$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: aQMBlxbsaB+gcFEM3bD682R+fr/V33q+vD7gcHk2rVo= Subject key identifier: 18:AB:04:9F:89:27:49:15:F6:2A:F0:77:62:69:F8:E3:BD:CC:26:D1 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0EFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0EF0 Signing time: Sun 20 Sep 2026 17:37:31 +0000 Manifest this update: Sun 20 Sep 2026 17:37:30 +0000 Manifest next update: Sun 27 Sep 2026 17:37:30 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: aH7zmy2P2N3jBnyaRBgY/zld0awEykzGR+TuISLA7iU=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: SaLvqkgAoaMwPLBw4Tch11GIw6y7LZLFKt0YhnsodDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3835 (0xefb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Sep 20 17:37:30 2026 GMT Not After : Sep 27 17:37:30 2026 GMT Subject: CN=6ab019db-78cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b7:d7:4a:1a:1c:96:2d:f4:f4:61:11:af:ca: af:6c:18:6c:8d:45:15:f6:cc:ba:5a:9e:9f:f3:4f: 9f:1a:b2:f9:df:3c:38:36:81:e8:23:4a:c0:09:cf: fa:0e:69:4d:65:c3:bf:0a:95:c1:a9:31:f0:2f:ae: 28:79:a5:2b:2f:53:23:91:88:9d:5b:b0:4a:7d:8d: 86:21:e4:9f:db:00:b8:4d:d9:3b:49:ba:98:27:d2: 0d:1d:6d:e2:66:04:99:32:3c:e6:61:68:43:ae:1b: 72:1c:bd:8d:c1:d2:1e:7b:13:b7:34:49:d4:46:ee: e4:06:3e:c2:5c:9b:1d:6c:9d:0c:ad:da:48:ab:7a: 14:68:fb:20:da:42:14:dd:21:0c:e3:c1:5b:83:5d: 28:9c:a0:fe:ad:26:8a:21:35:73:ef:d4:f1:83:6b: b4:12:12:82:12:0d:c0:da:63:f3:d5:c9:88:cd:d3: 9c:a6:dd:63:49:41:7e:a9:41:8e:f0:93:7d:fa:14: 51:32:59:0a:47:bc:d7:4b:0c:79:cf:7c:52:e8:5b: 88:61:87:21:6a:5a:9f:43:71:79:b7:96:c5:42:a3: 61:2c:a9:75:1c:09:6e:bc:c3:4b:93:69:cc:43:a9: 16:38:8b:75:02:d8:94:cd:fc:06:2a:51:5e:84:f2: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AB:04:9F:89:27:49:15:F6:2A:F0:77:62:69:F8:E3:BD:CC:26:D1 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c7:f4:3b:0d:7c:31:55:d4:b6:6b:1f:e1:d7:0d:c6:2f:f4: df:1c:2a:40:92:b1:f9:6c:bd:8c:e1:e2:d3:ed:e6:bf:d2:38: 7c:0b:f0:78:34:be:79:ca:5a:a8:22:0a:80:43:4e:f6:fe:7f: d1:41:1f:8f:66:ed:16:4a:e2:9b:02:b8:46:45:81:a3:a5:8b: 3a:6b:87:99:de:f4:85:16:ff:8b:6f:6a:df:92:94:f2:4e:f3: 4b:3c:c9:7c:54:b5:ee:38:a1:39:b3:fb:a4:4c:46:e0:34:ab: ff:37:20:f2:8e:a6:9b:99:1d:fc:73:be:e7:db:3c:a5:b8:90: f6:85:a7:fc:77:c1:ef:d1:9e:4a:7b:02:c3:89:b1:41:d3:0e: bd:00:f1:58:2c:81:43:13:83:1e:3b:9c:a6:30:0d:98:c0:d5: bc:5b:7a:e9:a9:e9:9e:49:05:50:ff:f4:7f:52:02:3b:ca:1c: ae:bb:8a:aa:2d:33:be:bb:dc:bc:94:b2:4b:ff:a7:b2:c3:31: 09:f7:f7:66:36:9c:74:0d:6b:b9:65:35:13:95:6f:f2:10:8f: ea:ac:83:28:45:4b:50:0b:65:de:d6:06:68:1f:15:81:ab:13: e9:05:17:73:44:0b:b7:6b:33:73:54:95:c4:b6:d6:eb:57:b7: 68:97:cd:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjYwOTIwMTczNzMwWhcNMjYwOTI3MTczNzMwWjAYMRYwFAYD VQQDEw02YWIwMTlkYi03OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAibfXShocli309GERr8qvbBhsjUUV9sy6Wp6f80+fGrL53zw4NoHoI0rACc/6 DmlNZcO/CpXBqTHwL64oeaUrL1MjkYidW7BKfY2GIeSf2wC4Tdk7SbqYJ9INHW3i ZgSZMjzmYWhDrhtyHL2NwdIeexO3NEnURu7kBj7CXJsdbJ0MrdpIq3oUaPsg2kIU 3SEM48Fbg10onKD+rSaKITVz79Txg2u0EhKCEg3A2mPz1cmIzdOcpt1jSUF+qUGO 8JN9+hRRMlkKR7zXSwx5z3xS6FuIYYchalqfQ3F5t5bFQqNhLKl1HAluvMNLk2nM Q6kWOIt1AtiUzfwGKlFehPJ9zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBirBJ+J J0kV9irwd2Jp+OO9zCbRMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMf0Ow18MVXUtmsf4dcNxi/03xwqQJKx+Wy9jOHi0+3mv9I4fAvweDS+ecpa qCIKgENO9v5/0UEfj2btFkrimwK4RkWBo6WLOmuHmd70hRb/i29q35KU8k7zSzzJ fFS17jihObP7pExG4DSr/zcg8o6mm5kd/HO+59s8pbiQ9oWn/HfB79GeSnsCw4mx QdMOvQDxWCyBQxODHjucpjANmMDVvFt66anpnkkFUP/0f1ICO8ocrruKqi0zvrvc vJSyS/+nssMxCff3ZjacdA1ruWU1E5Vv8hCP6qyDKEVLUAtl3tYGaB8VgasT6QUX c0QLt2szc1SVxLbW61e3aJfNsQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:41 2026 by rpki-client