$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: u4614v1r+5F/TSkB+wykF4e30DbZkFAhYC/KOJQ1fbU= Subject key identifier: AC:F2:A5:29:92:CD:92:53:1B:B1:3E:6F:22:9B:FC:2F:D3:75:17:76 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 01C7 Signing time: Mon 21 Sep 2026 03:55:02 +0000 Manifest this update: Mon 21 Sep 2026 03:55:01 +0000 Manifest next update: Mon 28 Sep 2026 03:55:01 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: ES7ebvokraQZCVLCBYNf8Bo8LWlWOM6v8yM0ErjDXxM=) 2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=) 3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Sep 21 03:55:01 2026 GMT Not After : Sep 28 03:55:01 2026 GMT Subject: CN=6ab0aa96-0c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:5b:f9:8d:be:00:9a:3a:08:c7:f1:55:c2: 08:bb:10:a8:69:f0:43:9b:ec:10:13:7c:25:95:f7: 10:1b:a4:35:5f:03:bc:09:9b:50:50:05:49:5e:23: e9:1a:50:f4:5d:0d:70:95:12:84:f7:e3:4d:32:54: c1:5e:37:a7:cc:09:01:28:87:64:1d:b1:c6:20:3d: f1:db:cf:3d:8b:3f:34:58:c5:46:08:c3:44:46:85: 99:b3:88:3a:b7:f1:a2:bc:15:6c:d1:be:c9:40:3e: 0a:65:76:5e:73:aa:1c:00:21:d7:7b:98:c9:2f:64: 95:87:f6:3a:3a:dd:a5:fd:30:dd:f2:30:cf:5a:b5: 8e:77:11:e8:93:84:6d:d4:5e:47:76:12:1d:68:e1: 0c:38:44:ac:1d:c9:16:14:8a:31:49:15:81:d6:f1: 39:93:39:ff:28:0f:c4:d0:7c:8e:8c:18:1f:6a:bd: f5:40:ea:b1:f2:4e:e4:4f:61:96:08:6e:6c:4e:5b: 93:80:95:1c:6a:be:d1:e8:31:24:59:7d:aa:8e:8f: 8c:5d:bc:62:48:ff:34:f2:b6:75:88:4b:f1:8c:fe: 2f:7b:98:62:61:19:c8:4b:16:f5:28:af:ac:e0:82: fa:a1:0f:80:b5:ed:4c:cf:a4:90:b8:e2:4a:c7:55: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F2:A5:29:92:CD:92:53:1B:B1:3E:6F:22:9B:FC:2F:D3:75:17:76 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:af:92:4f:2f:2f:99:c4:7d:46:8b:b9:c3:ad:f1:78:d6:f9: 98:bb:c8:59:71:55:99:f6:eb:93:5b:29:8d:2d:8f:c3:2b:d3: 54:e4:4b:3a:0a:4f:c0:2d:0d:56:b5:cb:22:c6:2b:82:c4:fc: 72:ae:e1:a3:dd:18:6b:83:50:77:52:60:31:c6:71:ab:b1:c5: ba:dd:b0:5b:3a:c7:e6:32:f8:ec:5e:08:1c:0b:62:77:8d:80: 6f:6c:8e:f4:c5:c8:02:ca:9a:eb:12:2d:68:1a:e2:7e:92:46: db:4f:e3:e4:67:5e:e5:80:76:cf:47:22:98:dc:b6:b1:35:8c: 3e:cd:97:00:0b:35:cd:2d:af:a7:70:af:19:cf:4a:bd:b1:e1: 61:4f:3c:a7:98:12:30:ea:91:b2:5e:9b:8c:92:6e:ab:d9:18: 87:f8:0a:d8:83:52:20:c9:27:0c:95:3e:30:6c:a8:e6:73:c2: eb:74:3c:b5:10:c7:e0:83:86:b7:06:10:7f:a7:83:a5:ee:4e: af:08:c9:76:14:9f:cd:73:36:91:bf:c7:a8:a8:87:13:c9:e2: b0:e5:5f:33:a0:31:22:cd:64:ad:1c:69:52:3e:6d:0f:8d:77: 89:74:82:c6:36:4c:7a:6f:f8:af:08:14:df:72:17:e4:e7:d2: 70:8e:89:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjYwOTIxMDM1NTAxWhcNMjYwOTI4MDM1NTAxWjAYMRYwFAYD VQQDEw02YWIwYWE5Ni0wYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXdb+Y2+AJo6CMfxVcIIuxCoafBDm+wQE3wllfcQG6Q1XwO8CZtQUAVJXiPp GlD0XQ1wlRKE9+NNMlTBXjenzAkBKIdkHbHGID3x2889iz80WMVGCMNERoWZs4g6 t/GivBVs0b7JQD4KZXZec6ocACHXe5jJL2SVh/Y6Ot2l/TDd8jDPWrWOdxHok4Rt 1F5HdhIdaOEMOESsHckWFIoxSRWB1vE5kzn/KA/E0HyOjBgfar31QOqx8k7kT2GW CG5sTluTgJUcar7R6DEkWX2qjo+MXbxiSP808rZ1iEvxjP4ve5hiYRnISxb1KK+s 4IL6oQ+Ate1Mz6SQuOJKx1XftwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzypSmS zZJTG7E+byKb/C/TdRd2MB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYK+STy8vmcR9Rou5w63xeNb5mLvIWXFVmfbrk1spjS2PwyvTVORLOgpPwC0N VrXLIsYrgsT8cq7ho90Ya4NQd1JgMcZxq7HFut2wWzrH5jL47F4IHAtid42Ab2yO 9MXIAsqa6xItaBrifpJG20/j5Gde5YB2z0cimNy2sTWMPs2XAAs1zS2vp3CvGc9K vbHhYU88p5gSMOqRsl6bjJJuq9kYh/gK2INSIMknDJU+MGyo5nPC63Q8tRDH4IOG twYQf6eDpe5OrwjJdhSfzXM2kb/HqKiHE8nisOVfM6AxIs1krRxpUj5tD413iXSC xjZMem/4rwgU33IX5OfScI6Jqw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:26:10 2026 by rpki-client