$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: Z1g2uKHk0IXh8jgOfnJJ0z7k+RJiuuKSOXU3MIV2O0o= Subject key identifier: D0:21:4E:77:5F:1B:63:A9:5D:80:25:80:52:6C:E2:29:7C:63:7F:F0 Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 164F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 1635 Signing time: Sun 20 Sep 2026 16:39:31 +0000 Manifest this update: Sun 20 Sep 2026 16:39:31 +0000 Manifest next update: Sun 27 Sep 2026 16:39:31 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: uEvkQaU2KSy1eNOzMK31GVH6tRRqJSxjYpbOCeNVPcY=) 2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: Lo3XMSKg8agVzx55tHFzr470VZoMbp50JJLkCDFF7Uo=) 3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: A9iOSCnHXh3iJa4349r8JORSw8ym91SM/p7nkJSCSR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5711 (0x164f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Sep 20 16:39:31 2026 GMT Not After : Sep 27 16:39:31 2026 GMT Subject: CN=6ab00c43-0676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:3f:fe:ab:39:ef:7d:b4:38:ac:af:7d:58: 4e:9b:d6:54:4a:fb:b2:f6:f2:84:cb:a7:90:1a:d0: e9:fb:12:c4:5c:95:7a:97:48:75:c9:e1:72:9a:70: b2:f8:ab:8c:6d:cc:2e:fe:2b:80:64:cb:a0:c0:b2: 60:4b:96:51:5b:41:dd:8a:4f:7a:01:66:25:8c:bb: 86:50:81:27:0b:5e:ef:8e:8e:94:27:61:f5:89:d3: 12:ef:c0:a1:c8:26:96:6c:ef:90:2c:90:73:33:b0: 66:f2:67:ed:96:52:23:67:68:b4:15:d5:c2:4f:b8: eb:a4:0c:b9:53:39:0e:2d:47:85:ac:df:3e:25:a6: 58:89:12:87:f2:70:88:67:1d:ce:ea:4f:9f:76:26: ef:8a:e8:2b:1f:5a:dc:d8:5e:0f:9d:78:79:7b:b9: 38:1b:ea:67:81:55:62:c2:f2:06:ca:7e:ae:1a:5d: 42:0f:9b:17:be:d0:0d:5d:ac:64:40:d3:3d:f1:24: 5a:15:6f:8b:3f:53:f5:f8:23:27:e0:57:69:2d:f6: c7:0e:e6:ff:eb:34:46:43:6a:70:dd:1a:c2:82:e4: 03:af:dc:0b:d6:cf:bc:c5:2c:53:d0:81:30:03:04: 7c:05:32:d1:f4:25:cf:bd:d4:d4:6e:71:e6:3d:91: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:4E:77:5F:1B:63:A9:5D:80:25:80:52:6C:E2:29:7C:63:7F:F0 X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:2b:27:7f:49:b5:a1:ee:3c:2e:63:ec:16:95:9e:96:e7: 6e:88:4f:a7:ff:ea:5d:d7:86:7e:23:51:ca:0b:15:48:0e:05: 8d:de:d6:6e:ad:c4:e7:12:1b:df:c4:fc:3c:17:a3:56:95:5d: 32:88:ec:dc:d5:dc:b5:76:12:dc:a4:73:6f:5c:b4:f5:37:00: 48:7d:23:e2:53:bb:5e:fd:80:e8:c9:1e:1b:dd:df:5e:ed:dc: 14:db:cb:a6:ae:d7:1c:a2:07:44:aa:0b:f0:bc:5b:2d:d1:8d: f4:53:c7:c4:32:7e:a5:4d:36:68:45:ab:73:38:07:92:a7:66: c0:b5:32:88:3d:6a:d4:7e:d1:ce:48:25:69:19:98:06:f6:c1: 78:d2:f5:e7:d8:42:de:9e:33:96:7e:c3:ea:f1:6a:21:f1:1b: 9a:f3:21:c6:4c:48:02:c1:a8:27:a6:34:55:de:c1:ed:c7:e6: c4:29:93:74:d0:54:0c:68:90:e0:26:49:e9:d0:f7:c8:9d:0d: d2:30:a0:38:2c:a8:b2:0d:ca:be:8f:ce:7b:83:30:87:33:7d: ea:56:32:4d:76:97:db:96:82:ea:6e:89:5a:f7:61:c3:5c:f0: c5:6c:f9:5e:c6:a7:a2:1a:49:9f:b8:e1:b8:cc:28:29:d5:43: 67:71:18:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjYwOTIwMTYzOTMxWhcNMjYwOTI3MTYzOTMxWjAYMRYwFAYD VQQDEw02YWIwMGM0My0wNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAitI//qs57320OKyvfVhOm9ZUSvuy9vKEy6eQGtDp+xLEXJV6l0h1yeFymnCy +KuMbcwu/iuAZMugwLJgS5ZRW0Hdik96AWYljLuGUIEnC17vjo6UJ2H1idMS78Ch yCaWbO+QLJBzM7Bm8mftllIjZ2i0FdXCT7jrpAy5UzkOLUeFrN8+JaZYiRKH8nCI Zx3O6k+fdibviugrH1rc2F4PnXh5e7k4G+pngVViwvIGyn6uGl1CD5sXvtANXaxk QNM98SRaFW+LP1P1+CMn4FdpLfbHDub/6zRGQ2pw3RrCguQDr9wL1s+8xSxT0IEw AwR8BTLR9CXPvdTUbnHmPZHJZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAhTndf G2OpXYAlgFJs4il8Y3/wMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP2wrJ39JtaHuPC5j7BaVnpbnbohPp//qXdeGfiNRygsVSA4Fjd7Wbq3E5xIb 38T8PBejVpVdMojs3NXctXYS3KRzb1y09TcASH0j4lO7Xv2A6MkeG93fXu3cFNvL pq7XHKIHRKoL8LxbLdGN9FPHxDJ+pU02aEWrczgHkqdmwLUyiD1q1H7RzkglaRmY BvbBeNL159hC3p4zln7D6vFqIfEbmvMhxkxIAsGoJ6Y0Vd7B7cfmxCmTdNBUDGiQ 4CZJ6dD3yJ0N0jCgOCyosg3Kvo/Oe4MwhzN96lYyTXaX25aC6m6JWvdhw1zwxWz5 XsanohpJn7jhuMwoKdVDZ3EYnA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:10:10 2026 by rpki-client