$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: ExnVOJLvOtqExNoIv/rjccSwxi3clmMG9E/eS2fhZMU= Subject key identifier: C1:49:D6:A3:D6:BC:C1:62:B0:97:F3:B4:D4:C1:1E:E4:89:00:52:61 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 0105 Signing time: Mon 21 Sep 2026 06:32:01 +0000 Manifest this update: Mon 21 Sep 2026 06:32:00 +0000 Manifest next update: Mon 28 Sep 2026 06:32:00 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: 8WYuByLfqWXeQfEP3SDpMJiMSj7V0mJuYssN8/7yyNI=) 2: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=) 3: A4D647F8420A11F19BB08D67C6833773.roa (hash: 7ta4NcXLd0120qpCjRoGvxcqclWZ3ruYKBZNOVjHZBY=) 4: E12AF83A718411F19EC4F12F8DA30FBC.roa (hash: /06lVIawu5ZFpT6lyrtNFRn6XgMDzR3BtSSDKpiMdlw=) 5: 4F0B8C7C388011F1BE557BBBB9833773.roa (hash: PqQn1rWfcnxhJ31RrkXdp9U2ItXg+6//POl2Zl4Pmg0=) 6: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=) 7: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=) 8: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: 2bIHfNgf3SYxeEBRZLT2l0XeWicAsKTg167W+KCEKQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Sep 21 06:32:00 2026 GMT Not After : Sep 28 06:32:00 2026 GMT Subject: CN=6ab0cf60-782f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:90:b2:fb:98:82:9e:b5:ef:d4:44:bc:34: 92:43:6f:78:3e:4e:fa:52:61:b3:d7:36:76:3c:a4: ae:3d:b9:d8:8a:9c:d2:7a:23:27:0b:26:99:dd:bc: c8:03:3d:1d:e8:2b:47:3c:67:a5:e2:39:49:7f:45: f6:23:30:0f:72:e5:95:cb:a7:0c:04:80:c5:5e:aa: 6a:e5:4c:53:e6:08:e9:20:83:dd:39:73:c4:15:15: da:df:f0:7b:4f:10:53:29:9f:69:17:da:20:52:ec: 07:7d:55:24:04:fe:07:ca:df:7f:a3:c3:b4:43:78: 1e:d3:77:b8:90:dc:85:5d:4c:75:16:90:7f:cf:6f: f5:0c:7c:95:e0:41:3a:72:57:0d:4d:fe:37:b6:b1: 39:46:56:58:03:73:33:89:00:38:7d:7e:1a:e8:57: 0a:6a:ef:40:3a:66:45:d1:53:f6:6e:f2:22:cf:ba: b5:48:e7:74:9a:cc:8c:94:83:e9:8a:d5:97:78:de: c8:07:04:4c:5d:bd:8b:89:43:f6:bc:08:c8:c5:17: 61:3e:a4:59:c0:a4:3c:4c:bc:45:6d:75:c9:6c:a6: f2:88:c5:03:52:7a:ac:29:65:fa:6f:dd:66:9a:7d: c2:e9:56:f0:27:c7:91:c3:85:e4:ab:f4:5f:e7:e9: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:49:D6:A3:D6:BC:C1:62:B0:97:F3:B4:D4:C1:1E:E4:89:00:52:61 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bd:ad:73:e3:73:cd:99:3d:5e:52:89:83:7d:35:38:c7:19: 3f:07:5f:86:53:d2:4d:e2:34:b8:8c:7e:89:7b:4e:85:60:53: d1:e8:41:3a:ed:d9:57:0f:30:7c:24:3d:7d:b7:73:3a:b2:2f: 8c:a9:36:e7:f6:71:ab:f9:8b:7c:2f:4d:43:75:84:b5:44:1d: 46:d4:7a:1a:07:8d:25:99:eb:24:fc:10:63:7e:01:47:34:2d: aa:07:1c:29:2d:9c:03:71:5a:cc:4e:0c:c6:ed:94:16:88:f0: bc:a9:47:3c:f3:8d:13:76:2a:17:97:6c:be:11:e2:7a:26:9d: 2c:ae:0e:ef:d2:ab:aa:49:61:60:b3:26:56:b9:45:6a:4c:c7: 20:1e:5c:ae:67:c1:fb:eb:8d:f8:c6:3d:cd:a2:88:e5:7f:79: f6:f2:d7:c2:1d:c8:08:ef:a3:81:01:b1:00:bf:a8:68:78:f4: fc:d6:91:c2:0c:9d:c7:e8:e4:a8:f8:60:85:9f:1a:5c:79:f5: ef:a1:35:1b:ce:54:17:83:c0:8e:dc:cb:27:18:9b:27:de:17: 23:87:b9:60:5b:eb:7d:2d:f3:74:05:88:04:ab:93:02:99:1c: 54:dc:c1:72:23:a8:c1:81:8f:4e:74:d4:ee:2e:91:ae:b8:18: 76:12:02:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MwQzkxMTAvBgNVBAUTKDQ3QjU3N0I5QzhBQkUyQzM2MDBDNUI0RTc5M0ZGNEQ0 N0I2NTA2MjAwHhcNMjYwOTIxMDYzMjAwWhcNMjYwOTI4MDYzMjAwWjAYMRYwFAYD VQQDEw02YWIwY2Y2MC03ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBuQsvuYgp6179REvDSSQ294Pk76UmGz1zZ2PKSuPbnYipzSeiMnCyaZ3bzI Az0d6CtHPGel4jlJf0X2IzAPcuWVy6cMBIDFXqpq5UxT5gjpIIPdOXPEFRXa3/B7 TxBTKZ9pF9ogUuwHfVUkBP4Hyt9/o8O0Q3ge03e4kNyFXUx1FpB/z2/1DHyV4EE6 clcNTf43trE5RlZYA3MziQA4fX4a6FcKau9AOmZF0VP2bvIiz7q1SOd0msyMlIPp itWXeN7IBwRMXb2LiUP2vAjIxRdhPqRZwKQ8TLxFbXXJbKbyiMUDUnqsKWX6b91m mn3C6VbwJ8eRw4Xkq/Rf5+mfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFJ1qPW vMFisJfztNTBHuSJAFJhMB8GA1UdIwQYMBaAFEe1d7nIq+LDYAxbTnk/9NR7ZQYg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzBDOS9DNURBQkVFQTVG QjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRzTmdERnRPZVRfMDFIdGxC aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9SN1YzdWNpcjRz TmdERnRPZVRfMDFIdGxCaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADr2tc+NzzZk9XlKJg301OMcZPwdfhlPSTeI0uIx+iXtOhWBT0ehBOu3ZVw8w fCQ9fbdzOrIvjKk25/Zxq/mLfC9NQ3WEtUQdRtR6GgeNJZnrJPwQY34BRzQtqgcc KS2cA3FazE4Mxu2UFojwvKlHPPONE3YqF5dsvhHieiadLK4O79KrqklhYLMmVrlF akzHIB5crmfB++uN+MY9zaKI5X959vLXwh3ICO+jgQGxAL+oaHj0/NaRwgydx+jk qPhghZ8aXHn176E1G85UF4PAjtzLJxibJ94XI4e5YFvrfS3zdAWIBKuTApkcVNzB ciOowYGPTnTU7i6RrrgYdhICFw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:35:51 2026 by rpki-client