$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: 0DboXcMNOVOezCPKvYJFnU0oDMHGv+Dn85ov+4oV2Qg= Subject key identifier: D8:9F:60:8F:ED:EA:CC:5C:36:C9:3F:E8:87:A9:C5:C8:D8:92:8C:4B Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 0399 Signing time: Wed 23 Sep 2026 00:23:04 +0000 Manifest this update: Wed 23 Sep 2026 00:23:04 +0000 Manifest next update: Wed 30 Sep 2026 00:23:04 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: 8X+7uRRW0JcrfC6Luy2RBTDW09Pz2JirFMbZLZxx3qI=) 2: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: MI7imB1oUQ+nBhE/F9pWSqwhaGqPvMCUwnO5mooHgWA=) 3: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: ocfm0632GkIQFqFPtClJ7d+H9AJy5vbW5Lcs0qelByk=) 4: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: pu6SoMWB6txH7Ha4WwK43mwzGqVFweaoNNhIGVki79Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Sep 23 00:23:04 2026 GMT Not After : Sep 30 00:23:04 2026 GMT Subject: CN=6ab31be8-cd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:94:c0:c2:0e:c3:2d:9b:b3:d2:fb:cd:d2: 7f:9a:3a:53:bd:50:37:0b:8d:45:0b:c9:e5:2c:0c: 37:e5:b9:47:ce:c8:e4:1c:4a:96:ba:9e:fb:3a:01: f0:b3:58:45:c7:9a:a8:7b:73:ed:e6:70:aa:f6:24: c2:2e:79:21:f7:c0:53:c0:72:84:00:7d:7e:83:b1: ef:be:3f:f1:76:d5:72:77:56:80:ed:b5:8f:23:9e: f5:16:e6:c3:aa:6f:5c:25:8f:a8:8e:87:f0:dd:6c: d6:18:32:23:cc:2d:f7:89:43:b7:7d:b1:b2:f1:2b: aa:17:38:06:77:0f:c4:d7:e6:d6:2d:41:ff:8a:7b: 2d:a1:dc:8a:53:e8:92:5a:ce:b4:03:ee:1a:3b:af: 52:bb:64:21:78:48:f2:1f:b9:55:51:60:c7:a9:ed: 66:dc:51:26:15:71:f0:86:b6:73:72:79:45:eb:a8: db:c3:d2:29:eb:62:0e:0d:bb:a3:18:d3:8d:c7:48: 67:11:d0:ae:6c:bb:6b:1c:37:b2:21:03:a6:fe:bb: 2e:a0:21:5e:44:ca:eb:c2:ce:3f:34:c7:dd:2f:2e: 5f:50:fd:ca:c3:c5:61:0d:99:d1:be:2c:45:c7:3b: cf:34:3a:fb:0a:87:37:16:0a:43:d3:12:c4:a9:a6: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:60:8F:ED:EA:CC:5C:36:C9:3F:E8:87:A9:C5:C8:D8:92:8C:4B X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:17:57:4a:4d:ab:e0:95:bf:17:09:93:11:bb:7d:7e:fa: 23:47:0e:8b:33:9b:ad:ec:f7:f1:01:00:4d:53:36:7a:39:ac: 2a:56:24:65:25:c2:f6:76:71:0c:76:b1:95:e2:d6:c5:ca:ac: 74:b4:9c:68:ca:89:e3:44:33:d6:17:9f:a2:df:bb:26:d6:c2: 8a:9f:2e:2d:2f:97:e0:71:16:9b:da:95:7a:8f:ae:88:9d:20: 88:6a:bf:17:01:2d:48:d4:00:7e:3f:ed:fc:5f:2b:6a:3d:c5: b2:e1:d8:83:be:a0:dd:4b:c6:e5:91:3f:d6:4e:65:98:0c:ee: 7e:b9:36:a0:7e:3c:5b:17:d5:33:95:b1:da:5c:e4:e7:59:70: 8e:95:77:a0:95:09:49:0f:04:dd:55:04:9d:09:da:66:63:e6: b5:b7:7e:28:86:81:1c:72:e5:1b:07:be:7a:42:e1:95:d4:66: 28:e9:75:61:0a:85:cf:a3:86:9a:c5:58:c6:74:06:1a:8c:d8: 86:17:9d:1a:1f:8a:1e:a6:fd:5d:98:0c:ba:f5:47:d8:cf:60: ef:d9:4a:ad:2d:76:d4:c2:e5:39:7e:a1:22:69:59:64:ab:dd: fb:2e:90:2e:0c:9d:ff:45:07:bf:fb:6a:0a:99:de:d8:46:dc: a5:6d:df:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjYwOTIzMDAyMzA0WhcNMjYwOTMwMDAyMzA0WjAYMRYwFAYD VQQDEw02YWIzMWJlOC1jZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NWUwMIOwy2bs9L7zdJ/mjpTvVA3C41FC8nlLAw35blHzsjkHEqWup77OgHw s1hFx5qoe3Pt5nCq9iTCLnkh98BTwHKEAH1+g7Hvvj/xdtVyd1aA7bWPI571FubD qm9cJY+ojofw3WzWGDIjzC33iUO3fbGy8SuqFzgGdw/E1+bWLUH/instodyKU+iS Ws60A+4aO69Su2QheEjyH7lVUWDHqe1m3FEmFXHwhrZzcnlF66jbw9Ip62IODbuj GNONx0hnEdCubLtrHDeyIQOm/rsuoCFeRMrrws4/NMfdLy5fUP3Kw8VhDZnRvixF xzvPNDr7Coc3FgpD0xLEqaYYzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNifYI/t 6sxcNsk/6IepxcjYkoxLMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEE0XV0pNq+CVvxcJkxG7fX76I0cOizObrez38QEATVM2ejmsKlYkZSXC9nZx DHaxleLWxcqsdLScaMqJ40Qz1hefot+7JtbCip8uLS+X4HEWm9qVeo+uiJ0giGq/ FwEtSNQAfj/t/F8raj3FsuHYg76g3UvG5ZE/1k5lmAzufrk2oH48WxfVM5Wx2lzk 51lwjpV3oJUJSQ8E3VUEnQnaZmPmtbd+KIaBHHLlGwe+ekLhldRmKOl1YQqFz6OG msVYxnQGGozYhhedGh+KHqb9XZgMuvVH2M9g79lKrS121MLlOX6hImlZZKvd+y6Q Lgyd/0UHv/tqCpne2EbcpW3fAQ== -----END CERTIFICATE-----Generated at Thu Sep 24 07:16:25 2026 by rpki-client