$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft File: dF1Xf1uOfU-NtJqNuayxP8JaojM.mft (raw, json) Hash identifier: 2eyli75Z9Pt6Zj5mYzWcAWmwil+lcQJdbtKnp4rfBTk= Subject key identifier: D7:3B:8F:82:6D:2B:A2:29:BC:F6:09:B3:23:A1:BD:4E:50:91:89:95 Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 Certificate issuer: /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft Manifest number: B2 Signing time: Wed 23 Sep 2026 06:54:39 +0000 Manifest this update: Wed 23 Sep 2026 06:54:38 +0000 Manifest next update: Wed 30 Sep 2026 06:54:38 +0000 Files and hashes: 1: dF1Xf1uOfU-NtJqNuayxP8JaojM.crl (hash: zV37jcC0rZx/vYspLWJ/Bqhgah9nEu4JQCvuQCXQtRE=) 2: FADF73B4C42811F0B219BB6AC4F9AE02.roa (hash: b99ya6U9QMY/5a9pzqhDLkO/k1qaTOIL0zEPGVgl0hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233 Validity Not Before: Sep 23 06:54:38 2026 GMT Not After : Sep 30 06:54:38 2026 GMT Subject: CN=6ab377af-854c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:2d:a1:5a:36:92:68:20:d1:88:67:82:d2: da:60:aa:e6:6b:5e:66:ab:ee:6c:7c:09:25:59:d6: 9f:76:47:54:58:88:0b:14:4d:b9:28:3a:97:2a:72: 8c:71:06:98:af:61:49:80:85:18:eb:7c:94:82:14: 41:75:29:54:81:1d:83:5c:b3:d2:86:14:90:6a:0f: a9:c8:a1:5a:30:65:ff:24:0f:ae:aa:fb:70:bf:99: a7:82:e9:e7:29:dc:11:ee:a2:51:27:57:8c:10:be: 3b:ce:a7:82:8a:79:0c:cf:e8:5b:72:59:48:e0:06: 6d:5c:b7:fd:4d:fe:9b:ee:be:a5:a1:53:f5:5d:ce: dd:f0:99:f0:48:4f:97:9a:be:f0:00:68:06:2a:ee: d5:c0:34:97:7c:9f:c3:13:d1:d1:6d:e1:99:c1:4a: 9c:67:86:67:0d:59:76:d1:c4:6a:e2:57:32:af:6a: 9d:1f:67:c8:9d:71:d9:13:ae:64:8d:9b:34:e5:99: 52:ae:99:db:44:50:59:a0:b0:88:83:a9:97:13:d7: 2c:24:77:c0:d3:1e:f8:d4:61:8a:f4:fa:d8:ff:e8: 80:ae:45:b0:ad:12:35:9f:cc:e1:f6:13:93:c1:d0: df:6b:b6:06:e7:5f:55:06:de:03:34:e0:e7:a2:06: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:8F:82:6D:2B:A2:29:BC:F6:09:B3:23:A1:BD:4E:50:91:89:95 X509v3 Authority Key Identifier: keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:46:99:52:f2:27:ba:1b:3b:df:29:4f:3a:94:59:7e:e1:9d: 16:52:15:42:c0:f0:c0:83:5e:f8:33:01:71:ca:5e:76:1c:e9: 58:fc:fe:17:1d:11:f3:95:ef:f0:74:32:05:ed:87:3d:1d:62: 95:40:a2:b9:19:97:c6:e7:7a:0c:ef:1c:db:3f:34:23:17:76: 00:07:52:a6:43:48:45:e9:5d:41:c9:5f:7f:e2:de:26:bd:c8: 68:8f:2e:7f:f3:5e:93:ea:1b:f0:b1:6c:d5:67:96:ab:af:44: 30:4b:84:6f:2c:cc:69:00:21:bb:4c:d4:71:2b:fc:e1:9b:0f: 3d:ba:57:39:5f:f2:4e:71:98:25:39:5a:6b:4c:6a:b2:26:8f: 0e:e4:4d:c3:c8:66:99:bd:6a:1e:f5:7f:3b:4b:be:e6:06:26: 28:52:21:6e:ae:24:b1:e2:b3:dd:70:77:0a:ab:4a:28:0d:b4: a5:b9:84:92:92:3a:d5:43:3e:01:f6:ba:b1:fa:d5:bb:da:73: 9b:e2:99:45:c4:e4:01:5f:46:88:43:9f:ad:3c:84:64:cb:46: 1e:b9:e2:a5:da:af:6a:b5:de:14:89:73:69:7d:7a:68:67:03: 41:69:53:07:3f:ab:06:f4:40:e1:5f:c2:10:4d:92:e2:b6:81: 39:d2:72:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZFQzIxMTAvBgNVBAUTKDc0NUQ1NzdGNUI4RTdENEY4REI0OUE4REI5QUNCMTNG QzI1QUEyMzMwHhcNMjYwOTIzMDY1NDM4WhcNMjYwOTMwMDY1NDM4WjAYMRYwFAYD VQQDEw02YWIzNzdhZi04NTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS0toVo2kmgg0YhngtLaYKrma15mq+5sfAklWdafdkdUWIgLFE25KDqXKnKM cQaYr2FJgIUY63yUghRBdSlUgR2DXLPShhSQag+pyKFaMGX/JA+uqvtwv5mngunn KdwR7qJRJ1eMEL47zqeCinkMz+hbcllI4AZtXLf9Tf6b7r6loVP1Xc7d8JnwSE+X mr7wAGgGKu7VwDSXfJ/DE9HRbeGZwUqcZ4ZnDVl20cRq4lcyr2qdH2fInXHZE65k jZs05ZlSrpnbRFBZoLCIg6mXE9csJHfA0x741GGK9PrY/+iArkWwrRI1n8zh9hOT wdDfa7YG519VBt4DNODnogasEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNc7j4Jt K6IpvPYJsyOhvU5QkYmVMB8GA1UdIwQYMBaAFHRdV39bjn1PjbSajbmssT/CWqIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkVDMi9CODJBOUExQ0I4 N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZVLU50SnFOdWF5eFA4SmFv ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGMVhmMXVPZlUtTnRKcU51YXl4UDhKYW9qTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkVDMi9CODJBOUExQ0I4N0YxMUYwODcxQUZGNDJDNEY5QUUwMi9kRjFYZjF1T2ZV LU50SnFOdWF5eFA4SmFvak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjkaZUvInuhs73ylPOpRZfuGdFlIVQsDwwINe+DMBccpedhzpWPz+Fx0R85Xv 8HQyBe2HPR1ilUCiuRmXxud6DO8c2z80Ixd2AAdSpkNIReldQclff+LeJr3IaI8u f/Nek+ob8LFs1WeWq69EMEuEbyzMaQAhu0zUcSv84ZsPPbpXOV/yTnGYJTlaa0xq siaPDuRNw8hmmb1qHvV/O0u+5gYmKFIhbq4kseKz3XB3CqtKKA20pbmEkpI61UM+ Afa6sfrVu9pzm+KZRcTkAV9GiEOfrTyEZMtGHrnipdqvarXeFIlzaX16aGcDQWlT Bz+rBvRA4V/CEE2S4raBOdJyVA== -----END CERTIFICATE-----Generated at Fri Sep 25 09:05:34 2026 by rpki-client