$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: wkIePE46tKrthniGtAfoKmzcOKOIvIqZ5BahhVHy+2c= Subject key identifier: DF:2D:20:32:3A:73:44:19:E9:57:5A:A8:76:26:18:37:1E:98:BE:7A Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 026C Signing time: Wed 23 Sep 2026 01:55:52 +0000 Manifest this update: Wed 23 Sep 2026 01:55:51 +0000 Manifest next update: Wed 30 Sep 2026 01:55:51 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: NIg38D4yhs261NpYWq1Vu+LYFdOtGuwgNo4+VAiC3n4=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: nMFdDCUb4ENNKUnmKytdPmfWGdDIIdu20F9f9Lqgp3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Sep 23 01:55:51 2026 GMT Not After : Sep 30 01:55:51 2026 GMT Subject: CN=6ab331a7-7e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:c7:20:5c:31:35:34:64:09:52:b2:c3:81: 23:e7:df:11:75:36:9c:29:4b:4d:93:20:38:9d:89: 22:65:95:bf:62:32:6d:91:a5:4a:ab:30:c8:e5:63: 65:5f:bc:66:2a:cc:dc:17:da:1b:34:41:02:aa:98: 23:29:2f:22:a9:c1:47:25:26:0a:97:6a:f3:cf:e7: 39:fe:87:d0:12:f2:1e:22:8d:1e:65:37:54:ac:43: bb:42:9e:f6:94:06:2d:b6:76:80:8b:4f:e6:bb:77: 5b:6f:41:5d:46:da:a8:40:57:3e:c6:d8:9e:92:f4: fc:c7:9c:28:ec:d3:17:22:d6:22:bd:43:bf:e9:d6: 9f:ef:47:f7:36:fd:05:67:61:81:b4:3e:4d:ec:31: 44:f1:d2:5c:6c:7a:3d:f3:00:8a:44:0a:34:8d:fc: 8d:6b:a3:25:61:b0:ff:14:94:f2:4f:0a:1e:bf:95: 1c:a1:3e:01:b5:19:77:85:42:8d:54:df:50:39:7e: 52:04:2f:0e:62:28:b3:11:40:00:c2:df:f0:62:20: c1:fe:06:52:c1:c1:43:33:25:4d:10:ad:8e:80:dd: bf:77:13:6c:d6:02:c3:23:08:e5:bc:5b:50:67:ef: 12:f9:a1:d2:ac:a9:53:14:fe:20:84:3d:46:23:60: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:20:32:3A:73:44:19:E9:57:5A:A8:76:26:18:37:1E:98:BE:7A X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:60:a0:e3:77:af:f3:5d:47:b4:87:4e:2a:83:b5:ac:4b:31: 4c:bf:fc:e2:db:a6:2f:ac:e8:14:1c:49:d2:80:80:c5:e5:e0: a6:ad:d6:06:be:cf:89:55:97:4f:ac:0b:7d:e5:8e:9b:31:03: 16:c0:ba:44:f0:72:a1:bf:db:6f:dc:bb:fe:64:36:4c:4d:ca: 03:67:91:75:43:e6:f6:4d:29:aa:e1:cd:56:ad:40:07:a7:20: df:42:32:13:af:7a:ca:f6:28:2d:2a:d6:6f:92:97:b5:87:69: df:69:f7:cc:8b:99:60:1e:08:4e:f0:ba:5f:6a:6a:b0:89:0a: 84:fc:7e:89:7b:ca:5a:55:eb:8c:8c:58:38:5b:29:89:97:16: b7:68:2a:03:04:af:97:fa:75:56:f4:8f:4b:f4:4e:01:18:0c: 73:71:a6:b4:4c:cb:5c:0c:17:28:af:c9:4a:4b:05:70:81:ee: de:8d:ad:a9:33:71:3f:71:db:8b:4a:dd:f5:3e:ee:0b:1f:bf: ca:e3:d8:21:57:1c:4b:d4:e1:66:1d:96:42:66:89:41:70:99: 3c:6e:ef:9e:f3:dd:18:49:1f:0a:a4:9b:47:7b:3d:39:1d:97: c1:d5:55:b6:66:f1:3a:7d:fb:20:5a:c4:78:5f:cb:0f:b5:05: 4b:70:0d:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwOTIzMDE1NTUxWhcNMjYwOTMwMDE1NTUxWjAYMRYwFAYD VQQDEw02YWIzMzFhNy03ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxPHIFwxNTRkCVKyw4Ej598RdTacKUtNkyA4nYkiZZW/YjJtkaVKqzDI5WNl X7xmKszcF9obNEECqpgjKS8iqcFHJSYKl2rzz+c5/ofQEvIeIo0eZTdUrEO7Qp72 lAYttnaAi0/mu3dbb0FdRtqoQFc+xtiekvT8x5wo7NMXItYivUO/6daf70f3Nv0F Z2GBtD5N7DFE8dJcbHo98wCKRAo0jfyNa6MlYbD/FJTyTwoev5UcoT4BtRl3hUKN VN9QOX5SBC8OYiizEUAAwt/wYiDB/gZSwcFDMyVNEK2OgN2/dxNs1gLDIwjlvFtQ Z+8S+aHSrKlTFP4ghD1GI2CSlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8tIDI6 c0QZ6VdaqHYmGDcemL56MB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl2Cg43ev811HtIdOKoO1rEsxTL/84tumL6zoFBxJ0oCAxeXgpq3WBr7PiVWX T6wLfeWOmzEDFsC6RPByob/bb9y7/mQ2TE3KA2eRdUPm9k0pquHNVq1AB6cg30Iy E696yvYoLSrWb5KXtYdp32n3zIuZYB4ITvC6X2pqsIkKhPx+iXvKWlXrjIxYOFsp iZcWt2gqAwSvl/p1VvSPS/ROARgMc3GmtEzLXAwXKK/JSksFcIHu3o2tqTNxP3Hb i0rd9T7uCx+/yuPYIVccS9ThZh2WQmaJQXCZPG7vnvPdGEkfCqSbR3s9OR2XwdVV tmbxOn37IFrEeF/LD7UFS3ANgQ== -----END CERTIFICATE-----Generated at Thu Sep 24 01:19:03 2026 by rpki-client