$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json) Hash identifier: mIi6Xdg+iKcqlCwQo8LoqcHrzVFGEuZbBLRBy6COOvg= Subject key identifier: A9:AE:28:CE:4D:84:28:35:98:64:9A:10:5C:BC:66:FF:66:44:7B:68 Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft Manifest number: 0679 Signing time: Sun 20 Sep 2026 22:26:11 +0000 Manifest this update: Sun 20 Sep 2026 22:26:10 +0000 Manifest next update: Sun 27 Sep 2026 22:26:10 +0000 Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: PzwwiM6xiwc51bdrow5ghKfy3Tcd1RnbLTbWnKjm1d8=) 2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: wpTOnbFzHuZykJ8pDXVXmzxxqZkD4nI9a0iplVk0s2M=) 3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: cye1hIVFGwa2LCmeYD2ib4pZaHJ8xh8Jr5cItjYasmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Sep 20 22:26:10 2026 GMT Not After : Sep 27 22:26:10 2026 GMT Subject: CN=6ab05d83-1cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:64:9f:1e:f4:ca:f5:b9:bf:89:b6:f1:1e: 4c:53:64:f6:ed:ee:92:ca:f4:11:01:8f:25:a1:49: 7a:1a:d2:cd:a1:a7:16:9f:22:69:62:f1:6b:0f:13: fb:d2:da:1c:6b:64:39:26:c9:3d:b5:e6:a9:7f:ff: d2:73:3e:64:86:23:12:72:82:a1:7f:5f:fd:92:b0: 6a:9f:c7:06:04:40:68:e6:46:f9:a4:d8:a0:07:86: fb:03:62:8b:e2:41:3a:eb:8d:7c:b5:c0:29:a3:f3: 1e:fe:8a:b9:77:17:98:dd:92:33:d4:5b:ee:8f:e7: 7c:8f:7b:dd:fd:f6:a2:60:b3:61:f7:16:f3:27:34: 9c:26:24:66:27:32:80:25:44:d0:d5:fc:4c:b0:21: e3:f3:14:66:74:53:ea:14:f6:e5:b4:9d:54:c6:bc: ee:80:5a:b1:f3:9a:20:8c:70:db:7a:e9:fb:84:4f: 55:1b:49:45:5a:55:8f:50:9d:fa:fc:d7:7b:a2:6d: 21:7c:74:06:11:c9:0a:dd:b0:b2:56:75:cf:e4:a1: 7a:be:3a:34:81:89:15:e8:a6:18:80:10:26:37:f9: e3:f7:da:fd:27:7d:97:9c:c8:13:27:9d:d6:c8:56: b8:39:32:b4:8f:1b:18:d9:bd:f1:af:48:86:86:12: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:28:CE:4D:84:28:35:98:64:9A:10:5C:BC:66:FF:66:44:7B:68 X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f8:37:6f:0a:39:51:72:aa:70:ec:46:53:bb:9f:e3:72:03: ba:5e:7b:0f:07:d6:3f:62:17:25:d3:0f:54:d0:50:f3:22:e2: 1f:92:08:5c:d0:67:2a:bf:80:b9:40:9d:cc:c5:ab:75:50:58: 7f:f0:d9:2e:26:90:5d:49:91:4f:36:12:83:c8:6f:06:71:3a: d0:9d:a7:54:42:71:49:b5:ec:c2:b0:67:a3:60:2b:bd:da:38: 67:00:f2:d7:ca:01:b4:ac:f0:85:d4:b6:fa:71:71:30:82:68: e4:49:e2:13:bc:ba:53:36:78:de:0e:70:45:83:c1:0d:19:9c: 5c:1c:fa:49:7c:d0:a5:44:1c:cd:5f:31:93:00:15:ce:1b:0c: 63:a3:31:be:a1:5e:40:9e:60:ec:97:a9:cc:88:22:ec:f8:89: d9:5e:ab:1e:56:d0:dd:da:11:f8:4a:f4:ce:f6:12:1b:32:db: ad:34:af:3d:61:ee:0c:67:50:80:3d:3e:e2:dd:77:a5:94:33: 5e:f5:4f:84:7f:19:d6:5a:aa:6d:62:23:8f:f2:98:9b:a0:97: 0c:ab:39:2d:78:f5:9c:27:62:74:24:9b:fd:dd:28:a8:cb:27: bd:53:21:d9:9f:e8:18:f4:95:72:33:c9:4e:cc:c7:16:e3:8d: b8:57:3e:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjYwOTIwMjIyNjEwWhcNMjYwOTI3MjIyNjEwWjAYMRYwFAYD VQQDEw02YWIwNWQ4My0xY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Hxknx70yvW5v4m28R5MU2T27e6SyvQRAY8loUl6GtLNoacWnyJpYvFrDxP7 0toca2Q5Jsk9teapf//Scz5khiMScoKhf1/9krBqn8cGBEBo5kb5pNigB4b7A2KL 4kE66418tcApo/Me/oq5dxeY3ZIz1Fvuj+d8j3vd/faiYLNh9xbzJzScJiRmJzKA JUTQ1fxMsCHj8xRmdFPqFPbltJ1UxrzugFqx85ogjHDbeun7hE9VG0lFWlWPUJ36 /Nd7om0hfHQGEckK3bCyVnXP5KF6vjo0gYkV6KYYgBAmN/nj99r9J32XnMgTJ53W yFa4OTK0jxsY2b3xr0iGhhIhowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmuKM5N hCg1mGSaEFy8Zv9mRHtoMB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkI2Ni81M0U4RkJFQURBNUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3Bh MmZhaFlyODdYSFQ1TThIZ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfg3bwo5UXKqcOxGU7uf43IDul57DwfWP2IXJdMPVNBQ8yLiH5IIXNBnKr+A uUCdzMWrdVBYf/DZLiaQXUmRTzYSg8hvBnE60J2nVEJxSbXswrBno2Arvdo4ZwDy 18oBtKzwhdS2+nFxMIJo5EniE7y6UzZ43g5wRYPBDRmcXBz6SXzQpUQczV8xkwAV zhsMY6MxvqFeQJ5g7JepzIgi7PiJ2V6rHlbQ3doR+Er0zvYSGzLbrTSvPWHuDGdQ gD0+4t13pZQzXvVPhH8Z1lqqbWIjj/KYm6CXDKs5LXj1nCdidCSb/d0oqMsnvVMh 2Z/oGPSVcjPJTszHFuONuFc+pg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:19:07 2026 by rpki-client