$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: sJtpbQ1QhjZVetSyvTh14imzqo9RvJsDThkAof9kwDg= Subject key identifier: E4:7B:2F:46:D9:8A:6F:4D:F1:89:76:51:93:98:52:44:C4:46:01:22 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 026B Signing time: Mon 21 Sep 2026 02:10:14 +0000 Manifest this update: Mon 21 Sep 2026 02:10:14 +0000 Manifest next update: Mon 28 Sep 2026 02:10:14 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: axRqHumh1hZ0jwjTcTFs7dkoUbBpaek3KI/XfhjOeCM=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: 68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=) 3: E40FA6ECA53A11F185933D3A4611F970.roa (hash: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Sep 21 02:10:14 2026 GMT Not After : Sep 28 02:10:14 2026 GMT Subject: CN=6ab09206-3f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:fc:da:68:42:34:30:38:11:ec:89:ca:77: 90:60:c4:a0:36:fd:17:bd:25:85:e1:45:e8:9a:fd: 17:fd:ee:98:e1:58:7e:7c:42:e0:61:aa:70:c5:de: fc:f9:a6:5d:0a:72:c9:55:b1:4b:df:c1:17:13:e6: 43:99:f5:f3:75:37:4e:76:2d:ee:82:04:af:38:4f: c5:dd:49:e5:64:95:87:ed:93:c9:de:33:f1:cc:cd: c8:fc:7e:e9:71:d2:b0:3b:a4:48:5e:86:7c:3c:ff: e6:ba:c4:4e:22:54:9c:0a:8b:59:64:a0:b4:a6:40: 0d:1c:33:72:27:72:25:57:86:ae:fb:15:eb:82:45: a0:b2:65:d1:20:d0:d4:92:be:b5:e3:47:15:39:65: de:6a:1b:a5:84:84:56:68:50:62:97:90:39:39:1a: 87:8b:36:8c:e2:b9:75:ad:3f:95:d0:90:23:e9:86: 2f:16:5c:75:dc:53:b7:5e:13:c7:58:2b:f0:0d:f8: 45:18:22:95:e7:88:34:42:e2:dd:b0:5a:70:20:51: f2:6a:a1:bb:fe:04:16:ed:1b:6e:f4:76:9c:1a:65: bc:49:38:a4:94:7f:59:0e:7b:08:12:6a:02:46:b9: a7:91:ce:b9:53:86:ed:dc:37:7c:dd:19:4a:f6:bc: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7B:2F:46:D9:8A:6F:4D:F1:89:76:51:93:98:52:44:C4:46:01:22 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7a:77:7b:46:37:52:82:91:11:cd:6e:99:0c:ce:fe:36:6c: 81:b1:5d:a3:16:77:6e:0e:d0:9e:b2:b2:47:11:8d:8d:ab:36: f7:b5:f8:83:cc:2d:b1:24:f8:cb:2d:65:37:2b:e0:c8:d5:d0: 98:f8:d2:72:17:ca:ce:4b:5b:96:9e:1e:76:6d:d1:52:05:8b: 98:ad:8c:79:64:49:46:4b:74:7b:44:5b:a3:df:ed:aa:ee:a2: 5f:28:9e:dd:32:ce:79:18:0f:d9:21:a9:1d:34:d4:b8:4b:26: 4f:75:78:2e:e7:fe:52:93:a5:60:a8:79:47:75:49:92:dd:a3: 35:45:00:b1:94:9a:10:9c:3b:98:04:20:9a:b1:24:fb:38:b0: 30:6d:f8:fe:0f:54:a5:49:86:43:d8:28:72:7c:8f:aa:d8:8f: 1d:23:0d:ad:28:97:95:c4:3d:de:ff:24:55:6a:57:6b:dd:6f: 2d:08:ce:27:a3:51:7a:87:b9:d9:29:44:2a:b0:9e:14:ba:e2: f6:07:ae:09:46:14:61:cc:78:c8:73:40:aa:6a:5b:80:f4:e1: 96:49:9c:68:70:e6:8e:4c:0f:52:01:d5:27:80:11:7b:91:19: d2:20:a3:02:47:ee:d9:b2:37:60:44:36:c1:c6:38:88:b3:44: 31:cf:45:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwOTIxMDIxMDE0WhcNMjYwOTI4MDIxMDE0WjAYMRYwFAYD VQQDEw02YWIwOTIwNi0zZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YH82mhCNDA4EeyJyneQYMSgNv0XvSWF4UXomv0X/e6Y4Vh+fELgYapwxd78 +aZdCnLJVbFL38EXE+ZDmfXzdTdOdi3uggSvOE/F3UnlZJWH7ZPJ3jPxzM3I/H7p cdKwO6RIXoZ8PP/musROIlScCotZZKC0pkANHDNyJ3IlV4au+xXrgkWgsmXRINDU kr6140cVOWXeahulhIRWaFBil5A5ORqHizaM4rl1rT+V0JAj6YYvFlx13FO3XhPH WCvwDfhFGCKV54g0QuLdsFpwIFHyaqG7/gQW7Rtu9HacGmW8STiklH9ZDnsIEmoC Rrmnkc65U4bt3Dd83RlK9rxJ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOR7L0bZ im9N8Yl2UZOYUkTERgEiMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANHp3e0Y3UoKREc1umQzO/jZsgbFdoxZ3bg7QnrKyRxGNjas297X4g8wtsST4 yy1lNyvgyNXQmPjSchfKzktblp4edm3RUgWLmK2MeWRJRkt0e0Rbo9/tqu6iXyie 3TLOeRgP2SGpHTTUuEsmT3V4Luf+UpOlYKh5R3VJkt2jNUUAsZSaEJw7mAQgmrEk +ziwMG34/g9UpUmGQ9gocnyPqtiPHSMNrSiXlcQ93v8kVWpXa91vLQjOJ6NReoe5 2SlEKrCeFLri9geuCUYUYcx4yHNAqmpbgPThlkmcaHDmjkwPUgHVJ4ARe5EZ0iCj Akfu2bI3YEQ2wcY4iLNEMc9FEg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:07:53 2026 by rpki-client