$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: HQl20KNtMqmmieVUt/gs7poVhWArb1duqz4/ZD4itHI= Subject key identifier: FD:4B:E4:D0:2F:66:29:80:A3:DC:17:A3:99:85:80:AC:01:86:E7:80 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 02D1 Signing time: Wed 23 Sep 2026 01:14:58 +0000 Manifest this update: Wed 23 Sep 2026 01:14:57 +0000 Manifest next update: Wed 30 Sep 2026 01:14:57 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: Kvai9X0s+N5EFYfhbEUqJUf3do7m0A4Yu7YNnCeLAks=) 2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: XbLvpieZLxPD8FqUNOF2czHZzpbSV3R5GXAyN7YF/l8=) 3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: 4jtKn5a6oeJ2ZvZ6jOhbyJ8NLFyq6vJ1Ql8J7L6gxEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Sep 23 01:14:57 2026 GMT Not After : Sep 30 01:14:57 2026 GMT Subject: CN=6ab32811-7bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:74:d8:4b:ea:7c:92:70:48:1b:8a:13:59: 31:b6:4b:e0:21:57:49:aa:2f:dc:4d:e1:6a:4c:6b: f2:03:11:6f:46:9b:86:43:c2:7a:b4:7f:d2:41:5c: b6:bd:4a:55:d3:6f:a3:6b:f7:63:47:66:6d:19:62: cf:cc:10:96:94:2f:f2:1c:8f:a5:f9:c5:65:7a:39: 05:f8:b2:39:73:3c:f8:aa:f0:9f:8c:04:f8:0e:60: 1a:d3:16:e5:9b:d3:9e:9c:c4:f3:ea:98:97:29:fe: e0:d2:f4:4f:f7:2a:62:66:e9:d1:64:ae:08:80:0c: fa:cb:5a:0c:1b:19:4d:b2:2b:33:c2:fb:d2:f1:11: 39:07:04:e1:9c:be:a3:c5:a7:76:b8:65:af:4a:23: 8b:66:31:07:b2:84:b7:18:de:5f:91:dd:48:ea:f5: 67:d4:a7:64:82:8a:ec:dc:de:0f:5a:da:95:15:cd: be:62:e0:61:28:23:de:7c:36:37:58:69:9a:67:bb: 58:ec:0c:f1:67:6d:f3:f6:c1:9b:c6:f9:13:96:c8: 27:bd:f2:e6:1d:55:24:94:1a:34:ff:fc:88:a2:86: 87:48:f6:87:e3:2a:7e:5e:ed:25:b5:1a:38:85:c8: ad:dc:68:4e:d4:3a:49:10:62:5c:83:e5:95:29:64: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:E4:D0:2F:66:29:80:A3:DC:17:A3:99:85:80:AC:01:86:E7:80 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:17:ef:df:43:10:f3:c3:12:a0:d8:92:b6:55:82:b4:e7:35: 73:7b:33:d9:6d:70:5d:e3:c5:a3:6f:05:0a:95:e8:1c:88:9f: 1c:dd:2b:5a:a3:9f:62:70:f7:0f:17:af:4e:98:89:4e:87:bd: e4:5f:78:58:50:f5:1d:aa:66:1f:4b:28:9a:cd:e2:ee:7c:08: a8:91:05:57:77:9a:50:9f:c6:45:ae:ac:08:f9:f4:75:34:c4: bd:9e:2c:b2:69:57:e4:e5:0c:a6:ec:56:5e:f1:a6:a2:08:89: 40:bc:19:56:0e:52:7f:7a:61:a5:3d:f7:6d:34:ea:77:90:5b: 66:0d:e2:d4:ed:4f:e6:e8:1b:b9:1c:77:fa:10:05:71:69:f8: 8f:7c:04:37:a4:b2:00:30:a8:c6:31:ba:9f:6c:3e:7b:91:2d: 16:73:a4:35:57:a0:c2:97:43:35:06:32:9b:8a:60:da:27:03: cc:eb:3a:1f:1b:b0:42:44:af:10:2b:99:b2:ed:cb:fa:9d:bb: b5:23:37:45:44:71:c1:36:6a:e8:7b:49:c6:9b:09:8f:c7:af: ff:40:d3:c8:2a:0d:f5:a7:ec:0c:42:95:cc:ae:37:49:81:50: 7d:29:2b:79:de:95:5b:2a:4d:b2:7e:a0:5a:3d:ee:a9:07:8c: a4:c7:22:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwOTIzMDExNDU3WhcNMjYwOTMwMDExNDU3WjAYMRYwFAYD VQQDEw02YWIzMjgxMS03YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+d02EvqfJJwSBuKE1kxtkvgIVdJqi/cTeFqTGvyAxFvRpuGQ8J6tH/SQVy2 vUpV02+ja/djR2ZtGWLPzBCWlC/yHI+l+cVlejkF+LI5czz4qvCfjAT4DmAa0xbl m9OenMTz6piXKf7g0vRP9ypiZunRZK4IgAz6y1oMGxlNsiszwvvS8RE5BwThnL6j xad2uGWvSiOLZjEHsoS3GN5fkd1I6vVn1Kdkgors3N4PWtqVFc2+YuBhKCPefDY3 WGmaZ7tY7AzxZ23z9sGbxvkTlsgnvfLmHVUklBo0//yIooaHSPaH4yp+Xu0ltRo4 hcit3GhO1DpJEGJcg+WVKWS9lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1L5NAv ZimAo9wXo5mFgKwBhueAMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEhfv30MQ88MSoNiStlWCtOc1c3sz2W1wXePFo28FCpXoHIifHN0rWqOfYnD3 DxevTpiJToe95F94WFD1HapmH0soms3i7nwIqJEFV3eaUJ/GRa6sCPn0dTTEvZ4s smlX5OUMpuxWXvGmogiJQLwZVg5Sf3phpT33bTTqd5BbZg3i1O1P5ugbuRx3+hAF cWn4j3wEN6SyADCoxjG6n2w+e5EtFnOkNVegwpdDNQYym4pg2icDzOs6HxuwQkSv ECuZsu3L+p27tSM3RURxwTZq6HtJxpsJj8ev/0DTyCoN9afsDEKVzK43SYFQfSkr ed6VWypNsn6gWj3uqQeMpMci+g== -----END CERTIFICATE-----Generated at Wed Sep 23 21:37:37 2026 by rpki-client