$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: DCJx9ICeX17clZTr5RCskwLwgCyfOalwtcX6G6WKHu8= Subject key identifier: 4C:68:36:98:07:2B:EF:59:BD:D3:C6:D8:99:39:AA:8A:0B:10:FD:49 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 08B9 Signing time: Sun 20 Sep 2026 20:29:08 +0000 Manifest this update: Sun 20 Sep 2026 20:29:07 +0000 Manifest next update: Sun 27 Sep 2026 20:29:07 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: ftsXD6gkdGjkXE3oQKnd4nEw1BScT2grL/fCQAwWxhU=) 2: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=) 3: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Sep 20 20:29:07 2026 GMT Not After : Sep 27 20:29:07 2026 GMT Subject: CN=6ab04213-46b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:eb:ff:1e:b3:e2:32:96:88:88:2c:0f:5c: 61:e8:9b:bb:63:8b:b7:e8:fe:f8:bc:81:af:5a:a1: 73:2c:ba:82:77:54:08:73:5b:bd:85:9c:f4:d5:27: 43:72:6f:22:ef:5c:0a:57:b4:1c:c4:8d:4a:21:d1: 2b:60:bd:99:bc:cb:aa:6f:30:c2:b4:c1:a4:26:13: b4:71:c2:fe:14:ed:ba:c0:66:e2:90:25:d4:46:31: 16:c6:08:fb:09:4b:fa:50:a3:26:63:36:08:82:79: 4b:75:f0:92:3c:d6:ff:2d:4a:26:d6:dd:68:5a:19: e8:5e:eb:01:d7:d5:82:99:8c:4a:86:ed:b1:8a:8e: 09:11:6a:c6:fc:fc:b9:a2:6c:e6:cf:73:e4:0f:f0: e9:b1:30:a1:40:4c:0b:35:40:cb:28:27:e6:eb:31: b5:38:54:65:16:bc:f5:39:ac:21:01:92:97:ea:1f: 72:f5:9b:a9:88:a6:8a:98:82:a2:d8:5a:35:fe:52: 29:36:70:4b:bc:cd:1e:36:b2:b7:9a:45:9d:49:2c: 0d:cb:78:ce:8d:06:56:82:08:3a:df:34:ea:b4:78: 13:c6:79:e0:97:25:91:87:1f:44:8d:26:d3:72:db: a6:5a:3f:bd:89:2f:d5:da:7e:37:c0:f0:74:75:22: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:68:36:98:07:2B:EF:59:BD:D3:C6:D8:99:39:AA:8A:0B:10:FD:49 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d8:50:bb:72:ff:39:1a:d8:65:ee:13:03:1b:35:47:fd:32: 81:b0:4c:83:e6:da:a5:6c:90:7e:ee:ec:74:8d:9b:c7:61:bb: 20:a2:16:0a:11:4f:6f:2a:0a:1c:2a:9e:9a:8e:ce:e9:9b:be: f0:22:32:b3:44:2f:df:5e:13:a3:77:c9:0e:64:99:3f:67:9f: d2:cd:60:1d:e5:d2:f9:3e:4c:81:d3:c4:fe:0c:a6:21:83:3a: 08:be:01:9a:a2:0a:89:18:09:35:6b:b5:26:e0:f3:b0:79:ca: f1:a0:1b:d6:17:99:64:d8:4e:a0:bb:a3:11:2d:28:51:42:6f: fb:62:03:30:85:e5:60:ed:a6:49:df:1a:f5:91:1c:35:83:ed: 77:2e:33:09:6f:bb:87:93:bf:6a:e5:38:10:ea:12:ca:56:5b: 98:01:d7:fe:80:d7:d7:49:e4:04:9a:20:03:bd:32:30:50:71: b4:dd:0b:2f:3d:c1:90:76:04:a6:28:1c:0e:90:e6:77:21:2d: bb:c4:c4:fa:1e:79:87:ea:c4:e5:7d:f5:51:1e:8b:2d:5d:53: 4d:27:e2:34:c9:4b:11:df:cf:28:41:40:11:4a:02:97:d6:ee: e7:2e:87:9f:90:37:7b:58:9c:29:0e:68:92:ad:41:4d:c6:32: 4e:82:45:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjYwOTIwMjAyOTA3WhcNMjYwOTI3MjAyOTA3WjAYMRYwFAYD VQQDEw02YWIwNDIxMy00NmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0frr/x6z4jKWiIgsD1xh6Ju7Y4u36P74vIGvWqFzLLqCd1QIc1u9hZz01SdD cm8i71wKV7QcxI1KIdErYL2ZvMuqbzDCtMGkJhO0ccL+FO26wGbikCXURjEWxgj7 CUv6UKMmYzYIgnlLdfCSPNb/LUom1t1oWhnoXusB19WCmYxKhu2xio4JEWrG/Py5 omzmz3PkD/DpsTChQEwLNUDLKCfm6zG1OFRlFrz1OawhAZKX6h9y9ZupiKaKmIKi 2Fo1/lIpNnBLvM0eNrK3mkWdSSwNy3jOjQZWggg63zTqtHgTxnnglyWRhx9EjSbT ctumWj+9iS/V2n43wPB0dSJZ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExoNpgH K+9ZvdPG2Jk5qooLEP1JMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNhQu3L/ORrYZe4TAxs1R/0ygbBMg+bapWyQfu7sdI2bx2G7IKIWChFPbyoK HCqemo7O6Zu+8CIys0Qv314To3fJDmSZP2ef0s1gHeXS+T5MgdPE/gymIYM6CL4B mqIKiRgJNWu1JuDzsHnK8aAb1heZZNhOoLujES0oUUJv+2IDMIXlYO2mSd8a9ZEc NYPtdy4zCW+7h5O/auU4EOoSylZbmAHX/oDX10nkBJogA70yMFBxtN0LLz3BkHYE pigcDpDmdyEtu8TE+h55h+rE5X31UR6LLV1TTSfiNMlLEd/PKEFAEUoCl9bu5y6H n5A3e1icKQ5okq1BTcYyToJFRg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:21 2026 by rpki-client