$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json) Hash identifier: jGPZZqWTgFWeBlrV5L88RrPUJIwTxNg8DwPeHwZoL6U= Subject key identifier: 31:C3:3A:54:D7:A4:2B:BD:B6:97:69:F4:9F:3A:09:7E:FF:BF:C0:8E Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 Certificate issuer: /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft Manifest number: 0B53 Signing time: Sun 20 Sep 2026 20:01:40 +0000 Manifest this update: Sun 20 Sep 2026 20:01:40 +0000 Manifest next update: Sun 27 Sep 2026 20:01:40 +0000 Files and hashes: 1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: jnf+WmM43mt5jQPs36GC/zWKxVWyA4jKMN0cUYt+TMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774 Validity Not Before: Sep 20 20:01:40 2026 GMT Not After : Sep 27 20:01:40 2026 GMT Subject: CN=6ab03ba4-8b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:12:21:6d:7d:52:4e:24:1c:7b:84:3b:c2: bb:e8:c5:00:18:3a:20:b4:9e:8f:3a:41:77:c9:1a: 64:0f:e2:f5:86:10:50:86:fc:4e:85:54:98:87:74: f7:3a:2d:e0:9f:e7:66:e2:ef:98:97:4b:bf:01:99: f1:06:21:00:99:e1:b0:58:78:51:75:09:8c:5a:9c: a4:7a:7d:16:55:a7:1f:f4:97:91:47:f7:aa:43:21: b4:50:66:97:b3:52:db:4b:c1:1b:2a:09:6a:90:7a: 84:8c:89:5a:59:b7:45:32:cf:b1:e7:c4:90:71:ed: 55:21:e3:b8:4d:b9:6f:29:dd:c8:82:7e:42:17:6c: 7f:d5:cf:8a:7d:d6:1a:98:f9:ce:d3:3f:df:d7:73: 56:9f:bf:e0:82:23:73:dc:30:42:e3:62:78:87:22: 80:e8:b2:b4:41:da:7c:ce:c8:22:a0:e7:d6:dc:61: 26:f6:a2:12:92:80:d6:5e:8e:93:a3:22:bc:1f:11: 16:af:27:59:64:b9:c4:1b:f3:f2:fb:d5:5d:9f:d0: da:4d:0c:65:47:4a:76:b6:40:4d:de:db:cc:fc:76: d4:dd:60:30:3b:ef:3f:ac:12:d7:9b:69:0f:27:de: 7c:c3:be:58:7f:81:ea:d6:b2:2b:11:0f:6d:7e:7c: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:3A:54:D7:A4:2B:BD:B6:97:69:F4:9F:3A:09:7E:FF:BF:C0:8E X509v3 Authority Key Identifier: keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:35:8c:8a:21:3a:24:57:2d:08:f3:a5:54:40:94:6c:41:5f: c1:d8:61:bb:25:36:3e:4a:01:8d:1b:34:3b:c7:f1:6b:f5:df: 75:90:e5:9f:a8:0a:ae:07:94:46:e7:51:aa:03:dd:b1:19:a8: b5:04:a2:fe:5c:22:a9:33:78:da:37:20:52:a2:3b:a3:78:9a: 53:dd:a9:19:c1:64:3d:5b:89:fb:a1:f2:09:21:99:ad:ff:05: cf:fb:f8:dd:09:dc:7d:18:9e:f2:4e:41:cb:f4:aa:da:6a:a4: 38:ff:df:80:1a:c9:57:e4:b7:28:de:b0:22:c3:31:6d:15:27: 68:2c:4b:d4:34:31:c4:5b:d1:87:f1:a4:34:9e:26:73:46:05: 43:45:d3:e0:28:32:22:97:80:0e:ad:f4:1b:94:a1:c4:19:d6: c6:5e:f4:c6:39:ca:aa:dd:af:8a:08:40:70:6e:45:91:f1:17: d9:7d:0b:ac:0d:57:68:3f:30:b7:4f:c2:f0:22:5b:49:bd:58: 72:5e:f0:e1:8d:d9:6e:5e:82:0c:ba:23:93:fb:37:44:64:ca: 72:ee:ee:72:bc:1a:de:f5:2f:1c:99:3b:06:c5:7a:d0:28:a7: 58:6d:df:20:b3:35:55:a2:27:57:12:06:3d:6a:a1:27:a7:4f: 56:68:14:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDlEMUVDNjVGRENDMDU5RDk2REY1RDM5OTkyRkIxNDc5 NzdCNzU3NzQwHhcNMjYwOTIwMjAwMTQwWhcNMjYwOTI3MjAwMTQwWjAYMRYwFAYD VQQDEw02YWIwM2JhNC04YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlkSIW19Uk4kHHuEO8K76MUAGDogtJ6POkF3yRpkD+L1hhBQhvxOhVSYh3T3 Oi3gn+dm4u+Yl0u/AZnxBiEAmeGwWHhRdQmMWpyken0WVacf9JeRR/eqQyG0UGaX s1LbS8EbKglqkHqEjIlaWbdFMs+x58SQce1VIeO4TblvKd3Ign5CF2x/1c+KfdYa mPnO0z/f13NWn7/ggiNz3DBC42J4hyKA6LK0Qdp8zsgioOfW3GEm9qISkoDWXo6T oyK8HxEWrydZZLnEG/Py+9Vdn9DaTQxlR0p2tkBN3tvM/HbU3WAwO+8/rBLXm2kP J958w75Yf4Hq1rIrEQ9tfnwcHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHDOlTX pCu9tpdp9J86CX7/v8COMB8GA1UdIwQYMBaAFJ0exl/cwFnZbfXTmZL7FHl3t1d0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdkbHQ5ZE9aa3ZzVWVYZTNW M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SN0dYOXpBV2RsdDlkT1prdnNVZVhlM1YzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9uUjdHWDl6QVdk bHQ5ZE9aa3ZzVWVYZTNWM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDWMiiE6JFctCPOlVECUbEFfwdhhuyU2PkoBjRs0O8fxa/XfdZDln6gKrgeU RudRqgPdsRmotQSi/lwiqTN42jcgUqI7o3iaU92pGcFkPVuJ+6HyCSGZrf8Fz/v4 3QncfRie8k5By/Sq2mqkOP/fgBrJV+S3KN6wIsMxbRUnaCxL1DQxxFvRh/GkNJ4m c0YFQ0XT4CgyIpeADq30G5ShxBnWxl70xjnKqt2vighAcG5FkfEX2X0LrA1XaD8w t0/C8CJbSb1Ycl7w4Y3Zbl6CDLojk/s3RGTKcu7ucrwa3vUvHJk7BsV60CinWG3f ILM1VaInVxIGPWqhJ6dPVmgUpA== -----END CERTIFICATE-----Generated at Tue Sep 22 06:26:35 2026 by rpki-client