$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: K+tBhUl9XpSbfajrceQlLyjJLm5tFV8hu6zJ+j+yXCY= Subject key identifier: 2C:1E:5A:7A:B1:58:42:76:71:B2:E8:FB:61:A8:C3:2F:22:29:47:B5 Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 0A29 Signing time: Mon 28 Sep 2026 19:51:15 +0000 Manifest this update: Mon 28 Sep 2026 19:51:15 +0000 Manifest next update: Mon 05 Oct 2026 19:51:15 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: y/xfy3yk0nSichXWmqd3wBScz+YcB45sMO/ypaVX5r8=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XaO1hJB0oSGtUyL6Bx5I5lGNvEGPhwnmNhYVX7Xyt8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Sep 28 19:51:15 2026 GMT Not After : Oct 5 19:51:15 2026 GMT Subject: CN=6abac533-a793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:91:4c:0d:ef:3d:8d:7b:b0:79:4f:41:ce: db:24:72:f1:cb:f9:cc:b8:64:ce:f9:70:ac:02:00: a2:0b:e1:66:ac:e1:9d:04:b6:e9:7a:ef:0d:a5:e9: d4:5b:5e:2a:75:c4:38:e7:0f:57:59:a8:ea:a6:3d: ab:6a:c5:f1:2e:6f:19:22:c4:eb:26:85:27:04:54: c9:2d:43:bf:5e:7a:91:f1:19:4c:df:0b:6e:da:ea: 11:d4:3d:f7:ca:bf:1e:01:48:3c:5d:cc:2d:39:c8: a8:95:c3:7f:f5:59:89:95:a2:a3:b8:81:33:db:cd: 39:49:d5:07:32:42:5c:5b:47:65:37:63:48:12:77: 03:06:8a:43:c3:95:01:71:6f:22:bf:a3:9a:da:b5: e1:84:d3:e0:ae:d7:cb:f8:88:8f:fe:49:09:66:17: 7e:46:86:53:18:b5:0a:ed:10:3c:dc:1e:01:12:07: 32:52:55:0f:e3:e4:d0:88:bf:66:a3:43:7c:93:d4: f9:3c:84:de:b7:d5:b2:42:8d:23:44:e8:8f:20:62: 9a:89:27:a6:f7:46:de:80:87:cb:91:f2:69:60:65: ea:e9:2b:8f:05:95:c3:68:65:f7:bf:ef:3f:94:2a: 91:27:6a:3a:e6:5e:f6:74:a3:d1:53:4d:80:5b:4b: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:5A:7A:B1:58:42:76:71:B2:E8:FB:61:A8:C3:2F:22:29:47:B5 X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:97:11:41:65:68:91:f1:2e:f5:14:7e:68:6a:6e:45:b5:ab: 9e:cf:8c:e7:49:7b:45:b9:d6:8f:02:22:5d:7a:23:cc:4c:ee: e0:1a:f2:5d:1f:9a:3c:4d:bd:dd:5b:45:0f:61:8b:77:79:8b: fc:a1:13:b0:09:31:14:a2:ac:b7:2f:dd:b6:2d:74:a6:bd:56: e3:df:29:2d:30:1c:4e:81:d1:a0:8e:23:a2:fd:f4:7c:3d:d3: 08:9c:77:b5:4f:af:1a:7d:6d:43:58:0d:04:36:6e:ea:6e:ad: dd:47:10:08:58:53:7b:e0:f8:71:2d:78:41:cf:26:f9:f0:d7: a3:f7:e6:18:bf:e3:b0:6b:94:cb:ea:78:5c:f8:2b:2a:48:0d: d4:a8:9e:25:90:bf:45:cc:9e:1f:97:4d:66:4f:1b:4e:bd:d7: 18:1e:e4:ca:56:e8:79:03:95:67:aa:fa:4b:a5:53:4f:86:c5: 31:cd:a2:39:93:2c:d9:8e:4b:f4:a9:a0:ef:e9:f2:74:d8:6e: 8f:91:39:a6:ea:7d:b8:0e:ce:1b:42:85:85:81:58:dc:31:ee: bd:54:ed:b3:94:df:a7:1a:34:50:c3:6f:67:4d:38:7a:17:9a: ed:3c:71:e6:5f:23:c2:c2:b4:5a:06:52:a6:d3:cd:21:65:67: 97:95:3e:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwOTI4MTk1MTE1WhcNMjYxMDA1MTk1MTE1WjAYMRYwFAYD VQQDEw02YWJhYzUzMy1hNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFuRTA3vPY17sHlPQc7bJHLxy/nMuGTO+XCsAgCiC+FmrOGdBLbpeu8NpenU W14qdcQ45w9XWajqpj2rasXxLm8ZIsTrJoUnBFTJLUO/XnqR8RlM3wtu2uoR1D33 yr8eAUg8XcwtOciolcN/9VmJlaKjuIEz2805SdUHMkJcW0dlN2NIEncDBopDw5UB cW8iv6Oa2rXhhNPgrtfL+IiP/kkJZhd+RoZTGLUK7RA83B4BEgcyUlUP4+TQiL9m o0N8k9T5PITet9WyQo0jROiPIGKaiSem90begIfLkfJpYGXq6SuPBZXDaGX3v+8/ lCqRJ2o65l72dKPRU02AW0vTYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCweWnqx WEJ2cbLo+2Gowy8iKUe1MB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO5cRQWVokfEu9RR+aGpuRbWrns+M50l7RbnWjwIiXXojzEzu4BryXR+aPE29 3VtFD2GLd3mL/KETsAkxFKKsty/dti10pr1W498pLTAcToHRoI4jov30fD3TCJx3 tU+vGn1tQ1gNBDZu6m6t3UcQCFhTe+D4cS14Qc8m+fDXo/fmGL/jsGuUy+p4XPgr KkgN1KieJZC/RcyeH5dNZk8bTr3XGB7kylboeQOVZ6r6S6VTT4bFMc2iOZMs2Y5L 9Kmg7+nydNhuj5E5pup9uA7OG0KFhYFY3DHuvVTts5Tfpxo0UMNvZ004ehea7Txx 5l8jwsK0WgZSptPNIWVnl5U+vQ== -----END CERTIFICATE-----Generated at Tue Sep 29 02:49:49 2026 by rpki-client