$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft File: AWua7YGMT9MEeU6yQtiz5WdlpUU.mft (raw, json) Hash identifier: AZ8AF8IU5YYqAH+KjD2sa6wxHlpE2u5cY9DuzdTyAaU= Subject key identifier: F8:CC:61:C7:73:40:54:4F:27:41:2E:9F:0A:93:72:90:35:C0:4C:6F Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45 Certificate issuer: /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft Manifest number: 2C Signing time: Sun 27 Sep 2026 09:25:06 +0000 Manifest this update: Sun 27 Sep 2026 09:25:05 +0000 Manifest next update: Sun 04 Oct 2026 09:25:05 +0000 Files and hashes: 1: AWua7YGMT9MEeU6yQtiz5WdlpUU.crl (hash: V9LaIgx0JJ06l8eTJlmZ2HHnN5uvlt8Y6UR2cqmx3yM=) 2: E9B1F1B8A91811F18EC286413C11F970.roa (hash: wImMWO9pGivt+ncg4d/fuAa6GL2v48XaohUBkLie4ao=) 3: ECDD26C485F411F18488A9A174A30FBC.roa (hash: VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545 Validity Not Before: Sep 27 09:25:05 2026 GMT Not After : Oct 4 09:25:05 2026 GMT Subject: CN=6ab8e0f2-ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:f6:29:e1:d5:0f:d1:2b:a5:3a:f3:2d:95: ea:b6:ed:f4:a3:11:24:02:c3:68:89:d0:e1:4f:d9: 29:9c:11:86:12:4d:6e:19:44:04:cd:72:ee:b5:99: eb:38:04:d6:a2:70:5d:ab:66:88:20:23:a2:ea:a9: 08:61:71:e7:a7:9f:24:5f:77:92:bb:39:4b:08:4c: 80:d3:37:d5:83:29:43:fa:08:ba:ee:cd:1a:74:d1: 8a:cc:1e:b7:e9:91:77:1d:51:1c:c3:cf:aa:33:c1: 27:f3:4f:d9:e7:cb:4d:06:5b:ed:08:17:b2:b2:a2: da:56:2c:9e:a9:f4:70:55:ff:5b:8b:56:76:df:84: 87:48:f6:84:1e:6b:7d:e2:63:6b:6a:7f:12:ee:96: 93:a7:25:9b:e8:b6:2b:b8:c9:fe:d4:b6:87:bb:46: d7:fd:27:73:43:0f:d3:4c:fb:c5:38:bf:ec:c7:e5: 9d:2d:92:e0:81:9b:b0:bd:74:cf:d0:48:e5:34:57: 1b:12:6e:87:3d:83:ab:4c:20:d8:a1:5d:ca:8c:5e: 66:93:27:98:9c:5a:19:8d:61:7a:68:83:68:14:83: 72:81:d8:2a:48:80:be:43:31:f6:39:b2:65:1e:4d: ff:b1:21:23:df:6d:82:bf:c9:0b:70:69:ec:ed:7c: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:61:C7:73:40:54:4F:27:41:2E:9F:0A:93:72:90:35:C0:4C:6F X509v3 Authority Key Identifier: keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:01:1e:46:d3:b3:3b:11:ae:99:c6:e8:b4:b1:a8:61:3f:e3: 34:bf:90:f4:4f:d5:8d:e9:27:44:66:52:25:4f:e7:c8:6f:46: 27:76:0b:b3:67:aa:22:45:39:dc:fe:e6:20:12:83:c7:3c:ad: 0d:e9:78:7b:d9:69:da:13:3e:20:f6:35:34:61:6d:a4:23:f1: 7c:8d:90:60:fe:7e:cd:d3:fa:93:b5:b2:89:b1:48:b5:4e:00: 4f:1c:f4:b6:66:da:e6:c5:7d:31:67:24:6b:02:53:b3:1d:7e: f4:a2:9c:f4:0c:ec:2e:90:92:90:18:8d:bf:8b:95:92:f1:ca: 12:33:54:63:c2:99:13:ba:ca:1c:6e:17:d5:04:79:fc:3f:57: 37:9f:06:9e:0d:36:af:90:83:93:9d:4c:ee:fd:e5:ce:b7:b2: 3e:24:83:a5:8a:2c:61:78:ec:52:86:b2:ef:f4:99:2c:b3:0f: 51:8a:cd:11:e0:0e:e2:9e:06:dd:7d:b3:dc:19:3c:c2:3b:bb: 48:1b:8e:5f:79:c6:72:b3:99:c9:ad:a9:6c:d5:d5:6b:b1:c7: cb:4b:37:81:a9:92:6c:cc:4b:13:ae:9e:65:30:9c:66:2a:04: bd:b1:34:6c:10:f6:dc:5c:db:5a:c0:55:5c:9d:19:65:d6:8e: b4:d1:ec:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNFODExMC8GA1UEBRMoMDE2QjlBRUQ4MThDNEZEMzA0Nzk0RUIyNDJEOEIzRTU2 NzY1QTU0NTAeFw0yNjA5MjcwOTI1MDVaFw0yNjEwMDQwOTI1MDVaMBgxFjAUBgNV BAMTDTZhYjhlMGYyLWFlOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3IPYp4dUP0SulOvMtleq27fSjESQCw2iJ0OFP2SmcEYYSTW4ZRATNcu61mes4 BNaicF2rZoggI6LqqQhhceennyRfd5K7OUsITIDTN9WDKUP6CLruzRp00YrMHrfp kXcdURzDz6ozwSfzT9nny00GW+0IF7KyotpWLJ6p9HBV/1uLVnbfhIdI9oQea33i Y2tqfxLulpOnJZvotiu4yf7Utoe7Rtf9J3NDD9NM+8U4v+zH5Z0tkuCBm7C9dM/Q SOU0VxsSboc9g6tMINihXcqMXmaTJ5icWhmNYXpog2gUg3KB2CpIgL5DMfY5smUe Tf+xISPfbYK/yQtwaeztfObvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+Mxhx3NA VE8nQS6fCpNykDXATG8wHwYDVR0jBBgwFoAUAWua7YGMT9MEeU6yQtiz5WdlpUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0U4LzZCRUM1OTIyODVG NDExRjFCOUEwMDQ4ODc0QTMwRkJDL0FXdWE3WUdNVDlNRWVVNnlRdGl6NVdkbHBV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVd1YTdZR01UOU1FZVU2eVF0aXo1V2RscFVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0U4LzZCRUM1OTIyODVGNDExRjFCOUEwMDQ4ODc0QTMwRkJDL0FXdWE3WUdNVDlN RWVVNnlRdGl6NVdkbHBVVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0AR5G07M7Ea6Zxui0sahhP+M0v5D0T9WN6SdEZlIlT+fIb0YndguzZ6oiRTnc /uYgEoPHPK0N6Xh72WnaEz4g9jU0YW2kI/F8jZBg/n7N0/qTtbKJsUi1TgBPHPS2 ZtrmxX0xZyRrAlOzHX70opz0DOwukJKQGI2/i5WS8coSM1RjwpkTusocbhfVBHn8 P1c3nwaeDTavkIOTnUzu/eXOt7I+JIOliixheOxShrLv9Jkssw9Ris0R4A7ingbd fbPcGTzCO7tIG45fecZys5nJrals1dVrscfLSzeBqZJszEsTrp5lMJxmKgS9sTRs EPbcXNtawFVcnRll1o600ezD -----END CERTIFICATE-----Generated at Sun Sep 27 14:51:08 2026 by rpki-client