$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft File: 9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json) Hash identifier: RjiDJxrcyZ3WZksZS5Se0NHGpxr373Nd711WTsMsC7Q= Subject key identifier: 35:9D:67:C3:E0:C5:6C:48:09:EC:35:5D:53:6E:F0:F3:4D:EC:7E:83 Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD Certificate issuer: /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft Manifest number: 48 Signing time: Mon 21 Sep 2026 08:26:29 +0000 Manifest this update: Mon 21 Sep 2026 08:26:28 +0000 Manifest next update: Mon 28 Sep 2026 08:26:28 +0000 Files and hashes: 1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: LkkgRvcvnNDPxLbY7g7U0oLbBWt6tn1W86HUplEq8uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD Validity Not Before: Sep 21 08:26:28 2026 GMT Not After : Sep 28 08:26:28 2026 GMT Subject: CN=6ab0ea34-90b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:fc:e1:1c:3e:84:8d:83:df:25:8d:e7:1f: 88:25:8f:27:06:76:d9:fe:da:3e:f6:ee:cf:6e:ca: b8:11:bc:de:ad:89:ef:83:cc:e8:b9:15:65:8e:de: 16:69:23:73:13:84:63:7f:4a:ca:69:80:79:6e:49: 75:59:26:00:69:55:4b:c0:9f:09:40:e8:16:c7:b1: 8f:37:96:4e:12:ef:33:1c:3f:5e:3a:37:d0:d6:33: 53:88:77:93:90:ec:ad:4d:47:69:b1:f7:92:19:a9: 8e:03:03:75:41:54:0c:48:2c:85:92:b7:5e:3b:83: 38:69:2a:f9:1e:5f:ed:08:46:57:81:d4:da:59:ce: 48:4e:1d:3f:93:31:27:b8:a2:9d:02:fc:70:f2:55: 83:2b:4b:a2:3e:57:d4:27:d1:e7:04:1d:33:ce:06: 6e:7f:75:69:c6:d2:c7:ad:47:bf:d4:8f:fe:1a:1a: 1e:9c:43:26:17:6c:76:ae:3b:2f:00:d6:fc:cf:cb: 02:8f:b6:79:b2:04:dd:32:af:51:2d:be:f6:80:bf: 18:dc:8e:4c:a7:b1:e8:0b:ad:60:5d:9c:20:ed:c3: 42:19:f6:d3:d0:ce:05:d8:bf:48:5d:44:c6:a7:ee: 89:85:08:48:f5:b9:f4:60:b8:b1:0b:72:a9:20:d6: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:67:C3:E0:C5:6C:48:09:EC:35:5D:53:6E:F0:F3:4D:EC:7E:83 X509v3 Authority Key Identifier: keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c7:61:ef:24:ce:44:57:9f:be:07:6e:78:68:6b:e2:0d:88: bb:66:82:9c:23:54:f8:25:f0:e4:10:80:d8:e2:cd:ae:df:9c: 7c:89:77:25:78:8a:c4:7d:84:25:ae:ce:71:8f:ab:3b:64:d2: 98:23:b3:78:4e:2d:8f:8d:aa:dc:dd:b9:0d:e8:0e:f4:8a:61: c8:ff:81:f5:44:ba:6b:df:e9:ad:a4:b3:ea:18:68:27:4a:46: 6c:32:5a:30:b3:7a:66:a3:5a:1e:cf:75:f7:fa:58:40:9c:76: aa:25:2a:22:ae:e0:c1:2b:8d:3b:3f:f6:ed:43:81:0f:47:af: 00:c6:01:50:de:3b:05:f2:b1:d5:fe:8a:dd:44:d3:d3:10:b4: 93:6e:01:98:da:26:09:5c:10:aa:58:94:35:16:3c:21:bc:20: 3e:42:92:0b:d9:60:64:d8:46:ee:55:fd:e5:db:20:90:bd:ef: fd:6e:c2:5a:27:44:01:5c:34:55:17:2f:f8:1a:d7:a4:93:2e: 06:65:9c:2f:ce:fe:f9:30:d6:dc:64:20:e7:e2:bf:16:c5:26: d5:63:be:b2:0b:2f:4e:cd:0d:cf:e3:a9:66:56:92:fb:f6:13: 3f:67:92:24:a3:56:8c:cf:f3:c0:a7:87:02:8c:19:c6:19:9d: 95:17:e3:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoRjQ4OERDNjA3QzhCREJDOEIyRjI1OUU1MzkyOTNFMTEw NzgzM0RBRDAeFw0yNjA5MjEwODI2MjhaFw0yNjA5MjgwODI2MjhaMBgxFjAUBgNV BAMTDTZhYjBlYTM0LTkwYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrA/zhHD6EjYPfJY3nH4gljycGdtn+2j727s9uyrgRvN6tie+DzOi5FWWO3hZp I3MThGN/SsppgHluSXVZJgBpVUvAnwlA6BbHsY83lk4S7zMcP146N9DWM1OId5OQ 7K1NR2mx95IZqY4DA3VBVAxILIWSt147gzhpKvkeX+0IRleB1NpZzkhOHT+TMSe4 op0C/HDyVYMrS6I+V9Qn0ecEHTPOBm5/dWnG0setR7/Uj/4aGh6cQyYXbHauOy8A 1vzPywKPtnmyBN0yr1EtvvaAvxjcjkynsegLrWBdnCDtw0IZ9tPQzgXYv0hdRMan 7omFCEj1ufRguLELcqkg1mPJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNZ1nw+DF bEgJ7DVdU27w803sfoMwHwYDVR0jBBgwFoAU9IjcYHyL28iy8lnlOSk+EQeDPa0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0JDNTU4QjIwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczLzlJamNZSHlMMjhpeThsbmxPU2stRVFlRFBh MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUlqY1lIeUwyOGl5OGxubE9Tay1FUWVEUGEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0JDNTU4QjIwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczLzlJamNZSHlMMjhp eThsbmxPU2stRVFlRFBhMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOx2HvJM5EV5++B254aGviDYi7ZoKcI1T4JfDkEIDY4s2u35x8iXcleIrEfYQl rs5xj6s7ZNKYI7N4Ti2Pjarc3bkN6A70imHI/4H1RLpr3+mtpLPqGGgnSkZsMlow s3pmo1oez3X3+lhAnHaqJSoiruDBK407P/btQ4EPR68AxgFQ3jsF8rHV/ordRNPT ELSTbgGY2iYJXBCqWJQ1FjwhvCA+QpIL2WBk2EbuVf3l2yCQve/9bsJaJ0QBXDRV Fy/4Gtekky4GZZwvzv75MNbcZCDn4r8WxSbVY76yCy9OzQ3P46lmVpL79hM/Z5Ik o1aMz/PAp4cCjBnGGZ2VF+NK -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:38 2026 by rpki-client