$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: T/5abw7DgJ/doY+J1IeJamYxWredgFBsi/YxUdL4pI8= Subject key identifier: C3:76:15:C6:40:70:6C:90:C0:79:05:FD:CC:25:09:1D:E9:60:06:F6 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: AE Signing time: Mon 21 Sep 2026 07:03:14 +0000 Manifest this update: Mon 21 Sep 2026 07:03:14 +0000 Manifest next update: Mon 28 Sep 2026 07:03:14 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: LqNgjt7Hy22fY4/cA1e2In2HNAiXyoTJaW09UDQMeBA=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Sep 21 07:03:14 2026 GMT Not After : Sep 28 07:03:14 2026 GMT Subject: CN=6ab0d6b2-581e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:d8:cb:a4:45:58:2e:d5:35:e8:8c:14:f1: 61:70:44:dd:53:6a:78:38:18:40:1d:39:1a:f4:ca: 19:4c:ba:b4:d2:6c:5f:cf:eb:ba:4a:14:b1:6f:2c: 0a:88:e0:59:ef:25:69:5d:bc:d0:a1:c4:bb:81:92: c2:76:bf:a3:db:cd:dd:27:e8:06:9c:0e:4d:52:01: 1c:27:dd:26:f6:4a:14:14:90:76:f2:a6:1a:ab:bb: 51:a8:02:c9:74:39:93:cb:da:3f:46:34:49:64:b3: 4d:fd:4c:26:c1:1b:64:06:07:ce:f6:20:3b:e8:b2: 3e:5c:a6:2d:12:44:96:c7:3f:16:72:61:d9:e2:57: f6:95:cc:e6:22:64:c3:51:99:de:0d:c1:17:40:4c: 18:e1:7f:49:13:35:21:da:ab:13:f4:97:4e:66:6f: f0:b4:39:28:45:e8:cc:98:9f:6b:42:9f:fb:4f:24: cc:4f:25:07:05:dc:7f:7b:78:9d:0f:b0:e3:75:53: 16:a9:a2:ae:8e:ab:89:b9:e7:66:36:17:12:c6:fd: 27:2f:ed:30:fa:e8:79:b1:78:da:08:6d:3e:4f:31: 82:c0:ce:9a:60:12:44:c1:26:ae:fe:d6:f7:03:0f: 92:32:8c:c6:88:25:31:e3:42:b4:43:f8:3a:b1:79: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:76:15:C6:40:70:6C:90:C0:79:05:FD:CC:25:09:1D:E9:60:06:F6 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3d:07:c2:cc:82:cc:28:1d:f0:ae:ee:9a:48:ac:78:aa:7c: 2a:94:b0:e7:91:84:60:51:3c:25:5b:1b:87:dd:dc:4c:b0:2a: 3f:a9:00:32:13:21:6e:7c:b4:ad:9c:0f:cc:6a:8d:90:06:dd: c9:bd:c1:9e:28:a0:d6:79:0c:95:be:ba:bb:7a:90:69:31:70: 09:b6:87:89:fa:df:da:a5:a2:6b:64:d9:02:d2:92:5c:9e:7d: 66:37:be:d2:5b:72:d4:80:b3:07:66:9e:5d:ee:78:a9:c9:0a: 08:dd:61:02:c7:66:d9:b2:29:c9:d6:c2:4f:89:ab:38:e8:41: db:93:d2:da:48:fb:40:a1:69:ea:53:ad:bd:e2:ac:49:da:33: 46:4a:75:30:7d:9d:be:90:0a:c6:0c:21:64:d0:10:8b:47:e0: 1f:5a:94:57:e5:cc:42:c1:a2:69:40:e7:de:24:26:e7:97:da: 18:8d:e9:9d:1b:9c:0c:89:1e:74:6b:1b:d1:e8:b9:a8:e9:3a: 84:73:53:24:8f:61:9b:ee:7e:f7:df:dc:c9:6c:85:f9:8d:33: 2e:3b:24:28:69:38:31:e2:eb:71:ab:3e:48:61:68:2d:27:19: 10:ca:55:a3:6f:8c:32:5e:de:49:47:88:0f:ee:97:cf:2e:ec: d1:7b:be:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M0QTcxMTAvBgNVBAUTKEU0MkY1REVGMjY1OUI1RTdGQTI3MDM3NjhFOTQ4N0VG REM1OTVCQjAwHhcNMjYwOTIxMDcwMzE0WhcNMjYwOTI4MDcwMzE0WjAYMRYwFAYD VQQDEw02YWIwZDZiMi01ODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LDYy6RFWC7VNeiMFPFhcETdU2p4OBhAHTka9MoZTLq00mxfz+u6ShSxbywK iOBZ7yVpXbzQocS7gZLCdr+j283dJ+gGnA5NUgEcJ90m9koUFJB28qYaq7tRqALJ dDmTy9o/RjRJZLNN/UwmwRtkBgfO9iA76LI+XKYtEkSWxz8WcmHZ4lf2lczmImTD UZneDcEXQEwY4X9JEzUh2qsT9JdOZm/wtDkoRejMmJ9rQp/7TyTMTyUHBdx/e3id D7DjdVMWqaKujquJuedmNhcSxv0nL+0w+uh5sXjaCG0+TzGCwM6aYBJEwSau/tb3 Aw+SMozGiCUx40K0Q/g6sXkv6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMN2FcZA cGyQwHkF/cwlCR3pYAb2MB8GA1UdIwQYMBaAFOQvXe8mWbXn+icDdo6Uh+/cWVuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzRBNy9GQTk4RkIzRUFC NDQxMUYwODQzRDA2NTdDNEY5QUUwMi81QzlkN3laWnRlZjZKd04yanBTSDc5eFpX N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzRBNy9GQTk4RkIzRUFCNDQxMUYwODQzRDA2NTdDNEY5QUUwMi81QzlkN3laWnRl ZjZKd04yanBTSDc5eFpXN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACT0HwsyCzCgd8K7umkiseKp8KpSw55GEYFE8JVsbh93cTLAqP6kAMhMhbny0 rZwPzGqNkAbdyb3Bniig1nkMlb66u3qQaTFwCbaHifrf2qWia2TZAtKSXJ59Zje+ 0lty1ICzB2aeXe54qckKCN1hAsdm2bIpydbCT4mrOOhB25PS2kj7QKFp6lOtveKs SdozRkp1MH2dvpAKxgwhZNAQi0fgH1qUV+XMQsGiaUDn3iQm55faGI3pnRucDIke dGsb0ei5qOk6hHNTJI9hm+5+99/cyWyF+Y0zLjskKGk4MeLrcas+SGFoLScZEMpV o2+MMl7eSUeID+6Xzy7s0Xu++A== -----END CERTIFICATE-----Generated at Tue Sep 22 17:08:49 2026 by rpki-client