$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: V4PgshvVHNF0qR+HNes52ije+iBl+AlcnmUYWYsNsms= Subject key identifier: 6F:41:39:BA:AD:61:41:43:FF:B5:2A:1B:6D:78:C5:DB:C7:A4:DC:FD Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 23BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 233C Signing time: Sat 26 Sep 2026 15:52:14 +0000 Manifest this update: Sat 26 Sep 2026 15:52:13 +0000 Manifest next update: Sat 03 Oct 2026 15:52:13 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: 325jthW63cQ2VsTYbWjuyc3Nn9ay7GaC6xgmkGoLauA=) 2: 3736866EA81B11F19B70C7FC6E11F970.roa (hash: Gy8zeWlYneBEMTPlG7Em3pA+12mNaAJULJr8YDWVCbA=) 3: 1wCS5DJcIinTxHbHRJ2-yCTbz5U.asa (hash: UC6v3B2MnVwTQPTxLuVGR2sUYP85iKwH8oYHkiiTra8=) 4: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=) 5: 80BFC9C0A69B11F19B5CE4323411F970.roa (hash: 8/HAjBQTXiiKjytmMEGO6uQeJaXV7C2Sr0uEKDI8Z9Q=) 6: D74CEB52A81B11F1B02B10086F11F970.roa (hash: M0cTyj4lFmPKhOXsfFgyoviHfDiXK423YeJJGnMTa4w=) 7: 6DC8637AAAEE11F1832CC90C5111F970.roa (hash: kR6+8ndsB9zjZ4uRoK+mEqxx/f3Ivyfw5NM4XbETjFs=) 8: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) 9: 99161C06ADC411F194F1D1A63711F970.roa (hash: GsotaUbH2sML4fG2Cc2b4rOqx2RgTKogQEdObQ+bT9w=) 10: BCEB94DAA81A11F18448F1EC6E11F970.roa (hash: 7Ouv3JUrLICKOKUbAA1JzJHGvf72CwEZSx8VXOX0LQ0=) 11: 9EFE48D0A69B11F1A765D2433411F970.roa (hash: 2UrnpJXet7VCklAYIcXnXQOboG+3YKzzoeIW7h4GmNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9148 (0x23bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 26 15:52:13 2026 GMT Not After : Oct 3 15:52:13 2026 GMT Subject: CN=6ab7ea2d-9a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:91:c9:d5:07:de:60:7d:c0:30:8b:84:72: 1e:4c:59:e8:5d:ba:44:ee:4a:8a:ae:9f:15:68:0b: f0:e6:3a:85:7c:0f:eb:ce:a0:9b:85:f6:58:19:e9: cd:4f:f0:4a:20:48:fd:1f:f2:6e:a7:d0:9d:e4:cc: d2:ee:5a:4e:d0:e5:07:59:35:ac:06:fb:30:b2:69: 5a:2b:39:fa:f6:ce:b7:b9:ac:49:92:e8:a2:3c:f6: c8:eb:e4:ff:f2:ca:27:59:38:dc:00:61:c3:51:b7: 04:8c:68:53:37:f3:a4:ab:87:8a:22:dc:5a:9b:fb: 99:d4:bf:da:fc:a7:d4:d5:a1:6f:68:1d:c4:a7:68: cd:f3:57:85:44:ef:cb:1c:51:40:dc:47:a9:8f:31: 2b:4f:6a:2a:a6:0f:ab:ee:eb:6f:b7:9f:d0:85:23: ea:36:81:df:1f:e8:6a:90:cb:04:a4:72:57:ca:27: d2:b1:2e:8c:ff:0d:22:3d:28:46:95:cb:54:78:02: 81:02:0f:81:26:bf:4d:77:4d:02:19:7c:a5:3d:4a: 85:2a:f8:91:34:fa:2a:29:2f:16:f0:ed:bb:33:fa: a4:f2:63:a0:46:c0:d0:bd:78:66:b9:04:91:a9:6e: 73:b7:9d:8a:11:78:c3:8f:f0:76:d8:0f:c6:bf:a9: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:39:BA:AD:61:41:43:FF:B5:2A:1B:6D:78:C5:DB:C7:A4:DC:FD X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:cd:5e:49:91:52:5b:56:6a:90:4b:3d:bb:8a:84:27:c9:d4: 6d:d4:8a:4c:11:d6:8e:e5:c3:10:4d:26:f1:60:f3:27:13:f6: 46:26:0c:3f:b8:f1:d7:ef:fb:92:93:ac:b5:3e:66:c4:da:e6: 99:7c:54:3b:ea:0a:16:4c:95:4b:26:2c:e6:c5:22:ce:db:29: ba:b3:c5:9d:31:8e:dc:3f:cf:45:93:36:a4:4b:7e:3f:1e:ec: f6:b4:21:96:b1:28:2b:64:93:f6:58:34:f9:77:53:2b:6f:3c: 06:a9:38:2e:e2:74:27:c0:0e:b7:5d:e0:b7:ce:0a:aa:4c:ae: 7a:cf:66:6b:c7:ff:b6:64:9f:28:70:e6:2e:9e:1b:a1:93:23: 9a:23:a2:91:a3:85:1f:e2:43:c7:1c:02:84:fd:ff:cf:b8:0e: 5a:3d:c4:54:ba:b5:e6:ce:4c:3a:59:f8:d7:4b:04:05:0c:31: 14:da:4a:c7:4a:93:f1:a1:f0:fd:cd:10:18:11:e4:c8:c2:dc: d1:df:57:2f:fb:ba:94:a0:c8:8c:94:9e:a4:c4:e2:92:8b:0d: 06:0f:ee:98:59:0d:ae:d6:a4:92:de:c1:39:8c:77:17:d8:b8: b1:63:e9:af:f9:73:a3:ef:5f:0f:0a:e2:a1:ae:8f:a7:f4:ea: 95:f7:ce:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwOTI2MTU1MjEzWhcNMjYxMDAzMTU1MjEzWjAYMRYwFAYD VQQDEw02YWI3ZWEyZC05YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+SRydUH3mB9wDCLhHIeTFnoXbpE7kqKrp8VaAvw5jqFfA/rzqCbhfZYGenN T/BKIEj9H/Jup9Cd5MzS7lpO0OUHWTWsBvswsmlaKzn69s63uaxJkuiiPPbI6+T/ 8sonWTjcAGHDUbcEjGhTN/Okq4eKItxam/uZ1L/a/KfU1aFvaB3Ep2jN81eFRO/L HFFA3EepjzErT2oqpg+r7utvt5/QhSPqNoHfH+hqkMsEpHJXyifSsS6M/w0iPShG lctUeAKBAg+BJr9Nd00CGXylPUqFKviRNPoqKS8W8O27M/qk8mOgRsDQvXhmuQSR qW5zt52KEXjDj/B22A/Gv6klzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9BObqt YUFD/7UqG214xdvHpNz9MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJM1eSZFSW1ZqkEs9u4qEJ8nUbdSKTBHWjuXDEE0m8WDzJxP2RiYMP7jx1+/7 kpOstT5mxNrmmXxUO+oKFkyVSyYs5sUiztspurPFnTGO3D/PRZM2pEt+Px7s9rQh lrEoK2ST9lg0+XdTK288Bqk4LuJ0J8AOt13gt84Kqkyues9ma8f/tmSfKHDmLp4b oZMjmiOikaOFH+JDxxwChP3/z7gOWj3EVLq15s5MOln410sEBQwxFNpKx0qT8aHw /c0QGBHkyMLc0d9XL/u6lKDIjJSepMTikosNBg/umFkNrtakkt7BOYx3F9i4sWPp r/lzo+9fDwrioa6Pp/TqlffONg== -----END CERTIFICATE-----Generated at Sat Sep 26 19:51:26 2026 by rpki-client