$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: 8khy0rLYBAxw+/VowQ2mvvSD6w+gUnCKQyxgsqF8iKQ= Subject key identifier: 74:60:C0:99:1E:14:B1:A2:F9:51:95:AF:15:E9:F1:4C:E5:71:C4:9C Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 0889 Signing time: Tue 22 Sep 2026 21:32:27 +0000 Manifest this update: Tue 22 Sep 2026 21:32:26 +0000 Manifest next update: Tue 29 Sep 2026 21:32:26 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: W0tgeYZap8vfUuJrtd1kMzfDBitTjg+YQudS/xO1TjQ=) 2: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: dT+hUVzmzkp0MF+xQqQP5dOO9l8lXm4CbzD8IR61uj0=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: OdJAAHZapPghT4UQJjL0KEqUGshRp+J7t4bZFZ0nS3Q=) 5: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA=) 6: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Sep 22 21:32:26 2026 GMT Not After : Sep 29 21:32:26 2026 GMT Subject: CN=6ab2f3ea-afac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:b9:27:18:93:85:47:71:9f:79:d6:41:44: d2:0e:50:69:54:0f:99:e0:52:38:9f:fa:fc:f5:bb: 67:b4:c8:39:54:a1:84:15:9b:8b:cb:6d:1d:63:41: 63:c8:b4:ba:1f:d9:66:e3:bd:83:e2:e3:bc:6c:bb: c4:b2:bd:44:61:fa:ab:c1:78:b7:86:7d:23:47:e7: 6f:44:08:d1:43:58:d5:2d:4a:ce:80:9c:51:d5:55: bd:11:5e:95:d5:a3:37:ae:89:6d:8f:cd:8f:27:44: 3d:ca:06:d5:f5:5c:a0:60:e4:8f:cd:7a:5d:8b:30: ef:e9:b5:e1:0c:35:4c:32:04:dc:86:a1:6d:5f:e7: 85:5e:9a:bf:13:0e:16:c8:66:19:01:f9:cb:f4:b2: 1a:8c:31:28:eb:dd:75:b2:47:a4:d3:10:e8:94:1f: 1f:70:7b:5b:8f:ae:67:96:c4:47:13:a4:cc:1b:dc: bc:2c:a2:d7:f3:63:e5:cc:c2:af:d4:45:da:6d:e1: e5:b6:45:72:1f:ea:7a:f3:6f:dd:35:43:d3:fc:a8: 40:cd:38:60:a9:d4:26:2b:cc:9a:4b:27:b8:7c:7a: e4:4c:81:6c:f4:85:96:30:7e:da:a6:fb:c8:f7:48: 1c:1d:06:bc:91:53:13:15:fc:e0:16:9b:94:14:9f: b3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:C0:99:1E:14:B1:A2:F9:51:95:AF:15:E9:F1:4C:E5:71:C4:9C X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:5c:19:b6:22:d4:5a:f2:89:0f:2d:de:2d:6f:5c:29:af: f1:f8:71:4d:43:02:f5:77:be:f1:6d:c2:2d:7b:18:43:a9:6c: 28:99:97:9f:03:f8:af:5a:35:1e:b3:1a:0e:7a:4d:f4:32:d5: df:ac:15:0b:c3:26:bb:d2:a6:5a:b8:99:42:dd:6e:41:ba:99: d1:fb:b5:fb:13:7c:94:88:1a:af:96:88:30:85:d9:2d:a4:55: 17:bc:3e:93:d0:6b:7e:cd:c4:d9:7a:b8:81:c9:e5:3f:62:e5: 4a:2d:7c:f6:7a:f0:bd:44:6b:fb:ac:af:ae:dc:c4:d3:ce:88: 68:fa:25:f0:f5:ab:c3:3d:62:2e:f3:d4:13:9a:48:38:1d:5c: db:f2:54:f7:fd:ff:6f:f2:29:ea:89:f7:4c:4c:c9:6d:95:77: 6f:12:21:03:b1:52:d4:55:3d:95:4a:5a:70:7f:00:b8:a8:84: 21:16:1a:87:47:84:77:76:f5:02:5a:39:fa:44:ec:e8:39:ff: 42:57:00:ad:8a:de:d0:0c:a3:2e:32:b1:32:da:41:60:53:33: 44:d1:6a:ca:7f:71:fd:92:d9:a5:59:3c:54:27:2e:f7:1d:7f: 44:d9:94:43:65:90:93:7b:3d:37:79:65:e8:de:16:89:e6:6e: 24:3b:4a:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjYwOTIyMjEzMjI2WhcNMjYwOTI5MjEzMjI2WjAYMRYwFAYD VQQDEw02YWIyZjNlYS1hZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Bu5JxiThUdxn3nWQUTSDlBpVA+Z4FI4n/r89btntMg5VKGEFZuLy20dY0Fj yLS6H9lm472D4uO8bLvEsr1EYfqrwXi3hn0jR+dvRAjRQ1jVLUrOgJxR1VW9EV6V 1aM3roltj82PJ0Q9ygbV9VygYOSPzXpdizDv6bXhDDVMMgTchqFtX+eFXpq/Ew4W yGYZAfnL9LIajDEo6911skek0xDolB8fcHtbj65nlsRHE6TMG9y8LKLX82PlzMKv 1EXabeHltkVyH+p682/dNUPT/KhAzThgqdQmK8yaSye4fHrkTIFs9IWWMH7apvvI 90gcHQa8kVMTFfzgFpuUFJ+zTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRgwJke FLGi+VGVrxXp8UzlccScMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHFFcGbYi1FryiQ8t3i1vXCmv8fhxTUMC9Xe+8W3CLXsYQ6lsKJmXnwP4r1o1 HrMaDnpN9DLV36wVC8Mmu9KmWriZQt1uQbqZ0fu1+xN8lIgar5aIMIXZLaRVF7w+ k9Brfs3E2Xq4gcnlP2LlSi189nrwvURr+6yvrtzE086IaPol8PWrwz1iLvPUE5pI OB1c2/JU9/3/b/Ip6on3TEzJbZV3bxIhA7FS1FU9lUpacH8AuKiEIRYah0eEd3b1 Alo5+kTs6Dn/QlcArYre0AyjLjKxMtpBYFMzRNFqyn9x/ZLZpVk8VCcu9x1/RNmU Q2WQk3s9N3ll6N4WieZuJDtKtA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:33:13 2026 by rpki-client