$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft File: sfYJnZYvySdk5xe4l9ERPLfnbSk.mft (raw, json) Hash identifier: mGAtVRANb2jMeaFMajVxuTvm7JDlxznYTJM4q/ih01E= Subject key identifier: 2C:F5:44:ED:FE:B4:57:65:A3:D0:26:3D:B3:AE:A6:76:81:6B:9F:CC Authority key identifier: B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 Certificate issuer: /CN=A91FF8C9/serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft Manifest number: 1E Signing time: Sun 27 Sep 2026 09:34:54 +0000 Manifest this update: Sun 27 Sep 2026 09:34:54 +0000 Manifest next update: Sun 04 Oct 2026 09:34:54 +0000 Files and hashes: 1: sfYJnZYvySdk5xe4l9ERPLfnbSk.crl (hash: DYMh5ZX+9VOQq++5H2orZHOXcZMzEROPw2mu/9VmtUI=) 2: QuZ9RYGCB3-yFC_l3eiq8enSqsc.asa (hash: zjE9PMVv3fk5nDWUkwT5RkbI+mpS62anj+Oj4cunBqo=) 3: 0EB7317299AA11F1BAD0E41A7111F970.roa (hash: 8OuhmagAmsUG01wzlgf+KfYSs7YjWuqfz/27xcrRefY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF8C9, serialNumber=B1F6099D962FC92764E717B897D1113CB7E76D29 Validity Not Before: Sep 27 09:34:54 2026 GMT Not After : Oct 4 09:34:54 2026 GMT Subject: CN=6ab8e33e-9eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:79:d1:26:cb:f0:42:88:31:2e:ee:15:75: 6b:ef:ab:8f:b5:7c:d6:1f:e7:4b:6e:eb:96:0b:13: 3a:f1:0e:79:4c:d2:a3:ed:d0:af:d9:05:c6:ba:41: ad:6f:16:90:ba:8e:b9:e7:95:00:2e:e8:2c:cc:02: a1:3c:77:67:2f:f5:5f:1d:61:e4:b1:2f:47:9c:03: 53:17:c3:b4:fe:9f:99:b3:1a:bd:db:4f:e5:c9:a0: a4:17:67:b1:1b:4a:6b:8e:1c:94:78:12:e2:c9:5a: a0:b8:e0:c2:22:50:83:56:56:b7:e3:a5:78:db:92: cc:37:b4:93:d3:6a:33:ec:f8:2e:80:fe:1f:2b:c4: 72:7d:87:11:ab:05:97:fd:ba:91:a9:86:82:d9:1b: 3c:13:07:f4:3d:48:61:22:20:dd:b1:81:a5:3e:57: b7:ef:ff:83:ae:7d:57:fa:7f:22:c9:d6:54:58:33: 56:ab:b2:2f:52:20:4c:54:64:55:9f:83:b5:d7:5b: ca:4c:71:f0:cc:15:af:3c:bc:79:12:18:7e:f3:f7: d9:23:8d:4a:ad:36:12:b6:7d:c8:1d:a6:b7:60:45: 59:3c:3c:82:a7:b7:e0:c3:dd:a2:bb:53:da:a7:5b: e5:58:9a:9a:f3:61:33:c4:6f:29:55:b2:a4:fa:2d: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F5:44:ED:FE:B4:57:65:A3:D0:26:3D:B3:AE:A6:76:81:6B:9F:CC X509v3 Authority Key Identifier: keyid:B1:F6:09:9D:96:2F:C9:27:64:E7:17:B8:97:D1:11:3C:B7:E7:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sfYJnZYvySdk5xe4l9ERPLfnbSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF8C9/70648D88977B11F1B7539E2E4911F970/sfYJnZYvySdk5xe4l9ERPLfnbSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:af:96:cb:cd:de:e8:69:db:ac:6f:fc:01:72:5d:55:f8: 59:b2:3b:e9:30:76:fe:64:4f:75:d2:4e:94:e8:90:63:ec:11: 02:d3:14:ba:17:66:89:dc:a3:ff:45:8c:eb:09:9b:4d:0d:d5: 3d:c9:01:44:95:8d:61:22:37:16:da:af:fe:58:c0:d2:88:ed: 33:fe:5c:31:2e:ec:46:43:53:bd:1f:44:ae:5f:75:ff:89:a6: 7c:5f:41:14:23:d2:a8:03:03:01:e4:77:4c:2e:cf:ad:0d:f2: 3b:83:d0:2a:9d:81:37:6b:ab:49:58:3b:dc:8e:4d:25:a0:d1: 46:34:4c:32:42:20:01:97:c9:63:df:5c:ab:ea:54:ff:c6:75: 0f:64:b5:e3:9a:39:1f:ad:3c:66:3e:25:b3:11:20:cd:2f:61: 2e:1e:44:f8:a7:cd:f5:f9:a5:02:ab:8e:d9:9f:d0:18:60:ca: 35:75:1c:f3:2c:38:cb:01:e1:22:fd:ca:96:ba:ac:1d:ce:a4: b6:d3:e8:1f:64:f2:48:f0:29:2f:dd:4b:01:3d:01:a7:73:ee: e2:65:2c:4c:44:fb:f6:0a:e5:83:03:e6:8b:1a:bd:72:c3:57: 7d:a4:ef:85:38:f4:00:27:43:0d:2c:de:9d:4b:0a:2a:24:de: 9b:46:56:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjhDOTExMC8GA1UEBRMoQjFGNjA5OUQ5NjJGQzkyNzY0RTcxN0I4OTdEMTExM0NC N0U3NkQyOTAeFw0yNjA5MjcwOTM0NTRaFw0yNjEwMDQwOTM0NTRaMBgxFjAUBgNV BAMTDTZhYjhlMzNlLTllZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYVXnRJsvwQogxLu4VdWvvq4+1fNYf50tu65YLEzrxDnlM0qPt0K/ZBca6Qa1v FpC6jrnnlQAu6CzMAqE8d2cv9V8dYeSxL0ecA1MXw7T+n5mzGr3bT+XJoKQXZ7Eb SmuOHJR4EuLJWqC44MIiUINWVrfjpXjbksw3tJPTajPs+C6A/h8rxHJ9hxGrBZf9 upGphoLZGzwTB/Q9SGEiIN2xgaU+V7fv/4OufVf6fyLJ1lRYM1arsi9SIExUZFWf g7XXW8pMcfDMFa88vHkSGH7z99kjjUqtNhK2fcgdprdgRVk8PIKnt+DD3aK7U9qn W+VYmprzYTPEbylVsqT6LW49AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULPVE7f60 V2Wj0CY9s66mdoFrn8wwHwYDVR0jBBgwFoAUsfYJnZYvySdk5xe4l9ERPLfnbSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOEM5LzcwNjQ4RDg4OTc3 QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNkazV4ZTRsOUVSUExmbmJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2ZZSm5aWXZ5U2RrNXhlNGw5RVJQTGZuYlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OEM5LzcwNjQ4RDg4OTc3QjExRjFCNzUzOUUyRTQ5MTFGOTcwL3NmWUpuWll2eVNk azV4ZTRsOUVSUExmbmJTay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBskK+Wy83e6GnbrG/8AXJdVfhZsjvpMHb+ZE910k6U6JBj7BEC0xS6F2aJ3KP/ RYzrCZtNDdU9yQFElY1hIjcW2q/+WMDSiO0z/lwxLuxGQ1O9H0SuX3X/iaZ8X0EU I9KoAwMB5HdMLs+tDfI7g9AqnYE3a6tJWDvcjk0loNFGNEwyQiABl8lj31yr6lT/ xnUPZLXjmjkfrTxmPiWzESDNL2EuHkT4p831+aUCq47Zn9AYYMo1dRzzLDjLAeEi /cqWuqwdzqS20+gfZPJI8Ckv3UsBPQGnc+7iZSxMRPv2CuWDA+aLGr1yw1d9pO+F OPQAJ0MNLN6dSwoqJN6bRlbj -----END CERTIFICATE-----Generated at Mon Sep 28 06:59:24 2026 by rpki-client