$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: bhAqSbEBg/HV9ZHg7VjW+9We8uS9XRDeMC+8+3mnGhM= Subject key identifier: 32:61:C9:60:43:41:A4:86:92:EB:3F:49:EB:38:28:AE:DC:45:71:EB Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 06:57:37 +0000 Manifest this update: Mon 21 Sep 2026 06:57:36 +0000 Manifest next update: Mon 28 Sep 2026 06:57:36 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: BfSc5q/HjqBbyyZa1NLe/9bg4W1aoEfwSMen3jyMi14=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: 6pgejcIaUcN1QRW0oM4tHtZxgRp4SfCd0QJe8Epxtw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Sep 21 06:57:36 2026 GMT Not After : Sep 28 06:57:36 2026 GMT Subject: CN=6ab0d561-d4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:e6:f9:4d:39:8f:17:4a:4f:7a:d9:cd:49: 41:de:93:7b:7c:79:4c:86:c5:88:9d:b1:86:2d:08: f3:a0:81:c9:72:7a:86:88:55:e9:86:36:62:16:76: 65:67:83:65:27:11:6b:96:11:be:8f:59:d0:e6:33: f1:c5:70:a1:4b:de:01:b7:0c:8a:74:0f:f2:8f:b9: 7d:28:01:91:a1:c7:0e:54:ea:28:c3:b6:9b:48:94: 41:d6:6b:20:44:2c:a4:37:50:c4:bd:19:f5:63:a8: cf:74:8d:1f:06:5b:8f:0e:00:7a:fe:2c:aa:54:e0: dd:39:dc:79:fd:da:9e:03:5f:9e:0d:60:92:09:9e: c4:61:fb:b6:e2:40:8d:19:36:49:b1:a3:dc:d7:a0: 35:2a:fa:1e:1a:4f:c8:03:2f:0c:da:3a:35:72:76: 84:a4:ba:82:ce:bc:e6:af:81:02:62:c4:7d:9e:89: 1c:a2:5b:4d:d9:f3:03:fe:4e:e6:2b:b4:7e:76:ae: b7:0a:3d:1c:8b:0e:9f:ef:a2:35:4f:71:b2:7c:e8: 6e:5b:44:8f:a4:c3:23:03:6b:f4:14:63:f4:f3:f4: 5b:26:5b:7a:e8:5f:5f:7b:a8:9d:55:05:00:82:d3: 15:3b:4a:3d:49:38:ec:ab:ba:3b:90:3a:14:6b:54: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:C9:60:43:41:A4:86:92:EB:3F:49:EB:38:28:AE:DC:45:71:EB X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:f6:c5:e4:f0:d7:b2:15:ee:fa:d4:7e:01:59:e4:a7:db:21: 7c:3f:ae:7a:a9:d8:44:45:31:e4:ea:ab:82:9f:f7:75:d3:be: 8d:7b:a6:71:60:d4:a2:c1:7c:28:0e:fc:b9:fc:18:ad:30:35: 77:f5:e3:9f:96:7a:4c:07:5f:a0:9a:61:ee:07:a5:27:79:7d: 22:d2:99:c7:5d:66:b7:31:b8:40:16:6d:7f:92:a3:a6:68:c8: 5b:53:76:ee:02:82:51:14:ef:fd:78:90:6f:35:4b:8c:8d:4a: de:19:a5:72:64:d0:96:53:cd:8a:66:e2:6a:ff:4a:2b:8a:27: 40:33:e0:45:55:87:8a:49:cc:e1:b2:95:f0:8d:f3:8b:7b:e2: a0:00:1a:60:93:67:0d:3c:8f:9c:5e:46:7f:e6:0d:1f:a5:90: 23:03:d4:ce:0d:7d:12:7e:cb:17:ee:7a:87:29:87:28:18:79: 2d:96:43:a0:d0:aa:7d:5f:6e:2a:47:d2:38:65:c2:12:b2:a4: b4:b2:e9:c9:e1:27:22:1b:3a:06:db:c8:e2:0b:7b:a6:eb:10: 37:4e:be:88:be:65:53:b9:32:bc:61:30:c3:ad:3b:b5:14:54: 57:8e:83:69:21:59:b9:b2:0e:c0:a2:a7:58:a2:33:b8:17:8e: 50:32:5e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMyNUYxMTAvBgNVBAUTKDQ4NkNCODE2QkUzQTVFMDNDQjcyNzcyOTg4QTBERTBF QTk3MkNEQUEwHhcNMjYwOTIxMDY1NzM2WhcNMjYwOTI4MDY1NzM2WjAYMRYwFAYD VQQDEw02YWIwZDU2MS1kNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGTm+U05jxdKT3rZzUlB3pN7fHlMhsWInbGGLQjzoIHJcnqGiFXphjZiFnZl Z4NlJxFrlhG+j1nQ5jPxxXChS94BtwyKdA/yj7l9KAGRoccOVOoow7abSJRB1msg RCykN1DEvRn1Y6jPdI0fBluPDgB6/iyqVODdOdx5/dqeA1+eDWCSCZ7EYfu24kCN GTZJsaPc16A1KvoeGk/IAy8M2jo1cnaEpLqCzrzmr4ECYsR9nokcoltN2fMD/k7m K7R+dq63Cj0ciw6f76I1T3GyfOhuW0SPpMMjA2v0FGP08/RbJlt66F9fe6idVQUA gtMVO0o9STjsq7o7kDoUa1TImQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJhyWBD QaSGkus/Ses4KK7cRXHrMB8GA1UdIwQYMBaAFEhsuBa+Ol4Dy3J3KYig3g6pcs2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzI1Ri9GQzFGQkU5MkEy NzYxMUYwQUY2MzI4MUJDNEY5QUUwMi9TR3k0RnI0NlhnUExjbmNwaUtEZURxbHl6 YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXphby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzI1Ri9GQzFGQkU5MkEyNzYxMUYwQUY2MzI4MUJDNEY5QUUwMi9TR3k0RnI0Nlhn UExjbmNwaUtEZURxbHl6YW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvfbF5PDXshXu+tR+AVnkp9shfD+ueqnYREUx5Oqrgp/3ddO+jXumcWDUosF8 KA78ufwYrTA1d/Xjn5Z6TAdfoJph7gelJ3l9ItKZx11mtzG4QBZtf5KjpmjIW1N2 7gKCURTv/XiQbzVLjI1K3hmlcmTQllPNimbiav9KK4onQDPgRVWHiknM4bKV8I3z i3vioAAaYJNnDTyPnF5Gf+YNH6WQIwPUzg19En7LF+56hymHKBh5LZZDoNCqfV9u KkfSOGXCErKktLLpyeEnIhs6BtvI4gt7pusQN06+iL5lU7kyvGEww607tRRUV46D aSFZubIOwKKnWKIzuBeOUDJeSg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:08 2026 by rpki-client