$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: 4er1NjPzcQ4ONRqOdLilyDAjVaCkke7VmRr7ZpIU7X8= Subject key identifier: D6:44:6F:89:47:4A:81:1D:DB:76:DC:01:A1:7C:3A:08:45:BE:FD:D9 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 23B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 2337 Signing time: Sun 20 Sep 2026 15:48:34 +0000 Manifest this update: Sun 20 Sep 2026 15:48:34 +0000 Manifest next update: Sun 27 Sep 2026 15:48:34 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: KNdeq2VUPzraCV047o+cB6pPfQva6KR2KOV09trH3Bs=) 2: 1wCS5DJcIinTxHbHRJ2-yCTbz5U.asa (hash: UC6v3B2MnVwTQPTxLuVGR2sUYP85iKwH8oYHkiiTra8=) 3: 80BFC9C0A69B11F19B5CE4323411F970.roa (hash: hSBb6yOl3I7oLDTq8wvA9Qk9AO6CNu5FP3RGDVCavF0=) 4: 268B977AA0B211F18E86806D5E11F970.roa (hash: q6uS83KtWRB+S8CNlYFejf8nUtq//hKO3iV9xGtCJh4=) 5: 99161C06ADC411F194F1D1A63711F970.roa (hash: GsotaUbH2sML4fG2Cc2b4rOqx2RgTKogQEdObQ+bT9w=) 6: D74CEB52A81B11F1B02B10086F11F970.roa (hash: M0cTyj4lFmPKhOXsfFgyoviHfDiXK423YeJJGnMTa4w=) 7: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=) 8: BCEB94DAA81A11F18448F1EC6E11F970.roa (hash: 7Ouv3JUrLICKOKUbAA1JzJHGvf72CwEZSx8VXOX0LQ0=) 9: 9EFE48D0A69B11F1A765D2433411F970.roa (hash: 2UrnpJXet7VCklAYIcXnXQOboG+3YKzzoeIW7h4GmNY=) 10: 3736866EA81B11F19B70C7FC6E11F970.roa (hash: Gy8zeWlYneBEMTPlG7Em3pA+12mNaAJULJr8YDWVCbA=) 11: 6DC8637AAAEE11F1832CC90C5111F970.roa (hash: kR6+8ndsB9zjZ4uRoK+mEqxx/f3Ivyfw5NM4XbETjFs=) 12: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9142 (0x23b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 20 15:48:34 2026 GMT Not After : Sep 27 15:48:34 2026 GMT Subject: CN=6ab00052-fd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:22:06:7d:0c:7a:ea:31:5b:0b:44:40:34: b2:f2:22:77:b7:b3:2e:6e:b3:f5:9a:0a:b5:c6:52: 85:27:94:49:f0:e5:94:7c:ea:f9:e1:59:03:21:f1: 0f:6d:b2:a7:62:a5:0a:ac:c0:ab:8c:3e:9b:fa:56: 88:06:96:8e:a7:8f:5e:9b:07:ac:82:7e:2f:73:7d: 5a:b1:04:36:dc:3e:f9:aa:ed:6c:d1:e8:c7:2d:50: d2:84:5c:73:47:f2:2b:f3:2b:80:93:42:cc:c5:73: 97:6c:9b:54:31:d0:ff:33:4f:f3:49:c1:6f:5e:3d: 55:01:df:23:77:af:34:e5:ce:9a:fc:77:97:20:f0: 49:b0:cf:15:b6:e0:14:db:4c:8d:15:a3:bb:74:41: a3:01:57:2d:50:9c:08:73:5a:92:48:30:c8:c7:7f: 5a:3e:eb:e2:3d:27:81:6b:d1:38:a1:47:29:39:02: e9:48:19:8c:22:3f:68:27:f8:67:ac:d5:34:b2:18: 34:4c:09:ef:7d:43:62:64:08:21:60:bb:26:a0:79: 16:c6:35:a0:d7:4d:00:3d:50:8e:36:66:5c:e9:ee: 8a:9a:dd:ed:03:e7:39:f9:a0:65:88:2a:62:af:f7: 7a:b2:8e:44:a3:4c:cd:71:53:bc:90:af:ae:55:83: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:6F:89:47:4A:81:1D:DB:76:DC:01:A1:7C:3A:08:45:BE:FD:D9 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:1f:fe:4d:1a:8d:e6:37:ee:f6:8e:32:ff:3e:c5:a1:89:61: a2:4b:bb:57:e0:03:96:56:06:3a:1d:14:3e:5e:41:ce:e7:aa: 9e:9b:97:be:b6:37:f5:3a:9e:b2:b5:13:66:ae:44:a0:13:2a: 51:2d:6e:cc:2d:1f:0d:65:2d:68:a5:d7:db:5f:11:14:5f:23: 5a:77:89:9f:99:98:0a:8d:8b:79:5c:6a:d7:21:b8:b2:9d:a2: 4a:74:e6:98:da:19:6a:dc:02:ce:17:e1:da:2e:a5:c5:be:24: 32:f2:ea:8c:39:8d:91:76:d9:aa:a4:ed:fb:71:c3:ce:d8:de: 31:7b:53:73:07:95:36:aa:74:14:b6:01:58:ea:f0:5c:c6:f7: 1a:0e:20:86:37:cb:90:38:0f:51:39:1a:3e:79:8e:87:2c:66: fb:03:9c:1c:e4:93:b5:47:64:ad:39:05:66:89:92:f6:1a:77: 21:9a:ea:75:00:06:ab:2c:ac:d9:7c:b9:2f:05:63:f1:c1:aa: b4:97:b6:30:3c:08:57:72:51:ce:ee:fa:f3:23:cf:be:01:0e: 9e:f2:00:26:67:5f:ab:c5:85:35:4e:89:66:1a:29:be:89:fa: 4a:fa:da:5e:78:e1:50:d0:57:83:54:c9:7e:f6:54:a3:57:66: 03:bf:46:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwOTIwMTU0ODM0WhcNMjYwOTI3MTU0ODM0WjAYMRYwFAYD VQQDEw02YWIwMDA1Mi1mZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+wiBn0MeuoxWwtEQDSy8iJ3t7MubrP1mgq1xlKFJ5RJ8OWUfOr54VkDIfEP bbKnYqUKrMCrjD6b+laIBpaOp49emwesgn4vc31asQQ23D75qu1s0ejHLVDShFxz R/Ir8yuAk0LMxXOXbJtUMdD/M0/zScFvXj1VAd8jd6805c6a/HeXIPBJsM8VtuAU 20yNFaO7dEGjAVctUJwIc1qSSDDIx39aPuviPSeBa9E4oUcpOQLpSBmMIj9oJ/hn rNU0shg0TAnvfUNiZAghYLsmoHkWxjWg100APVCONmZc6e6Kmt3tA+c5+aBliCpi r/d6so5Eo0zNcVO8kK+uVYOKOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZEb4lH SoEd23bcAaF8OghFvv3ZMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARx/+TRqN5jfu9o4y/z7FoYlhoku7V+ADllYGOh0UPl5BzueqnpuXvrY39Tqe srUTZq5EoBMqUS1uzC0fDWUtaKXX218RFF8jWneJn5mYCo2LeVxq1yG4sp2iSnTm mNoZatwCzhfh2i6lxb4kMvLqjDmNkXbZqqTt+3HDztjeMXtTcweVNqp0FLYBWOrw XMb3Gg4ghjfLkDgPUTkaPnmOhyxm+wOcHOSTtUdkrTkFZomS9hp3IZrqdQAGqyys 2Xy5LwVj8cGqtJe2MDwIV3JRzu768yPPvgEOnvIAJmdfq8WFNU6JZhopvon6Svra XnjhUNBXg1TJfvZUo1dmA79GgA== -----END CERTIFICATE-----Generated at Sun Sep 20 22:25:38 2026 by rpki-client