$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: XIF2dXve5Sv6EtQ4VQTg0/ygPA0oIEzj1qfL11PryC0= Subject key identifier: C3:57:21:CF:E1:3A:DA:D2:91:35:11:81:36:E2:7A:35:E1:40:A8:C7 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 21F5 Signing time: Sun 20 Sep 2026 15:51:24 +0000 Manifest this update: Sun 20 Sep 2026 15:51:23 +0000 Manifest next update: Sun 27 Sep 2026 15:51:23 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: PDlqj8dUnXsW/V/T0Z3a9xaIOI5kctYvo9gFkU0KZ1Q=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8708 (0x2204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Sep 20 15:51:23 2026 GMT Not After : Sep 27 15:51:23 2026 GMT Subject: CN=6ab000fc-c1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:25:16:c2:4f:74:2b:b2:32:1e:73:c0:fe: 0c:7c:c8:d7:51:2a:5c:a9:be:ce:8c:98:07:22:b7: b7:d7:b3:5e:49:67:59:22:b8:a2:54:8b:dd:12:db: b1:e4:bc:68:37:a6:28:eb:36:c1:6c:82:fe:79:2a: df:9e:e4:b6:fa:bd:f3:c7:78:3c:64:8a:c1:1c:06: 38:cf:4c:15:4f:4d:6b:68:f1:ae:d8:af:a9:35:3a: e2:55:fa:56:b9:d7:06:f8:36:a7:94:64:66:37:79: 0f:4e:bf:ee:a8:ee:e9:f1:4f:fd:d9:38:db:45:40: 99:23:40:41:fb:b1:aa:1c:31:a7:9a:db:68:13:a7: 19:16:ec:e1:82:5f:50:9f:db:2c:63:40:b3:11:e9: 26:b4:19:c4:fd:a2:80:20:cd:99:07:93:00:f8:39: ef:15:5e:e9:52:22:f3:99:2a:c5:cc:49:f2:82:a5: e7:bc:b5:b3:30:5b:3d:47:41:a4:5f:75:17:87:e5: 00:04:35:bd:c2:70:dc:21:4d:61:6e:1e:52:bb:25: 31:8d:a1:54:5b:b4:12:30:8c:b0:8d:65:0b:3a:87: ce:51:7d:9d:05:b6:d4:dd:e7:fb:39:37:37:e7:f7: 22:38:36:48:b1:2f:b6:14:f3:6f:17:ee:35:41:42: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:21:CF:E1:3A:DA:D2:91:35:11:81:36:E2:7A:35:E1:40:A8:C7 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f4:cb:54:4b:58:7e:3a:5b:f1:44:84:e6:a3:8b:7e:c7:7f: 6b:4e:4e:7f:95:e9:72:82:dd:d9:93:66:b8:04:70:02:ef:31: 8f:da:ed:99:41:e2:19:ff:3c:ab:68:28:9b:7b:d7:80:11:4b: d9:a8:e7:13:b8:d8:5a:6a:24:10:9f:73:2b:56:cf:4d:3d:ad: da:d6:09:66:ae:75:81:5c:e7:89:37:3e:fd:86:50:16:01:22: d6:81:65:0b:dc:82:0f:6d:23:01:8f:0b:3a:13:49:83:45:1a: 68:12:92:e6:0e:d1:ef:02:cb:22:68:c7:77:7e:f7:df:99:dd: a4:25:ad:5a:67:f1:01:27:66:e5:ff:b0:f3:1d:f4:92:5c:a2: 4b:03:2d:47:b8:f1:f9:d8:dd:55:c9:8c:83:c5:3b:6c:18:f0: f2:4f:58:38:8f:e7:ff:1a:cf:26:c4:95:f8:88:16:cb:2f:75: fb:e3:68:ec:89:4c:9c:40:4f:75:83:3a:f5:e4:69:b5:e0:fc: 6f:7e:2d:43:28:5c:ae:40:74:07:5a:d3:f4:6a:ae:6b:d3:61: cf:69:da:8d:66:3b:14:14:05:66:08:3b:2c:e1:b3:0d:13:1c: a5:69:a8:84:3d:9c:a8:6e:84:b0:84:f0:08:30:5c:6f:b1:13: 19:d5:1a:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjYwOTIwMTU1MTIzWhcNMjYwOTI3MTU1MTIzWjAYMRYwFAYD VQQDEw02YWIwMDBmYy1jMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc4lFsJPdCuyMh5zwP4MfMjXUSpcqb7OjJgHIre317NeSWdZIriiVIvdEtux 5LxoN6Yo6zbBbIL+eSrfnuS2+r3zx3g8ZIrBHAY4z0wVT01raPGu2K+pNTriVfpW udcG+DanlGRmN3kPTr/uqO7p8U/92TjbRUCZI0BB+7GqHDGnmttoE6cZFuzhgl9Q n9ssY0CzEekmtBnE/aKAIM2ZB5MA+DnvFV7pUiLzmSrFzEnygqXnvLWzMFs9R0Gk X3UXh+UABDW9wnDcIU1hbh5SuyUxjaFUW7QSMIywjWULOofOUX2dBbbU3ef7OTc3 5/ciODZIsS+2FPNvF+41QUJSlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNXIc/h OtrSkTURgTbiejXhQKjHMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqvTLVEtYfjpb8USE5qOLfsd/a05Of5XpcoLd2ZNmuARwAu8xj9rtmUHiGf88 q2gom3vXgBFL2ajnE7jYWmokEJ9zK1bPTT2t2tYJZq51gVzniTc+/YZQFgEi1oFl C9yCD20jAY8LOhNJg0UaaBKS5g7R7wLLImjHd37335ndpCWtWmfxASdm5f+w8x30 klyiSwMtR7jx+djdVcmMg8U7bBjw8k9YOI/n/xrPJsSV+IgWyy91++No7IlMnEBP dYM69eRpteD8b34tQyhcrkB0B1rT9Gqua9Nhz2najWY7FBQFZgg7LOGzDRMcpWmo hD2cqG6EsITwCDBcb7ETGdUarw== -----END CERTIFICATE-----Generated at Mon Sep 21 07:57:27 2026 by rpki-client