$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: JkeCeiVcQ0f3evCw1bQjurbXMg33wQfbniT+czsuMtw= Subject key identifier: A1:E8:D8:3E:71:A7:13:EB:02:FA:C3:F2:FA:CF:23:B9:F6:5D:17:0F Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: FF Signing time: Mon 21 Sep 2026 06:11:30 +0000 Manifest this update: Mon 21 Sep 2026 06:11:30 +0000 Manifest next update: Mon 28 Sep 2026 06:11:30 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: +4+NG6InURKLSZSM0ex8BLhXBzX/E8Z7BZCR1YCPr5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Sep 21 06:11:30 2026 GMT Not After : Sep 28 06:11:30 2026 GMT Subject: CN=6ab0ca92-91de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:55:78:08:c6:49:a3:e1:11:2a:0c:ba:16: cc:e1:c1:99:fd:38:c0:f7:6f:ad:3f:69:79:41:9b: 9f:37:8a:a9:8c:14:3c:3f:46:a2:9f:9a:f4:80:a4: 9b:31:5c:a7:4b:19:b7:a8:dc:1f:97:d3:81:ef:8b: 7e:d5:ee:c0:9c:2d:fa:f9:ed:80:15:12:e8:7d:de: 94:23:6c:b4:ef:8b:02:6d:13:94:c6:d5:0d:6a:69: c4:cb:5b:19:35:3e:4c:c2:40:4a:ce:ac:a1:4b:43: 8e:0a:8f:50:7e:96:bc:ae:16:a3:52:1f:e4:a0:a8: 2a:cf:ea:54:08:f4:a0:21:90:a5:9c:64:ea:82:d1: cc:24:bb:35:c8:49:a2:11:13:0e:09:16:40:d9:29: 50:60:55:af:2d:ae:76:d1:f0:68:29:6b:c5:1f:1d: e2:64:64:b2:ca:45:4b:d3:7b:b5:91:70:f2:5e:f0: 19:e3:73:18:ae:b6:38:33:13:82:93:9b:4b:1c:74: 14:0b:34:57:b0:94:5c:cf:57:8e:dc:93:60:61:4d: 4d:4e:a3:13:7b:bc:2f:36:0c:e7:e0:8b:8a:56:94: 2c:75:23:ed:93:8d:8e:c9:f3:ed:87:ca:11:70:f5: 24:4e:29:0c:5b:1c:c4:7a:68:34:59:ed:27:d8:c0: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:D8:3E:71:A7:13:EB:02:FA:C3:F2:FA:CF:23:B9:F6:5D:17:0F X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:37:cf:64:0b:b7:ef:09:66:da:89:c7:47:7e:d5:90:ca:80: 94:54:ba:77:57:38:4b:91:22:7f:a9:45:08:77:88:23:10:01: 06:e8:f9:fd:88:15:be:3e:53:a5:a3:e4:03:5b:e3:65:d7:92: de:12:c1:7f:67:bb:43:fb:f8:71:d0:6b:20:21:df:81:bb:be: 7a:50:f2:20:ab:fb:09:91:f6:82:90:83:a2:25:fc:92:73:67: 91:78:34:05:fe:da:ea:fb:52:3c:32:4f:7f:ca:7d:1a:b2:ae: ff:9a:73:99:40:25:54:39:13:3d:81:4c:f2:ab:1c:bd:96:b9: 5b:93:ea:01:b1:07:0f:6c:c6:7e:c4:d7:b6:43:8e:5a:14:45: 70:ba:6a:da:95:a4:23:c8:24:90:7c:fd:0a:0b:44:6f:ac:14: 5c:65:c0:ac:31:ba:e5:0d:71:9c:bb:27:dc:25:ca:8e:1a:23: d7:0c:9a:a4:89:a8:89:2d:67:a6:d1:5e:ca:02:55:45:54:ec: 19:57:dc:6e:1a:a9:d5:0e:04:44:45:6f:7a:aa:d5:5e:41:f9: a0:d9:ae:d9:99:6a:b8:25:26:a2:fc:9a:62:92:e7:74:4c:ad: d2:69:1d:08:1f:b9:96:c6:fa:21:7f:f2:72:0e:da:62:75:be: d9:6b:28:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKEJDRTlGQTZDMzc3Qzk0MzRCMTJDNzdCRUZDREQ0MkE1 QjcwMzRGRjIwHhcNMjYwOTIxMDYxMTMwWhcNMjYwOTI4MDYxMTMwWjAYMRYwFAYD VQQDEw02YWIwY2E5Mi05MWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdhVeAjGSaPhESoMuhbM4cGZ/TjA92+tP2l5QZufN4qpjBQ8P0ain5r0gKSb MVynSxm3qNwfl9OB74t+1e7AnC36+e2AFRLofd6UI2y074sCbROUxtUNamnEy1sZ NT5MwkBKzqyhS0OOCo9Qfpa8rhajUh/koKgqz+pUCPSgIZClnGTqgtHMJLs1yEmi ERMOCRZA2SlQYFWvLa520fBoKWvFHx3iZGSyykVL03u1kXDyXvAZ43MYrrY4MxOC k5tLHHQUCzRXsJRcz1eO3JNgYU1NTqMTe7wvNgzn4IuKVpQsdSPtk42OyfPth8oR cPUkTikMWxzEemg0We0n2MDG5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHo2D5x pxPrAvrD8vrPI7n2XRcPMB8GA1UdIwQYMBaAFLzp+mw3fJQ0sSx3vvzdQqW3A0/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS9DMTJDREFFNDMx OEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxEU3hMSGUtX04xQ3BiY0RU X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS9DMTJDREFFNDMxOEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxE U3hMSGUtX04xQ3BiY0RUX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdjfPZAu37wlm2onHR37VkMqAlFS6d1c4S5Eif6lFCHeIIxABBuj5/YgVvj5T paPkA1vjZdeS3hLBf2e7Q/v4cdBrICHfgbu+elDyIKv7CZH2gpCDoiX8knNnkXg0 Bf7a6vtSPDJPf8p9GrKu/5pzmUAlVDkTPYFM8qscvZa5W5PqAbEHD2zGfsTXtkOO WhRFcLpq2pWkI8gkkHz9CgtEb6wUXGXArDG65Q1xnLsn3CXKjhoj1wyapImoiS1n ptFeygJVRVTsGVfcbhqp1Q4EREVveqrVXkH5oNmu2ZlquCUmovyaYpLndEyt0mkd CB+5lsb6IX/ycg7aYnW+2WsoSQ== -----END CERTIFICATE-----Generated at Mon Sep 21 15:33:45 2026 by rpki-client