$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json) Hash identifier: OkjwKHz4205Qymg2shVNy5IEVPyatkydXd4Ha3h4KJc= Subject key identifier: B1:AB:15:1F:85:30:44:52:24:5D:75:4F:59:92:7F:40:33:81:AC:CE Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft Manifest number: 0D09 Signing time: Mon 28 Sep 2026 18:29:41 +0000 Manifest this update: Mon 28 Sep 2026 18:29:41 +0000 Manifest next update: Mon 05 Oct 2026 18:29:41 +0000 Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: dO6dmq1DtFGtRxaa7cPhkIFPA9kkpDDxxqQLFKRJzRs=) 2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: Sep 28 18:29:41 2026 GMT Not After : Oct 5 18:29:41 2026 GMT Subject: CN=6abab215-acde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:c0:83:c0:fc:8b:8c:50:70:28:2b:c6:28: 14:d0:11:02:36:83:da:39:66:91:e0:ce:97:9f:39: 35:73:d9:1a:36:7d:7c:c4:85:7d:db:03:57:69:c7: 02:80:9c:d6:9d:65:aa:8f:79:5b:22:a8:04:39:96: 29:3a:89:76:de:65:b5:8f:31:9d:e0:81:54:9a:7f: a5:83:28:da:c8:da:f1:2e:b9:71:bd:39:3c:d2:9f: 4e:de:ea:3f:79:6b:63:fa:cb:3e:40:a8:33:85:f2: d1:5f:72:f7:ad:9e:27:e0:da:f8:5b:20:7d:90:d1: 1e:53:f6:3a:8a:ab:c5:3c:46:94:60:da:5b:a7:b7: 7b:36:fb:12:b1:54:12:22:42:79:50:94:a2:b4:14: 1b:2c:85:b7:13:c8:f3:64:82:60:80:5e:9e:42:29: f2:4b:93:bc:c1:ae:28:a5:11:c7:d3:37:d2:2e:e0: 10:23:21:3d:d7:10:27:1e:fa:78:63:4b:02:e0:c5: 10:a2:3e:44:ee:97:49:b7:38:38:3b:e1:61:57:8c: d3:99:c9:bc:df:7d:bd:49:bb:a3:b5:38:1c:1e:bb: b5:83:70:c7:a9:51:37:d9:f4:89:8e:3c:6a:16:5a: 7c:de:a9:66:00:59:cb:12:d8:8c:c0:80:e6:60:f2: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AB:15:1F:85:30:44:52:24:5D:75:4F:59:92:7F:40:33:81:AC:CE X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:0c:10:37:95:be:3c:32:52:07:90:df:ef:90:ee:4a:a3: dd:c9:34:2c:bf:5f:cd:a0:96:31:7d:68:da:b0:09:c8:e1:d2: b9:ba:a5:ae:fa:94:c8:93:c0:fd:c8:71:1a:f1:c2:f0:2d:4a: f3:02:37:e0:e4:00:05:cd:e0:f9:a1:db:42:42:b3:a1:cd:94: ac:8a:d1:e1:97:4e:57:30:53:6a:58:95:88:7d:19:da:f7:31: 30:1d:5e:d7:92:26:cf:92:7a:57:e9:91:f8:70:cd:9b:43:bc: 57:75:67:86:6c:c2:cb:fc:c5:1f:de:a4:db:d7:cc:f4:cd:00: 5b:ba:75:e8:28:d3:8b:da:33:c7:5a:f3:7f:33:b4:6f:09:ef: 02:73:e5:fa:67:eb:34:25:54:5f:b3:9d:4a:26:1f:4c:e2:8f: f4:79:c7:fb:b2:24:07:06:0e:9d:9e:ab:06:d0:4f:16:3c:aa: 4a:35:8a:f7:3e:da:ae:99:83:a6:32:d2:97:27:e1:23:12:41: 1c:18:0a:44:27:90:00:ee:e6:00:dd:c4:d4:d5:1c:34:c4:bb: e8:7c:f3:63:d3:48:fd:bf:4e:da:37:a0:11:6a:40:43:b6:ac: 0f:57:bf:84:15:f8:c6:35:45:aa:1c:dd:dc:4e:40:03:a2:af: 5f:55:b9:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjYwOTI4MTgyOTQxWhcNMjYxMDA1MTgyOTQxWjAYMRYwFAYD VQQDEw02YWJhYjIxNS1hY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLDAg8D8i4xQcCgrxigU0BECNoPaOWaR4M6Xnzk1c9kaNn18xIV92wNXaccC gJzWnWWqj3lbIqgEOZYpOol23mW1jzGd4IFUmn+lgyjayNrxLrlxvTk80p9O3uo/ eWtj+ss+QKgzhfLRX3L3rZ4n4Nr4WyB9kNEeU/Y6iqvFPEaUYNpbp7d7NvsSsVQS IkJ5UJSitBQbLIW3E8jzZIJggF6eQinyS5O8wa4opRHH0zfSLuAQIyE91xAnHvp4 Y0sC4MUQoj5E7pdJtzg4O+FhV4zTmcm83329SbujtTgcHru1g3DHqVE32fSJjjxq Flp83qlmAFnLEtiMwIDmYPIqRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGrFR+F MERSJF11T1mSf0AzgazOMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDJFQS9EQjE1Q0RFMDExREIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dx VGt1ZGdvUlFzelpyM3ExZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHoMEDeVvjwyUgeQ3++Q7kqj3ck0LL9fzaCWMX1o2rAJyOHSubqlrvqUyJPA /chxGvHC8C1K8wI34OQABc3g+aHbQkKzoc2UrIrR4ZdOVzBTaliViH0Z2vcxMB1e 15Imz5J6V+mR+HDNm0O8V3VnhmzCy/zFH96k29fM9M0AW7p16CjTi9ozx1rzfzO0 bwnvAnPl+mfrNCVUX7OdSiYfTOKP9HnH+7IkBwYOnZ6rBtBPFjyqSjWK9z7arpmD pjLSlyfhIxJBHBgKRCeQAO7mAN3E1NUcNMS76HzzY9NI/b9O2jegEWpAQ7asD1e/ hBX4xjVFqhzd3E5AA6KvX1W5KA== -----END CERTIFICATE-----Generated at Tue Sep 29 12:21:43 2026 by rpki-client