$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.mft File: _dKFITB7Dy1HUP2iJWRuSMwD-DM.mft (raw, json) Hash identifier: BhO5azuPFps7GR44vcvysAzHVBCcNdiV9w/Vdf3a1Ow= Subject key identifier: F8:CC:DD:6C:8A:DC:DA:84:B4:E8:F1:AB:CF:D9:49:9F:37:63:56:BC Authority key identifier: FD:D2:85:21:30:7B:0F:2D:47:50:FD:A2:25:64:6E:48:CC:03:F8:33 Certificate issuer: /CN=A91DB903/serialNumber=FDD28521307B0F2D4750FDA225646E48CC03F833 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dKFITB7Dy1HUP2iJWRuSMwD-DM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.mft Manifest number: 11 Signing time: Mon 21 Sep 2026 09:04:25 +0000 Manifest this update: Mon 21 Sep 2026 09:04:24 +0000 Manifest next update: Mon 28 Sep 2026 09:04:24 +0000 Files and hashes: 1: _dKFITB7Dy1HUP2iJWRuSMwD-DM.crl (hash: 8jNRuRRcgIs+XalQWCR4Tvj679SOUFGeYwlSv0bCnEQ=) 2: 179243589F7311F1A06F889F3811F970.roa (hash: Opw95Jo+CY3PCZEd/UHRW8zeB9W1eCqRUdONOUK41uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.crl rsync://rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dKFITB7Dy1HUP2iJWRuSMwD-DM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB903, serialNumber=FDD28521307B0F2D4750FDA225646E48CC03F833 Validity Not Before: Sep 21 09:04:24 2026 GMT Not After : Sep 28 09:04:24 2026 GMT Subject: CN=6ab0f318-8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:17:d4:28:7b:dc:0d:2c:4c:70:1f:82:bd: c7:1e:b8:6d:b8:1f:a7:b8:a2:6c:65:82:a0:6f:64: 18:ce:39:ea:9e:77:30:04:76:6d:89:92:e1:01:04: 4d:67:b7:dc:92:52:11:3f:57:a4:42:be:3d:80:79: 86:7a:83:28:c9:05:8a:74:94:74:3a:59:59:f9:1d: 59:d9:cf:89:4a:94:3c:c2:66:5a:2c:e7:23:6a:7b: 6b:95:61:0d:08:96:39:ba:f0:f7:65:75:63:cb:7b: b7:96:5e:77:a1:01:ed:63:04:b9:e6:23:a7:7f:c9: 31:9a:78:ff:7d:49:cb:35:31:f1:20:42:fa:25:81: 5c:0d:b8:f8:b6:ae:52:ae:b2:ae:55:4c:8b:e4:5c: f1:b7:69:a2:7d:ca:c5:7a:51:d6:6e:67:ef:0f:c1: ed:b2:37:6b:70:92:d1:c8:d7:34:8e:19:be:72:4e: d8:46:93:c2:2d:b8:0a:ca:f6:ed:5e:70:10:84:f3: 72:12:4b:b6:c5:66:92:46:2a:bc:74:80:04:90:96: 7a:04:94:be:66:61:6d:4c:56:00:58:45:1c:20:28: 30:c8:b5:11:62:48:bb:48:40:99:f0:75:22:04:ae: e5:2d:de:87:64:80:80:28:29:17:10:09:b0:e6:f9: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:DD:6C:8A:DC:DA:84:B4:E8:F1:AB:CF:D9:49:9F:37:63:56:BC X509v3 Authority Key Identifier: keyid:FD:D2:85:21:30:7B:0F:2D:47:50:FD:A2:25:64:6E:48:CC:03:F8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dKFITB7Dy1HUP2iJWRuSMwD-DM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB903/D912A47E9F7211F1882A1FF53711F970/_dKFITB7Dy1HUP2iJWRuSMwD-DM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:95:0b:d7:47:93:72:2e:7e:57:12:8a:c4:ac:19:f8:f3:de: 18:eb:71:d2:08:79:ca:42:3c:40:de:5d:63:63:80:75:36:db: 90:0f:ca:f9:c0:fd:fb:42:0f:06:a5:77:98:a1:80:cd:05:51: 87:07:75:79:40:2d:c9:8a:5d:85:e1:9b:7e:cc:14:52:2c:cc: e0:78:1f:07:43:47:21:b7:32:b0:49:47:60:c7:93:e6:b5:4d: 4c:70:97:9b:43:6c:9d:17:b5:9a:dc:d8:30:6a:50:b1:82:66: e1:45:dc:c8:d9:8b:9e:f3:94:07:27:2c:f6:66:2e:e8:85:5b: 47:81:5c:ce:cd:10:6e:77:39:8a:5f:a0:07:d2:50:3b:a4:5d: 35:19:5b:c0:98:19:a7:ea:82:82:c4:bb:4b:17:0c:1a:7c:e8: 5f:96:46:c7:53:89:06:a7:6a:d1:f4:ab:c7:6b:20:9e:57:b4: ac:e0:ad:a0:72:29:51:0d:ba:13:2f:6e:3d:61:ef:b8:f0:21: 79:5f:22:df:15:cd:6a:89:36:6e:31:75:34:8d:b0:34:8f:3b: 10:63:ea:7f:c1:75:e1:0e:ae:9c:d0:e9:5b:36:9c:7d:e8:68: 24:6e:bc:bd:f1:50:4a:dc:73:83:b9:e8:23:68:07:80:90:86: c9:6b:6d:be -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjkwMzExMC8GA1UEBRMoRkREMjg1MjEzMDdCMEYyRDQ3NTBGREEyMjU2NDZFNDhD QzAzRjgzMzAeFw0yNjA5MjEwOTA0MjRaFw0yNjA5MjgwOTA0MjRaMBgxFjAUBgNV BAMTDTZhYjBmMzE4LTg4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtphfUKHvcDSxMcB+CvcceuG24H6e4omxlgqBvZBjOOeqedzAEdm2JkuEBBE1n t9ySUhE/V6RCvj2AeYZ6gyjJBYp0lHQ6WVn5HVnZz4lKlDzCZlos5yNqe2uVYQ0I ljm68PdldWPLe7eWXnehAe1jBLnmI6d/yTGaeP99Scs1MfEgQvolgVwNuPi2rlKu sq5VTIvkXPG3aaJ9ysV6UdZuZ+8Pwe2yN2twktHI1zSOGb5yTthGk8ItuArK9u1e cBCE83ISS7bFZpJGKrx0gASQlnoElL5mYW1MVgBYRRwgKDDItRFiSLtIQJnwdSIE ruUt3odkgIAoKRcQCbDm+SktAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+MzdbIrc 2oS06PGrz9lJnzdjVrwwHwYDVR0jBBgwFoAU/dKFITB7Dy1HUP2iJWRuSMwD+DMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCOTAzL0Q5MTJBNDdFOUY3 MjExRjE4ODJBMUZGNTM3MTFGOTcwL19kS0ZJVEI3RHkxSFVQMmlKV1J1U013RC1E TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2RLRklUQjdEeTFIVVAyaUpXUnVTTXdELURNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC OTAzL0Q5MTJBNDdFOUY3MjExRjE4ODJBMUZGNTM3MTFGOTcwL19kS0ZJVEI3RHkx SFVQMmlKV1J1U013RC1ETS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXlQvXR5NyLn5XEorErBn4894Y63HSCHnKQjxA3l1jY4B1NtuQD8r5wP37Qg8G pXeYoYDNBVGHB3V5QC3Jil2F4Zt+zBRSLMzgeB8HQ0chtzKwSUdgx5PmtU1McJeb Q2ydF7Wa3NgwalCxgmbhRdzI2Yue85QHJyz2Zi7ohVtHgVzOzRBudzmKX6AH0lA7 pF01GVvAmBmn6oKCxLtLFwwafOhflkbHU4kGp2rR9KvHayCeV7Ss4K2gcilRDboT L249Ye+48CF5XyLfFc1qiTZuMXU0jbA0jzsQY+p/wXXhDq6c0OlbNpx96Ggkbry9 8VBK3HODuegjaAeAkIbJa22+ -----END CERTIFICATE-----Generated at Mon Sep 21 15:54:50 2026 by rpki-client