$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: wgG6rN/iv8TiTFJY1JKj5OLJMvDsSlbHK8e9Sociwuk= Subject key identifier: B1:86:A3:30:BB:CA:0B:7C:52:1C:83:3A:58:71:A0:40:38:99:7B:A2 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 97 Signing time: Mon 21 Sep 2026 07:29:02 +0000 Manifest this update: Mon 21 Sep 2026 07:29:01 +0000 Manifest next update: Mon 28 Sep 2026 07:29:01 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: BerVhL6pH5RmgyT0moksCz+nqgKjgJHH9gNkOMwlGss=) 2: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) 3: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Sep 21 07:29:01 2026 GMT Not After : Sep 28 07:29:01 2026 GMT Subject: CN=6ab0dcbd-a8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:49:39:d5:5c:b7:7e:3b:08:8c:8b:08:ca: 79:98:2f:78:e5:d0:9c:fc:3e:83:69:6e:27:ae:0f: 72:2a:15:40:1c:0c:25:67:db:08:da:c7:cf:fb:09: f2:19:51:f6:4e:d2:b8:07:9a:1c:fb:df:98:37:d2: 8d:3e:37:66:de:4c:69:49:e6:96:b9:10:2b:ec:17: 51:dc:a1:82:c0:e5:dd:cd:30:71:4b:41:61:09:81: 7a:e2:20:86:f6:71:24:5d:f5:79:03:d1:18:f0:e0: 72:81:3d:8a:87:57:dd:1c:e6:f4:e1:e8:db:d2:38: f0:31:3c:34:81:23:ba:71:1b:d9:53:14:91:3e:e8: fd:f7:0a:07:7b:66:6a:d5:14:73:db:86:7e:54:e1: 7a:cf:75:05:1e:55:b9:c6:39:7e:3a:11:8b:b5:93: 27:2a:f6:5b:c7:18:56:30:22:b3:f4:62:08:3d:1e: 7e:77:0e:73:5e:a8:82:2b:f3:a1:63:d3:7a:27:b1: b4:bc:c0:8a:6e:45:3f:93:84:1f:74:c3:5c:dd:7a: 89:73:70:f3:08:0b:17:ab:cb:98:92:b2:9d:71:d6: df:76:28:f9:25:69:9a:65:b4:0d:cf:fa:10:66:b3: 90:94:e4:c4:52:18:5e:5d:d8:e8:78:eb:23:41:14: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:A3:30:BB:CA:0B:7C:52:1C:83:3A:58:71:A0:40:38:99:7B:A2 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0d:33:f6:62:2c:19:38:25:0c:cc:35:0d:44:e2:fe:4b:f7: e8:72:46:b9:46:e1:95:5b:3c:d8:5d:89:de:a6:a0:1c:6b:16: 4f:4d:03:da:c6:52:9d:a5:77:11:41:32:d6:36:58:62:83:90: 34:91:a3:a1:66:ff:7b:67:30:6d:68:f3:f7:0f:6b:39:4b:26: 0c:18:dd:0d:42:7e:e8:80:45:83:fe:ec:c6:43:ea:ec:a4:02: f8:d1:c4:91:35:98:70:57:5e:ff:e4:62:0c:ed:45:4b:3d:73: b1:12:c3:ab:f9:95:f9:10:1b:1e:e9:c4:9d:62:79:d1:7f:e2: 9f:83:29:dc:64:69:9e:c2:5f:43:90:8e:59:26:4a:6f:bd:36: 4d:d9:f3:c2:cb:73:eb:a2:d6:52:5f:ba:d4:d9:9d:6d:0f:8f: 04:09:7b:8c:14:52:c1:b3:96:85:26:29:93:8e:bb:01:5b:03: ca:71:2f:78:1c:1d:0f:f4:3e:a9:af:fe:d4:0c:fc:82:7a:d5: 9d:2d:75:c2:1c:96:19:57:08:d5:38:33:20:78:fd:ca:f1:44: c0:8f:5b:39:99:60:ad:f3:47:e0:64:af:c4:5d:91:f0:20:6f: 83:bb:0d:2d:fd:ae:70:46:90:61:7a:9a:84:4a:4b:a1:43:71: 32:70:79:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBQTMxMTAvBgNVBAUTKEY5QUU1RTJBOURDODBCNTFFQUE3NTc3Mjc4QzNERTA2 MUE4MEFCNjMwHhcNMjYwOTIxMDcyOTAxWhcNMjYwOTI4MDcyOTAxWjAYMRYwFAYD VQQDEw02YWIwZGNiZC1hOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LZJOdVct347CIyLCMp5mC945dCc/D6DaW4nrg9yKhVAHAwlZ9sI2sfP+wny GVH2TtK4B5oc+9+YN9KNPjdm3kxpSeaWuRAr7BdR3KGCwOXdzTBxS0FhCYF64iCG 9nEkXfV5A9EY8OBygT2Kh1fdHOb04ejb0jjwMTw0gSO6cRvZUxSRPuj99woHe2Zq 1RRz24Z+VOF6z3UFHlW5xjl+OhGLtZMnKvZbxxhWMCKz9GIIPR5+dw5zXqiCK/Oh Y9N6J7G0vMCKbkU/k4QfdMNc3XqJc3DzCAsXq8uYkrKdcdbfdij5JWmaZbQNz/oQ ZrOQlOTEUhheXdjoeOsjQRSDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGGozC7 ygt8UhyDOlhxoEA4mXuiMB8GA1UdIwQYMBaAFPmuXiqdyAtR6qdXcnjD3gYagKtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFBMy8xQzE3OTEzQUQ5 MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC8tYTVlS3AzSUMxSHFwMWR5ZU1QZUJocUFx Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFBMy8xQzE3OTEzQUQ5MEQxMUYwODY4MEQ1RjE3Q0QzNjQxRC8tYTVlS3AzSUMx SHFwMWR5ZU1QZUJocUFxMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIA0z9mIsGTglDMw1DUTi/kv36HJGuUbhlVs82F2J3qagHGsWT00D2sZSnaV3 EUEy1jZYYoOQNJGjoWb/e2cwbWjz9w9rOUsmDBjdDUJ+6IBFg/7sxkPq7KQC+NHE kTWYcFde/+RiDO1FSz1zsRLDq/mV+RAbHunEnWJ50X/in4Mp3GRpnsJfQ5COWSZK b702Tdnzwstz66LWUl+61NmdbQ+PBAl7jBRSwbOWhSYpk467AVsDynEveBwdD/Q+ qa/+1Az8gnrVnS11whyWGVcI1TgzIHj9yvFEwI9bOZlgrfNH4GSvxF2R8CBvg7sN Lf2ucEaQYXqahEpLoUNxMnB5Tw== -----END CERTIFICATE-----Generated at Tue Sep 22 09:36:24 2026 by rpki-client