$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json) Hash identifier: tqQ0vTZTzINtN0A4REqr6q9mgqAPQZ4IPdlA1n+3QpQ= Subject key identifier: 18:F3:68:A1:E1:36:35:FE:24:DB:0D:B1:B9:93:F1:0C:0B:81:3E:3A Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft Manifest number: 02CF Signing time: Sat 19 Sep 2026 01:17:59 +0000 Manifest this update: Sat 19 Sep 2026 01:17:58 +0000 Manifest next update: Sat 26 Sep 2026 01:17:58 +0000 Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: gHNiJDw3VcDkruiUDVZhzDqyziYbkrkS3CTj/Gi5Rxs=) 2: A087AB8E760711F1A490B62F7BA30FBC.roa (hash: njzkkI9wNTfnXkYP55U43TrhfzxC/wfJfSoPFuagf0M=) 3: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: 3JVZTKT2bTQfUQV6fcjK9Pz/evus9qiGDaA8VU+l7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078 Validity Not Before: Sep 19 01:17:58 2026 GMT Not After : Sep 26 01:17:58 2026 GMT Subject: CN=6aade2c7-6201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:e0:21:dc:16:99:aa:08:93:f1:a1:ef:98: f0:e8:1d:3c:c1:fc:f4:f7:9c:e8:57:6b:70:a1:9e: 10:bf:9e:3c:fa:46:54:98:75:b5:00:94:44:5c:d6: 73:4c:0d:1f:e2:bb:b3:d3:6b:fc:0d:1e:e9:b9:41: fb:fe:3e:f4:ad:5a:7a:a4:05:84:6a:ab:d3:4d:f3: 11:46:83:05:68:c7:4c:1a:10:80:fa:79:7c:66:69: 29:89:99:b1:8e:1a:3b:a7:1f:64:db:95:b8:ff:23: 71:66:7e:e9:2c:a6:96:0c:50:ec:61:cb:ab:ec:ac: 93:02:af:7e:a5:4a:c3:53:97:b2:b2:01:17:b6:0d: 14:61:ec:6a:7d:9f:dd:2b:90:0f:fc:fd:49:35:85: 11:9a:97:55:2d:a5:9a:40:76:83:17:ca:48:53:cf: 5d:37:de:3c:f5:ab:79:ae:4e:8f:80:f8:56:e0:22: ed:b3:de:d0:76:a2:3b:0f:84:8b:e2:63:5b:80:d2: 10:94:33:7a:e7:12:a6:af:e7:7a:09:d3:d6:9d:9e: 02:3a:ae:32:75:22:a2:f1:e8:af:c1:16:5b:aa:23: 62:23:a2:02:ee:f8:7b:db:a1:17:46:83:5b:5b:56: af:74:9c:0c:33:c5:b4:89:d9:7d:c8:95:7a:c0:2f: 2d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F3:68:A1:E1:36:35:FE:24:DB:0D:B1:B9:93:F1:0C:0B:81:3E:3A X509v3 Authority Key Identifier: keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e1:a3:c7:28:db:8b:43:c9:3b:9a:10:c7:d4:1c:f9:f4:e5: b4:d1:68:e2:7d:b3:cc:a3:d2:9d:ea:37:ea:d4:65:e4:9d:7f: d1:88:6b:be:b8:86:44:6c:24:c3:8a:db:7a:f4:93:e7:af:df: c6:0a:22:f4:94:38:40:a8:c6:66:03:5c:27:37:9e:2e:0f:0d: da:53:7b:14:fb:59:25:ff:35:ab:2e:17:85:27:43:6a:09:97: f0:ba:77:3f:c4:a9:1c:72:bf:f7:49:53:3b:30:6a:88:41:82: cf:c9:65:a0:e3:b7:32:7c:8f:6c:97:ff:7e:ee:25:36:72:20: b6:9f:3c:7a:f7:98:8c:ec:fb:96:85:e7:ef:65:07:e9:2b:e1: 58:b4:db:7f:b6:2e:29:30:5b:97:4e:f0:cf:66:02:d5:0c:c8: 24:09:8d:82:19:02:1b:14:7e:68:1c:b5:37:ac:67:40:db:6a: 00:b5:31:f0:9f:c2:36:8e:22:e5:fb:80:21:96:4a:4d:c0:14: 91:bc:77:58:d4:9e:b8:47:3b:6c:84:a7:8e:9b:23:c2:6f:85: 40:e3:08:43:90:90:97:09:49:63:99:0d:e3:ce:56:bd:73:87: 66:7f:26:d9:5b:49:a1:4d:71:e2:0b:f7:1b:82:a1:9b:10:23: f0:8c:ce:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKDAzM0IzMTFENzU4RjA0MzQwQTIzRkIwODE2NzU5NTFD MjUwRTgwNzgwHhcNMjYwOTE5MDExNzU4WhcNMjYwOTI2MDExNzU4WjAYMRYwFAYD VQQDEw02YWFkZTJjNy02MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNjgIdwWmaoIk/Gh75jw6B08wfz095zoV2twoZ4Qv548+kZUmHW1AJREXNZz TA0f4ruz02v8DR7puUH7/j70rVp6pAWEaqvTTfMRRoMFaMdMGhCA+nl8ZmkpiZmx jho7px9k25W4/yNxZn7pLKaWDFDsYcur7KyTAq9+pUrDU5eysgEXtg0UYexqfZ/d K5AP/P1JNYURmpdVLaWaQHaDF8pIU89dN9489at5rk6PgPhW4CLts97QdqI7D4SL 4mNbgNIQlDN65xKmr+d6CdPWnZ4COq4ydSKi8eivwRZbqiNiI6IC7vh726EXRoNb W1avdJwMM8W0idl9yJV6wC8tZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjzaKHh NjX+JNsNsbmT8QwLgT46MB8GA1UdIwQYMBaAFAM7MR11jwQ0CiP7CBZ1lRwlDoB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9EQTRBNDNDMjZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJEUUtJX3NJRm5XVkhDVU9n SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F6c3hIWFdQQkRRS0lfc0lGbldWSENVT2dIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9EQTRBNDNDMjZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi9BenN4SFhXUEJE UUtJX3NJRm5XVkhDVU9nSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAeGjxyjbi0PJO5oQx9Qc+fTltNFo4n2zzKPSneo36tRl5J1/0YhrvriGRGwk w4rbevST56/fxgoi9JQ4QKjGZgNcJzeeLg8N2lN7FPtZJf81qy4XhSdDagmX8Lp3 P8SpHHK/90lTOzBqiEGCz8lloOO3MnyPbJf/fu4lNnIgtp88eveYjOz7loXn72UH 6SvhWLTbf7YuKTBbl07wz2YC1QzIJAmNghkCGxR+aBy1N6xnQNtqALUx8J/CNo4i 5fuAIZZKTcAUkbx3WNSeuEc7bISnjpsjwm+FQOMIQ5CQlwlJY5kN485WvXOHZn8m 2VtJoU1x4gv3G4KhmxAj8IzOXQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:44:08 2026 by rpki-client