$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: UNKV5etTIgGT1Tc834P+3GnYpd6VFKxtdDG2JrUAubI= Subject key identifier: 18:09:33:DB:10:A0:29:08:08:03:9A:3E:FF:45:92:7A:23:BB:D2:3E Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 06CE Signing time: Sun 20 Sep 2026 22:10:34 +0000 Manifest this update: Sun 20 Sep 2026 22:10:34 +0000 Manifest next update: Sun 27 Sep 2026 22:10:34 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: zJDoflg0kU1mLy+rlG8DEJSXJrji9Pr8hrANl6mXw4s=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: Sep 20 22:10:34 2026 GMT Not After : Sep 27 22:10:34 2026 GMT Subject: CN=6ab059da-1f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:04:d9:38:d3:40:26:b1:50:ed:9a:8c:07: 7c:7d:2e:c7:93:c4:51:61:68:3e:b7:3e:21:87:e5: 46:64:e7:e5:c6:4d:03:7d:14:04:8f:0c:6f:55:4b: 86:a2:55:c1:86:0e:42:a2:2b:39:68:d2:00:bf:ef: 88:02:3d:61:3c:e2:24:27:f5:74:cf:cd:0e:fa:b3: f2:00:ac:66:6d:92:a2:b2:95:57:0b:c6:80:9c:c0: 72:8d:83:16:ff:9e:a9:43:67:b4:fa:67:31:9c:98: f3:6b:22:60:d5:e6:3b:32:0e:45:6e:21:df:69:d5: 23:bc:43:97:d6:6d:cd:8c:00:83:34:93:11:e8:f5: d0:62:a5:b5:e3:a4:51:12:8d:c1:95:74:3f:c9:bc: 34:5d:2a:7c:e7:05:83:71:f9:f5:38:b7:5a:50:f4: a4:50:c0:11:ef:da:bb:47:d6:e2:37:96:53:8a:60: 7f:c4:46:f3:1d:bc:ba:0c:9b:90:34:d3:52:48:60: b2:37:4e:d6:59:fd:ff:a5:32:af:31:e6:06:4f:cc: ad:b2:4f:36:0a:a8:f9:1c:ae:a6:4c:89:10:e1:70: 97:32:70:cb:94:e5:34:0c:7b:0f:d0:9c:fd:16:80: 5a:16:c9:28:73:f6:e9:17:b3:e5:52:78:91:f6:b9: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:09:33:DB:10:A0:29:08:08:03:9A:3E:FF:45:92:7A:23:BB:D2:3E X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5d:7b:06:93:13:c2:a8:c8:29:2c:84:d2:13:a6:a7:50:13: 88:a5:4c:fc:2f:6f:2b:8f:32:63:5c:47:de:3c:32:dc:1a:d8: 72:2c:95:e3:71:3d:b9:29:0c:15:2f:fd:de:a5:6f:d4:e1:ce: 5c:fb:1a:ae:0f:5f:41:89:82:b5:af:3d:8a:79:2e:6e:c9:37: b0:3c:ff:c8:ec:bb:52:9d:61:ab:b2:8c:cb:f7:ac:ee:8b:42: 59:dc:d1:ab:cd:22:53:43:11:db:1b:c5:a3:48:fd:f6:e0:e6: 5f:63:f5:c6:30:31:82:3a:f5:b5:2a:4b:f9:38:5a:8c:b5:21: 5b:c1:ec:5e:67:d4:bc:7c:df:4e:99:39:d9:26:7e:2b:92:d9: c6:3b:9f:3b:01:78:74:84:fc:9e:cc:69:ec:25:f4:9e:bc:9c: a8:00:f9:50:15:0c:09:9d:5c:3b:af:13:f5:96:ff:4d:78:a7: 43:2f:b7:87:51:b5:4d:78:83:6d:2a:21:79:d2:3e:bf:87:14: ab:af:76:5d:db:51:22:e8:3f:c8:29:7f:69:93:9f:07:ca:9c: c9:46:e0:d2:4e:ba:ce:d5:bc:e4:df:64:75:02:5d:58:bb:7a: be:d1:58:86:c4:fc:df:b0:13:f5:9f:fe:39:14:58:dd:a3:37: cd:5f:35:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjYwOTIwMjIxMDM0WhcNMjYwOTI3MjIxMDM0WjAYMRYwFAYD VQQDEw02YWIwNTlkYS0xZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOwE2TjTQCaxUO2ajAd8fS7Hk8RRYWg+tz4hh+VGZOflxk0DfRQEjwxvVUuG olXBhg5Cois5aNIAv++IAj1hPOIkJ/V0z80O+rPyAKxmbZKispVXC8aAnMByjYMW /56pQ2e0+mcxnJjzayJg1eY7Mg5FbiHfadUjvEOX1m3NjACDNJMR6PXQYqW146RR Eo3BlXQ/ybw0XSp85wWDcfn1OLdaUPSkUMAR79q7R9biN5ZTimB/xEbzHby6DJuQ NNNSSGCyN07WWf3/pTKvMeYGT8ytsk82Cqj5HK6mTIkQ4XCXMnDLlOU0DHsP0Jz9 FoBaFskoc/bpF7PlUniR9rll0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgJM9sQ oCkICAOaPv9Fknoju9I+MB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIV17BpMTwqjIKSyE0hOmp1ATiKVM/C9vK48yY1xH3jwy3BrYciyV43E9uSkM FS/93qVv1OHOXPsarg9fQYmCta89inkubsk3sDz/yOy7Up1hq7KMy/es7otCWdzR q80iU0MR2xvFo0j99uDmX2P1xjAxgjr1tSpL+ThajLUhW8HsXmfUvHzfTpk52SZ+ K5LZxjufOwF4dIT8nsxp7CX0nrycqAD5UBUMCZ1cO68T9Zb/TXinQy+3h1G1TXiD bSohedI+v4cUq692XdtRIug/yCl/aZOfB8qcyUbg0k66ztW85N9kdQJdWLt6vtFY hsT837AT9Z/+ORRY3aM3zV81rQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:25:48 2026 by rpki-client