$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft File: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft (raw, json) Hash identifier: LC6uA1n0IErudlNCu4bJrtAM+nRLogFA+dwJwWlaXbs= Subject key identifier: B3:DF:CC:1E:8B:62:54:E3:0B:26:5F:70:7D:F5:4A:37:9D:34:F0:6B Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 Certificate issuer: /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft Manifest number: 28 Signing time: Sat 19 Sep 2026 08:57:21 +0000 Manifest this update: Sat 19 Sep 2026 08:57:20 +0000 Manifest next update: Sat 26 Sep 2026 08:57:20 +0000 Files and hashes: 1: MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl (hash: Ri1c/rtZEVEu94SGqVwpmjQrGH6VIyJQBikhH460DHQ=) 2: 5C878D268DAB11F189A852AF4511F970.roa (hash: I/jr3tgpLyEseQdfcMV7kCau5f4YQ1NsnEo0xyEHwzc=) 3: 5D1D397A8DAB11F189A852AF4511F970.roa (hash: 8SHLMBij6okm9+8J31gc2FeJFmgTdVNdbizMOipyo0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Validity Not Before: Sep 19 08:57:20 2026 GMT Not After : Sep 26 08:57:20 2026 GMT Subject: CN=6aae4e71-38ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:8c:20:69:19:d2:d3:23:50:d8:69:f4:7f: 51:29:ea:a4:82:a2:13:ba:3b:5e:fd:34:8f:7e:02: f1:f0:13:27:83:1e:e2:da:61:82:3e:64:1b:12:57: 10:fe:82:36:00:84:a3:50:7e:63:41:cc:22:87:5c: 2b:6a:4d:3a:a5:10:7e:3a:c8:29:18:b6:04:47:07: a1:66:8a:c3:15:e5:8b:1a:3f:f1:36:2a:cd:f6:6f: 53:33:f7:ab:2d:53:39:37:33:54:05:ba:ac:9d:e8: e7:c4:a9:e3:d4:7c:6d:38:60:25:56:be:ca:56:4c: a4:6c:08:17:f2:25:47:07:77:e0:51:7e:0f:b4:3b: 69:78:bc:ac:cf:2b:84:2c:71:0b:05:1b:8c:a0:43: 24:b1:32:f1:7a:1e:7a:2c:fc:cd:73:eb:60:46:f8: 60:af:b0:49:40:e9:32:85:f5:9a:c6:00:7b:8b:00: 9c:86:b3:8b:5e:0c:a3:7d:fd:57:97:a1:b4:41:2c: e1:c9:43:ba:da:cd:9c:9c:04:15:2d:e8:29:21:11: 6a:e6:cc:74:c3:4d:4a:03:d7:1d:41:80:c5:62:f0: 2e:98:da:91:91:53:85:a7:5a:97:a2:28:20:eb:81: 6c:3a:f1:6d:e5:1b:7d:d2:0e:2b:2d:d2:dc:78:52: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DF:CC:1E:8B:62:54:E3:0B:26:5F:70:7D:F5:4A:37:9D:34:F0:6B X509v3 Authority Key Identifier: keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:6e:63:19:88:99:ca:51:36:4e:7f:6f:d9:1e:af:a0:d9: 6c:8c:a7:04:d2:bd:1f:ce:39:61:a1:bd:d8:b1:73:1f:36:8f: fb:b9:17:3d:71:24:74:9b:bd:7e:d4:46:a5:df:fd:ae:10:23: 64:a7:46:3a:b1:ea:ba:52:15:35:b0:a5:95:38:16:58:87:20: 7f:ee:68:3a:b5:78:9c:17:e8:b8:fe:20:90:64:70:dc:17:82: e7:ba:75:ee:43:34:0b:f2:e0:f7:67:80:ec:0d:23:57:f9:9d: 8d:86:b4:5a:b3:5c:ae:8c:c6:11:26:fa:35:66:70:4f:4b:ae: ce:77:dd:53:73:86:eb:d2:fc:01:c4:a1:dc:ee:6c:a2:fd:25: 8c:e8:28:58:fe:a2:48:a9:16:4b:5f:bd:18:3c:e1:e5:a6:ee: 16:2a:ec:0e:af:b1:d2:52:ae:cf:2a:07:54:14:cb:24:fd:de: 3f:5d:1f:2d:f8:fd:f3:1a:83:6c:55:f9:cf:c3:10:0b:20:b2: 67:f5:d2:eb:a7:b6:52:f4:d0:50:8e:15:00:6a:7f:e1:7e:12: 63:2f:c0:5d:6b:a3:53:e3:94:b0:d7:7c:71:63:b1:46:db:7a: f2:3e:0a:05:12:11:ec:f6:3c:5d:f5:b1:85:d7:07:e6:39:62: 35:cd:89:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjIxQTExMC8GA1UEBRMoMzE0NDAzRDA0OTFGMEQ3MjFGRDg3NzI5OEJFREVFQkFB RUJFMTE3ODAeFw0yNjA5MTkwODU3MjBaFw0yNjA5MjYwODU3MjBaMBgxFjAUBgNV BAMTDTZhYWU0ZTcxLTM4YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzI4wgaRnS0yNQ2Gn0f1Ep6qSCohO6O179NI9+AvHwEyeDHuLaYYI+ZBsSVxD+ gjYAhKNQfmNBzCKHXCtqTTqlEH46yCkYtgRHB6FmisMV5YsaP/E2Ks32b1Mz96st Uzk3M1QFuqyd6OfEqePUfG04YCVWvspWTKRsCBfyJUcHd+BRfg+0O2l4vKzPK4Qs cQsFG4ygQySxMvF6Hnos/M1z62BG+GCvsElA6TKF9ZrGAHuLAJyGs4teDKN9/VeX obRBLOHJQ7razZycBBUt6CkhEWrmzHTDTUoD1x1BgMVi8C6Y2pGRU4WnWpeiKCDr gWw68W3lG33SDist0tx4UvgTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs9/MHoti VOMLJl9wffVKN5008GswHwYDVR0jBBgwFoAUMUQD0EkfDXIf2Hcpi+3uuq6+EXgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMjFBLzc5QjlENzg4OEJG QzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJZjJIY3BpLTN1dXE2LUVY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVVRRDBFa2ZEWElmMkhjcGktM3V1cTYtRVhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MjFBLzc5QjlENzg4OEJGQzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJ ZjJIY3BpLTN1dXE2LUVYZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBY5W5jGYiZylE2Tn9v2R6voNlsjKcE0r0fzjlhob3YsXMfNo/7uRc9cSR0m71+ 1Eal3/2uECNkp0Y6seq6UhU1sKWVOBZYhyB/7mg6tXicF+i4/iCQZHDcF4LnunXu QzQL8uD3Z4DsDSNX+Z2NhrRas1yujMYRJvo1ZnBPS67Od91Tc4br0vwBxKHc7myi /SWM6ChY/qJIqRZLX70YPOHlpu4WKuwOr7HSUq7PKgdUFMsk/d4/XR8t+P3zGoNs VfnPwxALILJn9dLrp7ZS9NBQjhUAan/hfhJjL8Bda6NT45Sw13xxY7FG23ryPgoF EhHs9jxd9bGF1wfmOWI1zYmR -----END CERTIFICATE-----Generated at Sun Sep 20 14:32:36 2026 by rpki-client