$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: 6GLuzAUtJwWxvewQ4g/jETzqZRehmyJzJzpVTRnicLY= Subject key identifier: C5:D8:B7:63:03:DB:71:A0:F0:0D:3C:A1:72:FE:C9:F8:8D:FA:B1:92 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 01FA Signing time: Mon 21 Sep 2026 03:15:27 +0000 Manifest this update: Mon 21 Sep 2026 03:15:26 +0000 Manifest next update: Mon 28 Sep 2026 03:15:26 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: ixHW/zOwhvpbutVXcUjkksZ1ua+8f9y4jNWvBruHBwE=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: jGiJWEhk3dhO1eibIxZXdqF5/Lngdo1Rs0UIzjEFR1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Sep 21 03:15:26 2026 GMT Not After : Sep 28 03:15:26 2026 GMT Subject: CN=6ab0a14f-7bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:28:7f:64:b0:8a:5e:2b:e2:27:66:5c:30: b7:51:0e:ad:15:38:2e:9b:2a:0c:20:22:07:70:6b: 1e:04:ec:dd:e2:da:b7:ab:4f:19:ed:f6:e4:b6:e6: f7:8a:f3:51:11:68:f8:f3:73:77:13:9b:aa:e3:ee: cf:34:5f:1b:eb:4e:1c:c8:82:c2:75:2d:df:19:73: ca:45:6e:18:5a:e2:b2:35:d0:9e:ef:29:19:91:21: 41:0f:69:ce:b9:0a:fb:b5:1c:64:1a:fb:08:c2:93: ce:76:6e:c4:10:d3:eb:39:2e:7b:12:cf:5e:8f:8c: a4:58:09:80:8e:65:ec:af:a1:df:77:a6:ff:41:30: 58:80:07:82:30:24:8a:e5:a0:73:b8:44:ad:dd:8b: b7:f3:ce:a3:92:7d:6e:b6:0c:39:ae:59:b6:ec:fa: 31:46:b3:bc:cc:74:3f:e8:53:c1:a5:db:a4:a6:b7: 22:1e:24:74:8d:e1:9f:b4:e2:63:aa:5f:dd:29:ca: c6:b1:95:d7:e7:1e:ed:c2:26:bd:4e:7a:d7:da:7e: dd:7b:77:e1:32:c2:a2:9e:95:84:d0:ae:e8:a7:93: 39:f1:c3:97:a3:42:7a:2d:9d:a7:13:e2:67:08:fe: 25:86:49:be:43:a0:fb:f5:d2:84:1b:a5:00:ae:66: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:B7:63:03:DB:71:A0:F0:0D:3C:A1:72:FE:C9:F8:8D:FA:B1:92 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c9:0a:60:de:ae:c3:e4:8a:e7:60:25:3e:13:b9:dd:dd:7f: 2e:26:d2:55:61:96:85:8d:f0:b9:c7:2d:46:4b:1c:e0:ed:33: 20:84:08:99:23:54:7b:b4:f8:88:af:9f:1a:14:4e:5c:65:99: 23:3b:75:0e:a9:1c:e9:d3:fb:f9:d5:f5:b7:33:ca:02:01:5c: 37:d0:15:55:df:96:63:0a:ef:b5:3a:06:8e:59:71:0c:8f:bb: 2e:2f:d6:95:3b:e5:89:ae:7b:a9:5e:52:4e:ae:e3:07:5a:31: c9:3d:50:75:39:80:2c:28:7e:25:4c:55:b0:71:8a:d2:8b:59: 82:7e:05:87:26:35:7f:cb:b2:05:3b:95:ae:80:39:92:1d:17: f8:02:fc:09:d2:f2:6e:02:43:2c:2d:28:94:7c:8c:d7:2b:b3: 7e:15:3a:85:70:c1:e7:54:78:d6:7f:99:d1:ca:23:4c:91:3f: 40:0a:fc:f4:b9:1d:39:24:b7:c9:8d:02:fb:45:61:50:71:17: 3f:a3:bf:00:30:44:03:e8:41:b6:6c:31:a9:f4:ff:34:b4:24: ce:41:73:cf:f5:5f:11:e7:86:e3:89:ac:66:e2:ea:57:83:3b: 7a:01:a1:dd:7e:35:6c:5f:94:0a:8e:8b:fd:b3:60:21:84:bc: 4e:9b:11:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjYwOTIxMDMxNTI2WhcNMjYwOTI4MDMxNTI2WjAYMRYwFAYD VQQDEw02YWIwYTE0Zi03YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkm8of2Swil4r4idmXDC3UQ6tFTgumyoMICIHcGseBOzd4tq3q08Z7fbktub3 ivNREWj483N3E5uq4+7PNF8b604cyILCdS3fGXPKRW4YWuKyNdCe7ykZkSFBD2nO uQr7tRxkGvsIwpPOdm7EENPrOS57Es9ej4ykWAmAjmXsr6Hfd6b/QTBYgAeCMCSK 5aBzuESt3Yu3886jkn1utgw5rlm27PoxRrO8zHQ/6FPBpdukprciHiR0jeGftOJj ql/dKcrGsZXX5x7twia9TnrX2n7de3fhMsKinpWE0K7op5M58cOXo0J6LZ2nE+Jn CP4lhkm+Q6D79dKEG6UArmafiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXYt2MD 23Gg8A08oXL+yfiN+rGSMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhMkKYN6uw+SK52AlPhO53d1/LibSVWGWhY3wucctRksc4O0zIIQImSNUe7T4 iK+fGhROXGWZIzt1Dqkc6dP7+dX1tzPKAgFcN9AVVd+WYwrvtToGjllxDI+7Li/W lTvlia57qV5STq7jB1oxyT1QdTmALCh+JUxVsHGK0otZgn4FhyY1f8uyBTuVroA5 kh0X+AL8CdLybgJDLC0olHyM1yuzfhU6hXDB51R41n+Z0cojTJE/QAr89LkdOSS3 yY0C+0VhUHEXP6O/ADBEA+hBtmwxqfT/NLQkzkFzz/VfEeeG44msZuLqV4M7egGh 3X41bF+UCo6L/bNgIYS8TpsR0A== -----END CERTIFICATE-----Generated at Tue Sep 22 06:35:57 2026 by rpki-client