$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: wkOFEwFfmv44RhCmVHYS668NjnnYXiw7bzaD02nr9nM= Subject key identifier: 72:2D:05:A9:FF:1E:BD:33:63:43:82:4C:6A:72:25:76:7E:09:BE:8F Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0A5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 0A51 Signing time: Sun 20 Sep 2026 19:36:41 +0000 Manifest this update: Sun 20 Sep 2026 19:36:40 +0000 Manifest next update: Sun 27 Sep 2026 19:36:40 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: XHQWdaZ1iIFD9MQ+/yCWYwhiqD57/QA11CQLh3UNtvU=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Sep 20 19:36:40 2026 GMT Not After : Sep 27 19:36:40 2026 GMT Subject: CN=6ab035c9-8fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:64:32:6e:5b:c9:3a:bf:15:54:5f:10:8c: 5d:11:4b:24:93:19:3c:0b:08:85:fa:e4:87:cf:b5: a8:7b:8a:80:98:a1:81:8c:61:d7:41:ba:a1:06:da: d5:67:0b:65:1d:6d:ea:34:cc:8b:96:93:bd:2c:5b: 3d:37:b6:ee:ee:5e:cd:c8:52:04:7f:e6:6a:e4:5a: ba:cc:ed:ae:89:95:66:9e:63:c5:5f:18:c6:48:ac: ff:a9:f0:67:56:dc:37:ed:f6:63:f9:e8:b2:10:2f: 8d:81:cd:57:f4:9f:2f:a0:78:dd:2a:16:e8:7d:0d: b1:95:65:82:c3:09:ef:29:f4:47:f5:61:48:df:a8: 0c:ab:2d:4c:07:2b:47:c2:96:74:39:11:b0:d7:8d: 4a:6b:8b:52:f7:13:10:e6:c9:22:3a:d5:b9:f4:cf: 2c:2d:f3:f3:6a:2e:a7:e8:99:4c:8c:2f:43:79:81: b2:97:85:df:36:d1:c2:51:09:d0:4d:e2:7d:d4:bf: 12:7b:7b:80:f5:6f:77:c2:cf:f3:81:b3:cd:9c:cc: d2:9c:b2:39:5a:18:d7:f3:27:dc:9b:bc:dc:1e:0d: fc:7f:cc:ed:c0:9b:ac:d6:38:d6:f9:cf:c5:74:a0: d9:31:18:28:8d:8c:94:70:18:66:c0:f9:a5:68:1c: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2D:05:A9:FF:1E:BD:33:63:43:82:4C:6A:72:25:76:7E:09:BE:8F X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:15:76:29:c9:b9:63:b8:36:42:f7:6c:a9:4e:f8:ac:91: 47:69:7c:ec:e9:ce:38:24:25:d3:d8:be:f9:bf:a9:ad:d5:ff: 8f:d1:44:74:61:1e:d1:22:a1:ea:f9:8c:4e:ac:32:1b:c5:4c: e4:0e:21:5a:b1:97:dd:fe:80:38:54:4d:25:65:4e:75:53:e8: bf:54:fd:06:ae:29:eb:fc:1e:96:52:68:30:06:2d:fe:3a:88: db:7b:bf:0b:a5:9d:1f:90:71:55:be:1d:40:82:01:0f:8c:6b: d0:5d:da:1f:bd:00:a8:a2:f6:5d:47:d8:42:fa:65:73:5a:ab: 24:d1:63:bf:90:6b:90:e1:1c:8a:a7:b1:76:99:67:06:67:49: 9a:aa:f7:f8:f0:a1:dd:26:71:d3:ba:df:75:d7:71:93:c6:59: 88:2d:13:0b:d3:76:28:3f:57:e5:8c:e9:5b:b6:80:a0:d6:4d: 03:7e:ed:17:14:c0:6e:7c:ae:eb:20:04:83:8c:8e:dc:a0:1d: 31:d4:3c:06:18:3d:6d:67:cf:71:09:86:50:fe:82:68:1c:09: 69:15:d2:15:3d:34:7c:f6:e8:14:9c:94:fe:38:7d:59:1b:e2: 4c:53:31:db:f0:f4:5b:a2:c4:94:0c:e7:bf:a1:91:cf:0d:c0: d9:fe:6a:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjYwOTIwMTkzNjQwWhcNMjYwOTI3MTkzNjQwWjAYMRYwFAYD VQQDEw02YWIwMzVjOS04ZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDxkMm5byTq/FVRfEIxdEUskkxk8CwiF+uSHz7Woe4qAmKGBjGHXQbqhBtrV ZwtlHW3qNMyLlpO9LFs9N7bu7l7NyFIEf+Zq5Fq6zO2uiZVmnmPFXxjGSKz/qfBn Vtw37fZj+eiyEC+Ngc1X9J8voHjdKhbofQ2xlWWCwwnvKfRH9WFI36gMqy1MBytH wpZ0ORGw141Ka4tS9xMQ5skiOtW59M8sLfPzai6n6JlMjC9DeYGyl4XfNtHCUQnQ TeJ91L8Se3uA9W93ws/zgbPNnMzSnLI5WhjX8yfcm7zcHg38f8ztwJus1jjW+c/F dKDZMRgojYyUcBhmwPmlaBzDHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHItBan/ Hr0zY0OCTGpyJXZ+Cb6PMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMMVdinJuWO4NkL3bKlO+KyRR2l87OnOOCQl09i++b+prdX/j9FEdGEe0SKh 6vmMTqwyG8VM5A4hWrGX3f6AOFRNJWVOdVPov1T9Bq4p6/wellJoMAYt/jqI23u/ C6WdH5BxVb4dQIIBD4xr0F3aH70AqKL2XUfYQvplc1qrJNFjv5BrkOEciqexdpln BmdJmqr3+PCh3SZx07rfdddxk8ZZiC0TC9N2KD9X5YzpW7aAoNZNA37tFxTAbnyu 6yAEg4yO3KAdMdQ8Bhg9bWfPcQmGUP6CaBwJaRXSFT00fPboFJyU/jh9WRviTFMx 2/D0W6LElAznv6GRzw3A2f5qUA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:57:04 2026 by rpki-client