$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: cvtS4CZkgadxrrlwFwgtRJF+Y6yI5SpbDri03VszyY8= Subject key identifier: 79:75:7C:38:45:2D:9A:24:87:D4:37:15:70:C7:9B:1B:95:2F:E6:F2 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: 01A3 Signing time: Wed 23 Sep 2026 04:03:28 +0000 Manifest this update: Wed 23 Sep 2026 04:03:27 +0000 Manifest next update: Wed 30 Sep 2026 04:03:27 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: O3rQpxygXkmaFxzpyt5+r1KrA9O3HgZA3gnJb03kw3Y=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: 7D2o9V8B+THFZdf2H4zmO2ZxT2tryY6dqnAujMyrW8Y=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: qVzuwc8GJJLc1M+VCPFsl93UzK3diqKkMLNcNf9VMmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Sep 23 04:03:27 2026 GMT Not After : Sep 30 04:03:27 2026 GMT Subject: CN=6ab34f90-811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:d6:f3:ab:fa:7c:33:49:9a:54:b6:1b:c7: 87:4d:b1:2e:13:c1:c6:a5:58:5b:8c:a9:33:49:70: 1f:e7:24:fe:d6:fc:6d:fa:ab:e4:2d:60:19:76:7f: 95:f9:ac:14:fc:0f:ad:48:53:3d:2d:ec:89:9f:81: 76:1b:dc:3a:4e:ec:f5:2b:d6:cd:c9:17:dc:79:fe: e8:2c:27:e7:56:1a:f6:53:68:87:56:42:5c:ec:db: e3:45:11:27:e0:9b:f7:43:4a:cd:dc:0c:d7:dd:74: 1a:53:d8:d2:29:6f:29:13:12:1c:0a:4d:a9:fa:7a: 49:31:b7:63:f9:94:5f:b0:25:74:28:0c:a8:3e:fd: d4:b1:95:2b:d0:ff:b4:a5:d0:11:05:3f:95:3f:1d: 25:90:52:af:21:ed:a0:a7:95:3f:31:a9:cc:d2:55: 8c:14:45:3e:f9:b4:7f:e4:b8:e6:7f:97:31:67:d9: 99:c6:32:cd:f3:af:3a:0c:95:cb:4d:67:3f:08:0e: b0:9a:aa:b3:d5:9a:58:24:69:a1:4f:ab:69:3c:ca: 75:6c:28:81:3c:eb:ac:1c:24:c5:c2:a4:ad:1d:cc: f2:a3:3d:4a:af:e5:ae:86:ea:5f:5f:7a:8b:cb:07: b6:92:91:af:7a:59:4d:54:7a:b5:9d:11:5f:b9:21: 6a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:7C:38:45:2D:9A:24:87:D4:37:15:70:C7:9B:1B:95:2F:E6:F2 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:80:3d:72:1c:2e:70:fd:c2:39:a0:af:93:2a:b7:b0:bc:6a: 2c:7c:b5:1e:7f:6b:3c:6b:a2:1e:d2:96:e7:3c:1d:33:46:91: a9:2c:ad:cb:36:e7:5a:04:d0:33:78:eb:e6:3a:c1:91:44:8a: d7:53:68:32:4b:47:66:c2:84:16:89:5e:c1:15:e9:26:e0:5a: 37:02:9f:ea:d2:af:44:28:2a:ea:15:99:29:bd:01:be:10:59: 0c:39:d2:fb:a0:17:f9:b1:d6:57:4f:44:9a:76:a3:6b:b0:3f: 22:ef:30:97:a0:f8:a8:68:a9:70:51:23:81:16:08:4a:07:73: 70:27:56:2c:2b:09:5a:e4:86:56:fa:b5:94:06:43:73:b4:4a: 90:d7:c5:59:ee:3c:81:a6:a6:ad:1f:2a:84:bb:74:77:43:2e: 1a:a2:35:8a:a3:b9:d7:c7:ba:95:f2:91:52:df:b4:cd:dd:90: da:2b:27:d9:35:9a:a0:9d:c7:14:0f:5f:bb:19:d4:38:40:59: 87:59:e7:f1:03:b7:d9:13:88:07:41:6e:f1:a0:72:d1:5c:06: fb:19:2c:3a:a7:db:b6:bc:7d:83:0a:c7:0e:d8:1b:3d:81:f3: 2b:c5:34:b9:09:cb:c5:1b:03:71:4f:8e:37:a5:9e:e9:d1:a5: c8:ed:1f:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjYwOTIzMDQwMzI3WhcNMjYwOTMwMDQwMzI3WjAYMRYwFAYD VQQDEw02YWIzNGY5MC04MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5jW86v6fDNJmlS2G8eHTbEuE8HGpVhbjKkzSXAf5yT+1vxt+qvkLWAZdn+V +awU/A+tSFM9LeyJn4F2G9w6Tuz1K9bNyRfcef7oLCfnVhr2U2iHVkJc7NvjRREn 4Jv3Q0rN3AzX3XQaU9jSKW8pExIcCk2p+npJMbdj+ZRfsCV0KAyoPv3UsZUr0P+0 pdARBT+VPx0lkFKvIe2gp5U/ManM0lWMFEU++bR/5Ljmf5cxZ9mZxjLN8686DJXL TWc/CA6wmqqz1ZpYJGmhT6tpPMp1bCiBPOusHCTFwqStHczyoz1Kr+WuhupfX3qL ywe2kpGvellNVHq1nRFfuSFqewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHl1fDhF LZokh9Q3FXDHmxuVL+byMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe4A9chwucP3COaCvkyq3sLxqLHy1Hn9rPGuiHtKW5zwdM0aRqSytyzbnWgTQ M3jr5jrBkUSK11NoMktHZsKEFolewRXpJuBaNwKf6tKvRCgq6hWZKb0BvhBZDDnS +6AX+bHWV09Emnaja7A/Iu8wl6D4qGipcFEjgRYISgdzcCdWLCsJWuSGVvq1lAZD c7RKkNfFWe48gaamrR8qhLt0d0MuGqI1iqO518e6lfKRUt+0zd2Q2isn2TWaoJ3H FA9fuxnUOEBZh1nn8QO32ROIB0Fu8aBy0VwG+xksOqfbtrx9gwrHDtgbPYHzK8U0 uQnLxRsDcU+ON6We6dGlyO0f4w== -----END CERTIFICATE-----Generated at Fri Sep 25 03:15:41 2026 by rpki-client