$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft File: rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json) Hash identifier: j3GMf2xhobiwDfDWbsUIwvhSn1QF+XrHh4UvJXqYjQI= Subject key identifier: 6A:A2:6F:8A:AA:E7:25:79:C0:9C:CD:C0:6B:29:4C:FF:46:88:41:63 Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5 Certificate issuer: /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft Manifest number: 48 Signing time: Mon 21 Sep 2026 08:24:37 +0000 Manifest this update: Mon 21 Sep 2026 08:24:36 +0000 Manifest next update: Mon 28 Sep 2026 08:24:36 +0000 Files and hashes: 1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: 5VNkA8ac6B8eiutr1dTj7CKOt5xB7bV4mBPV86Ep1KQ=) 2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5 Validity Not Before: Sep 21 08:24:36 2026 GMT Not After : Sep 28 08:24:36 2026 GMT Subject: CN=6ab0e9c4-9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:82:78:b5:16:f6:ad:93:7a:c9:e3:eb:3f: c4:04:09:98:ce:ec:85:71:fa:e8:c2:eb:59:2d:0e: 1c:24:90:83:7f:b8:d4:cf:e8:5d:81:85:37:71:0a: 9c:94:6c:5c:3c:2d:8f:be:a6:85:82:78:07:21:13: e7:32:09:e0:b0:9e:a8:0c:11:f1:5e:1e:a9:15:52: db:9e:9e:2f:8f:3e:f2:08:84:9d:b2:19:7d:6d:74: b3:fd:63:5c:93:2a:c9:28:a3:ab:13:09:58:07:db: 8c:0c:a7:84:3c:92:1e:3d:b8:af:3d:30:08:a3:82: 89:fe:72:4b:a4:14:06:9f:71:f7:e0:e3:8d:3f:fb: 91:d5:13:d6:2c:53:fb:2d:a5:ae:59:b2:6c:77:c0: 0b:f6:45:c2:99:57:f9:c9:9b:30:9b:dc:03:7e:cb: b6:fa:2e:a7:96:2c:a5:25:e2:94:87:2e:eb:26:73: a5:d7:f1:c7:bc:41:ea:12:77:a4:73:89:d2:04:33: 0b:ac:8f:71:ca:fc:c7:f4:b5:40:27:ef:1e:b0:09: 7a:e4:c6:07:1f:6c:b5:38:92:3d:6a:0f:a8:0a:63: 7f:29:5d:2a:ce:fe:e3:47:5d:8f:f8:b1:59:ed:d2: db:2d:fa:63:06:16:87:53:28:56:74:50:f1:4c:82: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:6F:8A:AA:E7:25:79:C0:9C:CD:C0:6B:29:4C:FF:46:88:41:63 X509v3 Authority Key Identifier: keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:55:e5:7a:f9:d2:fb:e7:6d:01:d6:7e:b9:9b:9c:93:38:b6: 78:0e:e8:f3:10:45:04:4f:58:e6:a8:96:71:31:cb:03:2a:e8: 71:93:16:c2:24:f3:a4:88:fc:e6:cc:2d:d8:76:dd:f5:04:30: 30:6f:0f:8e:16:30:9c:d8:35:fc:ac:e5:b8:07:62:8b:03:55: e9:00:88:8f:6e:36:60:9a:ea:9f:31:9d:73:2d:23:0a:cb:38: 63:3d:d7:81:88:09:45:fd:16:6f:e9:91:95:59:9c:b0:ad:8b: 15:05:d3:d6:a8:5f:8b:70:79:ef:44:7a:a2:c7:c7:50:e1:d5: d0:c8:65:bd:22:d5:a6:d8:40:77:50:22:05:c8:a7:3c:78:63: 61:75:75:1f:0a:3b:d2:6e:88:f8:db:40:ff:3c:87:02:80:aa: 17:61:78:b0:35:06:2d:0e:bd:1a:9c:d7:e7:d1:6b:98:e0:19: 75:fb:3b:65:50:83:7a:66:0f:f1:57:4a:a8:b7:78:21:30:0a: 9f:a3:7e:5f:1a:d1:29:da:65:05:5d:81:ba:c6:64:d0:6a:3d: 14:b8:b6:cd:7b:8f:83:8d:9c:f5:cf:1a:c2:56:91:c1:aa:81: c2:e4:93:1e:6b:b2:08:26:7f:9c:03:9b:8d:e2:98:d5:23:9b: 6d:c2:01:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REMzMTExMC8GA1UEBRMoQUMzMkFFMkMwQzJBRDQ1M0M3Q0VCQjhGQjI4Q0ExMjM5 QTJGRTVBNTAeFw0yNjA5MjEwODI0MzZaFw0yNjA5MjgwODI0MzZaMBgxFjAUBgNV BAMTDTZhYjBlOWM0LTliNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRv4J4tRb2rZN6yePrP8QECZjO7IVx+ujC61ktDhwkkIN/uNTP6F2BhTdxCpyU bFw8LY++poWCeAchE+cyCeCwnqgMEfFeHqkVUtueni+PPvIIhJ2yGX1tdLP9Y1yT Kskoo6sTCVgH24wMp4Q8kh49uK89MAijgon+ckukFAafcffg440/+5HVE9YsU/st pa5Zsmx3wAv2RcKZV/nJmzCb3AN+y7b6LqeWLKUl4pSHLusmc6XX8ce8QeoSd6Rz idIEMwusj3HK/Mf0tUAn7x6wCXrkxgcfbLU4kj1qD6gKY38pXSrO/uNHXY/4sVnt 0tst+mMGFodTKFZ0UPFMgqydAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaqJviqrn JXnAnM3AaylM/0aIQWMwHwYDVR0jBBgwFoAUrDKuLAwq1FPHzruPsoyhI5ov5aUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzMxLzJDRDNEMTkyNEEz MTExRjE5QkQzMTAzNjkwODMzNzczL3JES3VMQXdxMUZQSHpydVBzb3loSTVvdjVh VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvckRLdUxBd3ExRlBIenJ1UHNveWhJNW92NWFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE QzMxLzJDRDNEMTkyNEEzMTExRjE5QkQzMTAzNjkwODMzNzczL3JES3VMQXdxMUZQ SHpydVBzb3loSTVvdjVhVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKVeV6+dL7520B1n65m5yTOLZ4DujzEEUET1jmqJZxMcsDKuhxkxbCJPOkiPzm zC3Ydt31BDAwbw+OFjCc2DX8rOW4B2KLA1XpAIiPbjZgmuqfMZ1zLSMKyzhjPdeB iAlF/RZv6ZGVWZywrYsVBdPWqF+LcHnvRHqix8dQ4dXQyGW9ItWm2EB3UCIFyKc8 eGNhdXUfCjvSboj420D/PIcCgKoXYXiwNQYtDr0anNfn0WuY4Bl1+ztlUIN6Zg/x V0qot3ghMAqfo35fGtEp2mUFXYG6xmTQaj0UuLbNe4+DjZz1zxrCVpHBqoHC5JMe a7IIJn+cA5uN4pjVI5ttwgHi -----END CERTIFICATE-----Generated at Tue Sep 22 08:40:03 2026 by rpki-client