$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: KTQqXg5zULkfU1UZGlzt4kHP+lf/iIv+NadsJ48udsc= Subject key identifier: DE:9A:E1:A1:2D:9A:83:82:7F:CA:2B:FA:6F:2B:9C:2B:23:E5:D9:6B Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 072F Signing time: Sun 20 Sep 2026 21:56:08 +0000 Manifest this update: Sun 20 Sep 2026 21:56:08 +0000 Manifest next update: Sun 27 Sep 2026 21:56:08 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: RO9/HIl9MxDQlRCgHs88askgrkUt4r1vCbxFSfyw1cQ=) 2: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=) 3: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=) 4: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: Sep 20 21:56:08 2026 GMT Not After : Sep 27 21:56:08 2026 GMT Subject: CN=6ab05678-ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:d9:21:07:16:ff:87:e8:e3:43:67:9f:74: 5a:70:e2:9e:bf:23:a3:51:3a:03:98:ef:03:06:f1: db:f3:9a:79:06:cb:9a:dc:86:65:ca:07:01:da:2b: 58:b0:f5:04:18:9d:ec:bd:f7:23:74:d1:0d:23:10: 10:80:ac:17:cb:97:b3:a5:2c:a1:44:fc:fd:74:33: da:7b:7e:0e:92:31:44:be:65:f6:95:ad:98:f8:ae: 5c:bb:52:7e:c8:d2:1b:1e:b3:c8:f0:56:b5:50:e9: 88:fd:e7:d0:51:54:54:8b:90:ec:cb:c5:36:81:5a: e5:dd:0f:a3:be:19:6f:07:1d:16:f9:e1:70:20:b5: dd:74:ab:e2:d1:5c:00:04:e2:fc:8a:dc:eb:b9:1c: 4a:da:6b:04:7d:ea:90:38:6b:16:25:18:52:88:25: 66:9c:40:93:11:36:47:de:19:ac:91:ba:ea:2e:a1: 1b:1a:c7:d5:35:72:34:94:d2:dc:ed:08:ae:d3:15: 68:c1:9a:11:68:ae:0a:c3:21:a7:22:ff:d8:03:9a: 30:b9:47:c3:ee:f9:86:2a:6b:be:d8:54:34:1a:98: a0:c6:ef:c2:10:84:7c:e3:1a:c2:bb:f0:ab:31:db: c9:4d:91:78:4f:5e:bb:fb:4f:ac:ee:bd:e2:ac:ce: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:E1:A1:2D:9A:83:82:7F:CA:2B:FA:6F:2B:9C:2B:23:E5:D9:6B X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:42:ad:dc:7c:64:a0:a5:bb:4e:00:05:9b:fb:70:35:8a:44: dc:fb:09:5e:b2:ee:fc:7f:9a:93:ed:f7:57:eb:77:02:e3:1c: ff:96:18:c1:01:87:af:01:d1:e6:67:44:56:82:40:f0:0d:ef: 41:63:c8:64:e2:2c:77:31:b8:91:13:fa:f1:90:cb:9f:fa:c7: 1a:19:f0:99:6e:48:11:b1:c4:ae:e2:84:60:c7:f7:c7:13:34: e6:84:b1:d8:6d:01:02:20:34:62:7c:8c:43:1b:26:95:0a:c0: 9d:88:7e:41:04:11:30:a7:73:c7:bb:e0:39:c9:e7:01:e1:e4: c1:f9:6f:9b:47:db:b9:e7:33:95:c1:ed:4b:b2:c8:4d:6f:a4: dd:ef:6b:69:af:4a:41:5d:cb:52:d2:07:7e:43:26:28:3e:52: 8d:0e:91:c2:2a:91:ea:3a:23:0f:58:29:b6:ea:44:ed:83:2d: 92:d7:f0:26:44:00:c8:25:9d:b4:aa:10:ff:e6:4f:72:ca:d8: ba:f1:93:d9:f9:d1:dc:08:4a:fa:4d:e2:34:93:c7:c1:14:58: b7:a9:da:11:a8:43:cd:15:c1:61:a0:d0:74:82:16:27:06:ae: 61:a2:00:b1:48:a8:5a:12:e1:10:dd:8c:bb:f0:cd:6a:89:84: 41:82:be:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjYwOTIwMjE1NjA4WhcNMjYwOTI3MjE1NjA4WjAYMRYwFAYD VQQDEw02YWIwNTY3OC1kZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpDZIQcW/4fo40Nnn3RacOKevyOjUToDmO8DBvHb85p5Bsua3IZlygcB2itY sPUEGJ3svfcjdNENIxAQgKwXy5ezpSyhRPz9dDPae34OkjFEvmX2la2Y+K5cu1J+ yNIbHrPI8Fa1UOmI/efQUVRUi5Dsy8U2gVrl3Q+jvhlvBx0W+eFwILXddKvi0VwA BOL8itzruRxK2msEfeqQOGsWJRhSiCVmnECTETZH3hmskbrqLqEbGsfVNXI0lNLc 7Qiu0xVowZoRaK4KwyGnIv/YA5owuUfD7vmGKmu+2FQ0Gpigxu/CEIR84xrCu/Cr MdvJTZF4T167+0+s7r3irM5zpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6a4aEt moOCf8or+m8rnCsj5dlrMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyUKt3HxkoKW7TgAFm/twNYpE3PsJXrLu/H+ak+33V+t3AuMc/5YYwQGHrwHR 5mdEVoJA8A3vQWPIZOIsdzG4kRP68ZDLn/rHGhnwmW5IEbHEruKEYMf3xxM05oSx 2G0BAiA0YnyMQxsmlQrAnYh+QQQRMKdzx7vgOcnnAeHkwflvm0fbueczlcHtS7LI TW+k3e9raa9KQV3LUtIHfkMmKD5SjQ6RwiqR6jojD1gptupE7YMtktfwJkQAyCWd tKoQ/+ZPcsrYuvGT2fnR3AhK+k3iNJPHwRRYt6naEahDzRXBYaDQdIIWJwauYaIA sUioWhLhEN2Mu/DNaomEQYK+Fw== -----END CERTIFICATE-----Generated at Tue Sep 22 14:36:27 2026 by rpki-client