$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: f7STewULm9elq6ddWAPmSNrcusaviCcF9uwyTdrGIUM= Subject key identifier: 9C:BA:31:7B:69:CF:BD:09:E8:31:27:D1:29:39:D3:B8:48:85:55:B6 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 0417 Signing time: Mon 21 Sep 2026 00:10:12 +0000 Manifest this update: Mon 21 Sep 2026 00:10:12 +0000 Manifest next update: Mon 28 Sep 2026 00:10:12 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: y03L+nggXRfTDgIGarFajvLjEU/TDAsaNO9PrdI2PdU=) 2: C7513D2484CC11F18B5F25E597A30FBC.roa (hash: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Sep 21 00:10:12 2026 GMT Not After : Sep 28 00:10:12 2026 GMT Subject: CN=6ab075e4-c112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6d:80:80:fc:e8:76:c0:a4:8d:01:49:8e:57: 0c:3f:d6:e2:af:dd:1a:cb:13:45:09:84:89:5c:df: 2c:6d:3d:c5:41:dc:8e:26:06:65:3b:95:b5:da:bd: 2a:69:7f:86:29:30:75:61:33:b6:3b:5f:1b:b9:d5: 1a:f7:92:6f:52:fd:c9:96:3e:17:3d:d1:76:51:b8: 57:6a:ac:d5:31:ee:1d:30:b8:fe:ef:f1:c8:cd:dd: ef:73:1b:56:cb:a8:52:13:d1:b0:58:36:2f:23:5f: 46:f1:ed:bb:74:8f:81:83:28:ba:f6:ec:2a:76:4d: d3:e4:f4:54:20:95:e3:de:d5:e2:7b:86:e1:c1:6a: 82:7b:40:35:0b:7e:52:7e:7a:a8:37:a6:cf:fa:70: b0:b7:f5:e9:01:a0:dc:0c:db:82:0c:b5:01:03:87: 37:bd:e4:ab:0e:0e:66:35:ba:eb:7a:ec:fa:62:3a: 82:99:d8:04:c3:45:47:8c:5b:13:c3:67:58:d3:c6: 28:7f:55:b0:d2:ef:8e:84:4e:60:c3:c9:9a:c7:fc: cd:a2:78:01:4e:f5:19:cb:70:97:cb:87:a7:76:80: 0d:a8:ab:7b:90:38:1c:f2:28:8b:0e:ba:1b:51:21: 80:86:8a:dc:44:d7:38:3a:eb:9b:6b:7f:6d:e8:04: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:31:7B:69:CF:BD:09:E8:31:27:D1:29:39:D3:B8:48:85:55:B6 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:e7:e0:d7:77:11:64:6b:c0:f2:a8:c2:1e:94:44:01:5a: 6c:3e:08:91:d7:cc:c6:e0:f7:a3:ab:41:49:f2:86:8d:88:a9: d6:76:9b:0a:7a:bc:6b:98:60:d6:70:fe:8c:61:e1:00:85:2f: b0:d8:33:29:63:21:d7:c4:f3:1b:b9:4f:40:38:19:be:31:95: 7e:ce:3f:27:99:f8:8b:45:9d:fb:1c:89:d9:76:0b:66:6c:21: b6:2e:19:df:3b:e4:d9:df:bf:51:83:33:95:6f:62:4b:12:2e: 50:44:06:16:4e:6c:4f:50:22:26:78:e0:53:8e:7f:4f:c4:1f: fd:78:76:1a:55:e7:51:bd:f6:52:cd:28:ad:78:5b:c0:ac:bd: 6a:aa:c3:c4:01:cd:8c:8e:a5:7a:0c:9d:01:92:eb:2a:4f:4e: 41:44:e0:50:c8:91:07:f6:a9:97:d8:14:80:03:cb:b0:51:12: 35:78:08:77:74:71:22:99:ce:c4:5e:ff:a6:23:01:bf:87:3a: db:61:d0:e7:aa:3c:82:d9:13:2e:47:b5:25:d4:1c:fc:8c:f0: 38:bb:f2:2c:70:b2:66:13:07:82:e3:e4:3b:d3:dc:6d:62:83: 79:d6:1d:91:55:9c:c9:9e:a4:4e:13:fa:d2:43:75:ab:60:18: 17:6a:24:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYwOTIxMDAxMDEyWhcNMjYwOTI4MDAxMDEyWjAYMRYwFAYD VQQDEw02YWIwNzVlNC1jMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8W2AgPzodsCkjQFJjlcMP9bir90ayxNFCYSJXN8sbT3FQdyOJgZlO5W12r0q aX+GKTB1YTO2O18budUa95JvUv3Jlj4XPdF2UbhXaqzVMe4dMLj+7/HIzd3vcxtW y6hSE9GwWDYvI19G8e27dI+Bgyi69uwqdk3T5PRUIJXj3tXie4bhwWqCe0A1C35S fnqoN6bP+nCwt/XpAaDcDNuCDLUBA4c3veSrDg5mNbrreuz6YjqCmdgEw0VHjFsT w2dY08Yof1Ww0u+OhE5gw8max/zNongBTvUZy3CXy4endoANqKt7kDgc8iiLDrob USGAhorcRNc4Ouuba39t6ASw8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJy6MXtp z70J6DEn0Sk507hIhVW2MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkvn4Nd3EWRrwPKowh6URAFabD4IkdfMxuD3o6tBSfKGjYip1nabCnq8a5hg 1nD+jGHhAIUvsNgzKWMh18TzG7lPQDgZvjGVfs4/J5n4i0Wd+xyJ2XYLZmwhti4Z 3zvk2d+/UYMzlW9iSxIuUEQGFk5sT1AiJnjgU45/T8Qf/Xh2GlXnUb32Us0orXhb wKy9aqrDxAHNjI6legydAZLrKk9OQUTgUMiRB/apl9gUgAPLsFESNXgId3RxIpnO xF7/piMBv4c622HQ56o8gtkTLke1JdQc/IzwOLvyLHCyZhMHguPkO9PcbWKDedYd kVWcyZ6kThP60kN1q2AYF2ok2Q== -----END CERTIFICATE-----Generated at Mon Sep 21 15:37:11 2026 by rpki-client