$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: NcUu7t16WtsjflOuYSWWyoKtOsgUd5pB536ulO2516s= Subject key identifier: 82:E3:86:94:41:9C:90:AB:F6:58:E4:69:83:F9:95:7A:C0:8A:47:C3 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: C1 Signing time: Sun 20 Sep 2026 23:04:23 +0000 Manifest this update: Sun 20 Sep 2026 23:04:23 +0000 Manifest next update: Sun 27 Sep 2026 23:04:23 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: 1/K9R354hH51afIa8VmB6nLSu22BC3MsbtRNev6CN2M=) 2: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) 3: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 4: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 6: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=) 7: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Sep 20 23:04:23 2026 GMT Not After : Sep 27 23:04:23 2026 GMT Subject: CN=6ab06677-02ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:3a:aa:af:14:a1:75:ee:d2:d1:c2:0d:c0: b6:b1:fb:b0:cd:ae:f4:4b:39:a8:2d:66:69:cc:6e: f6:88:77:4d:2b:49:ed:01:41:25:70:16:fe:f9:4b: b4:99:e3:30:18:dc:35:3c:ef:3e:f5:27:d3:cc:06: cc:25:08:68:55:3a:9c:9b:b3:e2:d0:aa:bc:2b:c1: ce:21:31:11:53:ec:22:fc:70:aa:e8:9f:46:32:8a: 11:c2:34:c7:b5:29:78:a5:69:d4:86:04:dd:ba:90: 88:c8:72:f4:76:14:4c:54:ee:fd:dc:70:09:eb:f9: ec:d0:c6:5e:79:46:f3:ce:33:40:3a:57:eb:c5:14: a4:20:82:6f:7e:ad:d4:b0:98:34:9b:e7:d3:fc:24: 91:d8:10:cd:f8:c4:e3:2d:17:ef:35:78:b3:f5:7c: 27:e6:e4:41:7e:d6:17:5c:1c:24:ac:51:68:7d:5b: f0:82:28:5c:17:13:28:cc:86:64:97:ba:8a:24:34: 55:e0:a2:a3:2a:7b:7b:c8:31:b1:61:24:e9:16:14: 77:6e:56:57:3e:da:d2:75:06:43:86:a1:cb:b5:3d: bc:06:83:1f:f2:2c:5c:2c:d8:2c:2d:8f:58:a5:18: 03:97:45:fe:99:4f:fa:2e:e0:0a:c4:9b:a0:bb:76: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:86:94:41:9C:90:AB:F6:58:E4:69:83:F9:95:7A:C0:8A:47:C3 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6b:9b:1e:08:a9:c1:58:62:c6:ad:1a:2e:a1:a4:e6:a9:b4: 17:dc:d1:96:1e:9e:0d:0a:46:3b:da:fb:73:11:c0:3d:2a:8a: 65:53:9d:1f:8b:e3:e1:c6:d6:f8:52:94:a4:a2:55:58:bd:fd: c2:35:30:0b:74:ac:60:c5:fe:6e:ac:75:6b:8d:38:84:3c:aa: 28:d3:18:2b:61:6e:8e:1e:1a:31:b4:1b:49:cb:51:f6:97:d5: a5:a3:f8:bb:c7:4f:0d:71:4c:00:a5:65:61:e7:16:26:00:b1: 22:c7:44:58:17:ae:d5:e5:9a:20:66:4d:27:06:43:e5:fb:49: 99:16:b4:8b:f0:49:83:33:73:8e:33:1c:96:94:3e:37:e0:96: c6:7d:15:78:fb:c6:2b:24:cb:ff:63:eb:d6:59:c3:a9:f1:3d: 47:c8:ac:f9:3e:4c:e5:9f:43:a0:b9:c0:d6:2d:2e:3b:2b:99: b4:2c:5f:dd:2e:69:12:70:35:44:78:3c:ff:2e:36:cf:38:7a: 7e:c6:9d:05:90:b4:59:40:a1:d4:f6:e7:c5:2c:11:ea:4a:3e: f8:63:ce:08:ff:5a:dd:35:cb:c2:5d:26:75:db:ce:62:28:d4: eb:0b:1e:38:11:6c:98:9e:b4:3a:ef:6e:bb:80:46:e1:05:b0: 20:ac:9d:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwOTIwMjMwNDIzWhcNMjYwOTI3MjMwNDIzWjAYMRYwFAYD VQQDEw02YWIwNjY3Ny0wMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+g6qq8UoXXu0tHCDcC2sfuwza70SzmoLWZpzG72iHdNK0ntAUElcBb++Uu0 meMwGNw1PO8+9SfTzAbMJQhoVTqcm7Pi0Kq8K8HOITERU+wi/HCq6J9GMooRwjTH tSl4pWnUhgTdupCIyHL0dhRMVO793HAJ6/ns0MZeeUbzzjNAOlfrxRSkIIJvfq3U sJg0m+fT/CSR2BDN+MTjLRfvNXiz9Xwn5uRBftYXXBwkrFFofVvwgihcFxMozIZk l7qKJDRV4KKjKnt7yDGxYSTpFhR3blZXPtrSdQZDhqHLtT28BoMf8ixcLNgsLY9Y pRgDl0X+mU/6LuAKxJugu3bm+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILjhpRB nJCr9ljkaYP5lXrAikfDMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamubHgipwVhixq0aLqGk5qm0F9zRlh6eDQpGO9r7cxHAPSqKZVOdH4vj4cbW +FKUpKJVWL39wjUwC3SsYMX+bqx1a404hDyqKNMYK2Fujh4aMbQbSctR9pfVpaP4 u8dPDXFMAKVlYecWJgCxIsdEWBeu1eWaIGZNJwZD5ftJmRa0i/BJgzNzjjMclpQ+ N+CWxn0VePvGKyTL/2Pr1lnDqfE9R8is+T5M5Z9DoLnA1i0uOyuZtCxf3S5pEnA1 RHg8/y42zzh6fsadBZC0WUCh1PbnxSwR6ko++GPOCP9a3TXLwl0mddvOYijU6wse OBFsmJ60Ou9uu4BG4QWwIKydqQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:55:24 2026 by rpki-client