$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: E0QNAqe1CSYUFSA4rIaNLIBdLg4rWJojpAcU9Cm73q8= Subject key identifier: DB:42:D5:54:1F:92:5E:29:DB:4A:11:10:AC:24:33:8D:20:83:B3:5C Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0CA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0C79 Signing time: Tue 22 Sep 2026 18:32:26 +0000 Manifest this update: Tue 22 Sep 2026 18:32:26 +0000 Manifest next update: Tue 29 Sep 2026 18:32:26 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: CenhbiYVwAjGgurx3MSPJMO8ZMfTLwQFQZDGqxHjxmY=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Sep 22 18:32:26 2026 GMT Not After : Sep 29 18:32:26 2026 GMT Subject: CN=6ab2c9ba-0e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:b3:67:a7:23:05:49:72:c3:cf:a1:bd:fa: 0e:ad:e9:79:4e:8c:75:f9:7f:62:59:55:b2:0f:82: 56:54:04:ce:dc:ac:8b:88:24:3e:80:59:9a:f0:1d: 5d:43:0b:dc:ce:24:40:b7:e5:67:e9:8f:0f:db:ea: c2:6f:4d:d5:b7:1e:7d:5f:14:b3:df:5a:eb:52:92: 36:a1:62:4f:53:d5:e5:12:41:12:04:11:36:b5:f4: e0:c6:cb:81:4b:62:27:92:36:ac:6a:a6:9f:67:0e: 44:ed:18:8a:21:be:3b:d8:8f:f7:0a:9a:b1:8f:26: b5:ce:58:a7:0e:59:25:3d:58:1e:70:a8:87:dd:6f: 41:98:8c:dc:34:45:e0:9f:2b:47:06:72:fa:59:49: 71:c1:8e:91:58:68:4a:69:fd:33:41:0a:78:ff:1e: a6:27:fc:d6:31:1f:77:d9:32:9a:94:8f:c3:0f:ea: a5:cf:7f:5b:25:90:51:62:e8:b4:01:01:74:2b:9a: d9:2d:fc:09:0b:da:e8:76:f4:20:fe:c2:3f:9a:2e: 51:3c:b2:e7:e1:c0:7b:51:60:75:d0:67:6c:94:5b: e4:12:f1:53:cd:64:6a:b2:47:00:c6:df:13:1b:da: b9:e7:c1:7f:f5:84:51:34:ea:68:e5:e7:b1:ab:26: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:42:D5:54:1F:92:5E:29:DB:4A:11:10:AC:24:33:8D:20:83:B3:5C X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:10:b2:48:c1:c8:07:5f:a7:89:56:d8:bf:28:76:79:62:39: 80:b6:05:3e:ae:92:cd:b1:8f:65:0a:9b:2d:4d:1e:21:16:0d: 65:2a:c8:08:89:4e:83:aa:c0:47:c2:24:09:be:fc:b1:f2:d1: ff:f6:4c:02:86:4d:f9:e3:5e:c8:42:ae:a0:52:43:08:ae:e5: 29:de:09:06:ac:af:46:93:23:5f:d8:52:eb:8c:45:1f:24:0d: 6a:ea:91:06:a7:fc:a6:14:12:b5:02:de:93:0a:bd:a9:83:bf: 0c:2f:e0:75:d5:0a:b1:e2:fb:3b:55:f4:6c:9e:78:c2:8c:05: ce:0e:27:65:b8:7d:31:1b:4e:90:0a:bc:1d:11:f8:76:66:e0: 90:5c:da:68:6f:57:e9:87:32:ae:c1:36:54:00:38:d7:fb:ec: 4c:a9:f9:77:81:0e:ed:66:7f:95:b4:ba:59:c5:ff:8d:d4:11: 6e:bb:a8:e7:da:a0:90:9e:db:52:80:86:00:30:e1:30:e9:12: 59:84:59:49:60:1c:43:ff:da:75:8c:fd:5e:c1:f5:0d:b2:79: 33:38:9b:c7:0c:1f:c5:10:5c:51:29:82:9a:cc:8f:68:85:ed: 12:93:ce:49:cd:21:69:f8:0a:e9:0e:77:0c:fa:51:88:d6:e9: 23:a7:06:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjYwOTIyMTgzMjI2WhcNMjYwOTI5MTgzMjI2WjAYMRYwFAYD VQQDEw02YWIyYzliYS0wZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpqzZ6cjBUlyw8+hvfoOrel5Tox1+X9iWVWyD4JWVATO3KyLiCQ+gFma8B1d QwvcziRAt+Vn6Y8P2+rCb03Vtx59XxSz31rrUpI2oWJPU9XlEkESBBE2tfTgxsuB S2InkjasaqafZw5E7RiKIb472I/3Cpqxjya1zlinDlklPVgecKiH3W9BmIzcNEXg nytHBnL6WUlxwY6RWGhKaf0zQQp4/x6mJ/zWMR932TKalI/DD+qlz39bJZBRYui0 AQF0K5rZLfwJC9rodvQg/sI/mi5RPLLn4cB7UWB10GdslFvkEvFTzWRqskcAxt8T G9q558F/9YRRNOpo5eexqyYvQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtC1VQf kl4p20oREKwkM40gg7NcMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAORCySMHIB1+niVbYvyh2eWI5gLYFPq6SzbGPZQqbLU0eIRYNZSrICIlOg6rA R8IkCb78sfLR//ZMAoZN+eNeyEKuoFJDCK7lKd4JBqyvRpMjX9hS64xFHyQNauqR Bqf8phQStQLekwq9qYO/DC/gddUKseL7O1X0bJ54wowFzg4nZbh9MRtOkAq8HRH4 dmbgkFzaaG9X6YcyrsE2VAA41/vsTKn5d4EO7WZ/lbS6WcX/jdQRbruo59qgkJ7b UoCGADDhMOkSWYRZSWAcQ//adYz9XsH1DbJ5MzibxwwfxRBcUSmCmsyPaIXtEpPO Sc0hafgK6Q53DPpRiNbpI6cGeQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:08:15 2026 by rpki-client