$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: z1rHVrmeQQ49T7xiV9/9AtKX/HUC96CAnl9H3nES60o= Subject key identifier: 79:5E:E3:12:75:B6:58:96:1C:8B:1F:83:AE:E1:1F:51:85:A4:53:53 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01DA Signing time: Mon 21 Sep 2026 03:42:00 +0000 Manifest this update: Mon 21 Sep 2026 03:42:00 +0000 Manifest next update: Mon 28 Sep 2026 03:42:00 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: pz7UN5lM3k25fsEAsq6OlKsQcidt7nBHnZxaN+u3KCc=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) 3: C6DFFAD8906B11F1A67C05D95E11F970.roa (hash: MxNcCgJXLkjB8/Q2d2fNCaIOQkKIonVn32bIfIAzNVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Sep 21 03:42:00 2026 GMT Not After : Sep 28 03:42:00 2026 GMT Subject: CN=6ab0a788-4c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:92:ea:bd:bc:a5:c3:5c:89:68:03:fd:c7: ed:65:cf:f1:62:71:e7:f0:1a:a2:af:b8:4b:23:6b: 64:91:60:56:9f:fd:c1:87:ef:55:0c:c8:74:90:a9: 1d:87:2e:08:37:70:72:08:32:99:de:36:f7:e2:24: c2:c0:cc:23:3f:bc:2e:43:64:5f:d3:16:88:66:bb: a3:99:8b:66:f4:8b:4b:21:92:8b:c0:c3:40:f4:e2: 53:7a:a3:22:32:2b:d7:40:e9:46:66:fc:dc:b8:c4: 7b:64:25:19:01:bd:e0:f8:c7:5c:38:64:f7:f1:c0: 2a:a1:59:6d:84:77:83:cf:a1:ae:b6:3a:b0:80:a7: 2b:ea:65:e9:66:47:44:df:e3:ab:3f:ba:8a:39:51: 43:4e:c3:1d:06:4b:59:0a:36:16:00:6e:dc:c6:bc: d2:ca:f4:6c:af:cb:bb:71:a7:26:54:36:83:9b:40: a9:b4:d8:b7:5c:05:e3:6e:0e:45:7b:5b:f5:9e:e3: 2a:93:3a:8a:84:e3:c4:39:7c:3a:2b:e3:1a:e5:e2: dd:a0:bf:40:80:0c:a0:58:d5:16:f4:34:46:59:ac: 04:9b:f2:8f:5c:4f:23:16:e8:52:53:80:c9:7e:9c: 25:0f:58:c6:42:3a:db:79:3e:d6:1f:9e:8b:06:68: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5E:E3:12:75:B6:58:96:1C:8B:1F:83:AE:E1:1F:51:85:A4:53:53 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:dd:bf:e5:d2:ae:e2:13:66:4f:d4:de:c5:a9:80:50:63:8b: 34:d3:6b:86:e0:90:8b:62:70:4d:26:58:73:3d:10:c4:b9:3a: 3a:6c:da:b4:80:60:2f:7e:e7:f8:67:fc:74:b3:e6:8b:e6:4f: d8:ae:cc:8a:97:4f:39:c6:74:75:34:ef:7d:c7:6a:b4:57:ee: af:39:6b:60:e0:fc:4c:d9:6b:56:ea:ef:25:98:3a:a5:35:6f: 1a:04:59:2c:b7:9a:ad:2e:f9:d6:bc:d2:94:f6:41:e1:c3:d2: 07:7d:c8:ed:a0:e6:26:3b:ea:9e:3c:b0:0e:2d:a3:44:ef:1f: 74:42:40:00:3a:eb:36:27:19:66:81:5e:1a:ad:d9:ae:3a:4c: 61:5a:b6:ca:89:01:fb:37:2e:bc:96:22:a4:5d:7d:7d:6f:19: fc:01:19:de:d3:e5:44:06:3d:37:08:10:ef:5e:d4:e7:70:a5: ef:9e:bf:dd:5d:cb:c8:b7:11:5f:a2:aa:f9:32:50:5f:33:35: f1:50:fa:c6:8e:8d:c7:b4:d0:64:33:ab:bc:cc:d1:0a:cb:c6: 26:ac:06:78:e5:ca:4a:8f:32:4f:cc:a0:7f:85:bc:8e:a3:0e: 52:c7:a3:4e:48:e5:ab:9b:4f:f9:d4:05:12:8b:e7:f5:78:5c: 4a:cb:40:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwOTIxMDM0MjAwWhcNMjYwOTI4MDM0MjAwWjAYMRYwFAYD VQQDEw02YWIwYTc4OC00YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4naS6r28pcNciWgD/cftZc/xYnHn8Bqir7hLI2tkkWBWn/3Bh+9VDMh0kKkd hy4IN3ByCDKZ3jb34iTCwMwjP7wuQ2Rf0xaIZrujmYtm9ItLIZKLwMNA9OJTeqMi MivXQOlGZvzcuMR7ZCUZAb3g+MdcOGT38cAqoVlthHeDz6GutjqwgKcr6mXpZkdE 3+OrP7qKOVFDTsMdBktZCjYWAG7cxrzSyvRsr8u7cacmVDaDm0CptNi3XAXjbg5F e1v1nuMqkzqKhOPEOXw6K+Ma5eLdoL9AgAygWNUW9DRGWawEm/KPXE8jFuhSU4DJ fpwlD1jGQjrbeT7WH56LBmiM0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHle4xJ1 tliWHIsfg67hH1GFpFNTMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUN2/5dKu4hNmT9TexamAUGOLNNNrhuCQi2JwTSZYcz0QxLk6OmzatIBgL37n +Gf8dLPmi+ZP2K7MipdPOcZ0dTTvfcdqtFfurzlrYOD8TNlrVurvJZg6pTVvGgRZ LLearS751rzSlPZB4cPSB33I7aDmJjvqnjywDi2jRO8fdEJAADrrNicZZoFeGq3Z rjpMYVq2yokB+zcuvJYipF19fW8Z/AEZ3tPlRAY9NwgQ717U53Cl756/3V3LyLcR X6Kq+TJQXzM18VD6xo6Nx7TQZDOrvMzRCsvGJqwGeOXKSo8yT8ygf4W8jqMOUsej Tkjlq5tP+dQFEovn9XhcSstAxg== -----END CERTIFICATE-----Generated at Tue Sep 22 10:44:33 2026 by rpki-client