$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: jIfWujGoe8lPWdwWfzKi7HH/+Q8lvKnMffn4x/NUISU= Subject key identifier: D6:C0:D4:06:78:C6:AC:90:54:47:32:84:B8:05:CD:72:DB:2D:FB:CA Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 021B Signing time: Mon 21 Sep 2026 03:06:49 +0000 Manifest this update: Mon 21 Sep 2026 03:06:49 +0000 Manifest next update: Mon 28 Sep 2026 03:06:49 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: V+yqu+sMp0PVLImsKHHyUHNexV7YVjF6ZBMmGEAJHO4=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Sep 21 03:06:49 2026 GMT Not After : Sep 28 03:06:49 2026 GMT Subject: CN=6ab09f49-4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:73:6c:33:f9:e9:04:55:cb:41:34:2f:ba: 7b:13:ef:ee:50:a6:d8:76:bd:f9:6d:99:49:c4:27: 89:f1:96:50:77:a0:9c:30:8c:66:9b:c8:9a:5c:be: 0c:fb:3d:ed:5f:b6:e7:e6:d9:d3:2c:f0:7e:70:97: 52:8a:04:ca:45:b6:6f:10:fc:2e:12:0e:67:b3:1b: 84:79:d5:cb:c1:58:e1:21:6f:46:94:4c:64:66:d3: 12:54:a1:20:e2:6b:a9:eb:74:84:52:37:28:ce:9d: b1:53:f3:41:dc:9b:be:98:8b:e2:01:5a:ad:4d:35: 74:30:dc:61:cf:97:4a:7c:ee:9f:00:c8:e8:ca:36: c6:47:d1:69:b6:a3:3a:70:69:24:5e:2e:0b:38:ca: fe:b0:00:48:f8:93:91:3d:34:87:f1:d7:ca:51:0f: b3:fc:9e:4a:4f:11:81:2d:62:30:b6:9f:60:d0:71: 65:a6:32:06:80:82:2c:21:58:56:04:73:ca:1d:6d: b6:9f:97:27:27:3a:63:af:ec:b1:5c:32:32:a3:96: eb:87:0d:a4:33:f6:b0:a0:f9:c9:c9:e6:d3:12:9b: 7d:85:68:60:6e:c9:bf:58:a8:16:e3:f7:72:c0:74: 0d:9a:7a:d7:a0:1e:6b:7a:49:c4:57:3d:f8:24:a9: 5c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:D4:06:78:C6:AC:90:54:47:32:84:B8:05:CD:72:DB:2D:FB:CA X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:7e:e7:ea:e9:e6:be:7d:9f:4a:48:55:2f:ac:a9:a3:43: e4:e7:7f:d4:79:5d:4b:a1:83:26:7e:c7:57:06:e4:47:ac:a5: d5:e9:ea:67:1d:82:1a:20:51:fd:a2:99:52:d5:68:fe:98:ee: ff:1b:28:3b:8a:43:16:21:fa:85:91:24:08:85:3e:15:64:50: d3:92:2c:b3:69:72:1e:36:2a:c8:3a:51:00:66:91:0b:67:88: b8:bc:af:66:c7:a3:82:2a:eb:b6:34:f2:1b:fb:d4:86:e0:d0: 64:8a:e9:a9:d3:05:a2:3f:9b:0a:bb:2e:e9:94:e9:18:34:35: b2:92:e4:b2:dd:7f:f2:3b:4f:a6:5d:3a:b7:5a:f7:06:cf:3a: f8:53:94:8c:dc:2a:54:dd:6b:d9:91:af:04:1d:2f:04:5d:bd: fd:c2:a8:22:0b:72:4f:c3:05:bb:42:01:59:52:96:af:90:ab: b0:20:1c:54:bc:f3:04:bf:53:38:0f:7c:29:b4:cc:33:27:35: 51:4d:61:0b:87:ae:24:da:43:e1:89:e5:c5:b8:71:5e:01:f8: c0:8d:fa:b0:c4:be:60:57:60:e2:30:43:3b:dc:79:fc:b8:6f: 77:6c:7c:87:3f:6a:91:87:c0:92:73:02:da:c6:f0:1c:b1:3f: da:88:15:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYwOTIxMDMwNjQ5WhcNMjYwOTI4MDMwNjQ5WjAYMRYwFAYD VQQDEw02YWIwOWY0OS00MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjpzbDP56QRVy0E0L7p7E+/uUKbYdr35bZlJxCeJ8ZZQd6CcMIxmm8iaXL4M +z3tX7bn5tnTLPB+cJdSigTKRbZvEPwuEg5nsxuEedXLwVjhIW9GlExkZtMSVKEg 4mup63SEUjcozp2xU/NB3Ju+mIviAVqtTTV0MNxhz5dKfO6fAMjoyjbGR9FptqM6 cGkkXi4LOMr+sABI+JORPTSH8dfKUQ+z/J5KTxGBLWIwtp9g0HFlpjIGgIIsIVhW BHPKHW22n5cnJzpjr+yxXDIyo5brhw2kM/awoPnJyebTEpt9hWhgbsm/WKgW4/dy wHQNmnrXoB5reknEVz34JKlcwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbA1AZ4 xqyQVEcyhLgFzXLbLfvKMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAAd+5+rp5r59n0pIVS+sqaND5Od/1HldS6GDJn7HVwbkR6yl1enqZx2CGiBR /aKZUtVo/pju/xsoO4pDFiH6hZEkCIU+FWRQ05Iss2lyHjYqyDpRAGaRC2eIuLyv ZsejgirrtjTyG/vUhuDQZIrpqdMFoj+bCrsu6ZTpGDQ1spLkst1/8jtPpl06t1r3 Bs86+FOUjNwqVN1r2ZGvBB0vBF29/cKoIgtyT8MFu0IBWVKWr5CrsCAcVLzzBL9T OA98KbTMMyc1UU1hC4euJNpD4YnlxbhxXgH4wI36sMS+YFdg4jBDO9x5/Lhvd2x8 hz9qkYfAknMC2sbwHLE/2ogVwg== -----END CERTIFICATE-----Generated at Tue Sep 22 23:09:29 2026 by rpki-client