$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json) Hash identifier: J91ZOVcCzZ2wy91Ldzw0V6mDyg1IpKWWjJyNSVpGMA8= Subject key identifier: 3A:A1:F4:C6:E8:5D:CC:0B:9F:94:BF:70:71:32:0C:3F:DD:25:BD:04 Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft Manifest number: D4 Signing time: Mon 21 Sep 2026 06:44:13 +0000 Manifest this update: Mon 21 Sep 2026 06:44:13 +0000 Manifest next update: Mon 28 Sep 2026 06:44:13 +0000 Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: QtgjhNi/8cAsn18qRPNtYZo97D4jMqXbM4p/3dR7ceo=) 2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: lvMTiY/rJNBKMXIOq2j50bfuE4IjNSp5H2Ku0pIODV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Validity Not Before: Sep 21 06:44:13 2026 GMT Not After : Sep 28 06:44:13 2026 GMT Subject: CN=6ab0d23d-edc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:28:b2:88:0a:58:65:fd:52:c8:41:65:f9: 3c:ca:56:04:1c:99:e0:4d:c9:36:a2:6e:6d:e7:ce: 86:2d:b8:08:0d:23:60:27:ec:e1:7f:e2:fe:54:17: da:30:a3:a8:f9:8f:9e:7f:5e:9e:b6:aa:01:a7:10: 6a:ef:ff:2b:c7:0f:f0:a0:76:f0:4f:e2:8d:46:f3: 84:0d:2b:8a:77:c3:d5:67:b1:6e:55:50:39:30:92: 09:41:d5:ac:9a:5c:6d:3f:57:7c:5c:7b:59:87:96: 2f:06:69:52:f7:d6:3f:cf:f9:67:3b:7c:dd:b7:39: bb:78:9c:f2:8f:2c:4b:9d:9a:f2:31:09:f1:28:4c: 6f:78:e3:8f:ca:11:8e:9e:00:f7:52:19:cb:b0:f5: 1c:75:9f:ea:7f:17:13:48:b5:65:e0:3c:9a:06:a5: b7:2e:c9:3b:5b:1a:a9:14:9b:18:43:d9:70:3e:1d: 64:59:54:aa:7c:de:82:13:6e:cd:d1:a4:b9:dc:f7: dd:17:6c:b3:1e:58:a6:f4:60:6f:fc:c4:49:fd:7f: 8a:7c:99:7b:aa:f1:64:90:1c:b1:21:b3:d7:8d:0b: c1:e0:d6:58:6b:49:99:71:c1:e9:43:5e:be:fa:c8: 7b:d0:a6:c4:7f:9b:77:1c:28:a8:1a:f8:7f:f4:af: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A1:F4:C6:E8:5D:CC:0B:9F:94:BF:70:71:32:0C:3F:DD:25:BD:04 X509v3 Authority Key Identifier: keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ea:d4:74:b2:26:ed:72:72:2c:5e:65:f4:cf:20:fc:e1:cb: 4e:4a:43:c0:a6:72:a4:6b:bb:e2:e5:f8:e4:f1:0b:f7:b0:f7: 23:bb:af:f0:12:5e:f9:67:89:16:8a:9c:a4:91:d8:7a:dd:e6: 83:92:af:b6:2f:0f:ef:6f:87:1c:24:df:fe:8a:14:f9:af:7d: a6:bb:78:4d:c4:f1:e4:2e:8d:ed:a2:46:5f:cc:92:8d:c0:94: ea:ef:50:e2:ae:b7:21:5a:6c:83:eb:33:ee:8a:4f:db:d8:6c: f0:3e:a3:ec:57:d3:72:d1:82:f7:6d:73:88:a9:79:56:01:9b: c5:2e:7f:a6:8c:9f:40:de:5a:b2:df:cd:a9:3a:ab:13:38:16: 85:07:81:25:9d:ba:68:2a:e1:1c:73:e1:e2:2c:ae:6d:f0:ce: 52:f7:5c:88:22:69:f4:ae:a2:93:62:ee:a9:72:4e:65:99:07: 5f:12:99:53:96:fd:4f:8d:aa:7d:c0:74:da:03:9f:08:34:2b: f9:2d:e8:db:d3:fc:a9:62:56:5c:7d:86:f8:42:f8:60:38:93: e2:3b:f0:52:c0:29:98:47:ca:65:e7:5c:46:9d:21:a2:ef:3f: f9:7a:82:a7:cb:ae:46:67:3f:cc:a2:1c:c1:e9:c5:64:96:a5: 0e:76:40:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5NzkxMTAvBgNVBAUTKDAxQzg1ODE4MTA4OEUxQjlDNTc3NURDQTBDNEJBRTlC OUZGNTc3QjMwHhcNMjYwOTIxMDY0NDEzWhcNMjYwOTI4MDY0NDEzWjAYMRYwFAYD VQQDEw02YWIwZDIzZC1lZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0f0osogKWGX9UshBZfk8ylYEHJngTck2om5t586GLbgIDSNgJ+zhf+L+VBfa MKOo+Y+ef16etqoBpxBq7/8rxw/woHbwT+KNRvOEDSuKd8PVZ7FuVVA5MJIJQdWs mlxtP1d8XHtZh5YvBmlS99Y/z/lnO3zdtzm7eJzyjyxLnZryMQnxKExveOOPyhGO ngD3UhnLsPUcdZ/qfxcTSLVl4DyaBqW3Lsk7WxqpFJsYQ9lwPh1kWVSqfN6CE27N 0aS53PfdF2yzHlim9GBv/MRJ/X+KfJl7qvFkkByxIbPXjQvB4NZYa0mZccHpQ16+ +sh70KbEf5t3HCioGvh/9K+CZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqh9Mbo XcwLn5S/cHEyDD/dJb0EMB8GA1UdIwQYMBaAFAHIWBgQiOG5xXddygxLrpuf9Xez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk3OS81Mzk1MDc4NjdG MjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRibkZkMTNLREV1dW01XzFk N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk3OS81Mzk1MDc4NjdGMjcxMUYwOTRCQTU3MjdDNEY5QUUwMi9BY2hZR0JDSTRi bkZkMTNLREV1dW01XzFkN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHurUdLIm7XJyLF5l9M8g/OHLTkpDwKZypGu74uX45PEL97D3I7uv8BJe+WeJ FoqcpJHYet3mg5Kvti8P72+HHCTf/ooU+a99prt4TcTx5C6N7aJGX8ySjcCU6u9Q 4q63IVpsg+sz7opP29hs8D6j7FfTctGC921ziKl5VgGbxS5/poyfQN5ast/NqTqr EzgWhQeBJZ26aCrhHHPh4iyubfDOUvdciCJp9K6ik2LuqXJOZZkHXxKZU5b9T42q fcB02gOfCDQr+S3o29P8qWJWXH2G+EL4YDiT4jvwUsApmEfKZedcRp0hou8/+XqC p8uuRmc/zKIcwenFZJalDnZAZA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:21:22 2026 by rpki-client