$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: MEkyrjswFfeoDYY6Z2vPs3V2VRoM1kctxucEX1HwI9E= Subject key identifier: F0:FA:0E:AB:23:97:F4:D2:89:F9:C5:09:5C:BF:A4:29:B8:67:A2:F7 Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 96 Signing time: Mon 21 Sep 2026 07:26:43 +0000 Manifest this update: Mon 21 Sep 2026 07:26:42 +0000 Manifest next update: Mon 28 Sep 2026 07:26:42 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: niSui7Ry6FtzwzKKS5B1Qv1YID48VTKL84yPzRIenL4=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Sep 21 07:26:42 2026 GMT Not After : Sep 28 07:26:42 2026 GMT Subject: CN=6ab0dc32-2294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:08:fd:00:a9:94:70:05:5b:56:64:03:37: 33:81:9c:fa:26:a1:2d:dd:ca:fa:19:84:5b:da:03: 7c:d4:59:64:4b:18:33:93:91:30:a9:80:5a:f5:7e: 2e:50:af:23:31:59:99:54:43:8f:28:a8:29:ff:5e: 2b:50:12:2c:53:c6:76:64:e3:27:82:4e:5d:45:6f: cf:54:dd:91:d6:c8:73:4f:da:53:c0:ed:9e:10:89: 10:f9:08:9a:ec:3d:86:03:ff:ae:9c:91:68:11:b9: 2d:06:ae:82:25:37:27:80:c9:db:39:f8:98:ca:f9: 97:2d:17:38:35:ee:d9:85:07:f3:bb:21:7b:93:f1: 3d:35:87:a2:9d:10:9f:95:22:4b:f9:65:0c:96:36: f5:80:91:ba:5f:26:25:46:b9:16:6d:4c:e5:06:6b: 07:4c:3f:f6:18:7b:bc:47:15:dd:be:b6:c8:7a:7c: 65:e6:90:0d:9d:e8:97:9b:3e:ac:df:32:ff:d5:85: af:67:b8:be:4e:ed:4c:e0:09:19:ca:d2:f2:ed:20: 1e:54:15:15:9c:53:d8:9f:5d:73:4a:77:37:99:bf: 5a:da:11:56:4b:3b:48:dc:93:9d:f2:d4:18:b0:c5: 2e:5f:5d:13:8f:dd:20:5a:68:fb:1f:7f:69:cc:17: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:0E:AB:23:97:F4:D2:89:F9:C5:09:5C:BF:A4:29:B8:67:A2:F7 X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d3:fa:28:4e:89:17:78:13:d9:28:66:74:1b:cc:a2:ac:68: 7c:6e:e5:98:fe:b1:eb:c9:d0:8e:d0:d9:28:32:f7:6d:0a:69: 29:40:d7:b8:ba:0a:de:fa:9f:56:0f:ba:c6:f9:9b:e0:e4:15: 63:d2:f5:a2:6e:0c:fc:28:ae:ce:06:3d:6e:09:4e:80:ec:f8: 9c:b9:82:19:9d:14:d0:38:2b:30:90:ea:d5:74:9e:2e:fe:b3: cc:5f:f1:0a:f6:0d:ea:16:76:b6:1d:87:1e:40:16:53:58:17: e0:38:c4:f7:1e:72:f3:5a:69:d6:1b:fb:32:b6:e3:28:b7:47: e8:58:60:77:ab:e3:b3:6d:92:fa:12:81:b9:96:75:17:50:9c: 2d:7b:6d:9c:c6:de:9b:62:71:e6:41:d0:81:b1:c2:34:37:95: cb:82:9f:1b:02:ef:25:e5:b3:53:5c:d0:e1:5c:8c:39:c4:e3: 35:cd:38:85:cc:37:df:74:56:5e:58:cd:3b:7c:67:92:55:9f: 9c:bb:fb:b8:13:cf:f6:fd:6a:d7:24:85:25:bd:26:fb:19:cc: f5:3c:77:ce:41:78:89:a6:98:5e:2e:a6:07:3a:fd:2d:ee:ba: d3:d8:f2:f9:83:7b:2f:b6:e7:9e:60:77:3f:22:4a:55:d2:43: d2:b5:56:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCMzkxMTAvBgNVBAUTKDcwRDhEODJCMjIxQTcxMjIwRUZENTgzRDkyRjczNjE3 NUU1RDAyRjEwHhcNMjYwOTIxMDcyNjQyWhcNMjYwOTI4MDcyNjQyWjAYMRYwFAYD VQQDEw02YWIwZGMzMi0yMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc8I/QCplHAFW1ZkAzczgZz6JqEt3cr6GYRb2gN81FlkSxgzk5EwqYBa9X4u UK8jMVmZVEOPKKgp/14rUBIsU8Z2ZOMngk5dRW/PVN2R1shzT9pTwO2eEIkQ+Qia 7D2GA/+unJFoEbktBq6CJTcngMnbOfiYyvmXLRc4Ne7ZhQfzuyF7k/E9NYeinRCf lSJL+WUMljb1gJG6XyYlRrkWbUzlBmsHTD/2GHu8RxXdvrbIenxl5pANneiXmz6s 3zL/1YWvZ7i+Tu1M4AkZytLy7SAeVBUVnFPYn11zSnc3mb9a2hFWSztI3JOd8tQY sMUuX10Tj90gWmj7H39pzBcOPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPD6Dqsj l/TSifnFCVy/pCm4Z6L3MB8GA1UdIwQYMBaAFHDY2CsiGnEiDv1YPZL3NhdeXQLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUIzOS81QUVGMjIyQ0Qy OTMxMUYwOENBNjVENzdDNEY5QUUwMi9jTmpZS3lJYWNTSU9fVmc5a3ZjMkYxNWRB dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUIzOS81QUVGMjIyQ0QyOTMxMUYwOENBNjVENzdDNEY5QUUwMi9jTmpZS3lJYWNT SU9fVmc5a3ZjMkYxNWRBdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9P6KE6JF3gT2ShmdBvMoqxofG7lmP6x68nQjtDZKDL3bQppKUDXuLoK3vqf Vg+6xvmb4OQVY9L1om4M/CiuzgY9bglOgOz4nLmCGZ0U0DgrMJDq1XSeLv6zzF/x CvYN6hZ2th2HHkAWU1gX4DjE9x5y81pp1hv7MrbjKLdH6Fhgd6vjs22S+hKBuZZ1 F1CcLXttnMbem2Jx5kHQgbHCNDeVy4KfGwLvJeWzU1zQ4VyMOcTjNc04hcw333RW XljNO3xnklWfnLv7uBPP9v1q1ySFJb0m+xnM9Tx3zkF4iaaYXi6mBzr9Le6609jy +YN7L7bnnmB3PyJKVdJD0rVWFA== -----END CERTIFICATE-----Generated at Mon Sep 21 23:27:58 2026 by rpki-client