$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json) Hash identifier: 1aFqAiOMTMRts3IOU4QknxX80C8ee8T92KzPQIsrWq4= Subject key identifier: 60:64:5E:7E:26:C8:DA:2B:EE:87:95:18:A7:BE:E2:5B:81:E9:50:D4 Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Certificate serial: 0954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft Manifest number: 0946 Signing time: Sat 26 Sep 2026 20:15:35 +0000 Manifest this update: Sat 26 Sep 2026 20:15:34 +0000 Manifest next update: Sat 03 Oct 2026 20:15:34 +0000 Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: agMiFEpLlieZd7gnW5xCdaMKUfHwMJ/1JDoYDuUUPog=) 2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: p/WvE2tM9oWtFSPqsDTw38TfwFRB6bi66/O6CMRedgM=) 3: zOyHyOrTP8BYGAohXNo4Kgj8cVI.asa (hash: WefVujjKNEcGOlSqWteiU/Pcigx69pnqtQuxdpmbUA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2388 (0x954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Validity Not Before: Sep 26 20:15:34 2026 GMT Not After : Oct 3 20:15:34 2026 GMT Subject: CN=6ab827e6-f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:32:7f:e2:65:11:ad:ad:16:32:0a:40:f4: b9:88:f3:68:4c:b7:b6:2a:4d:bd:2e:c8:c8:41:69: 5e:1e:a4:92:c8:53:1a:d3:52:d2:a1:e2:1b:44:52: e2:cb:ac:75:b3:4e:ad:d1:13:2a:2f:d6:2b:f4:02: 9b:5a:9c:69:94:b8:00:4a:6a:30:f5:0a:1f:d8:26: 88:c7:c4:e7:df:28:03:66:25:53:c5:73:ef:6b:df: d7:e8:15:16:67:0d:8f:12:6f:1b:5f:e1:57:44:0f: 87:a9:a2:55:af:0a:98:41:29:96:64:3f:de:32:41: ec:c0:ba:5f:8a:61:d9:ed:64:6e:8e:07:de:91:8b: f4:24:f8:40:1a:e2:6b:65:20:54:81:01:bd:73:d1: 58:8f:96:a5:bd:ec:db:a9:09:9b:fb:d4:88:75:68: 3c:1d:d9:7c:7f:6f:c2:6e:57:c4:23:cc:d7:25:8e: 55:83:44:9f:c3:aa:ab:0c:99:49:ff:e1:fc:b4:da: ba:02:db:07:81:29:7b:37:b2:f4:35:2a:e0:6f:ee: 8c:45:0d:3e:84:79:f4:9d:ea:4c:2c:ce:42:fa:a7: d3:b2:55:05:55:12:61:74:0f:3f:ba:1a:90:57:79: 86:b7:a6:22:40:7f:b4:69:ac:ed:dc:e1:71:87:32: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:5E:7E:26:C8:DA:2B:EE:87:95:18:A7:BE:E2:5B:81:E9:50:D4 X509v3 Authority Key Identifier: keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a0:16:ea:ed:24:d5:a0:88:49:b6:86:33:eb:23:e4:55:cc: 46:8c:e0:ad:8f:f3:66:ce:19:fb:fe:8e:b6:b9:20:3e:eb:f9: 03:86:1c:4f:a3:f8:b0:50:ea:1d:72:9a:d5:3b:b0:88:cf:69: 9d:5c:00:a0:6f:d1:ca:e8:8e:15:9f:15:0e:b2:92:05:2b:63: c1:83:37:2b:5a:68:40:06:38:ba:01:c8:52:4c:9f:e2:68:29: f8:8c:a3:cb:03:c5:7e:92:64:ca:78:7a:fc:60:84:77:ff:65: 93:09:3d:2d:23:04:d0:fe:85:2d:38:a4:0e:89:3a:f5:6f:5d: 47:af:2d:99:97:3b:f6:74:7e:67:1c:9a:dc:e4:08:c1:cb:6e: 79:ff:5a:39:dc:7d:09:02:8b:eb:56:e1:0d:11:02:dc:db:54: 2c:ec:2d:1e:7c:78:55:56:48:3d:a7:85:96:dc:3f:9a:61:d3: 60:de:97:e6:a8:7c:14:64:7b:dd:2b:88:44:18:b2:76:73:cc: 5a:b8:a3:91:bd:f5:73:ec:00:4d:68:42:b3:bd:a8:08:5d:38: 05:c3:cd:38:94:ff:9e:de:5c:d3:a5:a8:8e:57:2b:5e:fe:f5: c8:b0:37:6c:0b:f5:72:c4:99:d4:48:8c:84:3f:66:8e:ff:f4: 66:5e:fe:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCQjMxMTAvBgNVBAUTKDNDREY0M0Q3MTdGQzU4NDlGMjNBOTRFMjlBNzcyQjI4 QTVENzAxRTMwHhcNMjYwOTI2MjAxNTM0WhcNMjYxMDAzMjAxNTM0WjAYMRYwFAYD VQQDEw02YWI4MjdlNi1mNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Eyf+JlEa2tFjIKQPS5iPNoTLe2Kk29LsjIQWleHqSSyFMa01LSoeIbRFLi y6x1s06t0RMqL9Yr9AKbWpxplLgASmow9Qof2CaIx8Tn3ygDZiVTxXPva9/X6BUW Zw2PEm8bX+FXRA+HqaJVrwqYQSmWZD/eMkHswLpfimHZ7WRujgfekYv0JPhAGuJr ZSBUgQG9c9FYj5alvezbqQmb+9SIdWg8Hdl8f2/CblfEI8zXJY5Vg0Sfw6qrDJlJ /+H8tNq6AtsHgSl7N7L0NSrgb+6MRQ0+hHn0nepMLM5C+qfTslUFVRJhdA8/uhqQ V3mGt6YiQH+0aazt3OFxhzLoAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBkXn4m yNor7oeVGKe+4luB6VDUMB8GA1UdIwQYMBaAFDzfQ9cX/FhJ8jqU4pp3Kyil1wHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JCMy85NUFFQTlFOENC RTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdFbnlPcFRpbW5jcktLWFhB ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOOUQxeGY4V0VueU9wVGltbmNyS0tYWEFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JCMy85NUFFQTlFOENCRTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdF bnlPcFRpbW5jcktLWFhBZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPqAW6u0k1aCISbaGM+sj5FXMRozgrY/zZs4Z+/6OtrkgPuv5A4YcT6P4sFDq HXKa1TuwiM9pnVwAoG/RyuiOFZ8VDrKSBStjwYM3K1poQAY4ugHIUkyf4mgp+Iyj ywPFfpJkynh6/GCEd/9lkwk9LSME0P6FLTikDok69W9dR68tmZc79nR+Zxya3OQI wctuef9aOdx9CQKL61bhDREC3NtULOwtHnx4VVZIPaeFltw/mmHTYN6X5qh8FGR7 3SuIRBiydnPMWrijkb31c+wATWhCs72oCF04BcPNOJT/nt5c06WojlcrXv71yLA3 bAv1csSZ1EiMhD9mjv/0Zl7+IA== -----END CERTIFICATE-----Generated at Mon Sep 28 05:28:52 2026 by rpki-client