$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: 4bgXskKCG0B6bNTMJsZrcNYYh5gS1+YTdtk8Nz7hWko= Subject key identifier: D4:6C:D5:70:A7:67:61:4D:57:40:C6:87:9F:02:91:28:7F:4F:C0:DA Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 359C Signing time: Sun 20 Sep 2026 14:16:11 +0000 Manifest this update: Sun 20 Sep 2026 14:16:11 +0000 Manifest next update: Sun 27 Sep 2026 14:16:11 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: Fd+uaBdj04AybBtAy5ZIMlx9/kurIISzgVRN19lQkF0=) 2: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=) 3: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Sep 20 14:16:11 2026 GMT Not After : Sep 27 14:16:11 2026 GMT Subject: CN=6aafeaab-0b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:34:fa:de:f5:3f:8a:14:d4:bf:be:db:df: 00:51:f0:5c:0d:f3:5f:db:e9:d8:a0:eb:08:e5:41: 28:79:d6:a2:9a:7d:2f:8d:4c:6f:34:a4:1f:97:54: 23:41:98:51:48:a9:66:8f:d4:7f:0c:32:dd:84:0f: ea:3a:aa:7e:46:6e:48:b2:df:35:9e:f3:36:00:7b: 69:90:28:54:7c:34:7b:07:40:7d:40:a4:c7:c2:a3: 5c:a5:3a:ab:0d:23:67:e7:cc:51:63:23:5e:d0:4c: 79:0b:55:12:cd:9e:8f:fb:7e:6e:af:6e:49:a2:f4: 61:c8:f6:0c:70:56:67:47:d8:ac:95:34:ec:53:cd: db:5f:22:16:7c:d5:d9:33:c7:96:94:e6:48:a1:1f: 1e:43:0c:4f:9b:88:b3:dd:ac:1f:f6:e1:76:d1:88: ab:bd:a8:27:30:fe:3d:cf:62:18:c4:10:b0:6b:ae: 27:83:17:0d:b5:2a:da:ba:3f:4b:4d:23:b5:9f:51: cc:25:53:f3:1f:7c:be:90:7e:b6:a0:fc:fa:50:de: 86:7a:06:c7:cf:c0:65:93:36:c3:f6:c9:4b:e5:72: 7f:47:1d:ff:48:83:54:a2:1b:cd:e6:ea:13:1f:af: b9:a3:b8:68:84:c0:2c:dd:3f:81:9b:3f:fd:37:93: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:D5:70:A7:67:61:4D:57:40:C6:87:9F:02:91:28:7F:4F:C0:DA X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:48:e8:2b:31:1d:be:21:1a:60:19:cf:c6:89:3e:81:71: 10:0c:fe:0c:f1:d3:d8:ec:88:27:d5:c9:97:16:18:d2:af:fd: 3a:79:4f:ec:26:d9:69:b8:16:fb:64:9e:32:0c:56:98:31:6f: 44:81:ae:a3:07:95:7b:1f:96:b0:1d:1c:9d:d3:8a:41:cb:84: 34:74:15:fd:98:ca:7a:ae:1f:9b:1b:a9:a2:5c:0b:78:68:e4: 8b:01:af:3a:25:33:80:23:4b:d8:5d:5e:0b:eb:b1:b8:0e:a3: 4b:2a:0d:ec:ea:26:0b:ee:b2:f2:a8:42:2a:d2:a9:80:21:33: 83:e4:72:2b:7b:1c:d2:c0:f6:9c:bb:60:71:30:33:a0:45:e3: 36:f3:bb:5a:43:5e:90:02:b5:d4:1b:02:13:8a:06:7f:e8:6d: 5d:0f:3d:eb:b5:7a:26:8e:11:ae:54:51:0f:c0:36:43:64:ad: 57:c7:cb:aa:59:b6:94:4b:f3:4d:db:24:7f:ef:39:c3:bd:5d: 29:cb:6e:08:43:a0:b1:80:18:a6:c8:77:51:f4:92:c7:85:cb: 97:84:e5:f4:b7:76:ef:87:40:fe:e0:eb:62:ad:1b:09:59:a2: 15:5a:17:3c:dd:3f:19:b9:39:93:76:5b:f2:9f:ce:6e:71:ab: 92:6d:75:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjYwOTIwMTQxNjExWhcNMjYwOTI3MTQxNjExWjAYMRYwFAYD VQQDEw02YWFmZWFhYi0wYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeI0+t71P4oU1L++298AUfBcDfNf2+nYoOsI5UEoedaimn0vjUxvNKQfl1Qj QZhRSKlmj9R/DDLdhA/qOqp+Rm5Ist81nvM2AHtpkChUfDR7B0B9QKTHwqNcpTqr DSNn58xRYyNe0Ex5C1USzZ6P+35ur25JovRhyPYMcFZnR9islTTsU83bXyIWfNXZ M8eWlOZIoR8eQwxPm4iz3awf9uF20YirvagnMP49z2IYxBCwa64ngxcNtSrauj9L TSO1n1HMJVPzH3y+kH62oPz6UN6GegbHz8BlkzbD9slL5XJ/Rx3/SINUohvN5uoT H6+5o7hohMAs3T+Bmz/9N5NswwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRs1XCn Z2FNV0DGh58CkSh/T8DaMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGVdI6CsxHb4hGmAZz8aJPoFxEAz+DPHT2OyIJ9XJlxYY0q/9OnlP7CbZabgW +2SeMgxWmDFvRIGuoweVex+WsB0cndOKQcuENHQV/ZjKeq4fmxupolwLeGjkiwGv OiUzgCNL2F1eC+uxuA6jSyoN7OomC+6y8qhCKtKpgCEzg+RyK3sc0sD2nLtgcTAz oEXjNvO7WkNekAK11BsCE4oGf+htXQ8967V6Jo4RrlRRD8A2Q2StV8fLqlm2lEvz Tdskf+85w71dKctuCEOgsYAYpsh3UfSSx4XLl4Tl9Ld274dA/uDrYq0bCVmiFVoX PN0/Gbk5k3Zb8p/ObnGrkm11dg== -----END CERTIFICATE-----Generated at Tue Sep 22 00:06:54 2026 by rpki-client