$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: SsHAQ5Wrg5CffvA5ElaQfCrBpUTvX2C2Mh9Z5y0Mymw= Subject key identifier: 96:19:1A:8C:2D:B5:C8:67:C7:AE:91:6A:B0:A7:BD:30:E3:D7:31:17 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 12B9 Signing time: Fri 18 Sep 2026 17:02:23 +0000 Manifest this update: Fri 18 Sep 2026 17:02:23 +0000 Manifest next update: Fri 25 Sep 2026 17:02:23 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: JRXVdVKaio5z1pjwwfS5xChAqkHQOufE5bk19Oj07qc=) 2: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) 3: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Q8GHoeHbmqW7M4R7JqdbouyG47lAXEk2l5ZINQlZhUw=) 4: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4826 (0x12da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Sep 18 17:02:23 2026 GMT Not After : Sep 25 17:02:23 2026 GMT Subject: CN=6aad6e9f-0b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:26:76:76:88:82:d1:e0:54:82:e9:e2:f2: 1b:90:07:af:2a:a2:05:e0:ad:30:a9:f3:82:1b:cf: 58:9d:23:a9:34:22:3e:f0:93:74:2f:f5:d0:d0:07: 0b:55:e7:a9:9b:47:8e:9f:ab:d3:e0:22:e4:2c:ef: 57:8c:36:a0:6f:03:f2:49:3f:38:c3:22:54:4f:cc: a6:78:ff:e4:2c:e4:bf:3e:41:c0:ea:2a:8f:9a:63: 11:34:9b:88:88:c2:45:4a:10:69:3d:41:1f:4e:cc: a1:8e:5e:7b:f1:e3:c4:cc:09:fd:de:f6:8c:91:70: 4e:3f:00:7c:20:1e:df:a2:b6:bc:b8:92:e4:cf:5b: 16:e8:a1:58:4a:42:a6:f8:e1:7a:0c:19:63:6e:cb: 91:09:dc:bf:42:f3:4c:c8:18:0d:55:08:5b:9e:e2: 87:d3:c4:f0:ce:f6:0f:e3:c3:57:d3:6d:e2:c6:29: 57:d7:c8:2a:05:3b:bf:f9:f6:6b:a2:9c:5e:ed:1a: 97:7c:1a:ab:c5:47:1c:b6:28:97:bf:a3:c8:a9:ac: d3:93:13:f2:4c:5f:9e:ea:c0:15:7d:13:bd:63:7a: 7a:9b:3e:fc:af:77:1d:d1:86:75:4e:0d:75:54:58: 2c:0a:cf:37:90:c1:2e:4f:8f:53:ae:de:03:72:96: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:19:1A:8C:2D:B5:C8:67:C7:AE:91:6A:B0:A7:BD:30:E3:D7:31:17 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:76:16:d8:a4:37:9d:60:4b:a7:e8:f5:6d:9f:51:6f:4d:c8: 33:db:2a:c3:da:d7:c9:63:b9:12:56:86:a4:81:a9:6d:82:59: db:c4:3a:58:34:1d:91:de:7f:5a:5e:01:92:b7:41:52:8f:9c: ea:94:7e:ce:18:4d:00:18:59:b6:72:e4:1a:82:34:19:59:55: 61:e0:1c:ef:b5:8f:51:4c:eb:dc:05:e5:5e:c5:09:67:e3:69: b1:8b:42:65:68:bb:8d:8f:87:ed:32:e3:a2:5d:3f:ad:e7:32: 4e:dc:dd:f5:45:bf:90:49:2d:69:0a:40:e4:2d:5f:63:41:65: 21:84:84:ee:00:13:7b:12:b2:82:f7:d0:58:18:a1:a4:89:e4: 7f:c4:d6:04:d4:d3:d0:c0:88:73:82:bd:21:cf:57:36:81:da: 46:3d:54:76:6d:99:59:be:0c:b5:91:75:c6:e7:5e:f9:a5:fd: 7b:ff:bd:18:a5:d2:b4:36:1e:bc:d6:eb:5a:c5:24:7a:99:ef: f7:8d:ae:e3:6b:5e:7d:39:75:d9:49:4a:d6:0b:5e:d9:aa:3c: d4:80:7f:ae:7e:b2:04:c7:9b:38:79:46:fc:f9:00:92:ff:d4: d6:38:0e:e4:8c:85:6a:5e:f6:60:f7:71:02:35:c4:7e:d0:fc: 82:4e:0e:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwOTE4MTcwMjIzWhcNMjYwOTI1MTcwMjIzWjAYMRYwFAYD VQQDEw02YWFkNmU5Zi0wYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7cmdnaIgtHgVILp4vIbkAevKqIF4K0wqfOCG89YnSOpNCI+8JN0L/XQ0AcL Veepm0eOn6vT4CLkLO9XjDagbwPyST84wyJUT8ymeP/kLOS/PkHA6iqPmmMRNJuI iMJFShBpPUEfTsyhjl578ePEzAn93vaMkXBOPwB8IB7fora8uJLkz1sW6KFYSkKm +OF6DBljbsuRCdy/QvNMyBgNVQhbnuKH08TwzvYP48NX023ixilX18gqBTu/+fZr opxe7RqXfBqrxUcctiiXv6PIqazTkxPyTF+e6sAVfRO9Y3p6mz78r3cd0YZ1Tg11 VFgsCs83kMEuT49Trt4Dcpbj3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYZGowt tchnx66RarCnvTDj1zEXMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANHYW2KQ3nWBLp+j1bZ9Rb03IM9sqw9rXyWO5ElaGpIGpbYJZ28Q6WDQdkd5/ Wl4BkrdBUo+c6pR+zhhNABhZtnLkGoI0GVlVYeAc77WPUUzr3AXlXsUJZ+NpsYtC ZWi7jY+H7TLjol0/recyTtzd9UW/kEktaQpA5C1fY0FlIYSE7gATexKygvfQWBih pInkf8TWBNTT0MCIc4K9Ic9XNoHaRj1Udm2ZWb4MtZF1xude+aX9e/+9GKXStDYe vNbrWsUkepnv942u42tefTl12UlK1gte2ao81IB/rn6yBMebOHlG/PkAkv/U1jgO 5IyFal72YPdxAjXEftD8gk4O+w== -----END CERTIFICATE-----Generated at Sun Sep 20 18:09:33 2026 by rpki-client