$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: /uRgrGyEQQ5tVa8hSEmGzLQzYAa1y8Tzn+LgdJ/bOjA= Subject key identifier: 57:DE:99:A5:67:46:BF:EE:61:74:73:D6:5A:45:5A:83:10:2C:2D:F4 Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 0423 Signing time: Fri 25 Sep 2026 00:08:55 +0000 Manifest this update: Fri 25 Sep 2026 00:08:54 +0000 Manifest next update: Fri 02 Oct 2026 00:08:54 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: ihKdaZX8VdI4eKDiGlk2SlOJGWLbY2lyZ4KQr/bRITE=) 2: 1B979C223EE411F19E8F25E5B8833773.roa (hash: wi5Jdm400NVVrEhqsCRygJRPgFVgnSFV5lXcRFaVlfo=) 3: 815A09C645F311F19D4C8BBB9A833773.roa (hash: gXEe/7OkKqUCUDk1lxEeptn1iCrY7lDmXDjXXtgnbdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Sep 25 00:08:54 2026 GMT Not After : Oct 2 00:08:54 2026 GMT Subject: CN=6ab5bb97-73b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:d0:92:22:14:02:46:be:aa:54:4f:e2:bd: f2:79:e6:85:cf:e5:22:40:e6:b1:e5:13:bd:9e:59: 39:12:14:5a:2a:95:bc:40:1b:1d:84:82:60:c7:d6: bf:4d:de:5d:fd:79:71:2d:34:66:3c:af:3c:b3:44: 62:34:2b:52:fe:dd:f3:c8:b8:5e:38:d4:c2:38:8c: 46:ae:bd:b9:11:4d:dc:c6:6b:04:d1:34:6b:43:6a: a2:b0:35:0e:7c:cc:f1:6a:68:45:c7:2b:93:de:9a: ae:a7:95:10:f5:70:2c:ad:a7:f2:06:aa:d2:8a:28: 8b:94:6b:20:f8:43:71:a1:b8:b5:5c:5a:d6:70:08: d7:db:f5:37:5e:3d:d1:d3:2b:c4:19:e8:6d:82:98: ab:3d:f3:08:6b:c2:cd:a4:64:71:d5:5c:15:41:b1: 64:59:60:b2:83:0d:f7:2f:8c:3b:cf:a5:fe:5d:51: 85:10:fb:4d:27:68:de:45:ae:5c:ca:f0:e6:3d:cf: 20:f2:5e:d9:aa:89:68:db:ed:d4:f9:cd:18:ba:29: 85:eb:6b:8b:39:70:7b:90:4f:0f:dd:9b:2e:1f:4d: 31:ab:10:07:e4:35:ee:e2:2f:45:1e:b8:a8:21:7e: b3:51:bb:2b:7f:c1:30:23:16:e5:13:31:ce:c4:b8: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:99:A5:67:46:BF:EE:61:74:73:D6:5A:45:5A:83:10:2C:2D:F4 X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:49:25:fa:53:3d:55:33:13:4b:a2:6a:cb:27:66:f0:2f:9a: 53:49:ef:0b:e2:bf:58:b2:e7:0a:47:b6:8b:d0:a5:84:96:3a: 0b:00:c4:ae:5d:57:9a:3f:04:0d:f5:da:7e:f6:af:97:57:01: 0f:55:a1:42:40:06:83:fd:6d:0c:e8:60:3b:d7:8b:fc:3c:a4: ae:4f:dc:9e:ea:90:ca:37:8e:72:5d:56:6b:cb:7d:6c:a4:76: 83:1f:fb:4e:e9:8c:61:d1:50:88:37:47:25:23:06:cc:7e:4c: 7d:bc:98:d2:b1:04:81:dd:16:d4:0a:7b:a3:c3:2a:0f:fb:9d: 9f:46:f4:a0:5d:35:db:9f:8b:ea:9f:26:db:6b:7d:67:39:6d: 1a:c4:92:2b:9f:22:00:eb:85:43:c9:6d:41:6a:08:59:92:14: fc:67:0e:d2:db:13:3a:e6:29:e1:b9:37:8a:65:c6:14:cf:c7: ab:f8:cb:4d:ca:01:1e:af:b3:ce:f3:21:c8:4b:12:d1:b5:96: 96:21:9a:ab:51:8b:1a:b2:8c:ad:77:bf:c8:34:fc:dd:90:3b: a4:62:42:82:60:c6:bd:86:ff:31:3e:4f:9d:4e:1a:53:da:a3: d8:25:81:6b:1f:db:6b:57:a7:53:77:85:6d:1d:9e:4f:95:bc: 52:76:90:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjYwOTI1MDAwODU0WhcNMjYxMDAyMDAwODU0WjAYMRYwFAYD VQQDEw02YWI1YmI5Ny03M2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhvQkiIUAka+qlRP4r3yeeaFz+UiQOax5RO9nlk5EhRaKpW8QBsdhIJgx9a/ Td5d/XlxLTRmPK88s0RiNCtS/t3zyLheONTCOIxGrr25EU3cxmsE0TRrQ2qisDUO fMzxamhFxyuT3pqup5UQ9XAsrafyBqrSiiiLlGsg+ENxobi1XFrWcAjX2/U3Xj3R 0yvEGehtgpirPfMIa8LNpGRx1VwVQbFkWWCygw33L4w7z6X+XVGFEPtNJ2jeRa5c yvDmPc8g8l7Zqolo2+3U+c0YuimF62uLOXB7kE8P3ZsuH00xqxAH5DXu4i9FHrio IX6zUbsrf8EwIxblEzHOxLgtCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfemaVn Rr/uYXRz1lpFWoMQLC30MB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv0kl+lM9VTMTS6Jqyydm8C+aU0nvC+K/WLLnCke2i9ClhJY6CwDErl1Xmj8E DfXafvavl1cBD1WhQkAGg/1tDOhgO9eL/Dykrk/cnuqQyjeOcl1Wa8t9bKR2gx/7 TumMYdFQiDdHJSMGzH5MfbyY0rEEgd0W1Ap7o8MqD/udn0b0oF0125+L6p8m22t9 ZzltGsSSK58iAOuFQ8ltQWoIWZIU/GcO0tsTOuYp4bk3imXGFM/Hq/jLTcoBHq+z zvMhyEsS0bWWliGaq1GLGrKMrXe/yDT83ZA7pGJCgmDGvYb/MT5PnU4aU9qj2CWB ax/ba1enU3eFbR2eT5W8UnaQYQ== -----END CERTIFICATE-----Generated at Sat Sep 26 12:58:47 2026 by rpki-client