$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: jWtV3k1tdn5NLcxUmHnM/zvwbD346KJy6ssbmm8CHH0= Subject key identifier: 56:BD:C3:16:D8:39:65:9B:E3:60:C6:39:72:A1:AD:27:6C:9F:1A:87 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1EC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E9A Signing time: Mon 28 Sep 2026 16:05:39 +0000 Manifest this update: Mon 28 Sep 2026 16:05:38 +0000 Manifest next update: Mon 05 Oct 2026 16:05:38 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: HVMdN9KyX9Vy+gr6qwbbrv74SMutkv2SmnXIzr2o5hY=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: KWWAb8DfO4jtgnLaEkzIxKcYV6WYtR19+RCj7lhTp9k=) 4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7881 (0x1ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Sep 28 16:05:38 2026 GMT Not After : Oct 5 16:05:38 2026 GMT Subject: CN=6aba9053-f983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d1:e6:84:9a:73:50:b7:b6:c9:6b:c3:07:0f: 05:da:60:a1:ec:48:d4:01:2a:c0:8d:a8:0e:f7:29: 9f:13:7a:78:66:57:fa:f8:16:f5:6c:fa:f8:96:eb: 65:6e:5b:74:7d:fe:f7:37:32:fd:1e:05:42:3b:76: 16:6b:d8:9e:2c:1c:b5:5b:30:ce:68:60:22:2d:4b: e7:07:50:b7:86:f0:e3:16:07:b6:8e:9d:a1:f9:5c: cc:19:bc:c5:96:74:3a:06:f5:16:67:1f:ad:df:4f: 0d:f5:77:5f:38:1d:d0:ae:52:4f:a0:a6:f5:84:4f: b4:cc:70:3e:f7:12:05:77:b3:74:ae:5c:94:91:73: bc:e1:7e:b6:ad:d9:f1:1b:01:19:81:cc:c6:d6:7a: 30:84:3a:8e:30:85:96:29:6a:26:ad:85:e1:6f:0f: e0:a9:31:f6:20:84:21:fd:75:a5:cf:cc:cf:c1:7e: b8:1b:fc:c0:be:02:57:22:ee:4b:a2:eb:f1:8d:df: b2:95:74:a5:80:f5:f3:f4:61:2c:71:a8:9c:ba:a0: 53:97:ef:bd:14:96:16:bb:33:ef:ff:4f:25:39:ef: c4:04:45:b3:f8:ad:2a:35:57:77:7c:c0:b4:18:97: 68:5b:8d:44:aa:0e:f9:63:23:ef:80:58:e6:4e:cb: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:C3:16:D8:39:65:9B:E3:60:C6:39:72:A1:AD:27:6C:9F:1A:87 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:21:74:15:91:bc:56:65:7b:f4:b9:c7:fa:5c:9e:35:50:76: b6:b0:2e:28:e1:88:b5:13:e7:4c:e0:b7:dc:1a:9f:42:95:cd: 41:fd:73:35:20:c9:3e:7f:e9:77:ce:b3:6e:cf:a6:29:1d:6e: e6:c2:f8:6f:27:cb:44:24:cd:df:79:11:48:a8:3a:79:f9:41: aa:cd:7c:3a:87:56:40:ed:04:43:66:b6:49:76:a1:96:bc:06: 14:9f:5e:60:25:56:2a:e8:55:fe:93:be:41:af:80:5a:13:11: f5:8f:af:24:df:a1:79:67:fc:3b:fd:49:ec:4b:f6:fd:9d:14: 17:d9:ae:38:f8:68:e7:0c:54:77:bd:42:3f:b3:7d:1d:21:83: 0d:7a:ff:f3:fe:7f:78:38:e0:c1:d7:6a:36:f1:a1:34:b6:4a: 95:d6:03:66:c1:11:33:58:ee:92:10:50:ec:f0:70:c3:37:f1: d8:59:00:7f:ae:a1:9e:75:38:f4:6e:7d:c0:1b:76:13:3f:dc: dc:99:d6:90:82:c6:b6:be:38:b3:23:ac:64:19:a3:e7:f1:df: b8:65:ca:d3:1f:d5:37:73:57:e9:ad:95:84:71:19:19:66:e0: 2b:61:f1:b4:e2:89:67:9d:f9:36:a9:41:67:9c:9b:51:14:64: c4:83:2c:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwOTI4MTYwNTM4WhcNMjYxMDA1MTYwNTM4WjAYMRYwFAYD VQQDEw02YWJhOTA1My1mOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dHmhJpzULe2yWvDBw8F2mCh7EjUASrAjagO9ymfE3p4Zlf6+Bb1bPr4lutl blt0ff73NzL9HgVCO3YWa9ieLBy1WzDOaGAiLUvnB1C3hvDjFge2jp2h+VzMGbzF lnQ6BvUWZx+t308N9XdfOB3QrlJPoKb1hE+0zHA+9xIFd7N0rlyUkXO84X62rdnx GwEZgczG1nowhDqOMIWWKWomrYXhbw/gqTH2IIQh/XWlz8zPwX64G/zAvgJXIu5L ouvxjd+ylXSlgPXz9GEscaicuqBTl++9FJYWuzPv/08lOe/EBEWz+K0qNVd3fMC0 GJdoW41Eqg75YyPvgFjmTsukNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFa9wxbY OWWb42DGOXKhrSdsnxqHMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvSF0FZG8VmV79LnH+lyeNVB2trAuKOGItRPnTOC33BqfQpXNQf1zNSDJPn/p d86zbs+mKR1u5sL4byfLRCTN33kRSKg6eflBqs18OodWQO0EQ2a2SXahlrwGFJ9e YCVWKuhV/pO+Qa+AWhMR9Y+vJN+heWf8O/1J7Ev2/Z0UF9muOPho5wxUd71CP7N9 HSGDDXr/8/5/eDjgwddqNvGhNLZKldYDZsERM1jukhBQ7PBwwzfx2FkAf66hnnU4 9G59wBt2Ez/c3JnWkILGtr44syOsZBmj5/HfuGXK0x/VN3NX6a2VhHEZGWbgK2Hx tOKJZ535NqlBZ5ybURRkxIMsxA== -----END CERTIFICATE-----Generated at Tue Sep 29 04:38:33 2026 by rpki-client