$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: FvaQaA/UGDGuKGmEnGOByhHh2gaP+MCbGEr/tsqKMeM= Subject key identifier: A9:E9:9B:B8:A9:AB:3C:54:72:36:53:86:10:18:F9:5D:92:CC:06:FA Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 0292 Signing time: Sun 20 Sep 2026 22:11:49 +0000 Manifest this update: Sun 20 Sep 2026 22:11:48 +0000 Manifest next update: Sun 27 Sep 2026 22:11:48 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: EuAu5a5xbagjAI9284lZmA5Uj2Qc1q1LRrep4ZSlAQE=) 2: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: vrl0lYNHs37wtxPcg7yovGdeUO7eOyJKB+w1BJ+7/tM=) 3: s3xkSQHzEdFO4I2KYl3LMKz8C1Y.asa (hash: 9tDF8q7eOrLgT3kFt2UIUzdSOGl4yuXaC8hqhp50Q1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Sep 20 22:11:48 2026 GMT Not After : Sep 27 22:11:48 2026 GMT Subject: CN=6ab05a25-f2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:11:eb:64:bf:27:a5:7a:2b:3d:e1:52:75: 2f:4d:ee:15:b2:c5:26:be:2f:23:49:3d:cd:f9:3d: 4c:bb:79:b6:a0:3b:fd:7c:1c:a0:7f:71:75:a4:3b: 1b:ec:ee:c8:27:8a:ef:29:d9:2f:d6:97:1d:55:88: 32:3c:b3:be:b8:57:6b:b2:53:7e:8a:6a:3d:a3:78: 19:79:4e:6d:fa:5b:bc:3c:0b:0a:ab:75:68:14:76: 30:2b:d3:c3:40:c9:45:ae:dd:e6:59:e8:74:1f:6e: 57:d8:ca:98:ac:ad:e9:9a:41:cc:66:26:e6:ae:ec: 05:7f:25:38:39:29:68:64:a8:95:b0:9b:f5:e5:db: 72:b7:75:8a:a9:44:52:08:0e:95:47:64:e2:61:6d: b4:b0:ff:47:99:1f:e3:ed:32:95:4c:fe:9a:35:b0: 38:65:42:0d:ef:9e:24:08:c7:74:f4:99:6e:fa:9f: 91:88:a5:61:08:e5:21:5f:90:5b:ff:5b:77:95:5e: 1d:f9:b0:6d:f7:f0:fd:0b:49:42:0b:f2:7c:8e:06: 3c:57:b2:3f:51:d3:d0:c3:67:89:9b:ac:58:01:48: 21:6e:10:91:5f:3e:ca:c7:0b:d4:36:33:c7:9e:8d: a0:f2:44:a5:5d:0a:f2:4e:d4:f7:fe:50:6e:b0:bb: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:9B:B8:A9:AB:3C:54:72:36:53:86:10:18:F9:5D:92:CC:06:FA X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cf:90:bb:a2:16:e3:56:79:97:e8:42:f5:a5:c5:78:05:4a: 4e:a9:06:39:8f:24:ba:a4:87:d3:1f:b4:21:d8:3f:69:2c:f6: 05:7a:f2:66:25:79:d1:ce:07:8f:02:d3:55:09:b5:92:bd:b5: 98:ae:e1:e8:20:d8:f4:80:a8:c2:fd:d4:c4:43:16:bf:de:1d: 27:d0:e1:37:7f:d8:b3:9c:c5:9b:73:fa:3b:ec:00:4b:86:76: 1b:b2:3c:b6:a3:d0:cd:85:5d:fb:b7:a4:08:3c:9e:40:1e:ff: ba:a9:28:ed:2a:8c:aa:a4:65:bb:e8:84:4e:5d:7f:6e:77:b7: 32:8f:a3:a8:57:b6:27:29:59:3c:af:95:ab:0f:c7:1f:58:cf: 2a:5b:f0:8d:3a:d9:ca:ab:40:c6:a2:79:98:7a:47:49:51:31: 95:56:a8:98:b5:3a:bf:84:e0:c8:10:47:04:45:05:0b:c9:e5: 39:10:24:cd:98:b8:d8:be:58:17:6a:fd:eb:45:63:75:3a:ee: 27:70:9f:59:5f:59:2f:c0:40:02:4f:7f:0a:35:39:0f:11:18: c4:18:d6:b4:5e:ea:d1:d4:e1:9b:33:49:10:39:65:ef:8e:1b: 04:10:99:23:d3:bd:f7:ef:8a:5a:41:6a:45:c9:2a:03:c1:dc: 3e:cd:68:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjYwOTIwMjIxMTQ4WhcNMjYwOTI3MjIxMTQ4WjAYMRYwFAYD VQQDEw02YWIwNWEyNS1mMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhigR62S/J6V6Kz3hUnUvTe4VssUmvi8jST3N+T1Mu3m2oDv9fBygf3F1pDsb 7O7IJ4rvKdkv1pcdVYgyPLO+uFdrslN+imo9o3gZeU5t+lu8PAsKq3VoFHYwK9PD QMlFrt3mWeh0H25X2MqYrK3pmkHMZibmruwFfyU4OSloZKiVsJv15dtyt3WKqURS CA6VR2TiYW20sP9HmR/j7TKVTP6aNbA4ZUIN754kCMd09Jlu+p+RiKVhCOUhX5Bb /1t3lV4d+bBt9/D9C0lCC/J8jgY8V7I/UdPQw2eJm6xYAUghbhCRXz7KxwvUNjPH no2g8kSlXQryTtT3/lBusLsrNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnpm7ip qzxUcjZThhAY+V2SzAb6MB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8+Qu6IW41Z5l+hC9aXFeAVKTqkGOY8kuqSH0x+0Idg/aSz2BXryZiV50c4H jwLTVQm1kr21mK7h6CDY9ICowv3UxEMWv94dJ9DhN3/Ys5zFm3P6O+wAS4Z2G7I8 tqPQzYVd+7ekCDyeQB7/uqko7SqMqqRlu+iETl1/bne3Mo+jqFe2JylZPK+Vqw/H H1jPKlvwjTrZyqtAxqJ5mHpHSVExlVaomLU6v4TgyBBHBEUFC8nlORAkzZi42L5Y F2r960VjdTruJ3CfWV9ZL8BAAk9/CjU5DxEYxBjWtF7q0dThmzNJEDll744bBBCZ I9O99++KWkFqRckqA8HcPs1oLA== -----END CERTIFICATE-----Generated at Mon Sep 21 18:16:58 2026 by rpki-client