$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: 6AzjzvZbspbExgjlbali6xDRMRCDTLk7q1H43lxpHvg= Subject key identifier: 45:C9:2E:75:CE:E5:50:17:29:D0:81:21:2D:CE:36:8E:AA:5C:CA:D6 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 017F Signing time: Wed 23 Sep 2026 04:29:38 +0000 Manifest this update: Wed 23 Sep 2026 04:29:37 +0000 Manifest next update: Wed 30 Sep 2026 04:29:37 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: HagKhQ/IiaIY9BnDxEoolmDPADkv0UX5JOObh8r7CwQ=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: cly4cYutElaX5qSNdsfUH5zLjhQKkS1wrfF7eYDZnn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Sep 23 04:29:37 2026 GMT Not After : Sep 30 04:29:37 2026 GMT Subject: CN=6ab355b2-cf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:e6:b7:46:44:5b:b7:d0:0c:ab:b3:6b:82: d5:cd:27:2d:27:18:22:fb:99:d9:c2:a0:34:e5:e1: 8d:69:d3:f1:d7:d3:58:0d:02:41:15:02:96:72:4d: 18:f4:71:ab:e0:8a:c5:91:ed:e8:f5:e9:f7:4c:46: b1:da:4d:87:0b:1f:ab:74:2a:ae:fa:b4:78:48:f1: 33:10:5c:bc:8f:08:37:dd:91:18:35:61:f1:c3:c3: c9:93:91:f4:f8:62:dd:a3:94:44:d0:fe:55:f5:5e: 89:27:5d:e5:5d:53:96:e8:4c:2d:7a:f3:ee:be:6f: c3:ed:61:c3:67:9e:0a:06:13:10:a6:d4:6e:e2:9e: 3f:40:5f:a3:bf:fd:c5:bb:47:22:d5:d3:e6:c7:13: c0:a3:08:3a:66:cd:0e:89:c8:24:e6:11:c7:b1:7a: a0:7a:d1:26:65:f2:5d:86:7a:8a:5f:b8:fc:70:9e: 21:f9:07:3c:3e:1b:fe:fe:23:ba:62:17:d2:c7:f1: 2d:6b:b3:5e:6b:56:4a:25:cb:79:ee:94:8c:ea:ff: 31:42:45:ff:7b:58:cc:c1:59:4b:ae:48:a1:0e:83: 0d:fa:79:e4:3c:c2:d2:1a:3c:40:b5:e5:9b:4a:b8: 31:dd:2c:5e:d9:d6:0d:c2:cb:5a:e7:ef:c0:55:9f: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C9:2E:75:CE:E5:50:17:29:D0:81:21:2D:CE:36:8E:AA:5C:CA:D6 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:f7:6e:50:f0:d5:4c:22:dd:4c:29:9f:a3:78:78:bb:fc:dd: 49:64:5a:7e:e4:f2:98:9d:e1:c8:c1:bc:97:81:53:d2:74:20: 17:c2:c6:98:79:11:44:e4:7d:11:c5:ca:52:e1:dc:27:de:04: c8:31:10:c8:50:c5:f9:bd:8e:8e:db:02:dc:0b:f3:72:4e:d0: bf:2c:9a:b9:d4:1b:e9:8a:78:d6:78:8b:89:7d:3c:55:dc:f1: 09:b0:12:aa:23:0f:fd:37:a5:58:ec:20:30:08:84:1b:d3:7b: 10:ed:91:94:d4:1d:cc:08:99:e9:96:99:3f:23:3d:07:11:ca: d3:de:5b:54:aa:3c:a3:f8:a0:3d:d5:f9:f3:02:5d:99:6d:0c: 37:95:6f:b5:8e:05:0f:ab:33:39:1a:91:7f:b9:c5:1c:30:70: ef:52:0b:ba:cc:a7:56:6d:c2:42:db:b1:50:d5:9d:a3:32:1d: 0b:57:8e:70:94:1d:22:5c:54:10:dc:c3:01:b0:ca:78:45:5c: fe:5b:46:99:fb:52:bf:de:f4:53:f9:dc:26:a4:42:e2:b2:61: 5d:48:ed:fe:c6:a7:dd:a9:26:4f:bc:50:e2:93:cc:c0:b8:80: ef:d3:61:ef:c3:61:d5:07:fc:9a:62:31:33:de:d4:d9:5c:ca: 98:3e:af:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjYwOTIzMDQyOTM3WhcNMjYwOTMwMDQyOTM3WjAYMRYwFAYD VQQDEw02YWIzNTViMi1jZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql/mt0ZEW7fQDKuza4LVzSctJxgi+5nZwqA05eGNadPx19NYDQJBFQKWck0Y 9HGr4IrFke3o9en3TEax2k2HCx+rdCqu+rR4SPEzEFy8jwg33ZEYNWHxw8PJk5H0 +GLdo5RE0P5V9V6JJ13lXVOW6EwtevPuvm/D7WHDZ54KBhMQptRu4p4/QF+jv/3F u0ci1dPmxxPAowg6Zs0Oicgk5hHHsXqgetEmZfJdhnqKX7j8cJ4h+Qc8Phv+/iO6 YhfSx/Eta7Nea1ZKJct57pSM6v8xQkX/e1jMwVlLrkihDoMN+nnkPMLSGjxAteWb Srgx3Sxe2dYNwsta5+/AVZ+DGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXJLnXO 5VAXKdCBIS3ONo6qXMrWMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyvduUPDVTCLdTCmfo3h4u/zdSWRafuTymJ3hyMG8l4FT0nQgF8LGmHkRROR9 EcXKUuHcJ94EyDEQyFDF+b2OjtsC3Avzck7QvyyaudQb6Yp41niLiX08VdzxCbAS qiMP/TelWOwgMAiEG9N7EO2RlNQdzAiZ6ZaZPyM9BxHK095bVKo8o/igPdX58wJd mW0MN5VvtY4FD6szORqRf7nFHDBw71ILusynVm3CQtuxUNWdozIdC1eOcJQdIlxU ENzDAbDKeEVc/ltGmftSv970U/ncJqRC4rJhXUjt/san3akmT7xQ4pPMwLiA79Nh 78Nh1Qf8mmIxM97U2VzKmD6vew== -----END CERTIFICATE-----Generated at Thu Sep 24 00:44:00 2026 by rpki-client