$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: wHdFgBa2prqqgA/Gbe7yRvsqOJ/0SN9Ms4KnJMlWBO0= Subject key identifier: 3C:3A:44:5D:77:5D:FD:8B:77:CC:13:E8:CF:39:BF:47:B3:25:9A:1B Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 147C Signing time: Tue 22 Sep 2026 16:47:03 +0000 Manifest this update: Tue 22 Sep 2026 16:47:02 +0000 Manifest next update: Tue 29 Sep 2026 16:47:02 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: FI9WXuKMOYLqNqP0qIG0XcqIRWDfNx5WIy19SYYXDdQ=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: Fg1IcAZ2A1EMwqD7lRtBcOmZe0TzbfUCsxVw7nft8S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5257 (0x1489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Sep 22 16:47:02 2026 GMT Not After : Sep 29 16:47:02 2026 GMT Subject: CN=6ab2b107-7791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:67:b1:31:06:15:7e:2b:ab:8d:cc:6b:31: a5:7c:0e:53:38:eb:1c:7e:7d:b6:71:21:01:91:50: 7c:30:94:a1:f6:9e:71:81:af:f5:2d:5f:a5:8f:3d: fe:15:6b:24:4c:6d:f4:3c:72:29:e9:b0:2d:a9:c1: 28:9f:53:08:b0:bb:5a:cd:6f:ae:3d:cc:8b:09:33: 22:20:0d:91:11:7a:c4:f1:df:d1:1e:9e:bf:9e:0a: db:86:6b:c9:11:c9:90:af:bc:fe:36:6f:87:e3:ca: 1d:fa:c7:fe:7c:c7:2b:c1:51:3d:7a:14:b3:d6:fb: 02:10:6b:e7:60:a3:c6:96:45:f8:b8:43:80:fe:f5: 17:ac:67:1f:b0:2d:5b:7e:ef:e5:8d:02:eb:84:c7: 42:7b:03:35:fc:35:6f:06:6b:06:4d:66:d5:b0:a4: a5:79:04:20:1c:80:d4:0c:0c:39:0c:a5:32:ef:73: fa:98:a7:30:14:2f:b3:fc:83:95:46:63:9b:38:9c: 6d:20:56:9b:c5:97:ca:4f:ab:37:65:40:5f:21:5c: f9:99:8a:b6:0c:7b:b1:1c:07:0e:f0:19:3a:d7:10: 27:7a:80:10:6d:04:69:0c:05:6b:4d:fa:13:39:5c: 3b:fb:4f:68:7f:24:be:a8:b8:53:bf:30:b3:80:14: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3A:44:5D:77:5D:FD:8B:77:CC:13:E8:CF:39:BF:47:B3:25:9A:1B X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4d:ee:a5:7c:dd:3f:e4:55:fc:26:a8:66:75:be:b0:67:22: 01:e5:1c:24:6c:c7:0c:db:31:d7:fd:22:49:28:38:b2:8a:96: 92:7d:66:f8:41:74:c4:73:80:cd:24:a9:0c:71:ac:be:0e:19: 26:b5:2a:25:05:06:4e:18:ad:43:cc:6b:bf:eb:18:d2:e0:d7: 05:f7:3b:26:c1:82:40:0c:f2:a2:ac:6b:68:69:9a:e8:47:69: a9:68:a9:a4:1d:4e:3c:33:9a:53:28:1d:5d:31:d9:f6:d1:94: ca:d6:bb:ef:a6:53:5a:89:43:fd:0b:0a:cb:fd:7a:2d:51:6c: 21:0f:26:83:53:bc:0c:59:62:c4:e2:2f:68:72:9e:eb:1e:d7: 2f:f7:44:41:1a:14:27:cd:da:1f:cb:db:49:a4:78:45:66:fd: 12:e6:22:9d:59:11:cd:64:64:3e:48:ce:e2:82:d6:64:f4:3d: 1a:b0:db:a8:b4:e8:2b:17:75:b8:a5:5e:6e:ac:7c:35:75:80: 02:b7:1a:c1:78:b1:b6:b7:7a:9b:69:0e:43:3c:b2:21:68:ec: 5b:9f:c3:1c:0d:94:d2:85:e5:73:a3:bb:63:05:ac:f9:f2:c4: 99:20:ce:4e:61:a3:85:4a:fd:01:e7:23:d3:ba:41:4b:99:e5: 32:71:c0:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjYwOTIyMTY0NzAyWhcNMjYwOTI5MTY0NzAyWjAYMRYwFAYD VQQDEw02YWIyYjEwNy03NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIdnsTEGFX4rq43MazGlfA5TOOscfn22cSEBkVB8MJSh9p5xga/1LV+ljz3+ FWskTG30PHIp6bAtqcEon1MIsLtazW+uPcyLCTMiIA2REXrE8d/RHp6/ngrbhmvJ EcmQr7z+Nm+H48od+sf+fMcrwVE9ehSz1vsCEGvnYKPGlkX4uEOA/vUXrGcfsC1b fu/ljQLrhMdCewM1/DVvBmsGTWbVsKSleQQgHIDUDAw5DKUy73P6mKcwFC+z/IOV RmObOJxtIFabxZfKT6s3ZUBfIVz5mYq2DHuxHAcO8Bk61xAneoAQbQRpDAVrTfoT OVw7+09ofyS+qLhTvzCzgBRx3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw6RF13 Xf2Ld8wT6M85v0ezJZobMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADE3upXzdP+RV/CaoZnW+sGciAeUcJGzHDNsx1/0iSSg4soqWkn1m+EF0xHOA zSSpDHGsvg4ZJrUqJQUGThitQ8xrv+sY0uDXBfc7JsGCQAzyoqxraGma6EdpqWip pB1OPDOaUygdXTHZ9tGUyta776ZTWolD/QsKy/16LVFsIQ8mg1O8DFlixOIvaHKe 6x7XL/dEQRoUJ83aH8vbSaR4RWb9EuYinVkRzWRkPkjO4oLWZPQ9GrDbqLToKxd1 uKVebqx8NXWAArcawXixtrd6m2kOQzyyIWjsW5/DHA2U0oXlc6O7YwWs+fLEmSDO TmGjhUr9Aecj07pBS5nlMnHAEg== -----END CERTIFICATE-----Generated at Wed Sep 23 00:44:01 2026 by rpki-client