$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft File: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json) Hash identifier: yY6o7LtVzcmZfPb/sveJe4ZZt9maEdAvOw6TR5fQqHw= Subject key identifier: 0C:0F:C9:6B:99:4F:E0:1A:56:C1:F1:23:48:9F:11:85:F3:24:33:FE Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70 Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70 Certificate serial: 157A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft Manifest number: 1563 Signing time: Sun 20 Sep 2026 16:46:32 +0000 Manifest this update: Sun 20 Sep 2026 16:46:31 +0000 Manifest next update: Sun 27 Sep 2026 16:46:31 +0000 Files and hashes: 1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: J2qVQLLKSKrSR96nFoKAEyUQnX9re4+jTjLDCIfZ3tc=) 2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5498 (0x157a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70 Validity Not Before: Sep 20 16:46:31 2026 GMT Not After : Sep 27 16:46:31 2026 GMT Subject: CN=6ab00de8-a1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:17:80:00:9b:5c:56:d0:c5:d3:75:ad:d5: 42:42:45:32:39:a6:9f:9c:72:55:59:57:40:8a:1e: 67:25:8e:17:23:13:1f:a6:fd:e2:16:5a:d9:b7:34: a6:54:05:53:17:f1:77:6c:e1:c5:39:4b:9e:c8:c3: 11:e2:4b:10:a7:fd:56:e2:f4:b8:7d:c9:28:81:2f: 6e:92:4a:01:fb:f9:c4:51:5f:00:66:89:7b:0c:31: 20:b1:a8:99:0e:31:c2:4d:41:51:44:72:3d:ca:3a: 26:db:30:51:df:2a:cb:8f:b3:c5:a3:9f:ca:f7:68: fc:0e:38:11:c1:ff:eb:ff:68:41:19:7e:cd:a5:5a: 6b:81:44:33:3b:83:be:f3:b7:da:a8:11:2a:3d:ca: f2:d3:df:2a:03:a1:7b:1d:5f:6a:23:a4:5f:f3:29: f4:85:3f:6a:75:d5:26:57:b2:74:e5:c9:da:c1:94: c7:61:b3:f5:dc:d9:a7:7c:04:e9:89:38:cb:ea:63: 27:49:56:4d:b5:c7:ee:5c:6b:ae:0a:c1:76:6f:ec: 12:7a:b0:5e:af:41:32:c2:b4:2d:f9:31:d1:63:20: 45:54:89:12:1a:f9:64:88:04:af:ab:b6:8d:87:c5: e0:b6:20:b2:11:25:64:d0:36:97:b5:cd:62:e6:b0: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:C9:6B:99:4F:E0:1A:56:C1:F1:23:48:9F:11:85:F3:24:33:FE X509v3 Authority Key Identifier: keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fa:27:ee:fb:d6:71:63:49:83:9a:3b:cb:35:3f:9d:b1:a1: dd:14:b3:12:37:d8:da:a7:bf:17:42:5c:3f:09:56:ad:32:31: 9c:55:07:c2:be:e2:5c:77:4a:eb:92:08:95:e5:f8:24:ba:99: bd:84:69:75:32:30:8f:a3:59:39:1b:09:9c:c9:52:d0:1b:8d: 98:68:84:6b:79:d8:74:6a:7d:99:42:c0:11:b3:22:61:fe:c1: 13:40:f3:86:07:0d:75:fd:0e:43:85:4b:54:f9:f7:c0:c2:76: 24:f0:4e:63:c0:34:31:72:4e:d3:6f:e5:3b:c9:05:0f:54:10: 49:aa:57:88:c4:16:fe:24:3d:28:dd:a1:ec:98:6c:9a:51:4f: d1:b2:12:5e:19:d1:c1:a9:93:b1:38:e2:18:3f:96:e7:27:77: d0:cf:05:a3:75:b4:5a:a7:13:88:fc:85:dd:0e:d9:76:dc:3e: 8d:d0:23:7b:a0:01:62:d7:ef:41:a2:3f:7c:ea:16:dc:2a:34: 16:29:f9:48:23:9f:cb:9c:38:9b:cc:b6:98:fc:aa:b8:dc:0b: 05:6b:2a:3b:aa:86:1e:42:0b:3b:2a:03:9c:05:9a:64:73:fa: 5d:fd:1a:26:26:d8:8c:1e:be:7a:8e:c3:b4:7c:9f:90:b9:5b: 9f:5c:5f:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKDZCNTY3Qzg0M0U0MjUyM0UwRTVCNjRGNjRBMEYyQUUw NTUxN0JCNzAwHhcNMjYwOTIwMTY0NjMxWhcNMjYwOTI3MTY0NjMxWjAYMRYwFAYD VQQDEw02YWIwMGRlOC1hMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLUXgACbXFbQxdN1rdVCQkUyOaafnHJVWVdAih5nJY4XIxMfpv3iFlrZtzSm VAVTF/F3bOHFOUueyMMR4ksQp/1W4vS4fckogS9ukkoB+/nEUV8AZol7DDEgsaiZ DjHCTUFRRHI9yjom2zBR3yrLj7PFo5/K92j8DjgRwf/r/2hBGX7NpVprgUQzO4O+ 87faqBEqPcry098qA6F7HV9qI6Rf8yn0hT9qddUmV7J05cnawZTHYbP13NmnfATp iTjL6mMnSVZNtcfuXGuuCsF2b+wSerBer0EywrQt+THRYyBFVIkSGvlkiASvq7aN h8XgtiCyESVk0DaXtc1i5rAxmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwPyWuZ T+AaVsHxI0ifEYXzJDP+MB8GA1UdIwQYMBaAFGtWfIQ+QlI+Dltk9koPKuBVF7tw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC84RUY0MkE0Njc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi9hMVo4aEQ1Q1VqNE9XMlQyU2c4cTRGVVh1 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ExWjhoRDVDVWo0T1cyVDJTZzhxNEZVWHUzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC84RUY0MkE0Njc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi9hMVo4aEQ1Q1Vq NE9XMlQyU2c4cTRGVVh1M0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPon7vvWcWNJg5o7yzU/nbGh3RSzEjfY2qe/F0JcPwlWrTIxnFUHwr7iXHdK 65IIleX4JLqZvYRpdTIwj6NZORsJnMlS0BuNmGiEa3nYdGp9mULAEbMiYf7BE0Dz hgcNdf0OQ4VLVPn3wMJ2JPBOY8A0MXJO02/lO8kFD1QQSapXiMQW/iQ9KN2h7Jhs mlFP0bISXhnRwamTsTjiGD+W5yd30M8Fo3W0WqcTiPyF3Q7Zdtw+jdAje6ABYtfv QaI/fOoW3Co0Fin5SCOfy5w4m8y2mPyquNwLBWsqO6qGHkILOyoDnAWaZHP6Xf0a JibYjB6+eo7DtHyfkLlbn1xfZQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:33:33 2026 by rpki-client