$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft File: -WJTlSWdVbnjutm2QuFbY5vAe8c.mft (raw, json) Hash identifier: TBJh4uUI3Z+xOl2FNAhDPB/VwujWNnheXkBYNuBoAUg= Subject key identifier: C4:40:E6:DC:CB:47:77:CF:B7:79:F4:DF:F1:B9:4C:36:F8:DB:9D:9A Authority key identifier: F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 Certificate issuer: /CN=A91FFE2A/serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft Manifest number: 1D Signing time: Sat 19 Sep 2026 08:57:49 +0000 Manifest this update: Sat 19 Sep 2026 08:57:49 +0000 Manifest next update: Sat 26 Sep 2026 08:57:49 +0000 Files and hashes: 1: -WJTlSWdVbnjutm2QuFbY5vAe8c.crl (hash: rnKXQHVyD1C3ho+A+SIDtvf4FSnbXAloOnK3nTN3yLg=) 2: 1E1845C88D5E11F18A7850066B11F970.roa (hash: hm1LeJzMvNJnJ0qU8ZDYrWN+bMQ1p67o2pDficVOHz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE2A, serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7 Validity Not Before: Sep 19 08:57:49 2026 GMT Not After : Sep 26 08:57:49 2026 GMT Subject: CN=6aae4e8d-db6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:dc:4a:38:11:d3:5a:7e:25:b2:d6:8f:52: f5:58:36:5b:d0:64:19:93:98:63:74:35:8d:ce:c4: d3:bf:c0:2f:20:6f:31:99:35:6a:90:21:c5:da:62: 84:87:eb:39:b8:73:77:0b:7c:2f:dc:bd:3f:d7:df: c6:e5:4d:d8:51:ef:70:90:53:b2:5f:bc:a7:25:d0: e5:7d:29:af:d5:b4:cb:93:d8:ac:4c:6f:7a:5d:8b: b7:94:eb:00:c0:3a:6b:29:74:44:f5:aa:ef:fd:36: 57:86:c7:39:1b:91:d6:cf:d8:aa:ad:36:7e:87:92: 91:38:df:d5:4b:05:bc:1c:96:d1:2a:f7:a5:c6:71: 7d:2e:64:6e:ac:1d:6d:bc:79:9e:d4:28:64:79:25: 81:35:42:48:cc:f2:8f:79:8f:f9:11:ee:93:65:70: 70:68:16:8c:ec:67:7e:ec:b3:60:cb:b4:dc:29:68: 50:92:8d:18:0f:18:c8:5e:a7:d2:80:58:6c:3e:1f: e3:0a:31:ac:bc:e2:af:5d:f9:0b:04:df:11:61:8d: e5:cd:ee:03:74:f5:85:82:d9:3e:a5:2e:12:9f:94: ba:db:4c:be:83:c7:21:8b:f9:07:42:db:17:ca:84: 28:b9:0a:9f:40:70:07:64:77:c1:bf:bb:db:fe:e8: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:40:E6:DC:CB:47:77:CF:B7:79:F4:DF:F1:B9:4C:36:F8:DB:9D:9A X509v3 Authority Key Identifier: keyid:F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:21:77:7b:c1:85:2d:11:df:44:67:91:8d:29:2e:07:d0:3a: 03:ae:77:ee:b6:9a:57:07:4b:ab:c8:67:ef:c1:b8:c0:39:e8: d7:50:80:77:5e:1d:0e:56:81:cb:af:2e:5f:66:c6:1a:d9:19: 68:b9:22:41:5a:f0:d8:5c:e6:11:52:ad:db:60:51:ed:ae:f8: 3a:9c:5a:1a:cf:e5:05:2e:6b:63:b0:09:bb:2f:07:f5:c1:19: 61:6c:9d:48:37:ad:a9:1e:d3:8f:84:b7:dc:48:1e:11:f9:06: 2c:d6:c6:4c:82:d0:5b:5c:0e:df:50:a6:d3:0a:82:1e:f4:ed: 3a:8c:f7:89:03:65:be:54:36:16:97:a6:9f:dc:05:04:f6:d8: 26:fd:b6:67:fd:de:46:c4:be:6d:b7:c4:78:66:b6:d8:c9:92: b5:7e:70:3a:e3:f0:ef:10:d3:0f:bf:23:88:07:9e:a0:84:18: d4:8d:d7:7f:aa:d6:05:65:38:c1:ad:a2:06:0d:59:8c:ce:30: 3c:a7:8f:4f:5b:2b:99:a3:04:b0:2e:15:9a:00:2c:34:f7:fe: 99:39:60:95:22:ff:9c:46:d0:83:35:7a:72:a7:e3:36:2a:d8: 57:b3:73:b2:e9:02:c6:ec:e4:05:53:64:67:dd:63:49:71:e6: f7:10:86:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkUyQTExMC8GA1UEBRMoRjk2MjUzOTUyNTlENTVCOUUzQkFEOUI2NDJFMTVCNjM5 QkMwN0JDNzAeFw0yNjA5MTkwODU3NDlaFw0yNjA5MjYwODU3NDlaMBgxFjAUBgNV BAMTDTZhYWU0ZThkLWRiNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbTNxKOBHTWn4lstaPUvVYNlvQZBmTmGN0NY3OxNO/wC8gbzGZNWqQIcXaYoSH 6zm4c3cLfC/cvT/X38blTdhR73CQU7JfvKcl0OV9Ka/VtMuT2KxMb3pdi7eU6wDA OmspdET1qu/9NleGxzkbkdbP2KqtNn6HkpE439VLBbwcltEq96XGcX0uZG6sHW28 eZ7UKGR5JYE1QkjM8o95j/kR7pNlcHBoFozsZ37ss2DLtNwpaFCSjRgPGMhep9KA WGw+H+MKMay84q9d+QsE3xFhjeXN7gN09YWC2T6lLhKflLrbTL6DxyGL+QdC2xfK hCi5Cp9AcAdkd8G/u9v+6KWFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxEDm3MtH d8+3efTf8blMNvjbnZowHwYDVR0jBBgwFoAU+WJTlSWdVbnjutm2QuFbY5vAe8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGRTJBLzZDODc3MzEyOEQ1 QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJuanV0bTJRdUZiWTV2QWU4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVdKVGxTV2RWYm5qdXRtMlF1RmJZNXZBZThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG RTJBLzZDODc3MzEyOEQ1QjExRjE5NzY4M0QwRTZBMTFGOTcwLy1XSlRsU1dkVmJu anV0bTJRdUZiWTV2QWU4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASIXd7wYUtEd9EZ5GNKS4H0DoDrnfutppXB0uryGfvwbjAOejXUIB3Xh0OVoHL ry5fZsYa2RlouSJBWvDYXOYRUq3bYFHtrvg6nFoaz+UFLmtjsAm7Lwf1wRlhbJ1I N62pHtOPhLfcSB4R+QYs1sZMgtBbXA7fUKbTCoIe9O06jPeJA2W+VDYWl6af3AUE 9tgm/bZn/d5GxL5tt8R4ZrbYyZK1fnA64/DvENMPvyOIB56ghBjUjdd/qtYFZTjB raIGDVmMzjA8p49PWyuZowSwLhWaACw09/6ZOWCVIv+cRtCDNXpyp+M2KthXs3Oy 6QLG7OQFU2Rn3WNJceb3EIbv -----END CERTIFICATE-----Generated at Mon Sep 21 04:10:16 2026 by rpki-client