$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: SGIqHs9oyTCJkafPn3gGNh+nKgu0iDG2KeMG99UPgdo= Subject key identifier: E5:21:EA:C8:63:2F:B5:F8:5A:C5:84:03:D6:34:0B:D6:D2:93:DB:29 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 09CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0950 Signing time: Sun 20 Sep 2026 20:16:55 +0000 Manifest this update: Sun 20 Sep 2026 20:16:55 +0000 Manifest next update: Sun 27 Sep 2026 20:16:55 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: Gvx7mTzLbHSIyqZMtTOMW8sTzp7xYa+kPOZpX7HrE+0=) 2: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: cedlDftPuKaqtkiO4WJKQnBMmmp4geGQax1GihSXKGY=) 3: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: IU7XJLBx/7Cq7nKB96mKlalgw6vu67yQpRJppd671eI=) 4: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: P/qPAA9R1aPA+pNVh5gikt8ff+R4F9Lpwffic5w1IyU=) 5: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: svUZ22ov0LGhdkOirUjZHVX1C9R02IiJPB5f5iRM5Vo=) 6: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: 9p+OFQ+d4WBrwtx90ETa5XmtgfKZaPpWZlEmPYxaevc=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: lsug8v+7JlFguXEnomAVvNqimdYbC75zokeMlGf/cSk=) 8: 61C915302DA611F1B2990DECA2833773.roa (hash: D7galkrtpav8bTT4oJns/u/iJdiuCZM83sUfpFRjOP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Sep 20 20:16:55 2026 GMT Not After : Sep 27 20:16:55 2026 GMT Subject: CN=6ab03f37-46d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:86:e4:9e:09:10:85:36:c5:e5:ea:2f:7a: f5:0c:3c:34:92:fa:2f:22:49:09:7d:1b:2a:3d:98: 6f:61:18:5f:25:64:70:fb:4c:64:16:9f:05:e4:09: de:9f:f1:dd:bb:7d:14:60:d9:b3:c2:02:7b:12:b1: ed:1a:c3:7d:d6:8c:34:5e:de:e0:f7:b2:fa:3c:37: 55:fb:cf:93:2e:2a:d2:a3:d7:c6:b0:1d:07:f4:73: 03:48:89:a2:e7:f3:71:b6:dd:7e:e1:2c:3e:14:06: 74:d4:81:eb:bd:01:fe:5d:50:03:2b:d2:43:ac:aa: 52:23:5c:36:06:c9:4e:65:da:4b:75:04:10:3f:03: bd:df:3f:93:6f:10:db:61:91:07:26:89:3a:b6:9d: 19:68:2a:5f:26:6d:70:ef:97:be:33:26:ca:59:27: 60:34:a3:59:f3:aa:d6:16:3d:42:6f:c2:a8:08:cf: dc:fe:f0:3b:43:ca:0f:cf:b9:18:7c:3c:99:f9:9a: 9b:a2:05:84:e1:3e:54:59:26:e4:21:ea:d2:cc:62: 94:6a:7a:1a:da:e3:ea:78:91:ee:5c:5d:6d:fe:47: 60:32:eb:66:6c:77:d5:a7:45:3b:a1:fb:b1:3e:7b: 3c:7a:39:49:12:82:65:74:00:ab:ac:c7:41:18:e2: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:EA:C8:63:2F:B5:F8:5A:C5:84:03:D6:34:0B:D6:D2:93:DB:29 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:d1:51:98:02:8f:bb:2d:5f:25:b9:e4:00:3b:46:18:a5: 34:73:9b:ca:91:b6:f6:11:c6:30:58:6e:bb:50:d6:b3:eb:cf: 70:f7:b0:78:be:16:a0:ea:7c:5a:b8:d8:15:41:2c:df:38:3e: 63:59:46:03:c6:b9:07:f9:62:7b:44:b0:bd:3f:22:e7:38:18: 28:ec:b5:a1:35:a9:42:3e:3e:fa:c0:f9:c4:ca:f9:60:c3:3a: 56:10:b5:b0:0c:43:09:a3:d6:e8:da:6a:b8:22:9b:3e:e5:fc: 5e:fd:34:c1:c6:47:ce:d4:98:db:a6:f3:55:40:56:7b:29:b9: af:85:46:1d:50:72:d2:75:c6:2a:7b:b0:aa:ee:4a:e1:a2:d6: 80:75:99:90:61:5c:ec:9f:11:48:40:0c:c5:53:59:f7:4b:d4: cb:37:c9:8b:fe:a5:31:90:0d:81:8f:a7:55:0f:b9:bc:cf:9f: 11:c1:01:c0:a5:6a:17:5f:21:c1:b7:a0:04:7e:d9:b6:00:7d: 08:18:bc:4b:59:4e:36:93:5f:fb:30:c6:6b:1f:fb:4d:bc:ec: ba:8a:72:e8:75:2c:3e:d4:4f:d3:7e:e2:48:84:16:65:26:82: f7:af:4f:d7:f5:3d:e7:03:1c:23:d1:fa:bd:db:e6:2b:10:3f: bc:41:20:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjYwOTIwMjAxNjU1WhcNMjYwOTI3MjAxNjU1WjAYMRYwFAYD VQQDEw02YWIwM2YzNy00NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJSG5J4JEIU2xeXqL3r1DDw0kvovIkkJfRsqPZhvYRhfJWRw+0xkFp8F5Ane n/Hdu30UYNmzwgJ7ErHtGsN91ow0Xt7g97L6PDdV+8+TLirSo9fGsB0H9HMDSImi 5/Nxtt1+4Sw+FAZ01IHrvQH+XVADK9JDrKpSI1w2BslOZdpLdQQQPwO93z+TbxDb YZEHJok6tp0ZaCpfJm1w75e+MybKWSdgNKNZ86rWFj1Cb8KoCM/c/vA7Q8oPz7kY fDyZ+ZqbogWE4T5UWSbkIerSzGKUanoa2uPqeJHuXF1t/kdgMutmbHfVp0U7ofux Pns8ejlJEoJldACrrMdBGOJLywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUh6shj L7X4WsWEA9Y0C9bSk9spMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOXRUZgCj7stXyW55AA7RhilNHObypG29hHGMFhuu1DWs+vPcPeweL4WoOp8 WrjYFUEs3zg+Y1lGA8a5B/lie0SwvT8i5zgYKOy1oTWpQj4++sD5xMr5YMM6VhC1 sAxDCaPW6NpquCKbPuX8Xv00wcZHztSY26bzVUBWeym5r4VGHVBy0nXGKnuwqu5K 4aLWgHWZkGFc7J8RSEAMxVNZ90vUyzfJi/6lMZANgY+nVQ+5vM+fEcEBwKVqF18h wbegBH7ZtgB9CBi8S1lONpNf+zDGax/7Tbzsuopy6HUsPtRP037iSIQWZSaC969P 1/U95wMcI9H6vdvmKxA/vEEgbg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:21:15 2026 by rpki-client