$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: 4xGCGy3DOLONUfKSrHOG70jLLVEtpHRmZXRttqcnT38= Subject key identifier: B1:FC:9B:42:96:D4:42:8B:C5:30:49:D5:00:06:B5:A6:65:E0:2C:C8 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 7A Signing time: Mon 21 Sep 2026 07:49:14 +0000 Manifest this update: Mon 21 Sep 2026 07:49:14 +0000 Manifest next update: Mon 28 Sep 2026 07:49:14 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: bOrp3Kw7FZ+d0rK4i/VRl97rxgkHk1l8fG/CeRnhvxE=) 2: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) 3: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Sep 21 07:49:14 2026 GMT Not After : Sep 28 07:49:14 2026 GMT Subject: CN=6ab0e17a-57c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:4d:f8:5d:d1:5a:bd:db:31:d3:0c:80:e7: 7d:7f:88:b3:31:a4:d3:c4:36:b6:51:2f:63:30:cd: 87:6d:2c:f3:4e:f4:43:5b:fe:25:38:64:97:61:ef: f6:30:58:33:54:91:b6:2c:a3:8b:36:3d:80:74:40: 3b:ba:1a:3a:1c:f3:8d:3e:91:e9:aa:61:c9:a5:99: 25:24:fc:4a:a2:34:11:af:27:a9:fe:09:43:9c:7c: 91:f7:2a:5e:26:a0:6d:c2:80:77:96:03:d5:97:b0: cf:4f:78:18:61:e6:09:2a:1e:c9:a8:90:bc:08:74: fd:68:6f:3c:69:29:05:37:77:c1:82:bb:ba:26:f6: 2f:2c:7b:50:4f:2f:2d:5a:e3:74:05:ed:bd:9a:12: d2:d2:ce:59:eb:38:7d:a1:de:07:a0:b1:7b:30:d2: 8f:23:fd:3c:53:2f:a7:f5:6c:c1:e0:38:ad:18:68: 34:24:2f:8d:b8:18:a3:7c:37:b8:4c:8d:fa:9d:50: 86:4a:c5:75:61:d9:eb:cb:e4:22:25:02:76:5c:21: 8c:db:32:a2:43:ba:db:f5:b9:62:c0:26:7c:18:ba: 70:c4:a9:00:1c:b7:6c:a3:10:f5:77:ad:35:48:cc: c3:74:39:ee:8e:81:68:ad:ba:12:96:bb:f0:58:c1: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FC:9B:42:96:D4:42:8B:C5:30:49:D5:00:06:B5:A6:65:E0:2C:C8 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:56:c3:6c:34:b2:e4:ed:1f:f6:d2:c6:2f:08:41:6b:8d:e1: 3d:73:58:1f:ee:b4:6f:cb:2b:61:c2:e7:5e:a9:9e:43:b9:f1: a9:80:9a:b0:5c:81:cb:8a:3f:3a:3d:43:dc:51:79:e9:45:d9: fb:f4:f8:46:5e:c3:b1:06:9a:ba:51:e0:54:18:49:d3:75:8f: 2f:fa:98:65:51:16:80:90:9d:31:6a:5e:eb:5d:c5:c6:63:ec: 13:ae:8a:49:ed:99:a4:9d:91:80:ba:42:de:9a:d7:49:75:a2: 61:29:49:22:09:33:51:1a:9e:d6:9b:1b:d1:91:a0:71:78:48: 4e:80:b3:c6:ea:0b:66:c4:c5:45:47:0d:ac:01:20:8d:ef:2a: 6a:7d:5a:e4:3d:fd:eb:7d:6c:b5:ff:a3:6b:d9:93:87:49:3c: a5:53:3b:0a:96:79:d0:49:e8:cf:05:bb:5a:18:0d:60:de:08: 9d:b6:57:ae:23:82:dd:6a:d7:00:85:b7:1f:b7:67:bf:cc:fb: 0d:e5:1a:9e:cf:46:fc:93:04:4e:07:db:0a:a4:a6:ac:ab:26: 49:1c:a9:ad:b2:b0:8f:d4:8f:76:a7:7b:32:27:ad:b7:76:fe: 3a:85:19:77:9e:1c:e7:c1:fb:2d:44:2c:39:f6:65:65:73:2c: ac:1c:a7:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjA5MjEwNzQ5MTRaFw0yNjA5MjgwNzQ5MTRaMBgxFjAUBgNV BAMTDTZhYjBlMTdhLTU3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJPU34XdFavdsx0wyA531/iLMxpNPENrZRL2MwzYdtLPNO9ENb/iU4ZJdh7/Yw WDNUkbYso4s2PYB0QDu6Gjoc840+kemqYcmlmSUk/EqiNBGvJ6n+CUOcfJH3Kl4m oG3CgHeWA9WXsM9PeBhh5gkqHsmokLwIdP1obzxpKQU3d8GCu7om9i8se1BPLy1a 43QF7b2aEtLSzlnrOH2h3gegsXsw0o8j/TxTL6f1bMHgOK0YaDQkL424GKN8N7hM jfqdUIZKxXVh2evL5CIlAnZcIYzbMqJDutv1uWLAJnwYunDEqQAct2yjEPV3rTVI zMN0Oe6OgWituhKWu/BYwTnPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsfybQpbU QovFMEnVAAa1pmXgLMgwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4VsNsNLLk7R/20sYvCEFrjeE9c1gf7rRvyythwudeqZ5DufGpgJqwXIHLij86 PUPcUXnpRdn79PhGXsOxBpq6UeBUGEnTdY8v+phlURaAkJ0xal7rXcXGY+wTropJ 7ZmknZGAukLemtdJdaJhKUkiCTNRGp7WmxvRkaBxeEhOgLPG6gtmxMVFRw2sASCN 7ypqfVrkPf3rfWy1/6Nr2ZOHSTylUzsKlnnQSejPBbtaGA1g3gidtleuI4LdatcA hbcft2e/zPsN5Rqez0b8kwROB9sKpKasqyZJHKmtsrCP1I92p3syJ623dv46hRl3 nhznwfstRCw59mVlcyysHKc4 -----END CERTIFICATE-----Generated at Mon Sep 21 14:46:20 2026 by rpki-client