$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: v1r+L8+Dz4TWVSw4Alb6hxBk2TVNEei3QHTPQM7BkMw= Subject key identifier: E3:F5:B0:A8:05:95:52:E0:0F:E2:34:40:4D:7D:96:EC:1B:22:24:DE Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 0363 Signing time: Wed 23 Sep 2026 00:41:45 +0000 Manifest this update: Wed 23 Sep 2026 00:41:44 +0000 Manifest next update: Wed 30 Sep 2026 00:41:44 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: cn9ZebF5PB62bNDbCTaJa1GhLnI0tN3FAIau6JEkWWw=) 2: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: GDZokXpZ+niO8zKz7vtzfAEOG0XN49j5ArWRaowNtqg=) 3: 826A614C16D911F183D175C0323D8C67.roa (hash: vzlm2lNsNkYyqc9HraEI88fz4qcYmcDAB/JqH0Rt1J4=) 4: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: TdcGUCFXzXTItt/U5FsMFNX2z6RTRrQyU46xfxrbahk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Sep 23 00:41:44 2026 GMT Not After : Sep 30 00:41:44 2026 GMT Subject: CN=6ab32048-5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:f9:60:42:4e:ec:13:56:64:51:43:8d:b1: c8:88:3a:2e:35:0a:37:bf:f0:48:e3:e5:71:e0:c4: 75:0e:42:d6:21:6f:dd:d3:9c:68:33:dc:69:9a:55: 95:87:3e:c0:64:4c:35:f2:0e:58:59:a8:43:19:a8: 4e:18:73:34:5f:04:c4:54:a7:53:32:e8:56:16:1d: c7:cc:c1:1d:3f:d5:ea:15:51:4f:de:5c:6e:7a:ee: d8:ea:dd:29:a0:a3:e4:bc:19:6c:bc:fb:52:de:c6: a2:a4:ea:8a:9e:de:aa:a7:c4:d4:82:3d:b4:32:1b: da:f6:a1:e4:40:d9:14:e1:fe:77:50:09:8b:42:3c: 38:55:84:4e:86:86:ff:fd:ec:05:08:4a:51:68:3b: ba:5a:0c:de:3e:ed:c2:da:4d:11:43:bd:ca:00:0d: 7b:24:5c:26:65:2a:b4:bc:ef:0f:a7:fc:c7:f6:46: 27:ee:07:73:81:fe:48:ca:86:84:48:ab:e9:99:d7: bf:d0:1f:dd:0e:54:38:40:53:80:a5:e7:40:77:7c: 73:19:3a:2d:f4:11:4f:54:b0:b4:1c:c1:0c:61:36: cd:bf:3e:1a:b8:09:9a:f1:8c:a8:a3:7d:0b:b1:53: 96:47:dc:ff:0c:7a:ae:d1:50:8d:66:f6:f7:9d:5c: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:B0:A8:05:95:52:E0:0F:E2:34:40:4D:7D:96:EC:1B:22:24:DE X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5c:f6:28:df:4f:ef:e8:a0:6b:e0:ee:d9:99:4d:97:23:2f: 9e:7c:4d:59:db:83:1a:90:f7:73:a5:63:da:a6:5e:4c:29:8f: 80:a2:71:28:7b:f1:46:8c:07:3f:82:38:e2:bf:72:b9:70:44: 90:6b:f1:8a:af:f9:a8:6c:62:b9:ee:ac:dc:28:19:73:22:f8: 09:8e:de:43:cd:bf:19:e2:5c:23:9a:f0:25:8d:4f:79:e0:a5: ea:b3:ae:fe:21:2a:0e:9f:d7:b3:59:88:ed:76:8c:a2:bf:c6: f6:19:39:b8:46:c3:3e:f0:0d:94:8c:26:09:5a:8a:89:6c:4b: de:00:95:60:22:4d:35:2a:0b:b3:80:23:4c:f0:56:b6:f1:e9: 3a:9d:cb:fb:56:34:0a:9e:c8:12:2f:2b:46:79:f5:a0:8f:ea: 63:d4:36:b4:17:1f:93:9b:01:f8:18:3a:82:11:af:00:dd:60: c1:d7:34:6f:53:e9:df:a5:38:c8:64:b4:35:85:68:e7:04:89: 7a:aa:a8:8c:9e:b6:2a:b9:ac:a3:39:f6:24:c0:d9:40:87:5d: 45:f9:77:cd:d1:05:13:44:8b:63:85:7d:d9:1c:ec:df:26:b4: 54:e6:91:f5:e9:4a:b5:e4:51:ab:3f:f2:33:ae:1f:f8:68:42: 3d:e8:a2:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjYwOTIzMDA0MTQ0WhcNMjYwOTMwMDA0MTQ0WjAYMRYwFAYD VQQDEw02YWIzMjA0OC01ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNz5YEJO7BNWZFFDjbHIiDouNQo3v/BI4+Vx4MR1DkLWIW/d05xoM9xpmlWV hz7AZEw18g5YWahDGahOGHM0XwTEVKdTMuhWFh3HzMEdP9XqFVFP3lxueu7Y6t0p oKPkvBlsvPtS3saipOqKnt6qp8TUgj20Mhva9qHkQNkU4f53UAmLQjw4VYROhob/ /ewFCEpRaDu6WgzePu3C2k0RQ73KAA17JFwmZSq0vO8Pp/zH9kYn7gdzgf5IyoaE SKvpmde/0B/dDlQ4QFOApedAd3xzGTot9BFPVLC0HMEMYTbNvz4auAma8Yyoo30L sVOWR9z/DHqu0VCNZvb3nVwllQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP1sKgF lVLgD+I0QE19luwbIiTeMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1z2KN9P7+iga+Du2ZlNlyMvnnxNWduDGpD3c6Vj2qZeTCmPgKJxKHvxRowH P4I44r9yuXBEkGvxiq/5qGxiue6s3CgZcyL4CY7eQ82/GeJcI5rwJY1PeeCl6rOu /iEqDp/Xs1mI7XaMor/G9hk5uEbDPvANlIwmCVqKiWxL3gCVYCJNNSoLs4AjTPBW tvHpOp3L+1Y0Cp7IEi8rRnn1oI/qY9Q2tBcfk5sB+Bg6ghGvAN1gwdc0b1Pp36U4 yGS0NYVo5wSJeqqojJ62Krmsozn2JMDZQIddRfl3zdEFE0SLY4V92Rzs3ya0VOaR 9elKteRRqz/yM64f+GhCPeiiAQ== -----END CERTIFICATE-----Generated at Wed Sep 23 13:32:26 2026 by rpki-client