$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json) Hash identifier: +48/i9IJetivvhnlvKmrDrO5ZF5Zmtt7EtImvrtpKII= Subject key identifier: 38:B1:E5:A4:52:37:7B:B0:5C:FB:B2:08:7C:87:C6:F8:F6:C5:EF:A4 Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft Manifest number: 1CDA Signing time: Mon 28 Sep 2026 16:11:37 +0000 Manifest this update: Mon 28 Sep 2026 16:11:36 +0000 Manifest next update: Mon 05 Oct 2026 16:11:36 +0000 Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: k4bwMMtjgUwpLSA5XxzqNoxvnh7CUrtIMrPTXp4mzdY=) 2: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=) 3: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7408 (0x1cf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Sep 28 16:11:36 2026 GMT Not After : Oct 5 16:11:36 2026 GMT Subject: CN=6aba91b9-c2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:1f:59:cc:a3:ce:d7:54:ee:65:00:9e:e9: cb:c7:86:e5:e7:7b:32:3c:8b:b0:21:2f:55:2e:43: a3:d9:10:e7:7f:1c:e7:fa:0d:c5:98:06:a3:15:05: cb:d0:d5:a1:f1:81:4d:e2:42:f2:ee:e1:69:b4:da: 10:4c:9c:3a:6b:82:a0:f3:43:5d:50:0b:46:f1:4f: 17:ab:17:d5:88:43:35:b6:05:53:6b:0f:7c:26:e4: 3b:42:12:cd:aa:63:3b:26:36:2a:dc:da:3c:4f:56: 6d:6e:8b:bb:07:b2:9f:37:82:f7:44:c2:4b:b8:60: c7:88:fe:f0:4b:c5:0f:45:17:83:e8:a6:5f:b7:31: 52:95:f3:cd:08:7c:22:98:83:f1:47:4a:04:01:f0: e5:10:36:78:93:13:1d:19:5b:0e:0c:82:35:c4:a3: d4:6a:0f:b2:5d:de:5a:64:d3:b4:e9:41:0c:db:8f: 88:9a:d7:61:1f:51:43:d6:d3:bf:3d:47:40:6a:88: 56:cb:c6:78:43:bd:3a:9a:8b:b5:d7:21:1b:76:cc: f5:2d:f2:3a:b3:92:74:45:f3:f5:a8:08:9a:73:f5: 2e:cc:82:4a:b6:2e:07:12:e5:3c:9f:d6:90:48:e0: 9e:7b:78:bf:f4:3d:45:c5:16:71:5b:6a:ca:0a:d7: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:E5:A4:52:37:7B:B0:5C:FB:B2:08:7C:87:C6:F8:F6:C5:EF:A4 X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4a:6e:3a:88:47:27:25:be:b5:6d:b7:8f:06:e3:fe:48:04: ef:ee:00:50:12:f2:7e:e6:cb:bf:9f:71:93:df:b4:38:1a:a4: 1e:e7:85:37:56:43:c6:fd:4f:67:83:2f:60:e6:b8:9c:09:87: 29:a1:62:dc:00:10:bc:56:a6:4f:31:09:fa:36:f6:de:bd:a4: 31:fa:06:f7:0a:ff:12:7a:61:27:7f:cc:fe:03:1f:68:cd:b4: a0:84:23:31:8f:dc:12:aa:18:7b:56:63:b5:f9:80:ed:22:2e: 6e:c3:b8:bd:8a:ba:e8:04:d0:03:3a:cd:db:b0:7c:f1:b4:75: 46:dd:22:3e:bd:ae:44:be:d1:76:a4:89:ac:bd:69:84:8a:14: a3:4c:10:e1:f9:da:d6:a0:d5:3a:d5:f4:b9:74:e3:c5:ba:45: fe:01:13:87:f5:9c:b5:62:dc:4e:7b:f2:88:be:4e:52:f3:c7: f3:0f:d6:26:7d:b8:f1:70:38:6c:25:74:88:65:20:f5:95:ab: b2:70:5f:b5:d7:88:45:e2:f9:79:a9:f3:fe:fb:2e:ac:a5:e0: dc:a2:c3:9d:74:ea:09:49:0b:09:e6:f2:99:e7:b0:e4:d2:20: f9:07:c6:07:1b:7b:72:ed:94:23:86:51:a5:e7:66:12:4c:bb: 93:73:99:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjYwOTI4MTYxMTM2WhcNMjYxMDA1MTYxMTM2WjAYMRYwFAYD VQQDEw02YWJhOTFiOS1jMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzcfWcyjztdU7mUAnunLx4bl53syPIuwIS9VLkOj2RDnfxzn+g3FmAajFQXL 0NWh8YFN4kLy7uFptNoQTJw6a4Kg80NdUAtG8U8XqxfViEM1tgVTaw98JuQ7QhLN qmM7JjYq3No8T1Ztbou7B7KfN4L3RMJLuGDHiP7wS8UPRReD6KZftzFSlfPNCHwi mIPxR0oEAfDlEDZ4kxMdGVsODII1xKPUag+yXd5aZNO06UEM24+ImtdhH1FD1tO/ PUdAaohWy8Z4Q706mou11yEbdsz1LfI6s5J0RfP1qAiac/UuzIJKti4HEuU8n9aQ SOCee3i/9D1FxRZxW2rKCtc7CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDix5aRS N3uwXPuyCHyHxvj2xe+kMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l eWhsRnhodHlrZzlhb09sR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACEpuOohHJyW+tW23jwbj/kgE7+4AUBLyfubLv59xk9+0OBqkHueFN1ZDxv1P Z4MvYOa4nAmHKaFi3AAQvFamTzEJ+jb23r2kMfoG9wr/EnphJ3/M/gMfaM20oIQj MY/cEqoYe1ZjtfmA7SIubsO4vYq66ATQAzrN27B88bR1Rt0iPr2uRL7RdqSJrL1p hIoUo0wQ4fna1qDVOtX0uXTjxbpF/gETh/WctWLcTnvyiL5OUvPH8w/WJn248XA4 bCV0iGUg9ZWrsnBftdeIReL5eanz/vsurKXg3KLDnXTqCUkLCebymeew5NIg+QfG Bxt7cu2UI4ZRpedmEky7k3OZnw== -----END CERTIFICATE-----Generated at Tue Sep 29 02:58:33 2026 by rpki-client