$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: 7pVXdcvXxOqEFOCUHifLBw1AEYjHNhCFi7+h2kSNJdI= Subject key identifier: C5:40:E4:D4:15:61:02:E2:FC:61:A9:BA:C3:7A:D6:3F:02:24:47:04 Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 88 Signing time: Fri 25 Sep 2026 07:45:13 +0000 Manifest this update: Fri 25 Sep 2026 07:45:12 +0000 Manifest next update: Fri 02 Oct 2026 07:45:12 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: fDnSWx3H9YpKZp0HYLDsRzUwmKlsTwb8WtOvTp6UB08=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Sep 25 07:45:12 2026 GMT Not After : Oct 2 07:45:12 2026 GMT Subject: CN=6ab62689-2fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:77:1c:83:e1:39:69:38:ed:fb:b8:62:80:69: 17:78:e9:e1:9b:df:e9:a6:8b:89:6e:96:82:e4:05: 41:ed:c0:5a:4b:6f:d1:1f:be:96:cf:dd:00:0b:db: 02:20:9a:cc:dc:9f:e2:d1:ce:5a:1b:07:3f:1e:a9: 93:83:a1:68:cf:f0:1c:39:a0:9e:25:1f:80:e9:06: c9:04:bf:80:ba:f9:4c:e4:2b:e1:37:ab:d7:ef:73: a4:17:2e:d1:cb:b3:13:11:1c:ae:6a:38:64:f5:5b: 74:d4:d6:3e:96:7a:5d:69:3d:d2:f8:6a:48:45:ae: 48:ad:0f:66:a3:3f:7d:0f:ab:7d:12:26:01:d9:04: eb:12:fe:e5:e0:3f:9e:07:e2:eb:70:16:61:76:1a: cc:90:f4:c6:df:05:11:39:12:e2:56:5d:18:be:ea: 4e:c1:ad:08:ca:31:85:ca:a1:87:e6:d8:4c:82:18: 53:d2:35:32:59:53:45:a0:89:f7:22:73:b6:42:61: 45:11:60:aa:29:48:48:3d:32:f9:49:5c:4c:8d:53: 1c:a1:92:e7:63:f7:c5:a3:c5:d5:c6:c1:8c:3c:f3: 36:72:57:bc:27:d7:3e:e9:5a:37:cd:98:ee:90:14: ae:fc:7b:a2:8b:32:c1:d8:b6:84:ff:a3:05:df:d7: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:E4:D4:15:61:02:E2:FC:61:A9:BA:C3:7A:D6:3F:02:24:47:04 X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:af:f6:18:3e:51:ab:26:6d:8a:3a:21:bf:a6:7f:01:c6:a3: be:f6:26:50:6e:18:14:89:75:52:d3:45:bd:3c:1b:43:d4:c0: 84:6c:ff:14:e0:7a:92:c4:a7:ce:10:3e:35:3c:8b:7c:54:36: 41:8a:a3:83:66:c2:bd:cd:ca:35:65:cd:ef:d0:66:53:2b:d1: 56:96:c3:c4:69:aa:b1:f4:09:e4:19:8c:ab:7d:9b:45:f3:64: aa:5c:48:b0:d6:0d:d1:3d:cc:8a:48:5d:e3:80:c9:1b:7b:c6: ea:77:ea:d1:e0:1d:9a:4c:1b:a2:95:9d:f9:28:d2:47:0d:01: 91:58:74:55:a5:76:bd:13:f4:8a:7a:4c:de:cf:74:55:17:b6: 81:d3:27:31:80:e4:c1:a2:d5:d5:41:44:a4:a9:12:90:0e:15: 19:d3:8e:59:2f:bd:22:b1:64:02:d7:38:9f:78:b7:bd:76:3b: fb:c7:c7:88:42:5b:34:a9:3e:87:f8:6e:e1:01:dc:0f:6a:3b: 0a:ef:89:f3:35:8d:8f:8d:95:5a:15:b5:22:ab:eb:9c:29:9f: b0:e0:64:b1:47:79:b2:3e:51:d8:22:ee:b1:dd:c0:62:8d:1b: 3b:d0:7e:83:cb:93:51:a0:bc:6a:b5:70:47:dc:88:e5:f5:80: 5f:4c:3b:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCOUExMTAvBgNVBAUTKDQ5OUQ2OTFCMEY3MzJEOTAwNkU5NTEzQzYwQjczNjZC NEU2OTA0MDAwHhcNMjYwOTI1MDc0NTEyWhcNMjYxMDAyMDc0NTEyWjAYMRYwFAYD VQQDEw02YWI2MjY4OS0yZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhXccg+E5aTjt+7higGkXeOnhm9/ppouJbpaC5AVB7cBaS2/RH76Wz90AC9sC IJrM3J/i0c5aGwc/HqmTg6Foz/AcOaCeJR+A6QbJBL+AuvlM5CvhN6vX73OkFy7R y7MTERyuajhk9Vt01NY+lnpdaT3S+GpIRa5IrQ9moz99D6t9EiYB2QTrEv7l4D+e B+LrcBZhdhrMkPTG3wURORLiVl0YvupOwa0IyjGFyqGH5thMghhT0jUyWVNFoIn3 InO2QmFFEWCqKUhIPTL5SVxMjVMcoZLnY/fFo8XVxsGMPPM2cle8J9c+6Vo3zZju kBSu/HuiizLB2LaE/6MF39ceJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVA5NQV YQLi/GGpusN61j8CJEcEMB8GA1UdIwQYMBaAFEmdaRsPcy2QBulRPGC3NmtOaQQA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI5QS83Nzk2OUI4Q0Yx MjIxMUYwQUM1Q0RBN0U0RTZGNTZCQy9TWjFwR3c5ekxaQUc2VkU4WUxjMmEwNXBC QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI5QS83Nzk2OUI4Q0YxMjIxMUYwQUM1Q0RBN0U0RTZGNTZCQy9TWjFwR3c5ekxa QUc2VkU4WUxjMmEwNXBCQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAda/2GD5RqyZtijohv6Z/AcajvvYmUG4YFIl1UtNFvTwbQ9TAhGz/FOB6ksSn zhA+NTyLfFQ2QYqjg2bCvc3KNWXN79BmUyvRVpbDxGmqsfQJ5BmMq32bRfNkqlxI sNYN0T3Mikhd44DJG3vG6nfq0eAdmkwbopWd+SjSRw0BkVh0VaV2vRP0inpM3s90 VRe2gdMnMYDkwaLV1UFEpKkSkA4VGdOOWS+9IrFkAtc4n3i3vXY7+8fHiEJbNKk+ h/hu4QHcD2o7Cu+J8zWNj42VWhW1IqvrnCmfsOBksUd5sj5R2CLusd3AYo0bO9B+ g8uTUaC8arVwR9yI5fWAX0w7Yw== -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:02 2026 by rpki-client