$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: r1Pn6X3ToER6y1iVQs980K6WgYTcAzoqMtSU52XUJJg= Subject key identifier: B5:EA:E5:74:56:76:FF:DD:7D:3D:5D:31:4A:2D:52:BB:FB:A2:99:68 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 359B Signing time: Sun 20 Sep 2026 14:53:09 +0000 Manifest this update: Sun 20 Sep 2026 14:53:08 +0000 Manifest next update: Sun 27 Sep 2026 14:53:08 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: vpCVx/3HRPhBxorcDgDtGOEIQQT9+ilyfoh8DSjJfKo=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 3RMRBjMY5rIEnAXqqJa1OtU6bMq0UxFTQ4CaQEQ/7hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13781 (0x35d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Sep 20 14:53:08 2026 GMT Not After : Sep 27 14:53:08 2026 GMT Subject: CN=6aaff355-35d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:ce:ab:91:d5:6a:cb:b4:33:29:fb:b0:78: 95:b0:f3:ce:dd:2c:e0:1f:47:27:6d:3e:2f:e7:68: 2d:4f:8e:38:a0:5f:1e:56:bf:6b:0d:d3:58:01:b1: 91:52:51:19:45:60:a5:8a:2f:fe:33:d4:d0:aa:4d: 30:f0:c2:6a:bf:db:64:7c:97:80:1a:13:0b:a1:fd: 10:86:f3:eb:33:38:54:5c:98:9e:ab:1d:d5:92:39: 52:0a:53:49:a7:16:86:a7:1a:ef:d1:8c:a1:d9:e4: bf:3f:dc:70:ba:2f:26:9c:03:3d:a1:c6:89:fc:8e: 77:19:0e:c7:71:95:4b:7e:2b:1e:e4:e9:33:a3:9e: 2b:97:2d:ed:3a:80:3d:03:70:e6:10:a9:17:24:ff: 18:13:d5:c0:75:71:05:dc:02:4c:98:20:12:fe:88: 8e:44:3e:ba:bc:52:f5:ad:2d:70:86:9b:2c:f5:1f: 47:64:d4:1d:81:0d:c2:3d:6c:0b:d9:d1:11:3d:0c: c1:99:69:be:b0:ce:58:b5:63:80:c7:56:2d:c3:9c: d0:ea:62:93:0e:a9:9c:6a:53:dd:21:18:31:7a:16: 26:6a:5d:ec:32:04:4b:ce:d8:51:05:9f:3b:1c:b4: 8f:12:85:d3:ef:5f:d4:93:6c:6a:d6:d3:6d:55:93: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EA:E5:74:56:76:FF:DD:7D:3D:5D:31:4A:2D:52:BB:FB:A2:99:68 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:65:29:dc:a2:61:39:3c:b3:1c:cb:d6:7b:ca:4c:29:ae:4f: 53:38:ce:a4:45:23:76:73:da:4b:8e:7d:e1:42:81:19:a0:a7: cc:f7:ff:5b:10:28:09:87:85:c3:2d:8f:dc:d9:b9:d7:23:fd: a6:76:ce:d6:33:e4:88:fe:bf:a5:ff:2c:2b:69:49:c0:56:d3: c3:21:88:f0:4d:95:25:50:ff:98:a0:0d:fc:df:d8:83:83:f8: 36:bc:9d:be:f9:4e:dd:b5:e0:37:f8:de:36:6e:53:e1:5f:b2: 40:c3:d6:da:cb:41:9e:00:3d:06:51:d7:70:ab:0c:c9:c8:9b: 17:90:ea:e4:07:21:a6:51:17:08:16:f2:dc:cf:e3:40:f6:91: 99:ea:30:14:21:4c:58:5c:f1:25:06:91:22:6c:91:ef:a8:aa: 94:57:eb:a3:cf:b2:4a:67:be:c7:28:bd:56:52:12:46:a6:de: 74:70:58:28:40:d0:6d:a8:de:ef:55:27:82:40:33:f7:c7:8e: 53:19:38:f9:8d:03:ae:ff:17:f3:5d:39:82:7a:07:0c:60:96: 12:08:6b:98:1b:1a:e5:e4:46:f8:4e:64:5c:aa:5d:70:7a:bd: 8e:2e:26:8c:ca:b5:13:d4:8c:40:30:59:47:ca:43:58:03:fb: 59:a6:20:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwOTIwMTQ1MzA4WhcNMjYwOTI3MTQ1MzA4WjAYMRYwFAYD VQQDEw02YWFmZjM1NS0zNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2LOq5HVasu0Myn7sHiVsPPO3SzgH0cnbT4v52gtT444oF8eVr9rDdNYAbGR UlEZRWClii/+M9TQqk0w8MJqv9tkfJeAGhMLof0QhvPrMzhUXJieqx3VkjlSClNJ pxaGpxrv0Yyh2eS/P9xwui8mnAM9ocaJ/I53GQ7HcZVLfise5Okzo54rly3tOoA9 A3DmEKkXJP8YE9XAdXEF3AJMmCAS/oiORD66vFL1rS1whpss9R9HZNQdgQ3CPWwL 2dERPQzBmWm+sM5YtWOAx1Ytw5zQ6mKTDqmcalPdIRgxehYmal3sMgRLzthRBZ87 HLSPEoXT71/Uk2xq1tNtVZMkeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXq5XRW dv/dfT1dMUotUrv7oploMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuGUp3KJhOTyzHMvWe8pMKa5PUzjOpEUjdnPaS4594UKBGaCnzPf/WxAoCYeF wy2P3Nm51yP9pnbO1jPkiP6/pf8sK2lJwFbTwyGI8E2VJVD/mKAN/N/Yg4P4Nryd vvlO3bXgN/jeNm5T4V+yQMPW2stBngA9BlHXcKsMycibF5Dq5AchplEXCBby3M/j QPaRmeowFCFMWFzxJQaRImyR76iqlFfro8+ySme+xyi9VlISRqbedHBYKEDQbaje 71UngkAz98eOUxk4+Y0Drv8X8105gnoHDGCWEghrmBsa5eRG+E5kXKpdcHq9ji4m jMq1E9SMQDBZR8pDWAP7WaYgtw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:51:19 2026 by rpki-client