$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: hgCAP7cC23kosPZNd1ZsXa1p2W2Dni11IvJZ00BDIMc= Subject key identifier: D7:F7:73:8D:A0:3B:1D:24:BF:3F:C5:A4:1C:28:F2:60:FF:5D:0B:8C Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 013F Signing time: Sun 20 Sep 2026 14:35:42 +0000 Manifest this update: Sun 20 Sep 2026 14:35:41 +0000 Manifest next update: Sun 27 Sep 2026 14:35:41 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: xR/1+XPzmA9NxgO0iBz6Qqbdm6gXPPfwS21htA1doww=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Sep 20 14:35:41 2026 GMT Not After : Sep 27 14:35:41 2026 GMT Subject: CN=6aafef3e-90a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:ef:a2:09:32:2d:78:59:91:66:ce:4d:dc: 0c:80:d7:ac:73:ef:65:28:ac:8d:ba:35:7b:53:9e: 19:67:a0:1d:21:eb:ff:36:1b:11:ba:0c:30:86:6b: 0b:19:a5:d2:b5:f8:25:b6:1d:fb:36:22:62:53:3d: e5:8e:ed:19:e3:f8:ea:34:62:9b:f6:f0:b2:c4:0d: 58:60:db:c8:33:7c:ca:b8:88:6f:5e:88:1f:bb:18: 63:44:71:fe:24:fc:ae:63:f5:2e:e2:15:67:ed:e7: 08:73:b3:48:e0:bb:af:c1:27:bb:1d:4c:a7:6d:f9: 76:b0:5b:25:4e:2f:ec:11:52:78:28:66:f0:a6:c4: 32:fe:d7:ff:fc:aa:e5:9d:ff:b9:71:ce:0a:25:09: c9:9d:ec:86:86:d1:9a:4f:62:ec:cc:04:e1:bc:aa: 9c:72:26:f2:91:b9:6a:35:2c:65:ed:14:20:d4:6c: f8:23:72:cc:19:8d:7c:bf:13:9e:da:24:98:98:30: db:be:1d:e8:d4:32:89:b0:65:08:36:63:c0:48:a8: 3f:8e:5f:53:87:bd:a1:de:b0:51:a3:62:9a:32:0c: 5d:27:a1:9d:1f:be:ed:12:36:2d:cd:32:e0:63:ab: 62:16:64:8e:41:4b:f4:67:ac:d0:c3:c5:ff:76:33: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F7:73:8D:A0:3B:1D:24:BF:3F:C5:A4:1C:28:F2:60:FF:5D:0B:8C X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:50:8c:c7:98:f9:bb:6f:bb:96:f6:ce:98:63:d6:e4:4f:e3: 8d:34:48:7d:67:8d:e4:a5:12:58:b3:4e:50:10:1c:92:9e:92: e7:5e:f0:00:d0:62:c7:6c:35:76:f9:3e:e1:e7:db:ac:ce:3c: 37:be:c5:dd:35:ac:7f:c2:88:04:94:c6:33:4a:4e:65:3a:1d: 28:cf:30:ff:16:c2:0a:c2:5a:c4:f5:2b:46:b0:a7:f5:c4:47: 52:cc:09:3d:19:62:a1:eb:29:92:28:92:ce:29:e3:42:44:08: 09:62:fc:aa:e4:ea:1d:86:b7:52:36:09:7c:2d:51:3e:6f:ae: 29:3f:25:d3:40:4d:5d:0d:bb:08:24:6b:50:35:bb:0f:8a:c1: 43:be:db:6c:cb:da:2b:4a:95:20:f6:77:81:53:df:62:fb:96: a8:2e:45:46:2c:91:64:4a:a9:d9:87:11:c1:4a:fe:2f:98:98: b0:f0:be:c8:5a:5b:76:83:2d:bb:7b:3e:23:50:fc:71:a7:12: c3:1f:92:3e:5e:b6:ae:ef:c0:de:29:58:bb:0e:77:d1:1d:5d: 50:2c:3a:18:68:30:94:14:75:79:4f:59:83:e4:b4:da:f8:d9: 77:3b:73:ad:91:1c:49:d6:7f:96:9b:ba:69:8e:45:dd:d4:79: fd:15:2e:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjYwOTIwMTQzNTQxWhcNMjYwOTI3MTQzNTQxWjAYMRYwFAYD VQQDEw02YWFmZWYzZS05MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMXvogkyLXhZkWbOTdwMgNesc+9lKKyNujV7U54ZZ6AdIev/NhsRugwwhmsL GaXStfglth37NiJiUz3lju0Z4/jqNGKb9vCyxA1YYNvIM3zKuIhvXogfuxhjRHH+ JPyuY/Uu4hVn7ecIc7NI4LuvwSe7HUynbfl2sFslTi/sEVJ4KGbwpsQy/tf//Krl nf+5cc4KJQnJneyGhtGaT2LszAThvKqccibykblqNSxl7RQg1Gz4I3LMGY18vxOe 2iSYmDDbvh3o1DKJsGUINmPASKg/jl9Th72h3rBRo2KaMgxdJ6GdH77tEjYtzTLg Y6tiFmSOQUv0Z6zQw8X/djPqCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNf3c42g Ox0kvz/FpBwo8mD/XQuMMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlCMx5j5u2+7lvbOmGPW5E/jjTRIfWeN5KUSWLNOUBAckp6S517wANBix2w1 dvk+4efbrM48N77F3TWsf8KIBJTGM0pOZTodKM8w/xbCCsJaxPUrRrCn9cRHUswJ PRlioespkiiSzinjQkQICWL8quTqHYa3UjYJfC1RPm+uKT8l00BNXQ27CCRrUDW7 D4rBQ77bbMvaK0qVIPZ3gVPfYvuWqC5FRiyRZEqp2YcRwUr+L5iYsPC+yFpbdoMt u3s+I1D8cacSwx+SPl62ru/A3ilYuw530R1dUCw6GGgwlBR1eU9Zg+S02vjZdztz rZEcSdZ/lpu6aY5F3dR5/RUuIQ== -----END CERTIFICATE-----Generated at Mon Sep 21 10:42:18 2026 by rpki-client