$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft File: rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json) Hash identifier: 6b+MHUzKXn0FtEz0owgk63uRYufdsWj1KpGTbtGlu1U= Subject key identifier: 6A:F8:73:61:65:6F:2C:EF:EA:C2:01:11:98:C6:35:36:92:34:19:E8 Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC Certificate issuer: /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 06:48:12 +0000 Manifest this update: Mon 21 Sep 2026 06:48:11 +0000 Manifest next update: Mon 28 Sep 2026 06:48:11 +0000 Files and hashes: 1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: qgDnPCA2/Ymjz3P6NsjLEqM7FTHPQHmg4lZ37vax63c=) 2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Validity Not Before: Sep 21 06:48:11 2026 GMT Not After : Sep 28 06:48:11 2026 GMT Subject: CN=6ab0d32b-7d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:7c:bb:e9:81:4a:ca:34:a9:17:bf:35:cf: 48:3a:c3:d4:b3:22:64:8b:76:cd:1a:95:75:0a:0e: 5b:cb:bf:41:86:13:a1:33:c2:c2:93:bb:74:33:9e: 3b:be:3e:7d:6b:0b:00:bd:72:88:20:3f:a2:a4:13: 3e:68:cd:8b:f8:2b:50:b6:21:bb:bc:99:2f:6e:81: 05:01:69:59:a1:a0:88:c6:c3:3e:30:a6:0b:e7:9d: 1f:d6:47:f9:4a:4e:f8:9a:6f:24:16:86:c4:98:07: 78:15:c2:90:a3:09:c9:48:1b:32:df:72:19:f0:7b: 91:c0:fc:a7:61:56:ce:49:97:07:4f:2a:aa:95:ad: 60:01:4d:20:40:b4:b1:03:c2:e3:29:59:5f:95:20: ec:02:52:c1:c7:06:22:00:26:3c:72:51:9e:de:98: 75:4d:5f:be:b8:77:18:0a:fc:19:7c:68:a8:13:69: 74:ca:f7:62:b9:2d:be:e7:03:62:ce:d9:76:24:73: 99:70:85:9f:cd:47:a7:63:74:12:83:ed:bf:75:ef: 1c:c5:2f:54:61:35:1c:61:60:86:d5:ef:d4:5c:52: fd:f9:63:c4:24:34:1a:a0:00:05:1e:75:2e:bc:25: 4a:e3:5b:b2:3c:2d:b6:ee:06:71:26:32:de:5e:ac: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:73:61:65:6F:2C:EF:EA:C2:01:11:98:C6:35:36:92:34:19:E8 X509v3 Authority Key Identifier: keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:59:79:06:35:52:5f:4c:5d:33:e2:23:1c:30:80:82:a5:57: d3:72:7a:16:11:e2:02:b7:58:1b:8a:02:a2:7d:eb:66:73:d6: 37:2d:c3:0d:76:ce:66:8b:1f:95:df:f4:d8:49:6c:9f:c9:2e: 59:ad:3b:79:d2:6b:d2:8a:3f:f0:62:d0:24:97:8f:bb:57:ce: 56:f9:33:31:ba:56:fa:e0:79:63:fe:54:77:f0:1b:01:36:fa: f0:32:49:48:5b:7f:04:1d:4b:5c:c0:67:51:58:61:9e:32:71: 9a:c7:50:02:a0:59:70:f0:92:e6:f8:ce:61:29:da:8b:b6:2a: 90:5a:6a:24:1a:35:b6:e4:60:9b:66:98:80:f1:2f:3a:64:7f: e4:c6:a1:f5:92:ca:44:f4:bc:58:e9:dc:2f:94:7b:20:6c:cf: ad:b0:b1:1b:14:23:bf:ec:b5:5b:5c:97:fe:08:a5:c1:b5:00: ac:86:9b:96:01:e6:aa:7c:01:ea:53:26:8a:f4:f0:64:f5:00: a5:24:16:48:ad:f8:dd:10:d9:e9:f5:f5:ad:e3:a4:a5:e2:f6: 6d:ba:f1:94:fb:7e:9e:5a:55:af:85:29:50:bc:3a:ea:65:41: 1a:da:ad:a6:c8:c4:2e:be:db:63:6b:85:de:82:a0:86:4b:2b: a7:2f:3d:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0RjcxMTAvBgNVBAUTKEFDN0NEMTYzNjlENzBEQTY2NzU5OURBMzY4RTIwMjQy NDlDQjAyRkMwHhcNMjYwOTIxMDY0ODExWhcNMjYwOTI4MDY0ODExWjAYMRYwFAYD VQQDEw02YWIwZDMyYi03ZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AZ8u+mBSso0qRe/Nc9IOsPUsyJki3bNGpV1Cg5by79BhhOhM8LCk7t0M547 vj59awsAvXKIID+ipBM+aM2L+CtQtiG7vJkvboEFAWlZoaCIxsM+MKYL550f1kf5 Sk74mm8kFobEmAd4FcKQownJSBsy33IZ8HuRwPynYVbOSZcHTyqqla1gAU0gQLSx A8LjKVlflSDsAlLBxwYiACY8clGe3ph1TV++uHcYCvwZfGioE2l0yvdiuS2+5wNi ztl2JHOZcIWfzUenY3QSg+2/de8cxS9UYTUcYWCG1e/UXFL9+WPEJDQaoAAFHnUu vCVK41uyPC227gZxJjLeXqwslwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGr4c2Fl byzv6sIBEZjGNTaSNBnoMB8GA1UdIwQYMBaAFKx80WNp1w2mZ1mdo2jiAkJJywL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjRGNy8xMkJBQjg5NjhD NkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERhWm5XWjJqYU9JQ1FrbkxB dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JIelJZMm5YRGFabldaMmphT0lDUWtuTEF2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjRGNy8xMkJBQjg5NjhDNkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERh Wm5XWjJqYU9JQ1FrbkxBdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1l5BjVSX0xdM+IjHDCAgqVX03J6FhHiArdYG4oCon3rZnPWNy3DDXbOZosf ld/02Elsn8kuWa07edJr0oo/8GLQJJePu1fOVvkzMbpW+uB5Y/5Ud/AbATb68DJJ SFt/BB1LXMBnUVhhnjJxmsdQAqBZcPCS5vjOYSnai7YqkFpqJBo1tuRgm2aYgPEv OmR/5Mah9ZLKRPS8WOncL5R7IGzPrbCxGxQjv+y1W1yX/gilwbUArIablgHmqnwB 6lMmivTwZPUApSQWSK343RDZ6fX1reOkpeL2bbrxlPt+nlpVr4UpULw66mVBGtqt psjELr7bY2uF3oKghksrpy89tg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:33:19 2026 by rpki-client