$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json) Hash identifier: M5jRNo+c6TLyPpCqXcT94GA8pnAda+rPN/po+JOrgtM= Subject key identifier: 94:BA:CB:4C:FE:6D:91:37:67:FD:62:34:E2:C4:11:3A:C6:E0:B3:CC Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft Manifest number: EC Signing time: Mon 21 Sep 2026 06:27:32 +0000 Manifest this update: Mon 21 Sep 2026 06:27:31 +0000 Manifest next update: Mon 28 Sep 2026 06:27:31 +0000 Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: 5R5fj/8yQDrV5pWWH8iFdMlLYofgSiMDbeBYC2guHxc=) 2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: PcxApA6oFAaKQrQP/VJxBmFi70SG6p/mmGbv5cjRlVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE Validity Not Before: Sep 21 06:27:31 2026 GMT Not After : Sep 28 06:27:31 2026 GMT Subject: CN=6ab0ce53-6a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:bd:7b:1c:f5:55:1b:cd:65:a0:2c:25:d1: 58:23:98:ee:cd:d6:fe:4a:3c:33:01:e7:54:b2:f8: 99:21:c3:16:88:6a:c6:a3:f8:43:27:44:c3:8b:eb: 51:2e:a3:8d:7c:fd:3c:03:48:bb:24:fe:26:55:71: 0b:4f:fc:aa:d7:de:04:17:77:d8:00:59:51:8d:04: 32:56:6d:05:52:cb:41:dc:f7:79:bf:0a:41:79:91: b3:3e:6c:52:73:4a:02:e2:20:ab:8e:9b:59:a2:85: b3:7b:cd:1a:4a:d4:f7:b5:71:5e:12:e7:05:68:49: 36:a2:ce:c5:49:5c:f8:5b:9d:0e:cc:bc:e7:25:d7: f9:2e:6b:f2:a8:b3:27:f3:af:f4:03:73:9e:00:fc: f2:bb:d4:06:ce:e5:b1:15:93:20:8e:2f:4d:43:8c: 55:15:d2:d4:6f:8f:98:0f:e6:73:cd:f9:99:2f:6d: 80:d5:c9:43:94:6f:b3:77:8f:61:87:35:80:d9:59: 13:f6:ee:dc:32:b3:35:e8:ba:64:5c:09:c3:4f:00: 2e:66:32:99:62:16:b3:10:dd:bb:4f:7b:38:a5:ff: ef:72:0b:21:06:6b:ae:96:2d:5a:ef:0d:8f:32:74: 4a:8e:36:df:80:ad:b5:f0:1d:87:3c:40:c6:24:0c: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:CB:4C:FE:6D:91:37:67:FD:62:34:E2:C4:11:3A:C6:E0:B3:CC X509v3 Authority Key Identifier: keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:6a:a7:70:74:f3:ec:96:f9:c9:da:1b:30:cf:68:50:f7: c2:2c:99:ea:e3:e8:d6:70:14:8b:57:19:43:af:ca:36:da:c5: 04:85:f4:9b:57:19:c0:5b:6b:6f:31:67:2e:52:77:66:9d:87: c9:99:95:75:b2:06:57:bb:73:75:d5:90:af:01:02:e3:8c:a7: 74:78:3f:6c:6f:e6:8a:4c:ef:ee:7e:aa:7e:4f:12:85:b1:0c: fe:db:c6:42:14:58:87:da:fc:24:b2:28:e2:0b:e1:26:77:db: ea:47:1b:82:32:a7:e1:e2:5d:6d:8e:b0:71:d5:fb:f9:69:da: ed:e6:c9:e1:46:ab:5e:6a:13:2a:b6:04:bf:c1:cf:49:06:85: a1:2f:51:db:0a:1a:84:b8:ef:56:16:cd:b2:d4:3a:d1:41:7e: f4:4a:e4:6c:42:7d:33:23:7d:f9:49:52:96:4e:05:77:9d:4e: 71:14:1d:62:db:4f:d8:9f:99:3b:be:d1:56:67:0d:7b:a2:a0: af:48:46:9c:48:1b:ea:9e:fd:2c:74:53:ae:85:87:bf:22:8b: 6d:72:c7:dc:f0:7a:1d:bd:1b:bc:73:56:2d:f3:d3:a5:80:7d: 4d:f1:7c:9c:2a:81:a4:0c:57:20:a4:d7:a1:04:28:14:55:c9: 86:ec:30:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY2RUYxMTAvBgNVBAUTKDlBMDIzQjgwQUJDRjRFNjc5N0QzODhDMERFODE2MEEx NkVCMTVERkUwHhcNMjYwOTIxMDYyNzMxWhcNMjYwOTI4MDYyNzMxWjAYMRYwFAYD VQQDEw02YWIwY2U1My02YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBq9exz1VRvNZaAsJdFYI5juzdb+SjwzAedUsviZIcMWiGrGo/hDJ0TDi+tR LqONfP08A0i7JP4mVXELT/yq194EF3fYAFlRjQQyVm0FUstB3Pd5vwpBeZGzPmxS c0oC4iCrjptZooWze80aStT3tXFeEucFaEk2os7FSVz4W50OzLznJdf5LmvyqLMn 86/0A3OeAPzyu9QGzuWxFZMgji9NQ4xVFdLUb4+YD+ZzzfmZL22A1clDlG+zd49h hzWA2VkT9u7cMrM16LpkXAnDTwAuZjKZYhazEN27T3s4pf/vcgshBmuuli1a7w2P MnRKjjbfgK218B2HPEDGJAzquQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJS6y0z+ bZE3Z/1iNOLEETrG4LPMMB8GA1UdIwQYMBaAFJoCO4Crz05nl9OIwN6BYKFusV3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjZFRi9BQ0JGNkYyQTU3 NDIxMUYwQkVEQjQ1NUNDNEY5QUUwMi9tZ0k3Z0t2UFRtZVgwNGpBM29GZ29XNnhY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nSTdnS3ZQVG1lWDA0akEzb0Znb1c2eFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjZFRi9BQ0JGNkYyQTU3NDIxMUYwQkVEQjQ1NUNDNEY5QUUwMi9tZ0k3Z0t2UFRt ZVgwNGpBM29GZ29XNnhYZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUaJqp3B08+yW+cnaGzDPaFD3wiyZ6uPo1nAUi1cZQ6/KNtrFBIX0m1cZwFtr bzFnLlJ3Zp2HyZmVdbIGV7tzddWQrwEC44yndHg/bG/mikzv7n6qfk8ShbEM/tvG QhRYh9r8JLIo4gvhJnfb6kcbgjKn4eJdbY6wcdX7+Wna7ebJ4UarXmoTKrYEv8HP SQaFoS9R2woahLjvVhbNstQ60UF+9ErkbEJ9MyN9+UlSlk4Fd51OcRQdYttP2J+Z O77RVmcNe6Kgr0hGnEgb6p79LHRTroWHvyKLbXLH3PB6Hb0bvHNWLfPTpYB9TfF8 nCqBpAxXIKTXoQQoFFXJhuwwWw== -----END CERTIFICATE-----Generated at Tue Sep 22 14:00:28 2026 by rpki-client