$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: Lm3dCKABxCsJUYhL14IGf2hUjFF3jBZAs9fUw2DyD40= Subject key identifier: 7A:2D:88:E6:3B:9E:43:1F:7B:86:40:30:63:D9:73:38:B9:1A:5E:AC Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0E5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0E53 Signing time: Thu 24 Sep 2026 17:43:40 +0000 Manifest this update: Thu 24 Sep 2026 17:43:39 +0000 Manifest next update: Thu 01 Oct 2026 17:43:39 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: bWmHoUy6sbmkDfkTUa7Dh+csDqBtcxiQO1wFjz+ocHQ=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Sep 24 17:43:39 2026 GMT Not After : Oct 1 17:43:39 2026 GMT Subject: CN=6ab5614c-d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:38:ef:e6:60:db:98:05:82:90:73:82:e4: fd:82:ca:34:20:6d:27:85:f3:f9:16:2b:75:00:df: f3:4c:22:2c:ab:f3:b8:9a:ce:76:cd:8a:c4:f5:65: 85:b8:57:5c:5f:d2:c7:24:69:00:ec:cd:9a:d2:85: 87:40:7d:c1:80:6b:6a:ee:22:45:1f:dd:58:74:81: fb:9b:be:84:64:33:3b:d8:73:0f:20:3c:b5:e6:ef: c4:f4:24:f4:e3:31:7d:c5:e0:18:d0:31:78:ab:9a: d2:ad:2d:d8:80:37:a3:d4:b8:7e:69:16:4c:dc:79: bf:2f:54:df:87:44:ca:d0:06:51:d4:af:a9:6f:a3: 45:53:79:8b:2c:49:1d:8c:c9:85:56:bc:b7:9e:31: 5a:6e:ff:f4:8e:17:1f:a6:14:15:0d:80:19:aa:07: 4f:cb:4f:c0:31:f6:0c:af:cb:32:c6:9b:f2:48:2f: bc:d8:80:f7:b6:1f:19:52:66:2d:f1:d0:7b:66:53: 83:88:1c:3e:b3:1b:e0:f0:6f:b4:70:37:81:aa:02: 56:1f:58:a6:fe:49:74:9e:a5:de:f6:df:dd:aa:52: 79:9c:5d:56:65:81:0a:a3:e0:b7:af:8c:e6:0c:b7: 64:89:2d:84:08:88:f5:93:1c:8b:25:f6:44:fe:85: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2D:88:E6:3B:9E:43:1F:7B:86:40:30:63:D9:73:38:B9:1A:5E:AC X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0c:53:aa:39:05:13:f5:5f:3c:84:fc:06:d9:27:82:f4:81: 0c:58:8a:a6:17:55:44:13:8b:63:06:a9:fe:e6:c5:8d:47:f8: 6b:bf:f2:b1:3d:a7:5f:91:d1:e8:ef:9c:22:08:cb:83:61:83: c7:4c:9f:a2:45:e7:7a:9a:a8:1a:a8:ee:b0:db:52:9d:b5:f3: 11:ab:87:be:87:85:42:35:f8:84:74:21:2a:6d:9c:99:5d:da: a5:d7:77:df:df:92:1b:2b:5f:89:89:a7:d2:d9:a8:77:fd:8e: 70:8b:37:bf:09:44:d8:0d:77:7a:10:3f:9b:48:2b:45:77:10: 24:ac:ae:42:0f:2c:62:c2:48:40:45:27:9b:42:48:f0:55:db: 20:e4:08:40:24:a3:e3:7d:32:30:d1:14:6b:47:69:3f:73:b5: ca:18:43:4e:e1:3d:39:83:85:73:ec:bb:39:bf:6e:6f:88:27: 91:39:e1:61:2d:a3:dc:0c:ac:a5:5a:ff:2f:f3:3f:8f:d8:11: 59:48:45:be:41:d3:29:9f:39:3f:e2:55:e9:75:ac:bb:a7:5b: 27:7b:89:1b:b2:37:85:fa:6c:b3:08:48:e8:2a:e4:d5:61:d1: 11:0a:22:54:69:21:b7:61:11:52:86:ad:04:d7:bb:c5:0e:72: ed:08:4e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwOTI0MTc0MzM5WhcNMjYxMDAxMTc0MzM5WjAYMRYwFAYD VQQDEw02YWI1NjE0Yy1kN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOY47+Zg25gFgpBzguT9gso0IG0nhfP5Fit1AN/zTCIsq/O4ms52zYrE9WWF uFdcX9LHJGkA7M2a0oWHQH3BgGtq7iJFH91YdIH7m76EZDM72HMPIDy15u/E9CT0 4zF9xeAY0DF4q5rSrS3YgDej1Lh+aRZM3Hm/L1Tfh0TK0AZR1K+pb6NFU3mLLEkd jMmFVry3njFabv/0jhcfphQVDYAZqgdPy0/AMfYMr8syxpvySC+82ID3th8ZUmYt 8dB7ZlODiBw+sxvg8G+0cDeBqgJWH1im/kl0nqXe9t/dqlJ5nF1WZYEKo+C3r4zm DLdkiS2ECIj1kxyLJfZE/oV/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHotiOY7 nkMfe4ZAMGPZczi5Gl6sMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXwxTqjkFE/VfPIT8BtkngvSBDFiKphdVRBOLYwap/ubFjUf4a7/ysT2nX5HR 6O+cIgjLg2GDx0yfokXnepqoGqjusNtSnbXzEauHvoeFQjX4hHQhKm2cmV3apdd3 39+SGytfiYmn0tmod/2OcIs3vwlE2A13ehA/m0grRXcQJKyuQg8sYsJIQEUnm0JI 8FXbIOQIQCSj430yMNEUa0dpP3O1yhhDTuE9OYOFc+y7Ob9ub4gnkTnhYS2j3Ays pVr/L/M/j9gRWUhFvkHTKZ85P+JV6XWsu6dbJ3uJG7I3hfpsswhI6Crk1WHREQoi VGkht2ERUoatBNe7xQ5y7QhOgg== -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:45 2026 by rpki-client