$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft File: ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json) Hash identifier: jlzIL26RqTAp398QA7HGunTFwLTi3hkUOcp9dhRPH98= Subject key identifier: 6E:83:69:A5:6B:C2:A2:B5:B8:B9:8A:0A:1B:B5:1C:59:1F:06:99:D9 Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft Manifest number: 021D Signing time: Mon 21 Sep 2026 02:57:44 +0000 Manifest this update: Mon 21 Sep 2026 02:57:43 +0000 Manifest next update: Mon 28 Sep 2026 02:57:43 +0000 Files and hashes: 1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: sD+3nJO/Xu+enGeZEMqfa1B8/N+BFDWVL+gWPp9qI+w=) 2: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: evBEm2b+wO5EWpkoyV0JMMubzQxUV9WEBqLzlOLXTBE=) 3: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: 21MbeL2c4YLwBExJY7PKPByiCkIBI9z7opJchOT4zUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE Validity Not Before: Sep 21 02:57:43 2026 GMT Not After : Sep 28 02:57:43 2026 GMT Subject: CN=6ab09d28-2f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:15:cc:14:0d:6e:b0:54:a2:ac:ab:25:76: 7b:a4:d8:03:64:31:91:87:7f:66:96:9c:08:87:46: b2:31:2c:e6:7a:4e:c6:f2:72:60:58:74:c6:11:90: 11:a6:29:94:3c:21:88:65:59:dd:ad:3a:54:9c:1c: 6b:f1:e1:a4:fb:8d:26:39:99:3b:b2:e4:3c:28:1e: 79:b7:76:bc:1f:b6:d1:46:97:1f:bd:7c:f9:c8:36: d0:eb:ea:4e:52:8a:45:74:d2:fd:26:bc:09:0e:97: 98:14:2c:cd:ea:f3:e4:8c:68:bf:1d:ad:ab:6a:5a: 3e:a0:59:72:53:e1:4a:24:24:e6:33:3e:ff:7d:6b: 1c:2a:93:53:6f:fd:e5:e4:f1:63:25:38:83:a7:e7: b5:36:c4:60:21:91:5f:26:9a:95:1f:ad:9f:11:6a: ef:cb:f7:7b:e5:f3:d5:a3:ee:79:9a:fc:2a:d6:37: be:50:fa:9d:4d:cb:c8:27:7c:f4:bf:6b:11:fd:21: c8:c3:e1:13:85:5f:b8:9b:72:ba:6b:91:dd:1f:0b: 8f:ba:a8:7c:8b:55:50:cd:67:2a:ae:d9:84:20:ac: 2d:f4:1e:b7:c5:f5:ed:74:80:af:00:13:da:a5:3c: 8f:f2:12:11:dd:64:c6:d9:6a:6c:fe:38:2f:66:30: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:69:A5:6B:C2:A2:B5:B8:B9:8A:0A:1B:B5:1C:59:1F:06:99:D9 X509v3 Authority Key Identifier: keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:33:a2:7b:b2:c1:9c:62:66:d5:39:30:1e:41:e3:a6:63: 40:dd:f6:02:8b:cb:05:0b:fe:5a:4c:88:71:77:4d:71:58:19: f5:6c:ef:13:31:c2:d5:14:54:3a:b6:55:4f:0d:81:11:81:ba: f4:fb:8e:4f:71:d5:79:af:c5:60:94:bc:7a:ce:2c:a3:43:d3: 99:70:57:e9:4a:78:c0:9f:40:29:95:a0:59:59:85:e7:ed:83: 32:c5:95:6e:78:ec:44:af:af:f3:bf:cf:95:60:89:a3:bb:2d: 7e:ff:c0:b5:f8:87:a2:a1:0c:58:9a:6c:bf:08:a3:97:98:b8: 9a:38:19:94:ac:8c:ae:df:3c:0a:fb:c8:73:17:db:cd:59:08: c3:c1:5f:a5:26:30:2d:01:7b:0b:4d:7f:97:aa:6a:d4:72:9e: 76:fb:70:73:15:2e:bc:27:35:ee:91:a7:06:ff:be:6e:64:fd: 62:80:64:dd:7e:cb:5e:ac:89:4c:e0:fd:ba:1d:ed:30:e1:82: 88:91:c4:50:35:d4:d0:be:d4:b6:4d:af:07:b0:94:c6:6d:39: 16:f6:d4:5c:9d:4a:c6:a5:a8:79:b6:82:3e:6b:cb:f0:28:9e: 37:04:de:48:71:32:b0:71:30:0f:33:21:fe:0b:cd:fa:db:3d: 63:b2:a1:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB NTI4REYzQkUwHhcNMjYwOTIxMDI1NzQzWhcNMjYwOTI4MDI1NzQzWjAYMRYwFAYD VQQDEw02YWIwOWQyOC0yZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMQVzBQNbrBUoqyrJXZ7pNgDZDGRh39mlpwIh0ayMSzmek7G8nJgWHTGEZAR pimUPCGIZVndrTpUnBxr8eGk+40mOZk7suQ8KB55t3a8H7bRRpcfvXz5yDbQ6+pO UopFdNL9JrwJDpeYFCzN6vPkjGi/Ha2ralo+oFlyU+FKJCTmMz7/fWscKpNTb/3l 5PFjJTiDp+e1NsRgIZFfJpqVH62fEWrvy/d75fPVo+55mvwq1je+UPqdTcvIJ3z0 v2sR/SHIw+EThV+4m3K6a5HdHwuPuqh8i1VQzWcqrtmEIKwt9B63xfXtdICvABPa pTyP8hIR3WTG2Wps/jgvZjB0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6DaaVr wqK1uLmKChu1HFkfBpnZMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3 OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044 NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJv M0dRaXJqVVhBX0tsS044NzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfs4zonuywZxiZtU5MB5B46ZjQN32AovLBQv+WkyIcXdNcVgZ9WzvEzHC1RRU OrZVTw2BEYG69PuOT3HVea/FYJS8es4so0PTmXBX6Up4wJ9AKZWgWVmF5+2DMsWV bnjsRK+v87/PlWCJo7stfv/AtfiHoqEMWJpsvwijl5i4mjgZlKyMrt88CvvIcxfb zVkIw8FfpSYwLQF7C01/l6pq1HKedvtwcxUuvCc17pGnBv++bmT9YoBk3X7LXqyJ TOD9uh3tMOGCiJHEUDXU0L7Utk2vB7CUxm05FvbUXJ1KxqWoebaCPmvL8CieNwTe SHEysHEwDzMh/gvN+ts9Y7Kh8w== -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:18 2026 by rpki-client