$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: F1v+POn7Ste5/vzkl/SS+C7dF+KphFmCT5tRrHtfk7s= Subject key identifier: 3B:3E:FC:56:43:8B:13:38:8E:F8:A7:78:54:2A:0C:72:18:5F:D4:F3 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 35A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 3590 Signing time: Sun 20 Sep 2026 14:57:20 +0000 Manifest this update: Sun 20 Sep 2026 14:57:20 +0000 Manifest next update: Sun 27 Sep 2026 14:57:20 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: uA4E/7jYMWZFG8oi0zdWY5Wt+puZ+MvHVXZb8Nr4Zuw=) 2: 97CD303CB0B711F19DEAFA5A6511F970.roa (hash: 1+Rv0xwcT8FH4Wpx62qgzDGLt6pRohITLkn3FYQIkHQ=) 3: rAkH9NztVWOAjgr7fOh5wRfAIAo.asa (hash: EDATT7ZWSBHFpg3As45BGrAoL581ApENXO/q9sdKlLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13730 (0x35a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Sep 20 14:57:20 2026 GMT Not After : Sep 27 14:57:20 2026 GMT Subject: CN=6aaff450-affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:28:4a:cf:21:88:c5:02:64:58:87:6e:e5: 07:01:e0:e5:77:50:0b:ad:8c:77:10:46:ff:5e:6a: 5c:7a:48:fa:6a:8d:67:06:28:40:56:16:c2:a8:b5: 39:6f:d4:2c:fc:2c:06:2a:31:70:d2:16:81:d0:22: 43:7a:af:94:0c:31:b6:c2:e5:8b:6e:70:77:7a:e0: 20:f4:eb:0c:9f:85:1c:66:29:9e:72:47:3d:d0:8a: 6e:99:a3:e4:75:7d:8e:98:62:c8:05:b8:96:ca:4c: 87:73:7e:fa:e9:3e:c7:be:4d:e6:07:f7:95:1b:fa: a3:55:9a:4e:75:a8:3e:59:6f:e7:e9:ee:0d:de:1a: af:db:c5:80:f7:d7:32:00:ed:23:28:a2:48:a5:91: f9:bb:b6:74:35:d7:33:e5:13:5a:92:fd:fe:52:c6: 4a:8f:5f:5c:49:11:39:2e:7e:e8:f3:27:81:36:4f: 11:78:45:42:e3:91:d9:d9:02:84:33:d9:87:39:96: dd:cc:4e:fa:a3:80:69:3f:6a:74:12:da:d7:ee:b1: a1:44:0b:7f:19:16:44:54:e3:d7:d0:42:ee:f0:ef: 5f:8f:8a:b1:8e:da:23:04:da:1a:b5:37:10:eb:8e: 53:cf:7f:37:ef:c3:18:de:c6:27:78:0e:e0:92:20: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:FC:56:43:8B:13:38:8E:F8:A7:78:54:2A:0C:72:18:5F:D4:F3 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:65:ef:c9:af:1a:be:9a:36:ae:ca:b8:8a:5d:de:37:4c:70: c1:7e:a8:cf:0f:d5:49:f9:57:49:ab:da:d7:d1:54:2e:06:f3: 54:c2:48:da:5b:f9:51:bd:06:36:18:28:24:38:7a:0f:4e:8f: 0e:02:d2:7f:db:95:91:df:47:e8:a4:15:dd:ea:ed:5f:5e:0c: d6:c7:10:e7:9f:bb:22:f3:8d:14:b8:34:f8:2a:1d:7c:2b:8f: e1:c1:c7:d6:37:22:d5:f1:8b:04:7c:cb:b5:7e:21:db:41:e6: 7c:eb:51:24:24:04:44:4f:0a:55:b2:7a:8e:17:95:3c:34:fe: f4:b1:bd:3e:e1:b8:70:a6:77:3e:2f:fc:f4:b3:c0:58:fd:b9: 06:7f:d6:2b:a0:88:33:3c:9f:fb:89:b1:df:1a:10:3e:f4:7a: f2:7f:c0:d7:fc:0b:bd:af:1d:87:72:4f:8b:04:56:91:8a:6b: ef:8c:e7:e9:6a:c7:c6:e5:bd:01:5c:1c:2b:24:58:19:6f:32: 4a:80:7d:48:2a:bc:37:7f:13:69:32:80:79:59:49:be:8e:36: 73:5a:87:9c:47:4d:2a:6f:e2:71:cf:c8:5e:9f:66:1c:3a:c5: 7a:8a:35:3d:06:0e:4e:bf:42:2e:79:eb:42:c5:9c:13:5d:5b: f6:70:63:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjYwOTIwMTQ1NzIwWhcNMjYwOTI3MTQ1NzIwWjAYMRYwFAYD VQQDEw02YWFmZjQ1MC1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46MoSs8hiMUCZFiHbuUHAeDld1ALrYx3EEb/Xmpcekj6ao1nBihAVhbCqLU5 b9Qs/CwGKjFw0haB0CJDeq+UDDG2wuWLbnB3euAg9OsMn4UcZimeckc90IpumaPk dX2OmGLIBbiWykyHc3766T7Hvk3mB/eVG/qjVZpOdag+WW/n6e4N3hqv28WA99cy AO0jKKJIpZH5u7Z0Ndcz5RNakv3+UsZKj19cSRE5Ln7o8yeBNk8ReEVC45HZ2QKE M9mHOZbdzE76o4BpP2p0EtrX7rGhRAt/GRZEVOPX0ELu8O9fj4qxjtojBNoatTcQ 645Tz38378MY3sYneA7gkiCt9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDs+/FZD ixM4jvineFQqDHIYX9TzMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgGXvya8avpo2rsq4il3eN0xwwX6ozw/VSflXSava19FULgbzVMJI2lv5Ub0G NhgoJDh6D06PDgLSf9uVkd9H6KQV3ertX14M1scQ55+7IvONFLg0+CodfCuP4cHH 1jci1fGLBHzLtX4h20HmfOtRJCQERE8KVbJ6jheVPDT+9LG9PuG4cKZ3Pi/89LPA WP25Bn/WK6CIMzyf+4mx3xoQPvR68n/A1/wLva8dh3JPiwRWkYpr74zn6WrHxuW9 AVwcKyRYGW8ySoB9SCq8N38TaTKAeVlJvo42c1qHnEdNKm/icc/IXp9mHDrFeoo1 PQYOTr9CLnnrQsWcE11b9nBjjA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:46 2026 by rpki-client