$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: /IZCs+9awaIhyWPazHls+ygMyuw2z0DtbyWS+bwABv4= Subject key identifier: FC:A7:BA:5B:20:96:F0:13:80:0F:FB:44:39:1F:1C:6D:24:6A:1A:D8 Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: A7 Signing time: Fri 25 Sep 2026 02:44:23 +0000 Manifest this update: Fri 25 Sep 2026 02:44:23 +0000 Manifest next update: Fri 02 Oct 2026 02:44:23 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: 0WOdLCNAKLJ1KfEuNgyPvpuA/3DJAsr92xA/hv5vrCk=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Sep 25 02:44:23 2026 GMT Not After : Oct 2 02:44:23 2026 GMT Subject: CN=6ab5e007-dcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:14:fa:fa:eb:dc:4f:4a:92:7c:8f:d3:f9: 6f:f3:fa:f8:51:ed:b4:8f:bb:3d:7d:32:f6:d3:13: 1f:ed:ed:20:62:4c:16:94:8b:07:b8:c0:ca:d9:50: c9:2b:56:ad:9d:71:f4:5d:8c:0e:05:d9:38:e6:5c: 1e:a8:32:f2:7c:3b:20:15:fa:72:e2:1d:3f:bd:0c: be:a4:c7:3b:21:19:7d:34:fb:cf:15:bd:47:b3:aa: f0:0b:8a:e8:cd:d1:6e:99:be:d4:91:2c:a3:16:32: 34:50:69:52:44:6d:8f:d7:c6:ab:43:18:04:bf:18: 06:20:b6:f5:74:54:1c:eb:d2:a2:9a:f1:6f:c6:9b: 05:d5:5c:41:a8:5b:99:40:9b:12:60:43:2c:9b:a6: c5:bf:17:d7:1d:89:2e:ac:1f:74:29:8c:a8:d6:e9: 2a:94:a7:cc:62:bd:82:c0:5f:18:bd:6e:87:7b:41: 2d:8e:59:a1:3a:fc:1b:63:79:30:ff:cb:a3:93:ba: ae:24:ca:bc:50:f6:45:c6:71:29:f4:51:03:3e:7c: 1f:36:40:93:e8:29:1f:93:a2:71:d3:c0:ba:fb:df: 6f:7a:28:e4:a2:f0:9c:93:03:3d:c7:e7:d1:3d:f9: b9:83:1e:4a:ff:8f:a5:9c:aa:43:5c:96:e4:b7:54: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:BA:5B:20:96:F0:13:80:0F:FB:44:39:1F:1C:6D:24:6A:1A:D8 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:01:9b:0d:1c:f4:95:84:d1:b3:f0:63:89:51:d4:3c:ec:19: e3:d2:9c:6b:cf:ef:01:d4:6c:d9:01:b6:a9:af:f9:82:a1:94: df:39:e6:47:7e:dd:f3:91:93:c1:6c:90:aa:05:21:63:fb:8d: 35:06:2d:61:83:ee:1d:22:17:46:17:d5:8c:ca:a0:7a:bf:91: 4d:82:fb:28:04:95:48:4d:1a:7b:48:c3:1a:f1:d9:2e:d2:78: a4:46:da:ca:43:18:a2:71:da:40:95:20:91:39:f2:a9:65:1a: a1:19:c2:78:ca:a8:8a:38:47:92:9e:44:3e:b3:b6:cd:ff:7b: 5d:0f:8a:7a:15:1e:88:40:e3:76:ca:8f:0c:b2:f0:13:d8:1d: a1:9e:1c:b1:13:28:49:77:8c:29:45:89:69:3e:91:dc:1e:0a: 67:72:e7:01:4b:23:b1:2b:55:34:70:5a:c5:78:cd:80:20:e9: bd:e2:ee:8c:d3:ba:0d:37:ba:11:1f:62:32:35:60:2e:f0:38: 75:18:95:85:b5:4e:f3:15:90:0c:03:56:2f:23:b4:cd:d3:81: 91:1e:9e:75:69:32:0f:c4:f3:30:11:61:36:43:86:a9:92:9b: 41:3f:0c:79:1d:5d:da:59:6e:f5:ba:95:bb:19:52:6a:1c:2d: 71:aa:f5:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKEQxNjY4MTY3M0YxMThBMTAwRUMyMDE0NzRDQ0ZCQjUx ODc4M0Q5NjAwHhcNMjYwOTI1MDI0NDIzWhcNMjYxMDAyMDI0NDIzWjAYMRYwFAYD VQQDEw02YWI1ZTAwNy1kY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwgU+vrr3E9KknyP0/lv8/r4Ue20j7s9fTL20xMf7e0gYkwWlIsHuMDK2VDJ K1atnXH0XYwOBdk45lweqDLyfDsgFfpy4h0/vQy+pMc7IRl9NPvPFb1Hs6rwC4ro zdFumb7UkSyjFjI0UGlSRG2P18arQxgEvxgGILb1dFQc69KimvFvxpsF1VxBqFuZ QJsSYEMsm6bFvxfXHYkurB90KYyo1ukqlKfMYr2CwF8YvW6He0EtjlmhOvwbY3kw /8ujk7quJMq8UPZFxnEp9FEDPnwfNkCT6Ckfk6Jx08C6+99veijkovCckwM9x+fR Pfm5gx5K/4+lnKpDXJbkt1STuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPynulsg lvATgA/7RDkfHG0kahrYMB8GA1UdIwQYMBaAFNFmgWc/EYoQDsIBR0zPu1GHg9lg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9CMzdCNzg0QUJF OUUxMUYwOTgxQjRDMzJDNEY5QUUwMi8wV2FCWno4UmloQU93Z0ZIVE0tN1VZZUQy V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9CMzdCNzg0QUJFOUUxMUYwOTgxQjRDMzJDNEY5QUUwMi8wV2FCWno4Umlo QU93Z0ZIVE0tN1VZZUQyV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEAGbDRz0lYTRs/BjiVHUPOwZ49Kca8/vAdRs2QG2qa/5gqGU3znmR37d85GT wWyQqgUhY/uNNQYtYYPuHSIXRhfVjMqger+RTYL7KASVSE0ae0jDGvHZLtJ4pEba ykMYonHaQJUgkTnyqWUaoRnCeMqoijhHkp5EPrO2zf97XQ+KehUeiEDjdsqPDLLw E9gdoZ4csRMoSXeMKUWJaT6R3B4KZ3LnAUsjsStVNHBaxXjNgCDpveLujNO6DTe6 ER9iMjVgLvA4dRiVhbVO8xWQDANWLyO0zdOBkR6edWkyD8TzMBFhNkOGqZKbQT8M eR1d2llu9bqVuxlSahwtcar1Jw== -----END CERTIFICATE-----Generated at Sun Sep 27 00:19:45 2026 by rpki-client