$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: D/MQG/KWVpOZsuZA0DycSf2YGhkO0S2e4LSIPRBrdwQ= Subject key identifier: 60:1D:02:82:2E:55:FC:D3:83:04:FD:4D:99:D6:E0:EB:FE:5F:82:5E Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 03A9 Signing time: Mon 21 Sep 2026 00:31:36 +0000 Manifest this update: Mon 21 Sep 2026 00:31:35 +0000 Manifest next update: Mon 28 Sep 2026 00:31:35 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: 6CcM47lpKMJCljPWTwgOj8KKOlE1q1eK5XeRlVogOTQ=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: IT6sjqgyeU7yL3F+eCEVuRIF5QZib/FjkDzd9+imaPw=) 3: 8BB438729C5311F19090C9214211F970.roa (hash: 4P3QCMBtXIARu2oRAALfV+4dtZEhy98vYnb2SXz40aM=) 4: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=) 5: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=) 6: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: ZWhBeU6y3g8qTKiuOtQLL6VcfczNqvmkhr8Yqi5VXlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Sep 21 00:31:35 2026 GMT Not After : Sep 28 00:31:35 2026 GMT Subject: CN=6ab07ae8-8b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:52:0c:28:b3:fb:d4:b9:30:e7:80:08:45: e3:27:b6:bd:c0:69:45:58:7d:74:35:b3:43:e4:48: 76:3f:db:36:92:68:6a:89:e5:d2:3a:10:ef:8a:17: fb:cb:28:9a:a9:eb:8b:27:ba:0a:b4:da:04:35:12: bc:06:cc:35:de:3b:0a:02:86:8a:ca:17:06:ec:0f: 21:d8:31:67:a1:fe:01:df:c4:0f:e0:13:bc:9f:49: 37:30:1b:eb:f0:5e:b5:84:f4:05:a7:02:43:7a:44: e2:cf:e0:e5:38:12:7d:de:6f:d4:a6:a7:36:83:c9: 00:c4:02:93:b9:1c:e5:9c:c5:4b:94:4b:34:f4:47: 23:1d:b7:0a:a8:44:e6:32:66:11:af:6e:46:d1:dd: 8b:33:5d:a1:54:9b:d2:65:27:d4:cc:79:92:9a:46: b6:b9:52:c1:89:05:60:60:ce:97:2b:67:8f:ee:8e: dd:3c:97:1d:f9:80:fd:07:e7:29:5d:b6:1d:b2:fb: 12:3a:bc:b2:ad:11:c5:38:5a:41:35:5f:e1:1a:14: 68:60:50:be:97:73:2b:56:6a:07:35:32:58:ac:bd: 63:78:87:76:ef:01:9b:40:c7:e1:d7:2c:f4:ec:9b: 6a:52:30:8d:e0:9d:5a:74:aa:a0:61:12:73:dd:53: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1D:02:82:2E:55:FC:D3:83:04:FD:4D:99:D6:E0:EB:FE:5F:82:5E X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2b:3c:ce:fb:53:b2:a4:9f:4e:93:a0:d2:70:11:77:73:ac: 83:67:41:88:b5:73:33:85:6c:02:ca:c6:a6:68:4e:09:71:af: ad:05:26:1d:f6:b7:88:c1:6e:68:d9:4d:ab:13:ac:d5:63:f4: a0:e6:f1:ea:0d:42:9b:a0:65:8e:52:9d:64:cc:75:52:79:0f: 5c:52:ad:cb:2f:db:ed:f0:75:f7:4c:d9:fc:57:cd:cc:57:0b: 6b:c0:f3:cd:41:da:18:78:b6:95:4b:fc:61:43:15:3e:01:73: be:3d:8e:dc:50:08:93:64:b7:b1:23:40:cb:68:47:ec:0d:7f: a7:4f:54:1c:68:01:3a:bc:e7:6d:37:ef:e1:a8:be:c4:6a:4d: 38:a0:70:17:7f:02:8e:e6:ac:d4:f6:6e:f0:f1:70:80:ad:0b: 67:a9:0d:98:9e:f5:b9:41:0d:a1:b3:14:ca:55:e6:eb:65:f0: 7b:2d:d1:de:c1:86:54:26:5b:a1:ec:07:b6:c2:f6:a1:e7:c5: b9:96:25:8f:73:21:02:b9:d6:65:7c:80:5b:81:eb:a1:8f:c1: 80:bd:95:42:b5:44:fe:43:b4:bf:81:65:60:2f:45:09:e9:c1: 5e:f4:cd:b2:fb:a2:02:37:b7:f7:8f:a0:ac:66:62:7b:65:f9: 8e:22:d9:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjYwOTIxMDAzMTM1WhcNMjYwOTI4MDAzMTM1WjAYMRYwFAYD VQQDEw02YWIwN2FlOC04YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvxSDCiz+9S5MOeACEXjJ7a9wGlFWH10NbND5Eh2P9s2kmhqieXSOhDvihf7 yyiaqeuLJ7oKtNoENRK8Bsw13jsKAoaKyhcG7A8h2DFnof4B38QP4BO8n0k3MBvr 8F61hPQFpwJDekTiz+DlOBJ93m/Upqc2g8kAxAKTuRzlnMVLlEs09EcjHbcKqETm MmYRr25G0d2LM12hVJvSZSfUzHmSmka2uVLBiQVgYM6XK2eP7o7dPJcd+YD9B+cp XbYdsvsSOryyrRHFOFpBNV/hGhRoYFC+l3MrVmoHNTJYrL1jeId27wGbQMfh1yz0 7JtqUjCN4J1adKqgYRJz3VNqWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAdAoIu VfzTgwT9TZnW4Ov+X4JeMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARys8zvtTsqSfTpOg0nARd3Osg2dBiLVzM4VsAsrGpmhOCXGvrQUmHfa3iMFu aNlNqxOs1WP0oObx6g1Cm6BljlKdZMx1UnkPXFKtyy/b7fB190zZ/FfNzFcLa8Dz zUHaGHi2lUv8YUMVPgFzvj2O3FAIk2S3sSNAy2hH7A1/p09UHGgBOrznbTfv4ai+ xGpNOKBwF38Cjuas1PZu8PFwgK0LZ6kNmJ71uUENobMUylXm62Xwey3R3sGGVCZb oewHtsL2oefFuZYlj3MhArnWZXyAW4HroY/BgL2VQrVE/kO0v4FlYC9FCenBXvTN svuiAje394+grGZie2X5jiLZ1g== -----END CERTIFICATE-----Generated at Mon Sep 21 13:36:17 2026 by rpki-client