$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: A9gIJzjqV75DGfBqyeA2NKSLkoegbkwov/aLybLFD4Y= Subject key identifier: C1:1F:17:12:28:2F:3D:7D:86:B7:71:98:07:82:AB:83:2E:38:A2:95 Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: DC Signing time: Mon 21 Sep 2026 06:37:14 +0000 Manifest this update: Mon 21 Sep 2026 06:37:14 +0000 Manifest next update: Mon 28 Sep 2026 06:37:14 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: h8dfG5+0cmUbqqxiO1S7vmowecYiFwNBADVcIWjCQEw=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: 35lOaTv4zBGYaOAS37dvampCpt9ct0765AjmpO5yqTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Sep 21 06:37:14 2026 GMT Not After : Sep 28 06:37:14 2026 GMT Subject: CN=6ab0d09a-599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:94:49:27:08:86:7f:00:ac:bd:e3:8f:7a: 01:0f:c1:09:1b:75:ef:68:2c:22:f9:3f:d4:8d:51: 31:5c:44:21:04:23:8c:6b:79:f6:62:cf:5e:62:e5: 6b:c3:a4:00:d6:6d:f5:83:fa:e9:69:b8:a0:c4:03: 71:49:be:ba:dd:77:9e:b7:1b:02:8a:37:a7:69:97: ec:10:c4:45:d8:b3:b3:53:9a:e3:ea:12:fe:70:f7: 68:f8:2f:03:52:35:46:fd:c1:98:1e:26:78:92:83: c1:6b:77:e1:2a:2c:42:7b:ac:8e:a9:b8:60:fc:a5: e6:23:df:92:7e:d6:52:d1:96:df:b5:b6:ab:4b:61: 94:fe:cb:33:f0:b9:e3:8a:0a:80:00:a8:d8:06:94: 05:2b:26:22:4d:cd:41:e8:d5:24:df:20:b4:6c:05: 76:97:d6:aa:e2:3b:e5:26:95:ab:29:69:5d:0a:b4: fe:6d:c3:4b:ee:cd:07:d9:fd:02:58:fc:f2:a4:a4: 30:9a:09:c8:10:60:47:a9:5c:27:cf:d5:c0:31:d7: 0d:a7:2f:af:c3:48:1f:29:5f:d6:1c:09:04:1e:89: c9:71:77:e6:b5:8e:3a:7d:f3:5c:0b:c1:c9:82:14: 49:12:14:4e:38:0d:ae:8b:a5:ec:23:cc:ad:95:a4: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:17:12:28:2F:3D:7D:86:B7:71:98:07:82:AB:83:2E:38:A2:95 X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:cc:33:80:44:36:d1:09:d2:c2:24:b4:c7:14:71:84:31: cd:fb:e5:3f:46:e1:48:01:52:93:a3:d0:c4:a1:74:b8:15:05: fa:8b:d8:e1:da:d2:45:fe:9b:a6:85:c6:c9:d3:24:c1:95:04: 62:97:04:2e:9d:ba:17:68:76:70:00:29:47:65:ac:0d:a2:79: bf:cc:1d:bf:4d:42:6a:26:77:a9:85:d3:19:18:6b:11:64:79: 03:13:6d:c5:0c:8f:51:09:ec:a3:80:83:c7:df:6f:f7:6d:9a: 98:f6:5c:29:36:1f:58:e6:81:5e:38:a0:4b:72:ec:7f:4b:bf: f4:47:ac:bb:b1:9b:8a:37:29:93:94:89:83:f8:51:13:2f:c4: 08:dd:7e:be:b7:0a:36:80:78:32:4f:ee:86:7a:e2:cd:96:b5: 2c:42:9e:87:ee:40:ef:cb:41:f6:a9:db:b7:b3:f0:0b:05:9c: 8a:77:85:0b:e9:74:e8:f2:db:ea:4c:a9:59:62:75:1c:57:3a: b2:3f:4c:57:84:b4:1e:62:aa:68:59:cb:48:f6:5d:4c:c0:f6: eb:a5:8c:fa:00:a1:54:2b:2a:85:86:be:5a:42:58:f6:5d:19: 0c:a8:3a:c2:05:1a:4e:13:43:94:a0:f9:84:3b:9e:3f:62:08: ff:09:52:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI4MjAxMTAvBgNVBAUTKEZDQUM2RkE4MzFFOEY1QTI4NDEzNEM5NUE4RDAyMEZD QkM4RUM5RjIwHhcNMjYwOTIxMDYzNzE0WhcNMjYwOTI4MDYzNzE0WjAYMRYwFAYD VQQDEw02YWIwZDA5YS01OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUSUSScIhn8ArL3jj3oBD8EJG3XvaCwi+T/UjVExXEQhBCOMa3n2Ys9eYuVr w6QA1m31g/rpabigxANxSb663XeetxsCijenaZfsEMRF2LOzU5rj6hL+cPdo+C8D UjVG/cGYHiZ4koPBa3fhKixCe6yOqbhg/KXmI9+SftZS0ZbftbarS2GU/ssz8Lnj igqAAKjYBpQFKyYiTc1B6NUk3yC0bAV2l9aq4jvlJpWrKWldCrT+bcNL7s0H2f0C WPzypKQwmgnIEGBHqVwnz9XAMdcNpy+vw0gfKV/WHAkEHonJcXfmtY46ffNcC8HJ ghRJEhROOA2ui6XsI8ytlaRuPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEfFxIo Lz19hrdxmAeCq4MuOKKVMB8GA1UdIwQYMBaAFPysb6gx6PWihBNMlajQIPy8jsny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjgyMC85MEE4QjA4QTY4 NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlhS0VFMHlWcU5BZ19MeU95 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjgyMC85MEE4QjA4QTY4NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlh S0VFMHlWcU5BZ19MeU95ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVz3MM4BENtEJ0sIktMcUcYQxzfvlP0bhSAFSk6PQxKF0uBUF+ovY4drSRf6b poXGydMkwZUEYpcELp26F2h2cAApR2WsDaJ5v8wdv01CaiZ3qYXTGRhrEWR5AxNt xQyPUQnso4CDx99v922amPZcKTYfWOaBXjigS3Lsf0u/9Eesu7Gbijcpk5SJg/hR Ey/ECN1+vrcKNoB4Mk/uhnrizZa1LEKeh+5A78tB9qnbt7PwCwWcineFC+l06PLb 6kypWWJ1HFc6sj9MV4S0HmKqaFnLSPZdTMD266WM+gChVCsqhYa+WkJY9l0ZDKg6 wgUaThNDlKD5hDueP2II/wlScg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:52:01 2026 by rpki-client