF25986zQPFkj/jvTXfim5UUoVU JPmD5RKrlQPv4GFqm5htd7UBJywuXpzHTWVI4E5mWwZ3uNLyVEIORQUbF81M2SNg Gp7xG0K0CYjrYzl+GZivsfKbZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmDWQdV r19v0mh+4Js3+CUIno/FMB8GA1UdIwQYMBaAFL2OPMKpPV282EJ1CXOKMUv5DIh9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU3Ni9EOUU0QzRDQ0I5 MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhiellRblVKYzRveFNfa01p SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi92WTQ4d3FrOVhi ellRblVKYzRveFNfa01pSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV90Z/hcOZ30KX4HoczZ1KrC122nYhYNqlq0gruunmjLlWYgXEX8jG93663Ov 3q0m5Rm3Dbz324XIpHHj1pGKC4GKmTelX4zwLCoRtDtLjbGdp7m+K3YuTexENaCm k90S7ai9vbP95YIAMoTHgeKilj6ZA7Jt5lpqKd/9f+71aVtMYxxD8h3QWmT2UXjP nDC/L2xWCbhEmJAxEp1IlfVt3g7iJwE/Jvq50vKjKB8vrad3SAHlGXPyfqsnKqcA 1lIxz4lGE4senlglCLm56CXA/AxzqWv42L7liFy9wS6fu7eNBEB6kC4lP68ZMkqb QPIE7eonV+ZykErNrJ4Z0uL33A== -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:34 2026 by rpki-client