$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: GPhTUHsvqUAj4g8jWkRpz9dLQOpK5f1xMGnQK4sqppU= Subject key identifier: 94:4A:9A:F5:2A:FD:F6:02:3A:AF:58:91:A1:76:49:D6:8C:30:1C:BF Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 0106 Signing time: Wed 23 Sep 2026 06:19:23 +0000 Manifest this update: Wed 23 Sep 2026 06:19:22 +0000 Manifest next update: Wed 30 Sep 2026 06:19:22 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: tyCiNXItY3IXRJJqbHRiU12ZLVRTjVW/hjvhcGPmh1M=) 2: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 3: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 4: E12AF83A718411F19EC4F12F8DA30FBC.roa (hash: /06lVIawu5ZFpT6lyrtNFRn6XgMDzR3BtSSDKpiMdlw=) 5: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) 6: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 7: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 8: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: 2bIHfNgf3SYxeEBRZLT2l0XeWicAsKTg167W+KCEKQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Sep 23 06:19:22 2026 GMT Not After : Sep 30 06:19:22 2026 GMT Subject: CN=6ab36f6b-a5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:c0:76:0f:80:05:91:d5:c7:75:7d:c6:37: d1:10:ec:65:79:56:3e:12:a3:5b:f6:a0:3f:5c:cb: d5:e1:c6:e8:c4:b6:3f:c1:9f:23:90:2a:42:fd:df: ea:6a:5c:f6:ca:17:dc:0b:38:f9:e7:3f:da:3b:1e: f7:f7:b4:f5:b9:ee:e7:e5:c9:f2:ae:2b:c8:4a:4d: 07:96:7b:82:da:47:ff:88:11:3b:9a:5b:a0:bb:3e: 0d:23:c8:d2:eb:f0:55:09:10:c3:c9:e1:e4:06:c5: f2:1e:4f:fd:5b:44:80:40:dd:c0:4e:c6:45:7b:e6: f1:57:00:cd:5a:91:4e:c9:f0:31:f0:37:aa:a0:25: 62:66:5a:3a:bd:54:63:bb:aa:00:a1:b7:95:53:91: 03:77:e8:30:93:bb:bb:f3:d3:f1:d5:26:22:14:92: 3f:ef:73:4d:ed:3a:dc:f3:45:15:0e:fc:8e:1a:5a: c8:c2:19:43:56:9e:a1:93:8b:9a:f4:31:bf:a4:26: 0d:c0:b2:de:0a:d8:7d:89:e7:f0:7c:55:3f:02:1a: 71:4e:05:06:65:d1:e1:bf:b1:9b:a8:c5:d4:9b:ff: d6:ff:b5:ef:35:51:91:60:27:4e:42:cc:de:c1:e3: 71:39:c2:bc:d3:95:d4:25:a0:52:2b:ee:9d:af:9e: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4A:9A:F5:2A:FD:F6:02:3A:AF:58:91:A1:76:49:D6:8C:30:1C:BF X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:dc:7e:19:4c:c6:a1:5e:92:97:00:61:3d:14:4f:97:ae:dc: af:1f:0e:e0:6a:80:b5:0c:9a:c8:ea:c4:7c:9e:e1:01:4b:bd: 14:e1:30:34:57:bb:f4:64:e5:f6:f8:bf:a0:28:de:69:27:65: 9d:ac:f6:d7:78:f5:5e:9a:d8:f0:4e:36:1f:d1:87:24:10:d6: 32:71:e0:bd:78:71:e6:05:e5:8e:a0:32:1c:68:c4:03:f8:ab: 3a:73:37:6d:41:5a:be:2b:60:85:b7:de:b3:5e:b9:76:78:0c: e4:f2:c0:34:09:62:b3:5c:12:5c:53:54:55:50:8e:53:9b:4c: 06:f9:5b:de:08:df:90:0e:dd:00:cf:a1:ee:f1:c8:2e:2f:64: 77:49:fc:5f:53:9e:46:e4:9b:9c:8d:87:dc:a8:e6:2e:80:f3: c6:3b:f3:fa:aa:56:aa:2d:56:fa:88:e2:ac:58:a7:6b:14:2b: e9:3a:93:94:31:5e:2c:51:e0:56:95:ff:02:3e:33:98:af:f6: b6:94:50:7a:ba:9b:ea:4c:c4:62:f7:90:01:43:0a:4a:ec:47: ec:2c:1a:7c:66:ab:32:ba:b7:5b:74:fe:29:23:07:fb:e7:4b: 4b:67:7c:f1:5c:97:25:c4:b4:63:be:c5:54:45:8f:11:9e:dd: bd:41:dd:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwOTIzMDYxOTIyWhcNMjYwOTMwMDYxOTIyWjAYMRYwFAYD VQQDEw02YWIzNmY2Yi1hNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAjAdg+ABZHVx3V9xjfREOxleVY+EqNb9qA/XMvV4cboxLY/wZ8jkCpC/d/q alz2yhfcCzj55z/aOx7397T1ue7n5cnyrivISk0HlnuC2kf/iBE7mluguz4NI8jS 6/BVCRDDyeHkBsXyHk/9W0SAQN3ATsZFe+bxVwDNWpFOyfAx8DeqoCViZlo6vVRj u6oAobeVU5EDd+gwk7u789Px1SYiFJI/73NN7Trc80UVDvyOGlrIwhlDVp6hk4ua 9DG/pCYNwLLeCth9iefwfFU/AhpxTgUGZdHhv7GbqMXUm//W/7XvNVGRYCdOQsze weNxOcK805XUJaBSK+6dr56pHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRKmvUq /fYCOq9YkaF2SdaMMBy/MB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdx+GUzGoV6SlwBhPRRPl67crx8O4GqAtQyayOrEfJ7hAUu9FOEwNFe79GTl 9vi/oCjeaSdlnaz213j1XprY8E42H9GHJBDWMnHgvXhx5gXljqAyHGjEA/irOnM3 bUFavitghbfes165dngM5PLANAlis1wSXFNUVVCOU5tMBvlb3gjfkA7dAM+h7vHI Li9kd0n8X1OeRuSbnI2H3KjmLoDzxjvz+qpWqi1W+ojirFinaxQr6TqTlDFeLFHg VpX/Aj4zmK/2tpRQerqb6kzEYveQAUMKSuxH7CwafGarMrq3W3T+KSMH++dLS2d8 8VyXJcS0Y77FVEWPEZ7dvUHdhw== -----END CERTIFICATE-----Generated at Thu Sep 24 07:19:38 2026 by rpki-client