$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json) Hash identifier: Y8UZzfhngMYCrc4CbPHKof5yELvNQMU3NBaPRKJZe78= Subject key identifier: B5:68:74:1B:BB:76:AE:E6:5C:CB:D7:CB:46:C3:07:F3:F5:1C:11:04 Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft Manifest number: 01CF Signing time: Sat 19 Sep 2026 03:49:26 +0000 Manifest this update: Sat 19 Sep 2026 03:49:25 +0000 Manifest next update: Sat 26 Sep 2026 03:49:25 +0000 Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: gXU8hzs4BW8/7PB4mHL/nlCG5AJAAmplOVPVL+V72iQ=) 2: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=) 3: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=) 4: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: Sep 19 03:49:25 2026 GMT Not After : Sep 26 03:49:25 2026 GMT Subject: CN=6aae0645-5de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:80:33:d7:56:88:98:f0:f9:88:38:c1:dd: d5:4d:46:6f:8e:5d:2e:26:29:0e:ab:5a:e6:49:86: 44:5f:f9:c0:ca:56:88:94:56:27:28:8d:ab:1c:2c: 17:e2:1d:25:e2:24:bd:0b:c7:c8:49:aa:81:a0:59: 0b:81:66:a4:e7:5c:87:f0:b9:76:cb:b9:63:05:59: 3a:9a:63:57:46:71:40:bd:32:b5:67:0e:94:d6:42: 06:74:7e:9f:94:72:44:ae:a5:bf:f0:2a:c0:4e:4b: f5:ba:6d:54:bf:0b:9a:54:fa:86:d0:da:b8:ee:f9: a3:53:cc:f0:a8:5d:9d:f5:10:a6:36:c8:3e:6e:ad: 80:e9:03:de:26:0a:fb:a3:4f:8a:c0:13:7d:c5:e3: 58:d5:41:c9:79:e4:d1:ef:e2:0e:cb:56:06:56:0e: c9:74:e4:94:6e:5a:17:7a:4a:1b:1c:2e:5a:c4:10: 15:61:6c:d6:ce:24:b0:52:04:f8:66:f2:ce:8b:22: 2d:a8:92:93:fe:95:b6:50:1a:d8:32:48:b7:53:ab: ba:cc:3a:d3:de:8a:77:cc:ab:b5:2c:a2:5c:bc:73: 83:30:3c:b8:3c:44:33:0c:ac:cd:93:35:51:9d:1a: 95:95:0a:21:1f:fe:c9:ed:0e:5b:46:a0:5c:4a:fe: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:74:1B:BB:76:AE:E6:5C:CB:D7:CB:46:C3:07:F3:F5:1C:11:04 X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:75:d6:67:6d:48:8d:1c:25:38:4d:7d:bd:f3:3e:a8:1b:18: 9f:98:43:4e:7e:a9:48:cc:d9:86:55:63:a5:12:0c:b5:b3:47: 66:09:46:a9:c3:58:11:d7:fb:68:26:ef:13:b9:dd:20:60:ba: 89:ea:fa:d2:5d:f7:e4:25:49:86:5d:b8:4d:d1:f9:4c:5f:58: 59:55:1d:06:98:0c:61:f2:cc:45:2a:a1:08:7e:59:df:c8:06: ca:62:f0:22:6e:21:31:61:da:87:62:3e:02:0e:b4:0e:27:3c: 00:98:44:44:40:dc:40:92:ef:97:f9:81:32:66:16:56:74:c4: 2e:2b:9f:e2:87:53:4c:3f:ce:32:81:0d:4f:69:7c:bc:db:9b: 73:0e:bf:95:f1:45:84:c8:a3:0f:9f:73:6d:f7:0f:c5:da:98: e3:2f:4d:96:e2:d2:ed:79:92:7f:81:8c:a4:21:15:66:85:3a: db:ed:58:0d:b9:69:e1:af:43:90:f3:f8:98:d5:e7:f9:88:ad: e4:25:df:80:98:2c:9b:6e:a6:d2:39:5d:22:bf:9f:29:f8:92: f9:17:6d:ef:5d:0d:0d:c0:21:88:71:40:8b:a2:25:6c:dd:41: ad:ff:3e:48:af:33:7a:a4:0c:72:b2:7e:80:65:25:ef:b0:dc: 93:5b:2b:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjYwOTE5MDM0OTI1WhcNMjYwOTI2MDM0OTI1WjAYMRYwFAYD VQQDEw02YWFlMDY0NS01ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG+AM9dWiJjw+Yg4wd3VTUZvjl0uJikOq1rmSYZEX/nAylaIlFYnKI2rHCwX 4h0l4iS9C8fISaqBoFkLgWak51yH8Ll2y7ljBVk6mmNXRnFAvTK1Zw6U1kIGdH6f lHJErqW/8CrATkv1um1UvwuaVPqG0Nq47vmjU8zwqF2d9RCmNsg+bq2A6QPeJgr7 o0+KwBN9xeNY1UHJeeTR7+IOy1YGVg7JdOSUbloXekobHC5axBAVYWzWziSwUgT4 ZvLOiyItqJKT/pW2UBrYMki3U6u6zDrT3op3zKu1LKJcvHODMDy4PEQzDKzNkzVR nRqVlQohH/7J7Q5bRqBcSv6pMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVodBu7 dq7mXMvXy0bDB/P1HBEEMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsXXWZ21IjRwlOE19vfM+qBsYn5hDTn6pSMzZhlVjpRIMtbNHZglGqcNYEdf7 aCbvE7ndIGC6ier60l335CVJhl24TdH5TF9YWVUdBpgMYfLMRSqhCH5Z38gGymLw Im4hMWHah2I+Ag60Dic8AJhEREDcQJLvl/mBMmYWVnTELiuf4odTTD/OMoENT2l8 vNubcw6/lfFFhMijD59zbfcPxdqY4y9NluLS7XmSf4GMpCEVZoU62+1YDblp4a9D kPP4mNXn+Yit5CXfgJgsm26m0jldIr+fKfiS+Rdt710NDcAhiHFAi6IlbN1Brf8+ SK8zeqQMcrJ+gGUl77Dck1srtA== -----END CERTIFICATE-----Generated at Mon Sep 21 04:12:19 2026 by rpki-client