$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: LC7eJ9hKKeuio1BG8wWq93qn3lgwYx3X7T/AY1wZZHs= Subject key identifier: 2E:64:12:18:3F:58:99:24:68:62:07:53:C7:8B:A0:E1:EF:14:0F:8D Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 05FF Signing time: Tue 22 Sep 2026 22:44:21 +0000 Manifest this update: Tue 22 Sep 2026 22:44:20 +0000 Manifest next update: Tue 29 Sep 2026 22:44:20 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: QvVuOP9oSBqLCRo0HAfSzP+Nb5hDZVM12ioo7I/Jc80=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=) 3: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=) 4: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=) 5: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=) 6: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=) 7: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Sep 22 22:44:20 2026 GMT Not After : Sep 29 22:44:20 2026 GMT Subject: CN=6ab304c4-b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:ff:91:40:8f:af:b8:29:73:f4:95:35:c2: 97:ac:83:3c:0c:1e:82:6b:71:64:91:1d:a2:13:f4: c7:da:0c:1a:95:5f:8c:51:2f:59:7f:1e:43:dc:dd: cb:09:a7:89:aa:2d:b7:34:48:32:44:63:e1:49:59: d0:31:87:02:d9:05:51:1d:6b:2b:fa:77:2e:d5:a5: 40:80:cf:6d:93:4b:92:ab:02:e3:0d:4e:6a:2b:ea: 80:56:20:1e:24:56:6c:fa:89:f9:e8:32:27:62:d0: a7:cb:08:7e:a9:dd:3a:e3:6a:02:e2:cb:1f:18:34: 50:67:d9:7d:0c:b3:9d:54:e3:9d:bd:76:eb:98:ac: fa:90:46:2b:a0:fc:15:3d:13:d4:97:cb:3a:f0:10: 3f:f9:e1:62:f1:59:c5:fb:52:51:d7:2e:ab:ae:d4: d9:ee:5e:f8:69:88:e7:a2:12:25:31:4f:33:d8:d3: b8:6f:57:e6:10:fd:8c:f2:80:92:46:34:f2:43:7e: a4:da:e3:de:14:44:f6:8d:b3:23:a8:44:a2:3b:dc: 8b:e3:da:89:b2:ac:5a:3f:9b:2c:1b:4e:54:ed:14: 37:4e:83:c6:a4:55:02:bc:88:62:24:81:71:3b:45: 38:84:36:2d:26:46:9a:be:fa:cb:83:e5:2e:bd:51: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:64:12:18:3F:58:99:24:68:62:07:53:C7:8B:A0:E1:EF:14:0F:8D X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:27:f9:35:c1:38:92:90:66:c9:21:8b:e6:40:56:69:00: d1:f2:ed:ff:cd:9c:f4:56:45:a1:21:3e:be:ef:46:80:b2:a7: 5a:03:52:92:a6:e1:f8:c1:0b:6e:4a:58:cb:0b:ec:e3:79:6e: 23:36:ac:34:83:2c:9b:64:d1:1c:16:ad:7a:04:bb:25:2c:29: 74:e7:bd:ea:44:b3:75:e8:27:54:2f:af:2e:61:a5:68:25:ee: 5b:ca:d8:63:a2:8f:2a:43:20:0f:69:17:5b:46:47:12:d3:19: 90:fe:46:42:58:c7:56:4a:a2:2b:11:35:88:64:2c:87:61:a8: 3e:ac:27:80:a1:85:e7:bc:4a:20:ee:bf:bc:68:a2:1b:8e:57: 54:f7:b0:eb:43:6f:4e:3d:b4:03:bd:7e:e9:9b:76:2f:35:4a: 5c:ed:38:47:c2:f2:6d:01:3a:d4:96:80:ba:c6:80:03:89:89: fd:21:e0:65:5f:0e:cc:9c:8e:c3:b0:78:f6:72:9b:18:1d:41: a0:c1:bb:da:62:fa:a8:68:c9:64:5a:68:19:21:1c:cf:06:89: 7a:ed:a7:51:59:20:09:a8:01:12:4a:fd:76:61:4a:0c:0b:5f: b4:73:38:b2:3c:60:c2:8d:ec:12:8f:cf:ac:f1:86:fb:98:0b: 24:9f:2f:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwOTIyMjI0NDIwWhcNMjYwOTI5MjI0NDIwWjAYMRYwFAYD VQQDEw02YWIzMDRjNC1iMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY3/kUCPr7gpc/SVNcKXrIM8DB6Ca3FkkR2iE/TH2gwalV+MUS9Zfx5D3N3L CaeJqi23NEgyRGPhSVnQMYcC2QVRHWsr+ncu1aVAgM9tk0uSqwLjDU5qK+qAViAe JFZs+on56DInYtCnywh+qd0642oC4ssfGDRQZ9l9DLOdVOOdvXbrmKz6kEYroPwV PRPUl8s68BA/+eFi8VnF+1JR1y6rrtTZ7l74aYjnohIlMU8z2NO4b1fmEP2M8oCS RjTyQ36k2uPeFET2jbMjqESiO9yL49qJsqxaP5ssG05U7RQ3ToPGpFUCvIhiJIFx O0U4hDYtJkaavvrLg+UuvVHtkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5kEhg/ WJkkaGIHU8eLoOHvFA+NMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH6En+TXBOJKQZskhi+ZAVmkA0fLt/82c9FZFoSE+vu9GgLKnWgNSkqbh+MEL bkpYywvs43luIzasNIMsm2TRHBategS7JSwpdOe96kSzdegnVC+vLmGlaCXuW8rY Y6KPKkMgD2kXW0ZHEtMZkP5GQljHVkqiKxE1iGQsh2GoPqwngKGF57xKIO6/vGii G45XVPew60NvTj20A71+6Zt2LzVKXO04R8LybQE61JaAusaAA4mJ/SHgZV8OzJyO w7B49nKbGB1BoMG72mL6qGjJZFpoGSEczwaJeu2nUVkgCagBEkr9dmFKDAtftHM4 sjxgwo3sEo/PrPGG+5gLJJ8v5A== -----END CERTIFICATE-----Generated at Thu Sep 24 14:08:35 2026 by rpki-client