$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: bIxtgmm89/fNObnYXnx9TvLPsQVB1pKyZIX/jQfCxMY= Subject key identifier: BA:4C:56:DA:78:E2:5D:0A:F2:57:CA:02:2D:66:F5:E3:B7:AE:F6:E0 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 04B7 Signing time: Sun 20 Sep 2026 23:44:59 +0000 Manifest this update: Sun 20 Sep 2026 23:44:58 +0000 Manifest next update: Sun 27 Sep 2026 23:44:58 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: DUvWGJ7u0Stl2hYFv1ncM0vr93ZAXGomVexAk2JtOlA=) 2: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: vKCveSRO1lmMSMepRjwFMH5hVO6szfi6cYdihL340nY=) 3: 0B5742C234AD11F1851A1E75B8833773.roa (hash: PgHm8kIkg0ILltI3AvO0evXqOsp4h8xbRfxnnSTT31c=) 4: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: kXLkRG4xYfLnM0J2YdWVuS+q04wt6hKsDNBBad1HXsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Sep 20 23:44:58 2026 GMT Not After : Sep 27 23:44:58 2026 GMT Subject: CN=6ab06ffb-baf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:d6:0d:c1:16:2e:c0:44:05:2a:c8:80:e1: 01:54:1a:bf:68:2e:aa:45:ef:2b:11:a3:f1:12:80: 1a:41:50:5c:f7:4b:0a:a5:29:be:b3:2c:d8:3c:00: f0:b8:99:b3:9f:bf:68:d7:b5:91:51:34:b5:19:e6: 71:60:2e:7f:57:a3:75:fa:ea:54:c1:d9:ce:ac:68: 20:2a:63:09:0e:82:f9:98:fc:71:75:a3:cf:1e:b8: 60:de:e2:e4:8b:75:41:d2:c7:fc:6d:26:98:75:7b: fe:63:04:33:c5:ad:e1:dc:42:7a:24:a2:05:65:77: 00:45:b0:aa:ad:ce:c0:30:2e:70:d0:e4:c2:bf:18: ae:f7:ea:5d:24:34:77:e4:44:de:77:60:27:56:f4: 0b:c9:10:82:67:24:ed:99:39:39:11:db:94:07:36: 73:26:53:82:89:4f:47:4e:77:08:a2:2f:07:19:ff: 0c:a1:79:85:e8:05:77:94:03:3e:50:2c:47:28:db: dc:24:aa:3c:02:fc:d1:c1:48:7c:b8:6d:b7:9f:03: e9:c1:06:28:5d:d8:48:4a:ef:70:c6:ae:61:dd:50: 47:de:d1:72:be:df:68:42:a6:d2:c8:8f:15:f2:da: 06:a5:26:df:f5:8d:cc:c9:12:05:4a:ea:b5:25:3f: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:56:DA:78:E2:5D:0A:F2:57:CA:02:2D:66:F5:E3:B7:AE:F6:E0 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:1d:8a:7a:40:9f:40:8d:2f:79:ea:2f:26:e1:11:b9:2f: 39:ad:1f:38:2c:b2:42:46:c0:b0:c5:5b:f4:8e:ab:7e:61:ab: cd:56:ff:a1:8a:03:ec:81:03:4d:27:fe:6e:2a:45:bd:a4:9c: 1b:bf:1b:94:55:16:73:c8:39:74:ce:1d:ad:23:07:16:86:3e: a8:4d:cf:64:7a:d1:3a:18:b3:58:58:93:c0:66:36:32:cc:29: 95:7c:2e:41:3e:ea:e3:fa:52:f4:89:df:e8:c6:9f:99:18:59: c1:b3:d5:76:81:ec:f8:4b:2d:03:19:bf:ec:8c:83:8f:c8:31: 5d:37:7f:3a:72:d8:72:69:ee:5c:ca:61:6c:61:6e:62:c3:98: 93:72:a8:15:33:f7:f7:ec:3b:c8:10:a3:0a:9e:69:d2:38:1d: 26:c7:c2:0a:af:ca:1c:76:0c:97:b9:92:b3:cc:d7:2a:ba:7d: 85:ce:97:69:7e:cf:86:f2:56:a5:6a:84:bf:05:e1:f6:51:b0: db:fe:20:78:00:53:f5:0b:1b:37:84:ee:fb:7c:c8:19:2f:23: 14:cc:59:1d:92:99:3c:12:ee:34:87:67:44:7e:e6:59:58:13: 4a:0e:09:77:ad:15:33:2e:f1:43:6f:1b:da:3b:6c:56:89:8f: aa:1e:85:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjYwOTIwMjM0NDU4WhcNMjYwOTI3MjM0NDU4WjAYMRYwFAYD VQQDEw02YWIwNmZmYi1iYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+3WDcEWLsBEBSrIgOEBVBq/aC6qRe8rEaPxEoAaQVBc90sKpSm+syzYPADw uJmzn79o17WRUTS1GeZxYC5/V6N1+upUwdnOrGggKmMJDoL5mPxxdaPPHrhg3uLk i3VB0sf8bSaYdXv+YwQzxa3h3EJ6JKIFZXcARbCqrc7AMC5w0OTCvxiu9+pdJDR3 5ETed2AnVvQLyRCCZyTtmTk5EduUBzZzJlOCiU9HTncIoi8HGf8MoXmF6AV3lAM+ UCxHKNvcJKo8AvzRwUh8uG23nwPpwQYoXdhISu9wxq5h3VBH3tFyvt9oQqbSyI8V 8toGpSbf9Y3MyRIFSuq1JT/T/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpMVtp4 4l0K8lfKAi1m9eO3rvbgMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW10dinpAn0CNL3nqLybhEbkvOa0fOCyyQkbAsMVb9I6rfmGrzVb/oYoD7IED TSf+bipFvaScG78blFUWc8g5dM4drSMHFoY+qE3PZHrROhizWFiTwGY2MswplXwu QT7q4/pS9Inf6MafmRhZwbPVdoHs+EstAxm/7IyDj8gxXTd/OnLYcmnuXMphbGFu YsOYk3KoFTP39+w7yBCjCp5p0jgdJsfCCq/KHHYMl7mSs8zXKrp9hc6XaX7PhvJW pWqEvwXh9lGw2/4geABT9QsbN4Tu+3zIGS8jFMxZHZKZPBLuNIdnRH7mWVgTSg4J d60VMy7xQ28b2jtsVomPqh6FpA== -----END CERTIFICATE-----Generated at Mon Sep 21 11:53:49 2026 by rpki-client