$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: X+HHefPwuBgTm9s8rr0yVsAKrI0bJq7IdlG0rzk9Dfw= Subject key identifier: 31:9A:0A:4D:99:9A:FB:60:74:B4:66:70:CD:95:D2:A5:B0:55:44:8E Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 019C Signing time: Sat 19 Sep 2026 04:21:36 +0000 Manifest this update: Sat 19 Sep 2026 04:21:36 +0000 Manifest next update: Sat 26 Sep 2026 04:21:36 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: 9P9/ei90e9DXuq7ksxH7Jnc+NkWJC84W+4zcvL6n+P4=) 2: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=) 3: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Sep 19 04:21:36 2026 GMT Not After : Sep 26 04:21:36 2026 GMT Subject: CN=6aae0dd0-662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:de:4d:a2:51:0d:79:d5:fb:c5:6d:2d:0c: 97:76:43:28:5f:1e:50:d4:ed:c5:e0:97:db:02:d0: f2:0b:83:85:4c:ff:ff:17:98:e5:1c:06:4f:ef:02: cb:58:24:bf:c7:3c:89:d8:53:81:18:1e:b1:63:8c: d4:99:54:68:76:11:50:64:9e:be:32:36:aa:10:46: 0f:2d:49:00:79:59:4b:c8:a5:fe:dc:35:ab:35:20: 56:41:83:13:81:da:ff:78:68:bc:e7:85:ba:e3:9a: 5c:e5:14:93:70:58:8f:de:78:2e:28:8b:ae:7f:3f: 15:ad:9f:77:e6:7f:bd:26:c3:14:91:15:89:0f:14: 1f:0f:f9:56:cd:f2:6d:9f:92:d8:b2:7c:92:90:fd: cb:b1:a8:2e:f8:64:92:2b:a5:58:2b:74:91:26:f3: b7:a3:a5:ad:b0:24:17:a2:28:b0:39:89:d0:d4:d2: 7a:9a:7c:67:b0:dd:74:6f:83:e8:ec:6f:58:d9:3d: f8:8e:99:b5:11:68:ac:15:b4:2c:45:8c:34:73:3b: 25:fa:9d:d3:71:62:11:a7:3b:26:8c:98:35:44:a5: e8:68:93:28:93:f2:af:b7:e7:50:75:a3:a7:63:69: 47:76:48:2f:b4:da:12:f1:f2:47:7e:21:fe:1a:ff: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:0A:4D:99:9A:FB:60:74:B4:66:70:CD:95:D2:A5:B0:55:44:8E X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:55:75:f7:90:2c:b6:1c:94:2a:4e:aa:a3:03:02:31:3f: 92:02:4b:8f:17:da:53:97:ee:ed:c0:71:de:78:3d:e1:30:02: ca:af:4f:f2:97:86:e0:6c:c8:30:19:dc:58:88:af:fa:af:53: 4a:fc:5d:28:d5:34:f3:e8:4f:fa:ea:08:65:b4:71:dd:28:f9: 98:ca:19:61:92:fc:61:9d:f0:0f:4b:ec:32:e4:23:2f:14:11: 98:cc:54:d0:37:45:d2:e6:b7:47:20:7e:ed:b0:c3:53:3b:ed: 08:ee:56:f9:7b:3e:eb:b3:b6:22:2e:af:d7:0d:57:55:f2:6e: 58:23:72:89:5e:9f:76:d2:b3:9e:6a:ee:4a:0e:7f:d0:34:c2: 4a:34:af:a7:59:04:8f:f3:33:ce:55:11:7c:5d:52:cf:ef:66: 43:8f:8b:43:da:f9:20:32:72:1c:32:71:92:9c:5e:59:24:72: 00:57:e1:ad:7a:09:2a:1e:04:22:c7:47:66:d4:fe:3f:2b:4b: 85:5d:0d:32:72:51:9a:df:dd:a6:87:01:ee:df:e8:23:96:0f: d1:c9:21:6b:26:01:c5:52:61:03:bb:19:b3:1b:57:81:13:67: ac:e8:05:ad:76:d8:a0:58:02:4e:f3:a0:b0:ce:88:a9:02:ef: 07:ad:e3:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjYwOTE5MDQyMTM2WhcNMjYwOTI2MDQyMTM2WjAYMRYwFAYD VQQDEw02YWFlMGRkMC02NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeHeTaJRDXnV+8VtLQyXdkMoXx5Q1O3F4JfbAtDyC4OFTP//F5jlHAZP7wLL WCS/xzyJ2FOBGB6xY4zUmVRodhFQZJ6+MjaqEEYPLUkAeVlLyKX+3DWrNSBWQYMT gdr/eGi854W645pc5RSTcFiP3nguKIuufz8VrZ935n+9JsMUkRWJDxQfD/lWzfJt n5LYsnySkP3Lsagu+GSSK6VYK3SRJvO3o6WtsCQXoiiwOYnQ1NJ6mnxnsN10b4Po 7G9Y2T34jpm1EWisFbQsRYw0czsl+p3TcWIRpzsmjJg1RKXoaJMok/Kvt+dQdaOn Y2lHdkgvtNoS8fJHfiH+Gv9AiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGaCk2Z mvtgdLRmcM2V0qWwVUSOMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIq1VdfeQLLYclCpOqqMDAjE/kgJLjxfaU5fu7cBx3ng94TACyq9P8peG4GzI MBncWIiv+q9TSvxdKNU08+hP+uoIZbRx3Sj5mMoZYZL8YZ3wD0vsMuQjLxQRmMxU 0DdF0ua3RyB+7bDDUzvtCO5W+Xs+67O2Ii6v1w1XVfJuWCNyiV6fdtKznmruSg5/ 0DTCSjSvp1kEj/MzzlURfF1Sz+9mQ4+LQ9r5IDJyHDJxkpxeWSRyAFfhrXoJKh4E IsdHZtT+PytLhV0NMnJRmt/dpocB7t/oI5YP0ckhayYBxVJhA7sZsxtXgRNnrOgF rXbYoFgCTvOgsM6IqQLvB63jqQ== -----END CERTIFICATE-----Generated at Mon Sep 21 03:39:51 2026 by rpki-client