$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: jiXB2zF+sFlmShimuR9fwaRTGKPl3eoQ3MzSvxUVlIM= Subject key identifier: C1:FC:A0:5E:5B:4D:2E:0F:A9:51:37:91:66:28:98:F8:7A:F5:23:FD Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 0240 Signing time: Mon 21 Sep 2026 02:36:39 +0000 Manifest this update: Mon 21 Sep 2026 02:36:38 +0000 Manifest next update: Mon 28 Sep 2026 02:36:38 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: 118MLXas2r3U/mHENBII3YSsH40juvOD/6od+0oVW9k=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: U8FE/i1E0e1VdjYBpJbEe4K4AhYHyaPy2XZDjc+/jlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Sep 21 02:36:38 2026 GMT Not After : Sep 28 02:36:38 2026 GMT Subject: CN=6ab09836-0063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:46:1e:6b:66:7e:ab:43:97:72:54:c4:47: 2f:a5:b5:11:1a:61:e0:26:94:df:5f:0c:7d:f1:fb: 42:e5:55:90:c5:4d:4b:6c:60:96:19:98:2d:1c:39: e8:64:0d:93:29:90:8e:52:81:17:4d:72:d6:92:89: 51:be:3b:54:59:95:24:87:e9:60:db:a2:12:9a:ca: 8d:18:12:8e:d5:34:19:63:67:90:1a:6c:19:77:3c: f0:d3:63:c8:85:b3:5d:80:f7:a7:45:9b:4f:74:c0: 2e:78:d0:d8:ea:25:7e:8c:2c:42:1b:26:30:95:59: 2a:e8:eb:54:8f:87:c9:d9:83:05:0c:19:da:e1:8b: ba:4a:35:3a:a3:04:3b:39:f5:c9:83:d1:89:e8:06: b3:9b:08:a5:da:78:31:59:f3:73:b2:cd:61:1a:87: 22:97:bb:c9:a7:14:9d:d8:19:d7:24:a2:68:5e:9a: ec:57:98:10:f4:7c:9e:78:33:f4:a6:09:59:48:79: e4:a4:7a:4c:ef:98:04:b1:3f:04:cb:56:56:7d:78: c4:fe:31:68:5c:70:42:6a:b7:9a:09:50:85:e1:7b: 57:52:55:0a:45:7e:e7:25:0d:4f:d6:28:e7:f9:5e: cd:20:bb:2e:91:1a:81:34:3f:80:e4:89:31:bf:ff: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FC:A0:5E:5B:4D:2E:0F:A9:51:37:91:66:28:98:F8:7A:F5:23:FD X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:20:be:2a:e6:95:37:70:37:93:59:a4:4c:38:b8:ad:3e: 16:12:8e:c9:0e:2a:a3:48:c9:24:fb:38:49:0a:21:8c:a6:47: 88:fa:cc:80:96:e2:67:b5:4c:87:a7:6b:40:98:26:82:71:ec: ba:0d:99:ee:fd:26:8e:3e:60:66:6c:c6:08:d4:e6:7d:72:d1: 8d:55:c1:dc:ab:2d:d9:1e:47:ff:70:96:55:ee:ea:b6:fc:98: a8:5f:d5:b8:b1:69:2a:24:ce:6e:3d:b2:cc:c8:40:49:2c:47: 45:02:29:b9:12:78:ea:ac:f8:c6:d6:be:ce:cf:d3:55:8c:16: f2:a7:07:a2:4f:eb:75:ee:40:42:81:e0:dd:33:ce:a2:42:46: c2:05:ac:9a:73:a8:4a:3c:aa:95:64:ef:c3:df:a1:05:56:84: 6c:a8:a0:4c:5c:b1:cf:64:62:9a:5e:3c:92:ff:a1:70:f0:c9: a0:91:48:8e:e6:7b:74:39:6e:19:de:cf:f6:a4:4f:f6:d7:fb: 56:07:bc:32:27:cf:87:9a:f4:28:03:90:2c:3a:3a:1d:52:74: 90:8e:81:8e:31:fa:d6:16:8f:15:d9:ea:1e:06:79:b8:80:d9: a2:c3:80:e5:e7:dd:32:15:89:18:f7:7c:fb:81:18:dc:57:08: d4:dd:96:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjYwOTIxMDIzNjM4WhcNMjYwOTI4MDIzNjM4WjAYMRYwFAYD VQQDEw02YWIwOTgzNi0wMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoVGHmtmfqtDl3JUxEcvpbURGmHgJpTfXwx98ftC5VWQxU1LbGCWGZgtHDno ZA2TKZCOUoEXTXLWkolRvjtUWZUkh+lg26ISmsqNGBKO1TQZY2eQGmwZdzzw02PI hbNdgPenRZtPdMAueNDY6iV+jCxCGyYwlVkq6OtUj4fJ2YMFDBna4Yu6SjU6owQ7 OfXJg9GJ6Aazmwil2ngxWfNzss1hGocil7vJpxSd2BnXJKJoXprsV5gQ9HyeeDP0 pglZSHnkpHpM75gEsT8Ey1ZWfXjE/jFoXHBCareaCVCF4XtXUlUKRX7nJQ1P1ijn +V7NILsukRqBND+A5Ikxv/88QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMH8oF5b TS4PqVE3kWYomPh69SP9MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhsgvirmlTdwN5NZpEw4uK0+FhKOyQ4qo0jJJPs4SQohjKZHiPrMgJbiZ7VM h6drQJgmgnHsug2Z7v0mjj5gZmzGCNTmfXLRjVXB3Kst2R5H/3CWVe7qtvyYqF/V uLFpKiTObj2yzMhASSxHRQIpuRJ46qz4xta+zs/TVYwW8qcHok/rde5AQoHg3TPO okJGwgWsmnOoSjyqlWTvw9+hBVaEbKigTFyxz2Riml48kv+hcPDJoJFIjuZ7dDlu Gd7P9qRP9tf7Vge8MifPh5r0KAOQLDo6HVJ0kI6BjjH61haPFdnqHgZ5uIDZosOA 5efdMhWJGPd8+4EY3FcI1N2WIw== -----END CERTIFICATE-----Generated at Mon Sep 21 13:23:48 2026 by rpki-client