$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: XNU/ID7vIv71YXta+kjQUBCrYnPCeMXS7IqyWZwKYPY= Subject key identifier: 90:05:96:19:AE:CE:1C:BF:6D:8C:BF:C4:33:3D:57:54:F9:97:D6:3C Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 017D Signing time: Mon 21 Sep 2026 04:40:39 +0000 Manifest this update: Mon 21 Sep 2026 04:40:39 +0000 Manifest next update: Mon 28 Sep 2026 04:40:39 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: bGRRSojRiYlRZW9a0jck8//XyYbuYwiR6m3D9b47/z8=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: of9gDmyx98htPYcM2lAvW1XGnxUh1bmJa4MFK/pfI3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Sep 21 04:40:39 2026 GMT Not After : Sep 28 04:40:39 2026 GMT Subject: CN=6ab0b547-aeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:30:f4:60:7c:87:f2:6a:5c:d4:ec:c1:30: 91:50:d8:74:b2:ef:df:8b:d4:1b:33:6e:0d:c7:dd: 29:ab:78:95:68:46:f6:42:f9:0c:32:cd:8d:ea:f5: a6:b6:f4:0c:a6:df:99:41:c7:e5:4e:74:d3:04:4a: b5:51:54:1a:75:6b:1b:6e:de:8d:02:6a:b3:92:e1: a2:3a:d0:49:d7:aa:88:de:45:58:8f:ee:b1:d7:4e: 1d:d3:5b:73:da:33:fd:65:77:3b:18:00:3a:a3:cb: d2:a4:cf:df:08:0b:20:83:10:8f:a5:81:80:e8:80: a3:7f:38:63:89:11:de:63:37:0e:8c:ed:6a:57:bb: b5:8b:b4:4c:e3:67:83:24:21:39:22:00:76:15:f3: 50:8c:37:f8:49:c1:e6:5c:26:8c:43:97:45:0d:05: 36:3e:6d:60:be:10:24:5d:56:f5:f4:85:4c:d8:31: 95:b1:ed:73:17:a0:c5:1c:d6:c8:0c:70:88:5d:b3: e3:b0:ae:8b:29:39:c0:20:92:ba:dc:27:81:9b:c7: 04:4c:71:1d:ff:20:03:45:1f:bc:4f:aa:71:99:1f: 65:d7:6d:c4:1e:7c:ef:73:66:fc:13:3c:6e:04:72: 16:f6:ee:4c:44:d2:a0:c7:41:f7:68:81:09:ad:0f: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:96:19:AE:CE:1C:BF:6D:8C:BF:C4:33:3D:57:54:F9:97:D6:3C X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:32:09:8e:17:f2:df:4d:59:bd:e5:c8:d4:0f:92:fe:4e:f8: 0d:17:91:78:ca:0e:30:ef:ab:f6:fa:98:2e:59:50:e7:32:47: 37:42:29:53:c2:41:db:87:d5:ab:a7:14:79:00:1e:6a:4a:e3: 83:ab:fb:62:2d:a0:b7:26:02:77:25:e9:a6:7f:3e:19:ed:ef: 9e:dd:d8:00:a8:37:db:14:d0:4a:a5:49:f9:7c:c5:a3:cb:4c: 57:38:22:d3:80:48:7d:e6:ef:7d:47:aa:3e:18:4a:e0:2c:13: 34:4f:d8:ba:6c:0b:f4:7d:39:91:a4:d4:09:04:03:5f:51:32: 58:24:eb:6e:41:5d:a3:9e:cc:fe:cc:88:a8:bb:d9:8a:4a:18: 7e:b6:52:1a:cf:ab:82:d6:b9:a0:73:29:55:f7:70:4a:0b:58: 0f:a6:e0:73:59:db:ab:d6:bf:2e:13:73:4f:91:5e:bc:23:27: f9:fb:8e:68:70:17:2d:70:36:aa:b0:83:30:99:86:6c:83:64: 6c:69:be:13:41:8d:7f:61:91:fd:80:f5:05:87:e7:aa:48:09: 47:1d:c9:91:1f:8f:ec:01:ca:d1:91:5f:0a:00:49:83:6b:78: 81:75:24:47:cd:14:b9:41:40:14:f0:38:cd:91:be:3b:21:e6: c0:07:08:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjYwOTIxMDQ0MDM5WhcNMjYwOTI4MDQ0MDM5WjAYMRYwFAYD VQQDEw02YWIwYjU0Ny1hZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwEw9GB8h/JqXNTswTCRUNh0su/fi9QbM24Nx90pq3iVaEb2QvkMMs2N6vWm tvQMpt+ZQcflTnTTBEq1UVQadWsbbt6NAmqzkuGiOtBJ16qI3kVYj+6x104d01tz 2jP9ZXc7GAA6o8vSpM/fCAsggxCPpYGA6ICjfzhjiRHeYzcOjO1qV7u1i7RM42eD JCE5IgB2FfNQjDf4ScHmXCaMQ5dFDQU2Pm1gvhAkXVb19IVM2DGVse1zF6DFHNbI DHCIXbPjsK6LKTnAIJK63CeBm8cETHEd/yADRR+8T6pxmR9l123EHnzvc2b8Ezxu BHIW9u5MRNKgx0H3aIEJrQ+KbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAFlhmu zhy/bYy/xDM9V1T5l9Y8MB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVDIJjhfy301ZveXI1A+S/k74DReReMoOMO+r9vqYLllQ5zJHN0IpU8JB24fV q6cUeQAeakrjg6v7Yi2gtyYCdyXppn8+Ge3vnt3YAKg32xTQSqVJ+XzFo8tMVzgi 04BIfebvfUeqPhhK4CwTNE/YumwL9H05kaTUCQQDX1EyWCTrbkFdo57M/syIqLvZ ikoYfrZSGs+rgta5oHMpVfdwSgtYD6bgc1nbq9a/LhNzT5FevCMn+fuOaHAXLXA2 qrCDMJmGbINkbGm+E0GNf2GR/YD1BYfnqkgJRx3JkR+P7AHK0ZFfCgBJg2t4gXUk R80UuUFAFPA4zZG+OyHmwAcIkA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:58 2026 by rpki-client