$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json) Hash identifier: 1xOsh2mH2ud+Cch+67sNDbKeGw7bxZH7Fwo2smA2ViE= Subject key identifier: 32:42:DB:FD:FB:D6:5A:2B:31:75:54:A9:82:32:A6:F3:66:8B:2E:05 Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft Manifest number: 08DA Signing time: Sun 20 Sep 2026 20:22:33 +0000 Manifest this update: Sun 20 Sep 2026 20:22:32 +0000 Manifest next update: Sun 27 Sep 2026 20:22:32 +0000 Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: q8qz0VYIAkWuWiQhmxfQYDERj9v+281LzI+JEzUQjJc=) 2: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=) 3: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: Sep 20 20:22:32 2026 GMT Not After : Sep 27 20:22:32 2026 GMT Subject: CN=6ab04088-e6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:63:90:85:9d:37:f7:2e:d7:e4:48:15:34: 67:9a:1a:2d:f3:41:5d:97:c4:23:3f:9c:32:1b:3c: b8:f1:31:28:65:9e:ca:c8:64:46:65:3d:ef:d6:c3: 45:5d:a2:87:2e:1f:91:03:f0:8b:3d:61:e3:d2:d4: e9:ac:ae:4a:99:5e:ea:ff:41:24:6d:30:4c:ce:2b: d3:fa:d9:53:c4:f4:62:2f:53:a2:4d:92:f9:f4:66: be:1f:32:8c:b6:34:60:79:49:bc:59:19:b2:4e:81: 37:0c:d8:93:e5:09:48:0f:ff:32:19:13:b1:92:9c: 89:48:a3:da:2c:1e:3b:d5:db:0a:87:bc:5c:a2:be: 65:ff:a3:dc:18:78:2d:88:83:3a:d3:0f:9b:54:a9: 88:68:e7:b9:07:d2:45:af:26:c9:cf:9d:04:21:1e: d6:88:57:79:04:ab:d1:ab:00:55:64:52:89:08:b8: 0d:75:09:f2:e3:8a:14:ed:56:2b:ca:b1:af:f6:6a: 7d:23:28:6e:32:c7:4b:31:aa:11:f6:da:54:c0:73: 6f:b5:25:43:2f:48:04:6b:58:f2:26:00:39:1b:8e: 08:c8:f3:2f:fb:79:c2:58:77:b5:42:dd:43:35:95: d1:5c:73:c2:e4:48:2b:89:28:01:03:17:65:e9:ee: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:DB:FD:FB:D6:5A:2B:31:75:54:A9:82:32:A6:F3:66:8B:2E:05 X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:95:8e:80:11:40:0e:1f:46:51:7f:2a:15:a3:a6:88:38:4c: 98:65:0e:4c:98:09:44:21:e7:b7:1d:f5:05:aa:eb:40:c7:20: 1e:9f:0c:7f:03:e6:bf:5e:ce:6c:3e:c1:f1:4c:a7:65:ab:0b: 03:02:9e:87:a8:ec:e1:5a:a6:0c:26:23:03:08:a4:f5:bc:a0: a8:03:9a:4d:21:1e:2a:a4:0c:fa:8c:c0:71:62:91:e9:d6:f3: 72:22:0b:f9:0d:f3:3e:28:57:db:d0:7a:61:8d:f4:89:39:69: 9d:4b:96:74:1a:60:41:a6:03:1b:a7:a8:e6:bb:e4:dd:e2:a0: 8d:88:2e:bb:3c:2d:0b:ee:23:2a:cc:1c:cb:11:3d:65:f5:0b: 91:4b:6a:4b:cf:e3:61:63:a2:06:5b:12:eb:0e:5a:b1:a7:fa: 26:ee:8c:50:64:3f:32:de:05:c1:b7:0a:17:7f:7d:25:18:5a: 65:df:10:e8:16:52:77:62:de:79:d3:c3:43:b9:e3:71:ec:62: 6b:a8:4d:ef:42:eb:41:90:a4:38:66:60:8b:b3:1d:97:29:74: ca:71:b0:c5:4c:ad:98:fd:35:b5:86:eb:25:6a:e8:94:25:ce: 38:7f:c7:00:0c:80:26:f6:e5:6d:cf:83:dd:81:a6:c0:ae:1e: ad:50:30:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjYwOTIwMjAyMjMyWhcNMjYwOTI3MjAyMjMyWjAYMRYwFAYD VQQDEw02YWIwNDA4OC1lNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqINjkIWdN/cu1+RIFTRnmhot80Fdl8QjP5wyGzy48TEoZZ7KyGRGZT3v1sNF XaKHLh+RA/CLPWHj0tTprK5KmV7q/0EkbTBMzivT+tlTxPRiL1OiTZL59Ga+HzKM tjRgeUm8WRmyToE3DNiT5QlID/8yGROxkpyJSKPaLB471dsKh7xcor5l/6PcGHgt iIM60w+bVKmIaOe5B9JFrybJz50EIR7WiFd5BKvRqwBVZFKJCLgNdQny44oU7VYr yrGv9mp9IyhuMsdLMaoR9tpUwHNvtSVDL0gEa1jyJgA5G44IyPMv+3nCWHe1Qt1D NZXRXHPC5EgriSgBAxdl6e5a8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJC2/37 1lorMXVUqYIypvNmiy4FMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8yQ0IxMUZDRUYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJ eThnS05pZmpvbjZIdlAzc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADZWOgBFADh9GUX8qFaOmiDhMmGUOTJgJRCHntx31BarrQMcgHp8MfwPmv17O bD7B8UynZasLAwKeh6js4VqmDCYjAwik9bygqAOaTSEeKqQM+ozAcWKR6dbzciIL +Q3zPihX29B6YY30iTlpnUuWdBpgQaYDG6eo5rvk3eKgjYguuzwtC+4jKswcyxE9 ZfULkUtqS8/jYWOiBlsS6w5asaf6Ju6MUGQ/Mt4FwbcKF399JRhaZd8Q6BZSd2Le edPDQ7njcexia6hN70LrQZCkOGZgi7Mdlyl0ynGwxUytmP01tYbrJWrolCXOOH/H AAyAJvblbc+D3YGmwK4erVAwCA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:07:32 2026 by rpki-client