$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: AwOWYpPHdS8flVroKhVV9ail18GAtQ/ISqUWR1ic/uc= Subject key identifier: CB:8A:DC:52:9F:6B:15:6D:64:0B:3C:C8:5C:32:66:DD:1F:81:B4:16 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0D21 Signing time: Sun 20 Sep 2026 18:14:20 +0000 Manifest this update: Sun 20 Sep 2026 18:14:19 +0000 Manifest next update: Sun 27 Sep 2026 18:14:19 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: aQTzGSePcKAw16Lbi2zius2h4SYtMMuDgPU0Iipql0w=) 2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=) 4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Sep 20 18:14:19 2026 GMT Not After : Sep 27 18:14:19 2026 GMT Subject: CN=6ab0227c-4159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:b1:d8:c2:9e:08:71:19:58:29:42:2d:22: b2:b8:3c:41:cd:c4:c9:52:be:5e:45:9c:de:33:18: 3c:a9:6b:b6:ea:98:a5:be:97:50:50:2c:22:83:54: 43:e8:0f:36:08:25:2e:09:05:d5:75:fd:35:20:06: c2:c8:9d:bd:27:a6:63:5c:8e:8a:1f:80:37:0b:c2: 14:a1:8e:69:f2:05:07:f7:2d:14:0b:ee:66:46:aa: 91:90:f5:af:be:10:4e:c1:07:6a:12:98:cf:13:75: a3:8b:c1:68:97:74:b7:00:fc:a6:22:00:c4:e8:e8: 82:4d:ef:b7:da:17:f2:ca:e2:fc:4b:45:39:79:ad: 8e:97:78:2e:90:8d:6a:65:ef:63:89:e8:3d:4d:46: 31:cc:d2:34:3f:07:fc:5d:94:1f:a8:d9:93:87:ef: 51:b0:82:5b:ee:2d:21:fe:b0:e3:e3:44:12:aa:4e: 5b:b3:40:65:97:66:e7:82:d6:2a:0a:55:e1:d2:c4: 6c:90:c7:8e:ff:b4:3b:df:15:19:f3:92:5e:2c:f1: 6b:d1:a5:ee:7f:59:1f:43:96:e9:02:eb:f2:2d:7a: 16:c8:10:b1:f3:26:d3:f8:38:8c:d6:53:b6:31:ac: 33:50:1c:80:65:d4:8f:e4:89:5a:e7:57:19:9d:00: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8A:DC:52:9F:6B:15:6D:64:0B:3C:C8:5C:32:66:DD:1F:81:B4:16 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:19:8c:f2:b1:20:de:86:d6:40:4e:08:4a:dd:fa:18:5a:24: 29:1b:a5:08:4a:8f:ba:7c:72:05:74:f6:5e:d8:2f:ac:ad:cd: 33:37:a3:7e:ad:8c:ef:ac:6c:ef:af:dd:b0:e5:84:fd:80:6b: cf:25:f8:e3:92:39:48:44:c1:92:a3:14:eb:4f:6d:ac:76:e6: 0e:2c:4f:7a:8a:ff:9b:a0:2e:1b:3f:3c:49:2e:e8:60:de:e0: c1:a2:9c:4e:ac:46:8f:fd:c5:06:58:cc:53:b7:e2:f2:22:8c: d2:5d:19:94:9e:32:a4:f7:fa:74:59:8b:e4:e3:65:44:c1:ce: 4e:79:b5:1a:01:86:9f:66:d6:32:9b:41:e1:3c:68:1f:48:16: a9:2e:f6:fd:b8:f2:77:e3:21:83:79:68:94:25:2f:3c:d4:09: 5b:4c:ce:57:be:da:1b:0e:e7:a5:c4:3e:cf:84:9b:2f:ef:f8: b6:ca:9d:b3:fc:e3:b9:53:36:ab:c4:74:5d:71:9c:f5:fa:f4: 4c:41:aa:ab:8d:aa:59:56:a3:b7:4b:1f:33:21:8c:5b:73:2d: 00:3b:0c:13:b0:e7:38:34:00:fd:b3:ef:55:3c:d7:80:48:f0: 39:4c:1d:8c:7e:c2:7a:78:c1:69:9a:42:f8:20:03:c2:30:1e: 81:1b:b6:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwOTIwMTgxNDE5WhcNMjYwOTI3MTgxNDE5WjAYMRYwFAYD VQQDEw02YWIwMjI3Yy00MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg2x2MKeCHEZWClCLSKyuDxBzcTJUr5eRZzeMxg8qWu26pilvpdQUCwig1RD 6A82CCUuCQXVdf01IAbCyJ29J6ZjXI6KH4A3C8IUoY5p8gUH9y0UC+5mRqqRkPWv vhBOwQdqEpjPE3Wji8Fol3S3APymIgDE6OiCTe+32hfyyuL8S0U5ea2Ol3gukI1q Ze9jieg9TUYxzNI0Pwf8XZQfqNmTh+9RsIJb7i0h/rDj40QSqk5bs0Bll2bngtYq ClXh0sRskMeO/7Q73xUZ85JeLPFr0aXuf1kfQ5bpAuvyLXoWyBCx8ybT+DiM1lO2 MawzUByAZdSP5Ila51cZnQAZ+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuK3FKf axVtZAs8yFwyZt0fgbQWMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxmM8rEg3obWQE4ISt36GFokKRulCEqPunxyBXT2XtgvrK3NMzejfq2M76xs 76/dsOWE/YBrzyX445I5SETBkqMU609trHbmDixPeor/m6AuGz88SS7oYN7gwaKc TqxGj/3FBljMU7fi8iKM0l0ZlJ4ypPf6dFmL5ONlRMHOTnm1GgGGn2bWMptB4Txo H0gWqS72/bjyd+Mhg3lolCUvPNQJW0zOV77aGw7npcQ+z4SbL+/4tsqds/zjuVM2 q8R0XXGc9fr0TEGqq42qWVajt0sfMyGMW3MtADsME7DnODQA/bPvVTzXgEjwOUwd jH7CenjBaZpC+CADwjAegRu21A== -----END CERTIFICATE-----Generated at Mon Sep 21 19:22:56 2026 by rpki-client