$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: Z3RTIdIn8tnN9CXrVtks5X0lsGrP9k4j47CET4AljMQ= Subject key identifier: 39:9A:39:B2:FD:48:28:06:79:98:16:59:D4:DD:AF:2D:D8:30:45:76 Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0F92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0F72 Signing time: Fri 18 Sep 2026 17:30:40 +0000 Manifest this update: Fri 18 Sep 2026 17:30:40 +0000 Manifest next update: Fri 25 Sep 2026 17:30:40 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: lq44867qYBoVhMvJhDflpTm5SXWtRDsTEaQRCw0xRvE=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Sep 18 17:30:40 2026 GMT Not After : Sep 25 17:30:40 2026 GMT Subject: CN=6aad7540-b77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:49:da:1a:3c:70:b9:b2:03:06:6f:db:aa: a2:2a:43:b0:a6:9c:58:2f:d4:2b:73:13:b7:93:7a: 56:63:fc:03:ee:dd:6e:a9:39:73:f1:c0:6a:fc:85: b5:ba:53:17:7b:7e:29:0f:73:86:62:5e:05:38:5f: 62:df:51:9b:5e:f9:83:47:af:67:c6:6c:1e:2e:3b: 1f:aa:fc:02:ed:87:cc:5f:da:00:da:86:3a:97:0b: 8a:53:a2:9f:49:73:c0:07:4f:ef:13:3e:c6:19:1e: c5:7c:5e:e9:09:d2:20:80:b5:d2:32:9f:e8:a1:72: 13:01:cb:4d:c5:59:1c:e3:49:92:59:d6:6e:69:07: d8:46:99:c4:cf:1b:e0:4e:53:fc:2d:17:7d:e7:65: 69:73:ea:fd:db:31:e8:e4:57:0e:ff:b5:c8:d3:15: 06:98:0b:2d:6f:f6:6e:97:aa:c6:e7:0f:d8:41:51: 55:8c:d4:24:a0:99:be:90:91:57:41:0c:52:bc:c9: 78:a7:79:91:4e:3b:b0:3d:b9:61:ff:8a:51:a8:68: de:b9:30:dc:9d:84:63:93:7e:51:a7:0c:cd:7b:e2: 59:e0:76:6e:e9:27:0c:ad:25:c0:ed:6a:f7:6e:cf: 98:3d:71:ca:3c:01:e0:8f:9c:f7:89:e0:ea:df:7d: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:39:B2:FD:48:28:06:79:98:16:59:D4:DD:AF:2D:D8:30:45:76 X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7a:32:27:d0:39:48:94:8f:95:aa:9a:a2:ea:14:ff:29:38: 93:2a:81:3a:d2:61:6b:53:60:ee:86:ad:65:76:a4:f0:43:05: a2:1f:26:12:4d:e8:dc:03:60:6b:df:6b:66:cb:e8:1e:09:09: 59:6d:cd:66:56:75:ac:a4:cb:7c:a7:d5:e7:e5:96:dd:ba:f8: 2b:e7:6f:92:e7:57:f8:b6:cd:dc:ac:bf:c6:ee:08:45:40:21: 0e:99:a6:a0:39:e0:b8:28:1b:d6:0b:a3:28:a7:8f:bb:4a:31: bb:a5:5d:70:bc:45:d0:67:83:1e:5e:1d:3d:b1:9c:39:61:3b: 35:81:75:f7:0e:99:bb:b4:3d:8d:a8:81:3b:d0:f4:76:8c:53: b5:6e:d3:2c:d1:2b:75:01:24:e4:34:af:72:e4:10:67:3a:69: 64:b6:9a:9f:7d:6f:3a:57:16:5a:75:46:5f:88:7d:85:b2:2f: ee:dd:3e:be:e3:7c:90:c7:b2:ed:5e:45:b7:f2:78:30:4a:fc: bf:ba:81:4e:db:cd:21:32:04:b9:e9:e9:dd:03:3f:de:88:35: 5f:c9:c8:75:9e:09:f4:2e:b9:dc:19:69:24:64:05:f2:2c:48: bb:b7:9e:7d:3d:b8:4f:91:68:de:0c:e9:b7:f2:f8:c4:bf:a2: 42:e4:61:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjYwOTE4MTczMDQwWhcNMjYwOTI1MTczMDQwWjAYMRYwFAYD VQQDEw02YWFkNzU0MC1iNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoulJ2ho8cLmyAwZv26qiKkOwppxYL9QrcxO3k3pWY/wD7t1uqTlz8cBq/IW1 ulMXe34pD3OGYl4FOF9i31GbXvmDR69nxmweLjsfqvwC7YfMX9oA2oY6lwuKU6Kf SXPAB0/vEz7GGR7FfF7pCdIggLXSMp/ooXITActNxVkc40mSWdZuaQfYRpnEzxvg TlP8LRd952Vpc+r92zHo5FcO/7XI0xUGmAstb/Zul6rG5w/YQVFVjNQkoJm+kJFX QQxSvMl4p3mRTjuwPblh/4pRqGjeuTDcnYRjk35RpwzNe+JZ4HZu6ScMrSXA7Wr3 bs+YPXHKPAHgj5z3ieDq3331zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmaObL9 SCgGeZgWWdTdry3YMEV2MB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnHoyJ9A5SJSPlaqaouoU/yk4kyqBOtJha1Ng7oatZXak8EMFoh8mEk3o3ANg a99rZsvoHgkJWW3NZlZ1rKTLfKfV5+WW3br4K+dvkudX+LbN3Ky/xu4IRUAhDpmm oDnguCgb1gujKKePu0oxu6VdcLxF0GeDHl4dPbGcOWE7NYF19w6Zu7Q9jaiBO9D0 doxTtW7TLNErdQEk5DSvcuQQZzppZLaan31vOlcWWnVGX4h9hbIv7t0+vuN8kMey 7V5Ft/J4MEr8v7qBTtvNITIEuenp3QM/3og1X8nIdZ4J9C653BlpJGQF8ixIu7ee fT24T5Fo3gzpt/L4xL+iQuRhcQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:28:30 2026 by rpki-client