$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: QN2ianeJq2U9M9/aSU+frg+0oX9Va1x0+qKP0aZ6IqY= Subject key identifier: AC:D3:27:D5:7E:40:D8:F8:7D:25:B9:58:37:00:72:B3:9F:93:5D:EC Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0C26 Signing time: Tue 22 Sep 2026 18:40:43 +0000 Manifest this update: Tue 22 Sep 2026 18:40:42 +0000 Manifest next update: Tue 29 Sep 2026 18:40:42 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: 0HkzKW/3IhNItofokso+qxoQ35L2ir88BdPjFN7g8oc=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Sep 22 18:40:42 2026 GMT Not After : Sep 29 18:40:42 2026 GMT Subject: CN=6ab2cbaa-0654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:5a:e6:ef:b5:35:3e:c6:b5:8b:23:45:5d: 54:52:cf:5f:c2:cf:e9:24:ff:e8:40:b1:bf:97:fb: f1:37:37:1b:2e:50:e4:c4:d9:2b:b8:f1:b5:48:e8: 05:94:53:66:e6:cc:09:79:a9:6f:3e:95:b1:70:9a: 98:d0:7e:ba:ee:66:54:38:f5:b6:3b:6a:ed:6e:7e: e3:7b:35:06:0e:5f:d6:bf:2e:b8:79:fb:48:a5:8b: 61:7c:ab:f0:4f:98:08:3a:44:12:f0:76:34:d7:8a: 24:f6:55:53:0e:65:7a:1b:f8:f8:78:c1:fb:b0:e2: 01:ea:d0:76:84:e9:8b:93:c5:3f:25:02:d9:d8:03: 36:ab:ca:3f:31:3d:cc:17:ef:4b:0b:04:4f:94:c1: 23:ce:cb:25:4c:de:f5:e1:5c:d6:65:db:e3:a4:7e: b2:09:ef:aa:ad:7c:d1:9c:ad:82:5e:c6:2a:42:e4: d7:b8:29:a0:ad:ff:c9:1e:59:0b:8a:1d:f0:a1:08: 07:5b:91:0f:33:20:61:35:28:ac:37:42:bc:2e:ac: 35:26:f3:78:de:2a:14:1c:e5:36:78:80:81:ca:bb: 16:5a:35:ff:e0:cb:e3:81:76:fa:d6:b0:da:ed:3d: ad:06:36:fd:df:c2:f7:f7:dd:aa:d3:f9:0d:ee:ee: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D3:27:D5:7E:40:D8:F8:7D:25:B9:58:37:00:72:B3:9F:93:5D:EC X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:fd:e9:24:7b:d1:84:c5:3c:4d:c6:d2:8c:7f:d4:32:8a: b4:13:2a:76:ac:8f:fe:97:8e:f7:c0:21:ef:f5:f7:74:56:a6: 4b:eb:5d:7f:33:fc:a6:96:c6:68:7d:48:72:ee:b6:71:e2:45: fc:3e:14:9f:5d:7c:15:d4:9a:04:f7:35:f4:62:12:b8:de:cb: fe:18:2e:46:f3:5c:7b:3c:9a:e0:37:d6:96:23:2f:59:71:81: 5f:59:04:de:0d:5a:6e:a8:2e:c4:cc:64:77:fe:d2:bc:eb:6d: f0:58:13:d4:05:40:00:d2:e3:e7:d2:62:59:1a:f2:64:ae:1c: c2:46:c4:4e:7a:9a:64:87:e5:e9:99:38:31:b0:71:69:e4:c7: ce:4e:0b:23:02:50:03:00:ef:11:f1:b4:29:00:ab:d5:83:dd: de:14:05:88:ad:22:1a:db:92:7f:21:b7:72:fd:a4:83:53:e7: 68:86:1a:31:7a:67:a9:2d:56:48:1e:ff:88:b4:4f:60:17:e7: 4b:51:7b:a0:38:6a:4f:72:81:1f:be:75:4d:34:21:3a:33:f5: dc:fd:cc:53:27:d8:d8:ff:dd:69:91:38:40:18:df:7b:c0:85: c1:f7:df:53:03:d1:3c:6b:e8:f0:8e:4d:74:9c:91:53:30:24: 92:65:b5:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwOTIyMTg0MDQyWhcNMjYwOTI5MTg0MDQyWjAYMRYwFAYD VQQDEw02YWIyY2JhYS0wNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF5a5u+1NT7GtYsjRV1UUs9fws/pJP/oQLG/l/vxNzcbLlDkxNkruPG1SOgF lFNm5swJealvPpWxcJqY0H667mZUOPW2O2rtbn7jezUGDl/Wvy64eftIpYthfKvw T5gIOkQS8HY014ok9lVTDmV6G/j4eMH7sOIB6tB2hOmLk8U/JQLZ2AM2q8o/MT3M F+9LCwRPlMEjzsslTN714VzWZdvjpH6yCe+qrXzRnK2CXsYqQuTXuCmgrf/JHlkL ih3woQgHW5EPMyBhNSisN0K8Lqw1JvN43ioUHOU2eICByrsWWjX/4MvjgXb61rDa 7T2tBjb938L3992q0/kN7u7UEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzTJ9V+ QNj4fSW5WDcAcrOfk13sMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmv396SR70YTFPE3G0ox/1DKKtBMqdqyP/peO98Ah7/X3dFamS+tdfzP8ppbG aH1Icu62ceJF/D4Un118FdSaBPc19GISuN7L/hguRvNcezya4DfWliMvWXGBX1kE 3g1abqguxMxkd/7SvOtt8FgT1AVAANLj59JiWRryZK4cwkbETnqaZIfl6Zk4MbBx aeTHzk4LIwJQAwDvEfG0KQCr1YPd3hQFiK0iGtuSfyG3cv2kg1PnaIYaMXpnqS1W SB7/iLRPYBfnS1F7oDhqT3KBH751TTQhOjP13P3MUyfY2P/daZE4QBjfe8CFwfff UwPRPGvo8I5NdJyRUzAkkmW1SQ== -----END CERTIFICATE-----Generated at Thu Sep 24 16:34:37 2026 by rpki-client