$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: kKLmJRMoIprWNc6CsrkfSN2FInUBG9Nu+YzpbmOq5Eg= Subject key identifier: 99:F3:53:F3:47:61:58:D9:A1:A5:FA:94:ED:DB:53:23:26:F8:F8:51 Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 31B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 31A8 Signing time: Sun 20 Sep 2026 15:23:40 +0000 Manifest this update: Sun 20 Sep 2026 15:23:40 +0000 Manifest next update: Sun 27 Sep 2026 15:23:40 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: Yjnj2w46Gv52wjo1yLbJ45uFKYiV2Zk0udDPJkr1R2s=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: Ws4kXOycMxQBTaXBEjmznoXyRi5PYCjorSZYTJcdYNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12720 (0x31b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: Sep 20 15:23:40 2026 GMT Not After : Sep 27 15:23:40 2026 GMT Subject: CN=6aaffa7c-6650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:1d:b6:8e:f7:93:e3:2a:f6:1d:a1:1d:0d: 3d:25:fa:05:c2:03:16:4a:a7:79:35:b9:7b:2a:d7: 9a:c7:d9:e7:e2:7d:e4:ec:30:03:75:da:35:36:7f: 49:f3:8a:6d:36:cc:b6:d8:7a:e1:46:ba:17:8d:90: e5:f1:4d:d9:c3:22:30:9f:fc:5b:5d:9a:56:bb:31: a1:8b:7b:bb:02:95:54:5c:fd:53:41:2f:73:1b:2c: 74:a1:03:14:e6:0f:a6:3b:7b:2c:4f:6b:4b:55:e8: a2:e1:56:7f:d4:ce:0f:e6:28:42:f0:9c:38:2f:81: 39:c1:df:be:dd:f2:d0:a3:f7:f5:82:2a:96:0b:7d: 84:22:33:9d:15:89:e8:38:62:de:cd:4e:10:04:d4: 2e:4b:89:e5:09:47:2e:64:0d:e9:a4:4c:d9:63:10: ac:a8:07:1a:8d:a0:4d:ba:86:ee:07:0a:1a:51:ec: ba:36:09:7c:1e:0a:93:ec:39:60:31:7f:13:83:ab: a3:43:dc:4c:9a:42:c5:e2:5d:51:d4:52:b1:83:af: d5:97:be:86:56:bd:72:88:eb:b9:4b:ff:75:ae:34: bc:f8:9e:0d:7b:48:96:18:51:13:bc:5f:b6:8c:5d: 8d:83:ae:08:7e:e9:41:e0:1b:a0:6a:58:11:ec:2f: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F3:53:F3:47:61:58:D9:A1:A5:FA:94:ED:DB:53:23:26:F8:F8:51 X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8c:6d:73:05:83:74:c5:7f:81:e4:a3:ab:cb:1b:6e:f4:d8: 06:60:b6:31:10:ea:81:ab:d7:cd:31:76:db:05:ce:e2:86:27: 1f:f4:ce:96:40:47:0c:60:e7:6c:3d:32:35:cb:0b:29:03:4a: 67:35:77:e6:dc:7d:aa:2a:8a:e3:23:07:04:d7:7c:4a:aa:4f: 44:93:c1:28:31:d0:98:1e:82:44:c6:e6:6d:5a:1e:a9:18:46: 1f:ff:80:5a:da:7e:f1:ac:bd:14:ad:e4:b4:28:96:f3:c3:50: 3b:50:d5:5e:25:98:9e:56:c5:54:2c:86:c9:07:50:7b:9f:77: de:b8:67:ab:56:fa:1d:a0:90:27:6d:35:84:aa:80:5b:d8:e7: 40:30:c6:14:b1:02:a3:9c:1e:58:02:7b:cc:2a:73:9d:50:55: 8d:4e:f9:81:1e:5f:a3:5f:8d:49:fe:1b:8e:90:be:4b:c6:32: db:c7:42:5f:79:a1:bf:54:6a:a8:7d:fd:3c:57:d1:e8:05:f3: 3b:1c:5d:c5:bc:55:5a:f7:2a:bc:74:39:50:64:c9:34:e6:3c: dc:12:2d:d2:55:8b:a2:92:d6:50:be:f9:61:b4:96:57:7d:e5: c5:1a:36:82:08:af:48:f9:25:a9:3a:bf:66:8d:7b:2b:6d:9a: 8d:55:a7:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjYwOTIwMTUyMzQwWhcNMjYwOTI3MTUyMzQwWjAYMRYwFAYD VQQDEw02YWFmZmE3Yy02NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs98dto73k+Mq9h2hHQ09JfoFwgMWSqd5Nbl7Kteax9nn4n3k7DADddo1Nn9J 84ptNsy22HrhRroXjZDl8U3ZwyIwn/xbXZpWuzGhi3u7ApVUXP1TQS9zGyx0oQMU 5g+mO3ssT2tLVeii4VZ/1M4P5ihC8Jw4L4E5wd++3fLQo/f1giqWC32EIjOdFYno OGLezU4QBNQuS4nlCUcuZA3ppEzZYxCsqAcajaBNuobuBwoaUey6Ngl8HgqT7Dlg MX8Tg6ujQ9xMmkLF4l1R1FKxg6/Vl76GVr1yiOu5S/91rjS8+J4Ne0iWGFETvF+2 jF2Ng64IfulB4BugalgR7C+xzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnzU/NH YVjZoaX6lO3bUyMm+PhRMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYxtcwWDdMV/geSjq8sbbvTYBmC2MRDqgavXzTF22wXO4oYnH/TOlkBHDGDn bD0yNcsLKQNKZzV35tx9qiqK4yMHBNd8SqpPRJPBKDHQmB6CRMbmbVoeqRhGH/+A Wtp+8ay9FK3ktCiW88NQO1DVXiWYnlbFVCyGyQdQe5933rhnq1b6HaCQJ201hKqA W9jnQDDGFLECo5weWAJ7zCpznVBVjU75gR5fo1+NSf4bjpC+S8Yy28dCX3mhv1Rq qH39PFfR6AXzOxxdxbxVWvcqvHQ5UGTJNOY83BIt0lWLopLWUL75YbSWV33lxRo2 ggivSPklqTq/Zo17K22ajVWnow== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:02 2026 by rpki-client