$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: B9a8IA/3pSGUhY2W/CkH28mqdOJI98tLLd9yY6LEUxg= Subject key identifier: 54:AB:9B:84:A8:83:9D:81:5F:14:8F:8D:A2:38:8A:F0:94:BA:13:31 Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: 011F Signing time: Mon 21 Sep 2026 05:51:17 +0000 Manifest this update: Mon 21 Sep 2026 05:51:17 +0000 Manifest next update: Mon 28 Sep 2026 05:51:17 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: rH1b70l9sOWj0bwC91TmqHEmEQswpfrZcKeHRorGew4=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Sep 21 05:51:17 2026 GMT Not After : Sep 28 05:51:17 2026 GMT Subject: CN=6ab0c5d5-9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:be:17:16:84:4e:3a:99:71:08:e3:92:66: ea:df:16:f9:c7:9a:ea:74:20:ea:18:8a:24:61:72: 2b:4b:c3:f3:b6:02:53:47:e9:96:00:c0:e0:ea:3b: b9:5b:ab:72:fd:94:8c:f1:bc:e0:17:ef:71:4d:f4: c5:f7:df:e6:b4:a1:91:ed:c4:4b:79:a0:e1:4d:af: 0e:09:da:47:14:29:19:a4:2c:02:42:93:27:56:72: 54:d0:c0:73:ea:4c:ad:05:85:99:5b:5d:0a:ce:ce: ca:9c:05:b2:99:5b:af:c1:a5:33:88:de:4b:d2:6a: b1:95:e8:da:c9:a3:56:a0:5e:d7:a5:a5:94:bb:c6: dd:73:ed:bf:a1:67:1d:9d:24:39:ea:d9:12:01:f7: 79:61:15:65:d4:c4:f3:8c:fb:0d:43:09:57:74:3b: 1f:42:62:f8:90:48:2e:9b:6c:08:46:cd:a5:f9:01: 09:e6:9b:1d:bd:b0:09:58:53:18:df:25:ad:30:f2: c9:f7:77:f9:3e:7f:11:94:75:e6:a5:d0:20:d7:71: 4b:40:90:02:f7:55:c1:9f:ae:f1:bd:c1:e4:61:dc: 16:40:cb:78:7c:ed:c8:fa:fc:e1:99:f1:20:08:02: ef:05:98:54:5f:40:28:c0:93:48:10:7a:c1:5c:20: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AB:9B:84:A8:83:9D:81:5F:14:8F:8D:A2:38:8A:F0:94:BA:13:31 X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8b:11:d8:3b:a4:c0:51:87:5b:10:49:46:d0:98:5d:96:fd: 36:85:17:03:90:b2:be:02:4f:2c:83:ca:7c:aa:00:03:7b:ea: 6c:94:5c:aa:0e:84:e7:e5:0c:19:12:87:ab:b3:3a:de:7d:e3: 8d:d8:c5:ad:7d:cb:90:d6:dc:70:22:d5:ac:8a:18:3f:1d:9e: 36:4d:84:95:c3:0e:b9:37:4d:18:af:85:92:2f:a5:0c:ef:7c: 46:14:b9:dd:d7:0b:4e:64:f1:ba:3f:ea:63:c3:81:92:4a:5f: c6:a8:74:e9:67:c1:25:4c:92:1e:8b:74:7b:c8:da:37:81:3b: 0c:15:f5:60:a2:8a:9f:80:b3:54:80:ed:e0:d1:e8:c1:85:7d: 65:23:b7:b2:ba:f5:00:ce:1e:e7:35:40:65:93:9e:4a:ce:84: 97:96:94:1b:96:5e:f1:05:ce:cf:6d:c5:4f:11:a9:a0:8e:70: 51:d5:e4:ff:2c:69:6f:00:bd:6d:40:fd:cc:38:e8:f6:c7:9f: f3:fc:ed:50:0e:c5:09:b2:f0:c8:b3:39:01:d9:39:ed:e1:a3: 88:57:f2:28:59:c2:af:79:f3:f8:61:c4:4e:0e:34:68:45:a6: fe:da:75:1d:b0:39:04:f4:3e:fb:5a:53:c8:32:ab:85:51:95: d0:84:4f:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4QzIxMTAvBgNVBAUTKEQyNEZDQ0FEM0FDRTdGRkU1QkYwMkE2QThGNjhDMDYw MkUxQzFCNTEwHhcNMjYwOTIxMDU1MTE3WhcNMjYwOTI4MDU1MTE3WjAYMRYwFAYD VQQDEw02YWIwYzVkNS05NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZK+FxaETjqZcQjjkmbq3xb5x5rqdCDqGIokYXIrS8PztgJTR+mWAMDg6ju5 W6ty/ZSM8bzgF+9xTfTF99/mtKGR7cRLeaDhTa8OCdpHFCkZpCwCQpMnVnJU0MBz 6kytBYWZW10Kzs7KnAWymVuvwaUziN5L0mqxlejayaNWoF7XpaWUu8bdc+2/oWcd nSQ56tkSAfd5YRVl1MTzjPsNQwlXdDsfQmL4kEgum2wIRs2l+QEJ5psdvbAJWFMY 3yWtMPLJ93f5Pn8RlHXmpdAg13FLQJAC91XBn67xvcHkYdwWQMt4fO3I+vzhmfEg CALvBZhUX0AowJNIEHrBXCCr0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSrm4So g52BXxSPjaI4ivCUuhMxMB8GA1UdIwQYMBaAFNJPzK06zn/+W/Aqao9owGAuHBtR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQThDMi85NUE2OUJFMjAw NTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2ZfNWI4Q3BxajJqQVlDNGNH MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QThDMi85NUE2OUJFMjAwNTMxMUYwOEU3M0UxNEFDNEY5QUUwMi8wa19NclRyT2Zf NWI4Q3BxajJqQVlDNGNHMUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj4sR2DukwFGHWxBJRtCYXZb9NoUXA5CyvgJPLIPKfKoAA3vqbJRcqg6E5+UM GRKHq7M63n3jjdjFrX3LkNbccCLVrIoYPx2eNk2ElcMOuTdNGK+Fki+lDO98RhS5 3dcLTmTxuj/qY8OBkkpfxqh06WfBJUySHot0e8jaN4E7DBX1YKKKn4CzVIDt4NHo wYV9ZSO3srr1AM4e5zVAZZOeSs6El5aUG5Ze8QXOz23FTxGpoI5wUdXk/yxpbwC9 bUD9zDjo9sef8/ztUA7FCbLwyLM5Adk57eGjiFfyKFnCr3nz+GHETg40aEWm/tp1 HbA5BPQ++1pTyDKrhVGV0IRP5Q== -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:36 2026 by rpki-client