$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: Z2o3ydc3djI6LQHVDM/nrCeJoOEzXtTSaocPNojalU8= Subject key identifier: 8C:3B:7A:9E:A8:2C:E2:6F:38:81:FA:CB:88:40:7E:BA:E5:5C:78:D3 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0280 Signing time: Mon 21 Sep 2026 02:17:52 +0000 Manifest this update: Mon 21 Sep 2026 02:17:52 +0000 Manifest next update: Mon 28 Sep 2026 02:17:52 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: q2QMF7IXnoLw8j6ujsPP987G0WP/uaE99MfYMNUFZ10=) 2: F02954E694AA11F18168138B6F11F970.roa (hash: jdpMDiHc19U9B3dTcdf0OBI4UCQ8NKRYGsnZZyIR7FA=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: XhHaHdOlqWYP1wfuj95iHXOiSFz6V8DkPjaDxpfW1i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Sep 21 02:17:52 2026 GMT Not After : Sep 28 02:17:52 2026 GMT Subject: CN=6ab093d0-23e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:c7:c5:5b:a3:e2:18:32:c4:26:e4:29:ef: 88:4c:3b:7f:5b:2f:36:c4:6e:03:9d:10:cb:41:f9: ed:8d:66:48:fa:3c:20:89:77:e0:8b:bc:0f:2e:12: b9:ed:73:40:c4:83:f5:d3:cd:9d:45:42:30:d3:8d: b3:54:a3:a2:aa:e5:e8:47:9a:11:01:c1:a5:1f:33: c6:6c:49:06:8e:80:db:ce:44:55:49:1f:76:41:2c: f8:e3:b2:31:29:4d:ca:35:db:04:bb:57:9d:39:6d: 21:ab:14:84:a0:c0:22:7d:1c:43:ac:c3:3a:cc:9f: 98:29:cb:68:ab:ee:44:c5:f2:a5:08:08:ac:0e:cb: bf:a8:67:00:30:5c:23:19:ad:f2:c3:c9:2c:b8:3a: 98:5c:b5:6b:0f:e4:24:a2:1f:8c:84:9a:65:d2:77: e3:97:58:a5:02:d0:5c:58:24:7a:6f:17:55:a6:53: e5:3f:e3:bb:4c:8f:f1:3e:56:92:45:1b:3d:c4:f2: 2d:ec:da:c7:83:7f:03:f6:03:37:c3:89:0b:ff:8d: e7:fe:07:15:24:f7:9b:51:89:94:6c:bb:cc:df:09: f8:a5:25:93:f4:d6:62:60:ce:94:0f:eb:30:6a:e8: c2:07:b7:fa:dd:43:cf:ee:ff:a0:09:51:b5:9a:b4: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3B:7A:9E:A8:2C:E2:6F:38:81:FA:CB:88:40:7E:BA:E5:5C:78:D3 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d1:4b:1b:1f:c9:cc:bb:bc:6f:b3:c4:3b:b1:36:df:75:7a: 00:7e:3c:1a:ce:b9:84:7c:6e:05:9e:30:78:52:10:2a:d4:80: 57:77:89:b6:8e:dd:7f:3f:55:52:ce:92:55:52:42:fd:bd:77: 7a:84:42:de:7d:8c:2b:2e:c5:d1:14:39:99:43:1f:61:8a:8b: c1:2f:9e:2d:05:79:21:13:d9:2e:11:d5:f3:bb:a6:44:a6:c4: 9f:23:7d:3c:e6:74:9d:51:ca:04:bb:2d:1d:59:ed:4d:39:f1: 1e:12:eb:9a:55:c3:48:27:1f:ad:26:c4:7c:75:a2:ea:c5:b6: c8:92:59:86:fa:2e:a2:5e:c1:f1:ce:ad:19:a5:b2:d7:a6:9c: e2:84:bb:9d:93:52:bf:b2:46:1a:28:fc:ba:44:4a:a1:8e:42: a9:bd:7e:51:75:2c:9b:58:d5:cd:fe:53:84:39:1e:da:2d:42: c1:39:c9:43:ec:ac:f5:91:7e:26:8e:26:c4:31:63:65:fe:fa: f3:0c:4a:76:c0:34:b3:f5:bc:f9:fc:d9:13:23:06:20:fc:04: bc:77:f6:e6:3b:eb:36:8d:fe:8b:a4:d9:16:69:b8:9c:fd:1a: e6:08:7f:78:6a:3b:2b:af:d7:4d:b0:e3:6c:33:5c:12:06:90: f0:68:c9:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjYwOTIxMDIxNzUyWhcNMjYwOTI4MDIxNzUyWjAYMRYwFAYD VQQDEw02YWIwOTNkMC0yM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk6jHxVuj4hgyxCbkKe+ITDt/Wy82xG4DnRDLQfntjWZI+jwgiXfgi7wPLhK5 7XNAxIP1082dRUIw042zVKOiquXoR5oRAcGlHzPGbEkGjoDbzkRVSR92QSz447Ix KU3KNdsEu1edOW0hqxSEoMAifRxDrMM6zJ+YKctoq+5ExfKlCAisDsu/qGcAMFwj Ga3yw8ksuDqYXLVrD+Qkoh+MhJpl0nfjl1ilAtBcWCR6bxdVplPlP+O7TI/xPlaS RRs9xPIt7NrHg38D9gM3w4kL/43n/gcVJPebUYmUbLvM3wn4pSWT9NZiYM6UD+sw aujCB7f63UPP7v+gCVG1mrRYzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw7ep6o LOJvOIH6y4hAfrrlXHjTMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdFLGx/JzLu8b7PEO7E233V6AH48Gs65hHxuBZ4weFIQKtSAV3eJto7dfz9V Us6SVVJC/b13eoRC3n2MKy7F0RQ5mUMfYYqLwS+eLQV5IRPZLhHV87umRKbEnyN9 POZ0nVHKBLstHVntTTnxHhLrmlXDSCcfrSbEfHWi6sW2yJJZhvouol7B8c6tGaWy 16ac4oS7nZNSv7JGGij8ukRKoY5Cqb1+UXUsm1jVzf5ThDke2i1CwTnJQ+ys9ZF+ Jo4mxDFjZf768wxKdsA0s/W8+fzZEyMGIPwEvHf25jvrNo3+i6TZFmm4nP0a5gh/ eGo7K6/XTbDjbDNcEgaQ8GjJOQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:06:53 2026 by rpki-client