$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: MywI5BZeCq8Dx8/19mat7kO6Btpp+93Eo0mnexQpFXU= Subject key identifier: 21:6E:55:1A:4D:BC:28:96:58:83:7F:7D:7D:25:A9:E5:E4:3E:FB:5D Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 364F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 35DC Signing time: Sun 20 Sep 2026 14:51:09 +0000 Manifest this update: Sun 20 Sep 2026 14:51:08 +0000 Manifest next update: Sun 27 Sep 2026 14:51:08 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: e4rCy1KzSQkG+7xEnobfOQXo2UKMmT/tUhHesWvngrw=) 2: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=) 3: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=) 4: D343067C86EC11F19E006003A7EE528E.roa (hash: MwabdDtsR88t/I1zQatof0zHAy5NQHDXaMUX2ZWtv1k=) 5: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=) 6: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=) 7: D2392E7886EC11F19E006003A7EE528E.roa (hash: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13903 (0x364f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Sep 20 14:51:08 2026 GMT Not After : Sep 27 14:51:08 2026 GMT Subject: CN=6aaff2dc-b32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:39:96:c3:f4:37:87:0e:36:ef:73:b9:b3: 09:6a:51:77:5d:47:78:c4:0f:6c:8c:08:13:30:a1: 80:10:0d:70:91:4b:bf:bc:bc:41:30:c9:10:df:28: e3:45:5a:fc:b6:4a:9d:50:1c:30:05:60:17:c2:4b: 3e:71:99:d4:aa:8e:be:03:f7:23:da:e1:cf:78:ee: 50:22:13:85:6a:66:99:34:f7:01:c1:42:88:d8:da: 75:2e:f0:5a:33:a6:0d:52:04:1d:d1:84:c7:8c:86: 43:74:e1:1b:3e:03:d8:68:0a:65:19:b8:c3:6d:1f: fc:d2:ec:9a:cc:a9:c7:ba:ea:38:84:95:cc:80:45: 95:b5:fd:ce:0f:91:64:29:74:5f:2e:55:f3:86:69: 35:79:b0:53:5a:11:5c:34:19:30:dd:4b:84:ce:a1: 68:40:85:c9:46:3a:58:76:4a:f3:8c:17:fa:18:06: 74:94:94:1b:72:97:f6:89:ab:e9:79:05:cf:1a:df: 62:46:0c:5f:2d:60:de:cb:cb:94:0f:3f:2d:8d:07: d2:95:b4:41:bc:1c:d8:4b:ac:35:f3:82:dd:11:e7: c0:9c:aa:66:ef:0e:44:11:a1:6d:c5:12:7f:57:0e: b9:b7:ee:64:4f:b8:0f:aa:bb:12:01:41:01:5f:6b: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6E:55:1A:4D:BC:28:96:58:83:7F:7D:7D:25:A9:E5:E4:3E:FB:5D X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:2c:36:b3:93:8c:e5:8a:21:13:9d:ae:2d:0f:55:91:0d:6c: 83:37:c2:12:12:21:aa:3b:fd:96:dd:28:24:3a:7d:46:dd:d1: 87:b0:08:8e:6a:9a:0d:38:02:fb:fc:f4:0f:4f:f8:fb:aa:5c: 3d:71:80:f5:e8:e5:11:02:e7:00:7b:f6:80:99:37:20:e2:aa: f9:55:ad:58:35:70:5d:d5:7f:56:0b:72:61:19:2d:c7:c9:80: a8:02:62:36:e9:1c:13:8f:c2:5f:34:cc:ab:c3:4a:29:d8:51: 76:7b:20:8d:2a:a9:9f:c8:1a:7f:4a:5d:d3:b8:8c:b8:cc:f2: 27:ac:4c:e6:b0:c9:6b:a7:d0:8e:1f:4d:df:ec:91:b5:f4:18: b5:db:23:a8:20:4f:60:35:09:a8:df:1f:95:11:08:6c:a6:6d: 36:67:36:11:7d:72:35:0c:f1:9e:2e:76:c4:9c:b1:68:f7:df: ef:38:eb:a5:ae:7c:3a:57:46:0c:bf:10:56:1d:08:d4:d3:69: 4c:74:83:8f:3b:07:72:db:9b:c7:a1:85:37:ff:ff:10:50:29: c5:17:da:13:e2:2a:64:69:17:b0:c0:75:f7:ce:5a:77:03:a7: b4:e2:8a:0a:8e:96:72:0b:bb:cf:19:a9:8d:78:2b:5a:75:5f: ee:0b:ae:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjYwOTIwMTQ1MTA4WhcNMjYwOTI3MTQ1MTA4WjAYMRYwFAYD VQQDEw02YWFmZjJkYy1iMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupM5lsP0N4cONu9zubMJalF3XUd4xA9sjAgTMKGAEA1wkUu/vLxBMMkQ3yjj RVr8tkqdUBwwBWAXwks+cZnUqo6+A/cj2uHPeO5QIhOFamaZNPcBwUKI2Np1LvBa M6YNUgQd0YTHjIZDdOEbPgPYaAplGbjDbR/80uyazKnHuuo4hJXMgEWVtf3OD5Fk KXRfLlXzhmk1ebBTWhFcNBkw3UuEzqFoQIXJRjpYdkrzjBf6GAZ0lJQbcpf2iavp eQXPGt9iRgxfLWDey8uUDz8tjQfSlbRBvBzYS6w184LdEefAnKpm7w5EEaFtxRJ/ Vw65t+5kT7gPqrsSAUEBX2vxRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFuVRpN vCiWWIN/fX0lqeXkPvtdMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUCw2s5OM5YohE52uLQ9VkQ1sgzfCEhIhqjv9lt0oJDp9Rt3Rh7AIjmqaDTgC +/z0D0/4+6pcPXGA9ejlEQLnAHv2gJk3IOKq+VWtWDVwXdV/VgtyYRktx8mAqAJi NukcE4/CXzTMq8NKKdhRdnsgjSqpn8gaf0pd07iMuMzyJ6xM5rDJa6fQjh9N3+yR tfQYtdsjqCBPYDUJqN8flREIbKZtNmc2EX1yNQzxni52xJyxaPff7zjrpa58OldG DL8QVh0I1NNpTHSDjzsHctubx6GFN///EFApxRfaE+IqZGkXsMB1985adwOntOKK Co6Wcgu7zxmpjXgrWnVf7guuWw== -----END CERTIFICATE-----Generated at Mon Sep 21 14:30:39 2026 by rpki-client