$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json) Hash identifier: U8Ata9U2RT4/Flnb8vaEHs+Tx1r3kgP/raM/iYEscJ0= Subject key identifier: 02:D3:89:11:D4:CB:F3:BC:E1:ED:90:20:09:78:BB:AF:1A:81:D4:C1 Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Certificate serial: 1C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft Manifest number: 1C3C Signing time: Sun 20 Sep 2026 16:10:20 +0000 Manifest this update: Sun 20 Sep 2026 16:10:19 +0000 Manifest next update: Sun 27 Sep 2026 16:10:19 +0000 Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: dzORP1Vx2dEgxlsCuESO2QgOnG2jnK7Cx9IYZZq1TrI=) 2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7240 (0x1c48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Validity Not Before: Sep 20 16:10:19 2026 GMT Not After : Sep 27 16:10:19 2026 GMT Subject: CN=6ab0056c-0093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:68:f9:47:ba:80:ac:7c:5b:83:92:5c:31: 8b:23:76:52:dd:eb:46:af:2d:65:62:68:8f:ff:9c: c8:86:84:4e:dd:cc:e2:4f:42:a2:c3:89:63:9d:68: 20:76:06:62:e9:b7:6e:48:ee:87:30:37:12:5f:b3: 4a:1f:8b:93:9c:bc:93:98:99:ec:85:79:99:0b:5d: 8e:16:b1:98:13:39:b2:c2:0a:98:b8:78:5e:12:06: 5f:fc:49:b1:01:26:20:37:8b:73:26:ba:fe:6c:79: 52:63:91:f0:25:9e:f8:bc:87:1b:ed:78:2e:94:74: 89:e0:1d:aa:f6:8b:21:0d:f2:a5:37:f6:e0:c6:ea: ce:39:4e:aa:fa:c5:34:f2:6b:0e:9d:d6:0b:53:55: c6:df:c4:8c:cb:9a:75:7c:1c:12:1e:93:b5:f4:03: ad:37:16:2d:8b:1b:b1:84:bc:bb:02:1a:af:3b:d6: 4a:3c:6a:28:1e:92:f8:d2:e3:12:f6:e0:63:b2:b4: 24:fe:c4:bb:86:f2:cf:5b:3d:02:93:e1:d2:5a:5d: 3a:38:de:ee:6e:28:44:09:79:dc:f8:c3:a7:ad:02: a7:4a:1e:f5:67:a1:84:8d:7c:16:fb:db:c8:d0:2c: 94:dd:04:d2:68:c8:63:16:67:41:c8:22:bb:b6:42: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:89:11:D4:CB:F3:BC:E1:ED:90:20:09:78:BB:AF:1A:81:D4:C1 X509v3 Authority Key Identifier: keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:03:af:08:31:e7:f0:db:a3:cf:7c:d5:46:e0:fb:aa:8c:49: a7:fe:a2:6c:5a:15:dc:da:92:24:d4:8e:c7:9f:3e:c7:93:42: ad:3c:c9:79:be:9f:ec:34:29:17:82:88:09:95:80:db:dc:33: f3:cc:4b:49:54:4c:73:99:ac:b8:9c:c5:a1:e1:09:80:35:25: 5e:d3:dd:89:82:05:44:ef:3a:e4:28:c5:e1:4e:ff:02:9f:f2: 8d:6e:16:30:5e:de:47:1b:b3:b9:c3:9a:dc:72:d0:a7:27:2c: 2a:91:cd:28:f7:63:ef:6d:83:ad:c5:f5:47:d7:56:e8:77:7a: c0:47:72:9f:95:33:d1:ad:27:b2:26:37:76:3b:de:00:1b:8f: 1e:b6:e9:9a:67:29:20:3d:7e:73:10:3f:92:b2:a3:53:50:29: 7f:cc:6e:1d:6d:3b:06:28:7b:01:6c:69:e4:16:65:22:f4:f7: 52:f6:f2:f5:f4:73:93:04:2d:21:6d:61:8b:66:79:da:15:f9: b4:14:ad:a3:79:39:dc:5b:9c:e8:ce:0a:d3:c6:80:59:8c:c1: e2:60:0a:e2:63:c5:b7:04:d5:1b:05:aa:7e:a4:8e:ca:42:06: e9:4b:b1:af:26:b5:b7:32:5e:e4:da:7f:20:f4:3f:fd:6c:e8: c4:86:d4:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD NzgwRTBGN0IwHhcNMjYwOTIwMTYxMDE5WhcNMjYwOTI3MTYxMDE5WjAYMRYwFAYD VQQDEw02YWIwMDU2Yy0wMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp81o+Ue6gKx8W4OSXDGLI3ZS3etGry1lYmiP/5zIhoRO3cziT0Kiw4ljnWgg dgZi6bduSO6HMDcSX7NKH4uTnLyTmJnshXmZC12OFrGYEzmywgqYuHheEgZf/Emx ASYgN4tzJrr+bHlSY5HwJZ74vIcb7XgulHSJ4B2q9oshDfKlN/bgxurOOU6q+sU0 8msOndYLU1XG38SMy5p1fBwSHpO19AOtNxYtixuxhLy7AhqvO9ZKPGooHpL40uMS 9uBjsrQk/sS7hvLPWz0Ck+HSWl06ON7ubihECXnc+MOnrQKnSh71Z6GEjXwW+9vI 0CyU3QTSaMhjFmdByCK7tkJimwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALTiRHU y/O84e2QIAl4u68agdTBMB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAgOvCDHn8Nujz3zVRuD7qoxJp/6ibFoV3NqSJNSOx58+x5NCrTzJeb6f7DQp F4KICZWA29wz88xLSVRMc5msuJzFoeEJgDUlXtPdiYIFRO865CjF4U7/Ap/yjW4W MF7eRxuzucOa3HLQpycsKpHNKPdj722DrcX1R9dW6Hd6wEdyn5Uz0a0nsiY3djve ABuPHrbpmmcpID1+cxA/krKjU1Apf8xuHW07Bih7AWxp5BZlIvT3Uvby9fRzkwQt IW1hi2Z52hX5tBSto3k53Fuc6M4K08aAWYzB4mAK4mPFtwTVGwWqfqSOykIG6Uux rya1tzJe5Np/IPQ//WzoxIbUPw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:52 2026 by rpki-client